BBB GRC Platform

Q1

A. Digital Operational Resilience Act B. Data Operational Risk Assessment C. Digital Operations Reporting Audit D. Directive on Operational Risk Agreements

Q2

A. Only banks B. All EU companies with >50 employees C. Financial entities including banks, insurers, investment firms, crypto-asset service providers D. Only systemically important institutions

Q3

A. January 2023 B. January 2024 C. January 2025 D. January 2026

Q4

A. Threat-Led Penetration Testing B. Third-Level Policy Template C. Technical Licence for Payment Technology D. Transaction Logging and Processing Test

Q5

A. 72 hours initial notification B. 24 hours final report C. 4 hours for initial alert, 72 hours for intermediate report, 1 month final D. 7 days

Q6

A. €1 million B. €5 million C. €10 million D. Up to 2% of total annual worldwide turnover

Q7

A. Article 5 B. Article 16 C. Article 28 D. Article 45

Q8

A. Only incident response plans B. Business continuity plans only C. Protection, detection, containment, recovery and repair capabilities D. Annual penetration tests only

Q9

A. Share client data freely B. Share cyber threat intelligence with other financial entities C. Share proprietary trading algorithms D. Share customer PII for fraud prevention

Q10

A. National central banks B. The ECB C. Lead Overseers designated by ESAs (EBA/EIOPA/ESMA) D. ENISA