IMDP Risk Management Practice Test

A cyberattack directly targets information systems, networks, and digital data, so it most clearly affects technology/IT risk. The primary concerns are the security and reliability of IT assets—privacy breaches, data loss, system outages, and compromised integrity or availability of information. While a cyberattack can spill over into people risk (via phishing or social engineering) or process risk (disrupted operations), those are usually secondary effects. Insurance risk isn’t the direct target of the attack itself, though it can be involved in risk transfer and coverage considerations. Focusing on strong cybersecurity measures, access controls, regular patching, and robust backup/incident response helps mitigate the technology/IT risk at its source.