Skip to content

ACCA Strategic Professional · Strategic Business Leader · IT systems security and control

Falcon Pharma discovers that attackers entered through a trusted software supplier's update, remained undetected for months, and quietly extracted research data without disrupting any service. Which analysis best reflects what this implies for Falcon's security strategy?

It is an advanced persistent threat delivered through the supply chain. Because the attackers used a trusted update and stayed hidden while stealing data, Falcon needs supplier assurance, segmentation and continuous monitoring and detection, not merely perimeter prevention, antivirus or availability planning.

  1. AIt is a denial-of-service event, so capacity and availability planning is the priority
  2. BIt is an advanced persistent threat via supply chain, so Falcon needs supplier assurance, network segmentation and continuous detection, not just preventive perimeter controlsCorrect
  3. CIt is accidental data loss, so improved staff training on backups is sufficient
  4. DIt is a virus outbreak, so installing antivirus on all devices resolves it

Explanation

Long-term stealthy access, data exfiltration and entry through a trusted supplier characterise an advanced persistent threat using a supply chain route. Prevention at the perimeter failed because the update was trusted, so assurance over suppliers, segmentation and ongoing monitoring are required. No service was disrupted, ruling out DoS, and the activity was deliberate, not accidental.

Did you get it right without looking?

One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.

Practise IT systems security and controlFree diagnostic mock

More IT systems security and control questions