FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
During a severe cyber incident affecting a payment service provider used by many banks, authorities want a coordinated response. Which feature of a crisis coordination framework would most improve the sector's ability to limit contagion?
Pre-agreed communication protocols and defined roles among firms, regulators and critical providers, validated through joint exercises, best limit contagion. They enable fast, consistent decisions during an incident, while ad hoc contacts, uncoordinated timing or legal-only channels create delay and confusion.
- APre-agreed communication protocols and roles among firms, regulators and critical service providers, tested through joint exercisesCorrect
- BEach firm independently deciding its own communication timing to preserve competitive position
- CRelying on ad hoc contacts established after the incident begins
- DRestricting communication to the affected provider's legal team
Explanation
Pre-agreed roles and communication protocols, rehearsed in joint exercises, reduce confusion and delay during an incident, which limits contagion across interconnected firms. Ad hoc or uncoordinated approaches waste time when it matters most. Restricting communication to legal staff cuts out operational and supervisory partners.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- Which policy tool is most directly aimed at reducing systemic cyber risk arising from firms' reliance on critical third-party providers?
- A risk analyst compares two ways of modelling extreme cyber losses for the financial sector. Historical data are scarce and incidents are hi…
- Which policy approach best addresses the systemic nature of cyber risk, as opposed to purely firm-level controls?
- A financial stability authority is designing a macroprudential framework for cyber risk. Which feature most distinguishes a macroprudential …
- A regional bank's security team detects a new malware strain and wants to share indicators of compromise with peer institutions. Its legal t…
- A risk officer argues that digital resilience policy should move beyond capital buffers. Which reasoning best supports this view?