Teaching Case Discussion Questions

$1.$ What is the ethical dilemma for Randcom between choosing greater public access and protecting

consumer privacy? Is the CEO unethical? Why or why not?

$2.$ How should Randcom ethically communicate the hack to its customers? How would you handle the

incident and create an escalation procedure that balances the company$$s well$-$being as well as that

of the customers?

$3.$ From technology and IS standpoints, what would you recommend Randcom should have done to

prevent, diagnose, and mitigate the breach? Establish an Incident Response Plan $($IRP$).$

$4.$ From a process standpoint, forward three BPR $($Business Process Reengineering$)$ actions that would

have mitigated the Randcom hack.

$5.$ From a people standpoint, propose three Cybersecurity training practices that would create a more

prepared workforce that can better deal with cybersecurity threats.