Answer the following questions thoroughly after reading the packet attached.

Cyber Breach at Target

1. Why was Target the victim of such a devastating hack? Was Target simply unlucky or particularly vulnerable because the firm was lax? What evidence supports an assessment that Target was unlucky?  What evidence supports an assessment that Target was lax?

2. Which of the following factorspeople, processes or technologies/structureswas most responsible for the success of the hack (i.e., Targets failure to respond in a timely manner)? Explain.

3. What do you think of the cybersecurity organizational structure at Target?  What were the strengths and weaknesses?

4. What might have contributed to the lack of action on the FireEye alerts?

5. What do you make of the fact that the CEO was not informed for three days after the FBI alert?

6. To what extent would you hold Target’s board accountable for the company’s vulnerability? Explain.

7. To what extent would you hold the CEO accountable for the failure?  Explain.

8. What could Target have done better in the post-breach period?