Instructions:

Case Study Scenario:

ABC Corp, a mid$-$sized financial services company, recently experienced a cybersecurity breach. An attacker gained access to sensitive company and client data through a phishing email that targeted several employees. The email appeared to be from the CEO, asking employees to verify account details by clicking a link and entering their login credentials. The breach was detected when the IT team noticed unusual login patterns from multiple locations for several employee accounts. After investigating, they found that the attacker had exfiltrated client data, including names, addresses, and account numbers.

Following the incident, ABC Corp's management recognized a significant need for cybersecurity awareness training among its employees to prevent future breaches. The company implemented mandatory training sessions covering topics like phishing recognition, password management, secure use of public Wi$-$Fi$,$ and data protection best practices. Despite this training, some employees continue to overlook security best practices, like using strong passwords, enabling two$-$factor authentication, and verifying the authenticity of emails before clicking links or sharing information.

Evaluate the cybersecurity incident that occurred at ABC Corp, analyzing the factors that led to the breach and the impact on both the company and its clients. Propose a comprehensive cybersecurity plan with five key strategies that ABC Corp should implement to prevent future incidents. Justify each strategy in detail, explaining how it will address the vulnerabilities identified in this case and how it contributes to the company's overall cybersecurity resilience. $(40$ Marks$)$

Criteria to Answer ;

$-$ Analysis of Incident and Factors

$-$ Explanation of Impact

$-$ Identification of Five Strategies

$-$ Justification of Each Strategy

$-$ Contribution to Overall Cybersecurity