Al ASAAS, Inc. is a software development company based in New York City. Al ASAA

Question

Al ASAAS, Inc. is a software development company based in New York City. Al ASAAS’s software product development code is kept confidential in an effort to safeguard the company’s competitive advantage in the marketplace. Al ASAAS recently experienced a malware attack; as a result, proprietary information was leaked. The company is now in the process of recovering from this breach.

You are a security professional who reports into Al ASAAS’s infrastructure operations team. The chief technology officer (CTO) asks you and your colleagues to participate in a team meeting to discuss the incident and its potential impact on the company.

Tasks

2. Write an outline of key points related to the questions above that the team should discuss at the meeting.

1- Circumstances that may have allowed the malware infection to occur, or could allow a similar incident to occur in the future

2- Insights about risks, threats, and/or vulnerabilities from reports of similar incidents that have occurred in other organizations

3- Potential outcomes of a malware attack and exposure of confidential information

Explanation / Answer

Key points to be discussed:

a) The reason for the breach?
b) What portion of data is compromised?
c) Who are the expected intruders?
d) possible recovery plan?
e) The outcome of the risk management plan

1) Circumstances:
The reasons for the breach is due to malware attack. This corrupted software has been induced in the system to ruin sensitive data. This data has been deleted by the system due to malware.

2) Incidents that have occurred in other organizations:

Recently there has been an attack on other companies. Various companies faced threats related to security attack, data compromise, denial of service, virus attack etc. The threats faced by those organizations are a compromise of the data, security issues, infrastructure related compromise.

3) Outcomes of malware attacks:

The major outcomes of malware are data security violation, data threat, denial of service attacks, network overload, hardware failure,

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.