FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks
Following a ransomware event, a firm finds that its backups were stored on the same network and were encrypted along with production data. Which lesson is most appropriate for the firm's resilience planning?
The firm should keep backups isolated or immutable and test restoration regularly. Backups on the same network were encrypted with production data, so they offered no recovery. Offline or immutable copies, with proven restore procedures, preserve the ability to recover without paying a ransom.
- AKeep backups isolated or immutable and test restoration regularlyCorrect
- BRely on a single backup copy to reduce complexity
- CPay ransoms promptly to avoid recovery testing
- DRemove monitoring to reduce system load
Explanation
Backups reachable from the compromised network can be destroyed by attackers. Isolated or immutable copies with tested restoration preserve recovery capability. The other options weaken resilience or rely on unreliable outcomes.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.
More Case Study: Cyberthreats and Information Security Risks questions
- A bank's security team discovers that a critical vulnerability patch was released by the software vendor four months ago but was never appli…
- A regional bank's risk committee wants a control framework that arranges cyber controls in sequence so that the failure of one control does …
- A bank's risk team wants to express cyber risk in financial terms for the board. Which approach best reflects a quantitative cyber risk meas…
- Following a ransomware incident, a firm finds its backups were stored on the same network and were encrypted along with production data. Whi…
- A risk manager reviewing a past cyber incident notes the firm had patched critical vulnerabilities only on systems listed in its asset inven…
- A bank's cyber control self-assessment rates a key control as effective, but a penetration test shows an attacker could bypass it in under a…