Data Breach at Equifax: https://hbsp.harvard.edu/tu/1162f2ca

After reading the above Equifax business case, answer the following questions:

1. How well did Equifax respond to the breach? What control mechanisms (preventive, detective or corrective) did Equifax have in place? What other control mechanisms should have been implemented by Equifax? [Hint: In responding to each of these questions the emphasis should be on your assessment of the relevance of company's control mechanisms as well as on the need for alternative mechanisms (if any) rather than on simply restating / listing the controls outlined in the case].

2. Considering the lag time between learning about the breach and notifying the Board, analyse why such delays in informing the Board occurred and what could have been put in place to prevent such delays [Hint: Again, in your response to this question, it is expected that you will go beyond simple listing of the factors that caused the delay but will empahsise on answering the 'why' question and on suggesting the control mechanisms that would have prevented the delay in communication].