Information Technology for Management, 11th Edition

CHAPTER 5Cybersecurity and Risk Management Technology

CHAPTER OUTLINE

1. Case 5.1 Opening Case: Yahoo wins the gold and silver medal for the worst hacks in history!
2. 5.1 The Face and Future of Cyberthreats
3. 5.2 Cyberattack Targets and Consequences
4. 5.3 Cyber Risk Management
5. 5.4 Internal Audits and Controls
6. 5.5 Frameworks, Standards, and Models
7. Case 5.2 Business Case: Lax Security at LinkedIn Exposed
8. Case 5.3 Video Case: Botnets, Malware Security, and Capturing Cybercriminals

LEARNING OBJECTIVES

1. 5.1 Describe the extent of incidents and data breaches in organizations and the sources of cyberthreats that are putting organizations in jeopardy.
2. 5.2 Describe the targets of cyberattacks and the impact these attacks have on both public and private sector organizations.
3. 5.3 Explain why cyber risk management must be a top business priority and outline an organizational model for cybersecurity.
4. 5.4 Describe the internal audits and controls that are used to defend against occupational fraud at all levels of an organization.
5. 5.5 Explain how risk management frameworks, standards, and models help ensure compliance with industry and federal regulations. Assess the risk associated with a network crash, debilitating hacker attack, or other IT disruption.
   1. Explain how compliance and security can diverge such that being compliant is not necessarily equivalent to being secure. (Home Depot, Target, and a myriad of others were all PCI compliant.)

Introduction

Today, most business leaders know they ...