Reference no: EM132401116

Sony Pictures Entertainment hack

Introduction

The 2014 cyberattack on Sony Pictures Entertainment (SPE) sent shockwaves through US national securityand foreign policy,US and international media, as well as private enterprises globally. It was the first destructive cyberattack conducted against the US and the first time the US attributed a cyberattack to a foreign government.3 Eventually attributed to North Korea over SPE's planned release of "The Interview," a comedy featuring a plot to assassinate North Korea's leader Kim Jong-un, the SPE attack's political and economic consequences serve as a powerful example of cyberattacks' crippling potential.

The Sony case study provides a foundation for which to base your ongoing project on, however you are encouraged to conduct further research to engage with the nuances of the case and to enforce your reasoning.

By considering SONY case study, answer the following questions:

- Identify the threat Sony faced in the 2014 hack, and explain their motives. Explain whether or not you think the aspects of Sony's sector made it vulnerable to the threat you have identified.

- Offer an explanation of the methods of attack the threat actor employed to breach its cybersecurity, and justify your reasoning.

- Describe a scenario of what method of attack at least one other type of threat actor could use in the future, and why.

- What types of critical systems, networks, and data would you expect constitute Sony's information infrastructure?

- Which of these critical assets do you think are the most essential to the organization's ability to accomplish its mission? Explain why.

- Do you think that the 2014 attack against Sony primarily targeted systems, networks, data, or a combination of all three?

Please note that your answers to the Sony case study will be assessed according to the sound reasoning you have provided for your interpretation of the organization's critical assets.