Complete the assigned weekly reading and review the case study listed below. Respond to the questions below in a 4-6 page Word document. APA format is required, to include 12-point font ONLY using Times New Roman, and please ensure you see your syllabus for any additional writing requirements from your instructor. Assignments are worth 20 points each and will be graded on content, spelling, and grammar.

The goal of this assignment is to reflect upon a well-publicized public breach. There is an expectation you will investigate AWS standard architectures, and best practices, and fully understand the scenario that happened from the wealth of information that has been publicly disclosed. ASSUMPTIONS ARE OK IN THIS (as not all details are known), BUT BE SURE TO NOTE THEM!

Some References below are attached but feel free to find your own!

Capital 1_A Technical Analysis of the Capital One Cloud Misconfiguration Breach

Actions

Capital 1_AWS_WebArchitecture

Actions

Capital 1_ejj-io-capital-one

Actions

Capital 1_Paige Thompson DOJ complaint

Actions

Capital_1_Amazon Letter to Sen Wyden RE Consumer Data

Actions

1. Break down after you conduct your research the likely sequence of attack that happened in this scenario that lead to the breach.

2. Discuss the attack and preventive measures that should have been deployed from a technical perspective that would have limited or eliminated the risk.

3. Discuss if a major financial institution was in a better position than one in another industry segment to protect their cloud environments and why.

4. Would Capital One be better off in a physical data center if so, or if not, why and how?

5. Based on this scenario, what do you think is the root cause of this breach

6. Discuss what liability the cloud provider holds in this scenario and why

7. Discuss the findings from the Federal Regulator and fine tied to the failure of controls, which blamed Capital One internal audit and finance footsteps. Was that appropriate?

8. Conclude and summarize your personal thoughts on the scenario and what, if anything, you learned.