4- Identify a company that must be incompliance with your law or regulation(the Sarbanes-Oxley Act) but was hacked.
a. Why was the company hacked?
b. Was the company in compliance with the law?
c. Did the law require a control(s) to help prevent such a hack?
d. Was the control sufficient enough to mitigate threat? If not, why not?
e. Identify and describe other companies subject to this law that were also hacked
———–
4- Find a corporation that was hacked and must be in violation of your legislation or regulation (the Sarbanes-Oxley Act).
Why was the organization hacked in the first place?
b. Did the business comply with the law?
b. Was there a requirement in the law for a control(s) to help prevent such a hack?
d. Was the threat sufficiently mitigated by the control? Why not, if not?
a. Identify and describe other companies that were hacked and are subject to this law.
