Use the More$4$Less case as the scenario$/$case study which was the case that you discussed previously $($More$4$LessFoodsCaselet.ppt$).$

Assume that you are the CISO. Write a letter to the More$4$Less Foods executive committee thoroughly answering the issues concerning possible deficiencies in your information security programme that were raised on that fateful Monday. Namely:

The failure of availability

The ability of outsiders to breach the system and transfer funds

Cuts to the training budget

Defective coding resulting in application compromise.

You must write your letter according to the following rules and constraints:

You must be goal oriented.

Your writing must show that you are attempting to solve one or more problems or issues that, once resolved, will facilitate reaching the enterprise$$s business goals.

Whenever relevant facts exist, you must bring them in and discuss them.

Blame is due where blame is due, but you must not blame anyone else or any other organisation for anything. You may, however, state that there are issues with other individuals or organisations that you are working to resolve.

Your letter must be long enough to provide sufficient coverage of issues, rationales, solutions and so on$,$ but it must not be so long that executive management will immediately put it down without reading it$.$

For each solution that you introduce, you must list the major pros and cons and explain each.