Summarize the issues and your recommendations for policies

Assignment Help Other Subject

Reference no: EM133925053

Assignment: Analysis & Report

Scenario

Padgett-Beale Inc.'s (PBI) insurance company, CyberOne Business and Casualty Insurance Ltd, sent an audit team to review the company's security policies, processes, and plans. The auditors found that the majority of PBI's operating units did not have specific plans in place to address data breaches and, in general, the company was deemed "not ready" to effectively prevent and/or respond to a major data breach. The insurance company has indicated that it will not renew PBI's cyber insurance policy if PBI does not address this deficiency by putting an effective data breach response policy and plan in place. PBI's executive leadership team has established an internal task force to address these problems and close the gaps because they know that the company cannot afford to have its cyber insurance policy canceled.

Unfortunately, due to the sensitivity of the issues, no management interns will be allowed to shadow the task force members as they work on this high-priority initiative. The Chief of Staff (CoS), however, is not one to let a good learning opportunity go to waste ... especially for the management interns. Your assignment from the CoS is to review a set of news articles, legal opinions, and court documents for multiple data breaches that affected a competitor, Marriott International (Starwood Hotels division). After you have done so, the CoS has asked that you write a research report that can be shared with middle managers and senior staff to help them understand the problems and issues arising from legal actions taken against Marriott International in response to this data breach in one of its subsidiaries (Starwood Hotels).

A. Research the types of insurance coverage that apply to data breaches. Pay attention to the security measures required by the insurance companies before they will grant coverage ("underwriting requirements") and provisions for technical support from the insurer in the event of a breach. Here are three resources to help you get started. *** Use the following links for the report.

a. Woodruff Sawyer- Guide to Cyber Liability Insurance
b. Prepare Your Business with Cyber Insurance Coverage and Solutions
c. Woodruff Sawyer- Cyber 101: Understand the Basics of Cyber Liability Insurance

B. Read / Review at least 3 of the following documents about the Marriott International / Starwood Hotels data breach and liability lawsuits.

a. Marriott Starwood Data Breach Highlights Silent Cyber Risk in Acquisitions
b. Marriott Hotels fined £18.4m for data breach that hit millions
c. Marriott First Response Letter
d. What every hotel owner (and operator) needs to know about "data security" after the Wyndham Worldwide case
e. The Marriott data breach
f. Marriott International Update on Starwood Reservation Database Security Incident

C. Find and review at least 2 additional resources on your own that provide information about data breaches and/or best practices for preventing and responding to such incidents.

D. Write a 4 to 5 page report using the research. At a minimum, the report must include the following:

a. An introduction or overview of the problem (cyber insurance company's audit findings regarding the company's lack of readiness to respond to data breaches). This introduction should be suitable for an executive audience and should explain what cyber insurance is and why the company needs it.

b. An analysis section in which you discuss the following:

i. Specific types of data involved in the Starwood Hotels data breaches and the harm. Get the instant assignment help.
ii. Findings by government agencies/courts regarding actions Starwood Hotels / Marriott International should have taken
iii. Findings by government agencies/courts regarding liability and penalties (fines) assessed against Marriott International.

c. A review of best practices which includes 8 or more specific recommendations that should be implemented as part of Padgett-Beale's updated data breach response policy and plans. Your review should identify and discuss at least 2 best practices for each of the following areas: people, processes, policies, and technologies. Be sure to describe the difference between processes and policies.

d. A closing section (summary) in which you summarize the issues and your recommendations for policies, processes, and/or technologies that Padgett-Beale, Inc. should implement.

Reference no: EM133925053

Questions Cloud

What are the alternatives to improve their brand image : Based on the case study from Harley-Davidson H-D Connect: Reviving Brand Image Through Co-creation, what are the alternatives to improve their brand image?

Analyze statistical and other quantitative analysis result : Analyzing and interpreting statistical and other quantitative analysis result to answer relevant research questions.

Antibiotic prescription right away : Jack, a two-and-a-half-year-old boy is brought in by his parents. His parents ask for an antibiotic prescription right away.

Define two strategies currently employed by managed-care : Define two strategies currently employed by managed-care organizations to control healthcare expenditures.

Summarize the issues and your recommendations for policies : Which you summarize the issues and your recommendations for policies, processes, and/or technologies that Padgett-Beale, Inc. should implement.

Presents to the office to establish as new patient : Presents to the office to establish as a new patient. John's natal sex is female but he identifies as a male. He transitioned from female to male 2 years ago.

Identify phenomenon of interest : In your initial discussion, identify a phenomenon (clinical problem) of interest. Clearly define the problem and its significance

Positive genetic or genomic test result : You are a general nurse caring for a patient that received a positive genetic or genomic test result.

How did use of them enhance patient care and safety : How did the use of them enhance patient care and safety? How did not using them potentially put patients at risk and increase the stress of the nurse?

User Account

All Pages