A Multinational E-commerce Cyber Attack
Zip Limited operates a multinational e-commerce platform that handles a vast amount of sensitive customer data, including personal information, payment details, and purchase history. The platform serves millions of users worldwide, making it a prime target for cyberattacks and data breaches. Recently, there has been significant increase in cybersecurity attacks, with reports of data breaches, unauthorized access, and ransomware attacks in your organization.
As a result, the organization suffered a severe data breach that compromised sensitive customer information resulting from various security deficiencies within the database. These have raised concerns about security of customer data, prompting your organization to take proactive measures to enhance database security and protect against threats. Moreover, the company's reputation and business activities were adversely affected.
As the Database Administrator (DBA), you have been tasked with securing the database as well as maintaining and enhancing its operational efficiency while adhering to applicable cyber laws.
Question 1
Use the above scenario to answer the following questions:
1.1 To sensitize the company's employees, identify and discuss four (4) potential threats to the security of your company's database.
1.2 As a result of this incident, your company has decided to perform an overall risk assessment of their database security. Identify four (4) key areas that should be addressed in the risk assessments.
1.3 State and explain four (4) countermeasures and security controls that could help in mitigating against future occurrence of this incidents as well as protect the integrity and confidentiality of the data within the organization.