ISOL 536 – Residency Project

Equifax is one of the three major credit bureau that stores personal and business credit

profile information1. Organizations rely on Equifax credit data in order to make pertinent

financial lending decisions. In 2017, Equifax revealed that a data breach exposed the sensitive

personal information of 143 million Americans2.

In 2018, Equifax budgeted to spend $200 million on security and technology projects for

the year3.

In this case study, assume that you work for an Information Technology Security firm in Atlanta

and your company has been hired to provide a threat model of Equifax consumer and business

data and provide remediation to address the security issue.

Create 20 pages written paper and 25 pages PowerPoint presentation document to address the

following area.

Key Deliverables

Your Company Information

? Company profile ? Leadership profile and expertise

Equifax

? Equifax company background and history ? Discuss Equifax 2017 data breach

o Discuss the impact of the security incident

1 https://www.equifax.com/about-equifax/ 2 https://www.ftc.gov/equifax-data-breach 3 http://fortune.com/2018/09/07/equifax-data-breach-one-year-anniversary/

o Discuss the scope of consumers and businesses affected? o Discuss how Equifax handled the security incident. o Discuss how the government handled the security incident

Threat Model Proposal

? Propose strategies and discuss a threat model for managing Equifax consumer and business data.

Identify Threats ? Find and discuss at least three threats to Equifax information systems using one of the

threat model strategies. *NOT threat types! One for data flow, one for data store, one for a process.

Manage and Address Threats ? Discuss and recommend at least two remediations per threat identified in the earlier

section. Closing Section

? Discuss the likelihood of another data breach and recommend what Equifax needs to do to be prepared and possibly avoid it.

**The Written paper must comply to APA guidelines. Provide references and citations for source.1.Research document should be at least 22 pages. (Including cover page and references)

2.Total document should be in APA Format with proper citation for references.

Please write One to two Pages on below topic.

1.Your Company Information 9 (Should be related to Equifax)
A–ª Company profile (Equifax )
A–ª Leadership profile and expertise (Please write 5 different types of profiles. Example: CEO, Architect, Lead etc.)

2.Please make sure to write minimum of 17 pages on below topics.

Equifax (Min 4 Pages)

A–ª Equifax company background and history
A–ª Discuss Equifax 2017 data breach
o Discuss the impact of the security incident
o Discuss the scope of consumers and businesses affected?
o Discuss how Equifax handled the security incident.
o Discuss how the government handled the security incident

Threat Model Proposal (Min 3 Pages)
A–ª Propose strategies and discuss a threat model for managing Equifax consumer and
business data.

Identify Threats (Min 4 pages)

A–ª Find and discuss at least three threats to Equifax information systems using one of the
threat model strategies.

*NOT threat types! (Should be related to Equifax and Min 4 Pages)

what can go wrong?

1,One for data flow (Data TAMPERRING ),
2. one for data store,
3.one for a process.

Manage and Address Threats (Should be related to Equifax and Min 3 pages)
A–ª Discuss and recommend at least two remediations per threat identified in the earlier
section.

Please write at least a page on closing section

Closing Section A–ª Discuss the likelihood of another data breach and recommend what Equifax needs to do to be prepared and possibly avoid it.