Reference no: EM133262649

Investigators found that the first major intrusion into TJX's system had occurred in the summer of 2005 at a Marshalls discount clothing store near St. Paul, Minnesota. The criminals used "war driving," a hacking method that involved a laptop, antenna, and mobile wireless connection to locate vulnerable wireless signals. Once the hackers exploited TJX's WEP-secured wireless signal and successfully broke into the network, they established a connection with the main TJX server in Framingham and uploaded their own program that extracted card numbers from the network traffic. That program remained in place for eighteen months.

Following TJX's announcement of the data loss, affected parties filed lawsuits in an attempt to recoup their costs. The question of liability was complicated because there were no laws defining who was liable when a retailer that was not in compliance with PCI DSS lost credit card data. "Under current law, financial institutions (FIs) that issue the debit or credit cards often ultimately wind up footing the bill for both fraud-related losses and costs of issuing new cards and/or accounts for their customers

Using case TJ Maxx case study, provide the following in great detail (Please use good explanations for everything and I will give thumbs up):

1a. An enterprise-wide cyber risk management policy for all members of the workforce

1b. An accountability chart that shows who is responsible for which parts of the companies risk management process (go ahead and make assumptions about TJ Maxx roles if needed).