Homework: Risk Management Framework
Risk Assessment of Home Depot Malware Attack
Reading: Krebs, B. (2014).Home Depot Hit by Same Malware as Target.
Instructions:
For this homework you need to read the linked article and discuss vulnerabilities, threats, and risks that played a role in these data breaches. You do not have to provide an overly technical answer. There is not much detail available to specifics of data breaches that impacted both Target and Home Depot. Focus on the definitions of risk, threat, and vulnerabilities and look for connections between both breaches.
Task:
i. As you read through the linked article, first write a brief description of the Home Depot case.
ii. List vulnerabilities, threats, and resulting risks that both Target and Home Depot may have faced.
iii. What are the benefits of quantitative risk assessment over qualitative risk assessment? What are the disadvantages of quantitative risk assessment compared with qualitative assessment? Connect your discussion to the Home Depot case.
iv. How can identification of risk help Home Depot with organizational decision making? Provide another example (cyberattack incident, e.g.) that effective cyber risk identification helped organizational decision making?
v. Which of the three risk assessment techniques (quantitative, qualitative, hybrid) could have helped with early identification of data breach risks at affected stores?
Format your homework according to the following formatting requirements:
i) The answer should be typed, using Times New Roman font (size 12), double spaced, with one-inch margins on all sides.
ii) The response also includes a cover page containing the title of the homework, the student's name, the course title, and the date. The cover page is not included in the required page length.
iii) Also include a reference page. The Citations and references must follow APA format. The reference page is not included in the required page length.