TA1 Human Factors, Threats, Culture, Liability
Team Assignment 1:
Course Objective: Analyze the challenges of managing human aspects of cybersecurity, with an emphasis on employees and the insider threat.
Competencies: Team-building skills, valuing diverse perspectives, decision making.
Choose 3 organizations generally in the same industry (3 businesses - large or small, or 3 government agencies, or 3 non-profit organizations) and discuss the effects on each company due to past incidents of cyber crime or cyber espionage.
First describe the mission of each organization, as found on their web site. Discuss how each organization has been targeted in the recent past for cyberattack(s), as reported in news or journal articles. Describe the suspected threat actors. Discuss possible effects of culture that may have influenced these threat actors - possible effects of poverty, religion, poor local law enforcement, or tradition and ethical values. Describe regulatory requirements and describe possible liability issues that may be related to these cyberattacks. How should cyber policy controls be adjusted for each organization to reduce vulnerabilities and prevent disruption or theft due to possible future attacks? Describe trade-offs associated with your policy control recommendations and explain how these might affect the stated mission of each organization.