FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks
Which development is most consistent with the view that the cyber threat landscape for financial institutions is evolving?
Ransomware-as-a-service lowers the skill barrier because developers rent ready-made tools to affiliates, so less sophisticated actors can launch damaging attacks. The other statements are absolute or false, since financial motives persist, threats come from many actors, and cloud use does not eliminate breaches.
- AAttackers have abandoned financially motivated activity in favour of purely ideological activity
- BRansomware-as-a-service lowers the skill barrier, letting less sophisticated actors launch damaging attacksCorrect
- CThreats now originate exclusively from nation-states
- DCloud adoption has removed the possibility of data breaches
Explanation
Ransomware-as-a-service lets developers rent tools to affiliates, widening the pool of capable attackers. The other statements are absolute or false: criminals remain profit-driven, threats come from many actor types, and cloud adoption does not eliminate breaches.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.
More Case Study: Cyberthreats and Information Security Risks questions
- A bank's risk team is deciding which control best supports confidentiality of customer data held on laptops that may be lost while staff tra…
- A regional bank's security team observes that a group has gained access to its payment-messaging environment, remained undetected for severa…
- A bank's security operations center detects that ransomware is encrypting file servers in a regional office. Which action should the inciden…
- A bank's security team detects ransomware spreading across several file servers. Under a standard incident response lifecycle, which action …
- A firm estimates a cyber event that compromises customer data has an annual probability of 4%, and a loss of USD 25 million if it occurs. A …
- An analyst at an asset manager discovers that an unauthorised insider changed the settlement account numbers on several pending trade instru…