Unit 2 Case Study Directions
Review the following case study. Consider the big picture ideas and the specific concerns. Make use of the key terms and concepts from the readings in your written responses to the questions. The case study paper should be approximately five (5) pages with 10 or 12 point font, 1-inch margins, 1.5 spacing, and citations according to either APA or MLA style. A table of contents should also be included.
Incident Details
ABC Corporation is a prominent e-commerce and healthcare company that handles vast amounts of customer data, including personal, healthcare and financial information. An unfortunate unauthorized data breach occurred when a disgruntled employe decided to provide access to consumer advocates. The resulting data breach compromised over 5 million customer accounts and exposed their personally identifiable information.
Sensing that it may be both the moral and legal responsibility to notify affected customers, ABC Corporation sought guidance for responding to this incident.
To conclude the case study, kindly respond to the following questions:
- What breach notification laws exist on the federal level to notify affected individuals, regulatory authorities and, in some cases, the public about data breaches? For example, how would the California Consumer Privacy Act (CCPA) and the Health Insurance Portability and Accountability Act (HIPAA) affect ABC Corporation’s compliance?
- Explain how breach notification laws share common objectives such as ensuring transparency, empowering affected individuals and enabling regulatory oversight.
- What steps should ABC take to detect and assess security breaches, determine the scope of the incident, and then initiate the breach notification process within the specified timeframe?
- How would ABC craft clear and comprehensive breach notifications that fulfill legal requirements while effectively communicating the impact of the breach to affected individuals?
- How can ABC establish effective channels of communication with relevant regulatory authorities, understanding the reporting requirements of those authorities and complying with their guidance and directives?
- How would ABC conduct periodic mock-breach exercises to test the effectiveness of the incident response plan, identify areas for improvement, and train employees on breach notification procedures?
Instructions
- When constructing your responses, remember to critically analyze the topic and add substantial thought to the subject area. Utilizing the resources provided in your course materials will enhance your understanding and response to the question.
- Use concrete examples, drawn from current events, historical instances, or personal experiences, to illustrate your points.
Posting Guidelines
One key point to consider is your Audience. Another useful resource is t Academic Integrity Tutorial. In particular, you might want to visit Module 3: Writing Well With Sources and Module 4: Giving Credit Where Credit is Due – Attribution and Citation. Finally, before submitting, make sure you go through the Editing and Revising process.
Rubric to follow
