# 2. Inflation over two years will be

$$
\left((1+0.025)^{\wedge 2-1}\right)^{*} 100 \% = 5.0625 \%
$$

The real return on a bank deposit, taking into account the extension for the second year, will be $(1.06 * 1.06 / (1+0.050625) - 1) * 100 = 6.95 \%$

## Evaluation Criteria:

A maximum of 25 points for a correct and justified solution. Of these:

2 points for the correct calculation of the investment amount.

5 points for the correct calculation of the nominal return on the bank deposit. If this value was calculated incorrectly, the participant could receive points for the following steps in the solution:

- 3 points for calculating the amount the family can withdraw after closing the deposit, taking into account its extension for the second year.
- 1 point for calculating the amount the family can withdraw after closing the deposit, without correctly accounting for its extension for the second year.

7 points for the correct calculation of the expected return on investment in construction. If this value was calculated incorrectly, the participant could receive points for the following steps in the solution:

- a maximum of 2 points for conceptually incorrect consideration of the probabilities of different outcomes.
- 2 points for correctly accounting for the 13% income tax.

1 point for the correct choice of investment method. If the correct choice was made based on incorrect calculations of the return in any of the investment options, the participant did not receive a point for this part of the solution.

10 points for the correct calculation of the return. If this value was calculated incorrectly, the participant could receive points for the following steps in the solution:

- 4 points for a logically correct method of calculating the return in %, provided that the real return was calculated incorrectly.
- 8 points for calculating the return in % as the difference between the nominal return and inflation over 2 years, provided that the nominal return was calculated correctly.
- 1 point for incorrect accounting of inflation over two years.

If the entire logic of the calculations is followed, but the participant makes only arithmetic errors, then -1 point for each such error.

## Task 5

The banking sector has always been a tempting target for criminals, so commercial and government banks are implementing more and more protection technologies.

You head the information security department of a large commercial bank. Propose your protection strategy for the following objects of the banking infrastructure (at least one existing method for each object):

- employee profiles;
- bank cards;
- ATMs;
- online banking;
- online store payments;
- central automated banking system.
# Solution:

- employee profiles of the bank - employee awareness programs aimed at typical scenarios of criminal actions. These programs are designed to protect against various social attacks in which an employee discloses confidential information. For example, an employee might disclose information on social networks (VK, Facebook) that could be useful to a hacker: where they work, what they do, and what IT and IS systems are installed in the organization. Additionally, if technical protection systems designed to prevent the leakage of confidential information from the corporate network are DLP (Data Leak Prevention), UBA (User Behavior Analytics), and others, which protect against the theft of user-related data (full name, position, and phone number from the Outlook address book, passport data, and address of residence from the internal HR system, etc.).
- bank cards - mandatory use of the chip for large transactions (use of the magnetic stripe and NFC only for small purchases).
- ATMs - regular checks for unauthorized devices (microcameras, overlays on the keyboard and card reader), installation of vandal-resistant ATMs, installation of software and equipment to protect the communication channel between the ATM and the Bank's infrastructure, etc.
- online banking - implementation of 2-factor authentication (SMS, specialized tokens), installation of special protective scripts on the web server side.
- online shopping payments - implementation of additional checks, such as 3D Secure, imposing requirements for the information security of online stores.
- central automated banking system - implementation of an anti-fraud system (fraud protection system), implementation of a system to protect against targeted attacks, implementation of firewalls, intrusion detection systems, integrity control, access control, sandboxing, honeypots, and other proactive and reactive systems. Additionally, a 24/7 monitoring team of information security specialists is required.

## Evaluation Criteria:

A maximum of 15 points for a correct and justified solution. Points are awarded for arguments that carry meaningful content relevant to the task and do not contradict logic:

15 points - detailed description of 6 or more approaches (to protection or analysis, depending on the variant), close to the examples.

13 points - detailed description of 6 or more approaches (to protection or analysis, depending on the variant), close to the examples, but with inaccuracies. 10 points - brief description of 4-6 approaches (to protection or analysis, depending on the variant), proposed measures differ significantly from the examples.

8 points - detailed description of 3 approaches (to protection or analysis, depending on the variant), close to the examples.

5 points - 1-3 approaches provided, without detail.

## Appendix to Task No. 1

Glossary:

Insurance is a system of relationships between insurers (insurance company) and insured individuals (e.g., any citizen) that allows for the reduction of property risks by insuring, for example, property against possible adverse events...

The most common understanding of an insurance risk includes:

- the danger that threatens the insured object (the type of insurer's liability)
- the possibility, probability of the occurrence of an insured event (the magnitude of the danger);
- the event or set of events for which insurance is provided and for which the insurer must pay compensation upon occurrence;
- the insured object itself (structure, cargo, etc.);
- the amount of the insurer's liability under the insurance contract.

Excerpts from Article 10 of the Law of the Russian Federation dated 27.11.1992 No. 4015-1 (as amended on 03.08.2018) "On the Organization of Insurance Activities in the Russian Federation"