What cybersecurity regulations or laws were relevant in this case?

Learning About Risk Assessment Through Case Studies
The business impact of a data breach can be devastating to an organization. Reading and evaluating case studies regarding organizations that have experienced a data breach are useful in understanding how to more effectively perform a risk assessment.
Discussion Question
Select one of the case studies related to a data breach at the SANS reading room.
Briefly summarize the data breach case.
What cybersecurity regulations or laws were relevant in this case?
What threats or vulnerabilities were overlooked in the case you reviewed?
What security controls should the company have had in place to avoid the breach?
What steps did the organization take to improve security after the breach?
What was the business impact of the breach?

These resources can help you learn more about risk threats, vulnerabilities, and exploits.
Use the textbook to read:
Gibson, D. (2015). Managing risk in information systems (2nd ed.). Burlington, MA: Jones & Bartlett Learning.
Chapter 2, “Managing Risk: Threats, Vulnerabilities, and Exploits,” pages 29–54.
Chapter 4, “Developing a Risk Management Plan,” pages 85–109.

Use the Internet to access case studies. You will use one of the case studies in the discussion for this unit.
SANS Institute. (2016). SANS Reading room: Case studies. Retrieved from https://www.sans.org/reading-room/whitepapers/casestudies

Last Completed Projects