Unit 4 Case Study Directions

Review the following case study. Consider both the big-picture ideas and the specific concerns. Make use of the key terms and concepts from the readings in your written responses to the questions below. The case study paper should be approximately five (5) pages in length using 10 or 12 point font, 1.5 spacing, and 1-inch margins. Quotations and citations should follow either APA or MLA style. A reference page should also be included.

Incident Details

DBO Corporation was subject to a ransomware attack during which all access to customer and financial data, research and trade secrets were effectively compromised and blocked. DBO has many government contracts and receives funding from government agencies throughout the country. DBO does have cybersecurity insurance, but the board of directors is unsure of whether it is legal and ethical to pay the proposed ransom. DBO seeks your advice on how to handle this situation.

To conclude the case study, kindly answer the following questions:

1. Should DBO report a cybersecurity incident such as this to the authorities and, if so, to which agency or agencies?
2. What stakeholders should be notified of this type of incident?..
3. What are the laws or regulations concerning customer or consumer data when a data breach occurs? Provide an example.
4. What ethical or moral obligations does the company have to try and retrieve the compromised or blocked information?
5. Is it legal to pay a ransom, even if it is done by an insurance company on the victims behalf?
6. What are some of the moral implications and consequences of paying ransoms to hackers?

Instructions

• When constructing your responses, remember to critically analyze the topic and add substantial thought to the subject area. Utilizing the resources provided in your course materials will enhance your understanding and response to the question.
• Use concrete examples, drawn from current events, historical instances, or personal experiences, to illustrate your points.