Assignment Task: Your organisation is a private healthcare provider. The organisation is a B2C organisation and has a large digital footprint, including a customer mobile application and web app, a cloud based back end, some on premise equipment and a third-party managed data centre, with numerous customer facing stores throughout the country. The organisation has been on a journey of rapid digital expansion and is keen to continue expanding.
6 months ago your organisation created a dedicated IT Security team of 3 staff, which has branched off from the existing IT team. The Board was not happy about the decision but has begrudgingly endorsed it, with the condition that budget for the new team is taken from the existing IT budget. The new cyber team has a Head of Cyber who reports to the CIO. For the past 6 months the staff has been mostly continuing the same work they were doing as part of the IT team, except with more of a focus on security. The Head of Cyber is keen to put together a strategy for the team to guide its growth over the next 3 years. The scenarios you are developing will be used to help inform this strategy.
Identify the top cyber risk scenarios facing your organisation.