Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

During a cyber incident, a bank's legal and communications teams disagree over when to notify customers and regulators. Which feature of a mature incident response framework best resolves this?

Pre-defined escalation criteria and communication protocols with assigned roles, agreed in advance, best resolve the disagreement. They allow timely and consistent notification decisions under pressure, whereas waiting for complete forensics or leaving choices to individual units risks missed deadlines and inconsistent messages.

  1. ADelegating the decision to the IT help desk
  2. BPre-defined escalation criteria and communication protocols with assigned roles, approved in advanceCorrect
  3. CDelaying notification until forensic analysis is fully complete
  4. DLeaving the decision to each business line

Explanation

Predefined roles, escalation thresholds and communication protocols enable timely, consistent decisions under pressure. Waiting for full forensics may breach notification deadlines, and ad hoc or fragmented decisions create inconsistency.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions