Network & Information Security – ITSS 4360.5u1 – Summer 2020
Homework #1 – Due July 15, 2019 by 11:59pm
Professor Teaching Assistant
Homework #1 is designed to build familiarity with preventing, detecting, and responding to security incidents. Students will work individually to analyze a well-known incident at Equifax, a credit reporting agency. Each student will submit one Microsoft Word document by emailing it to Professor Howe.
1. Review the report, Equifax-Report.pdf
2. Provide responses to each of these questions:
a. What is a credit reporting agency? Describe their business model and the positive and negative aspects of that model in relation to the average citizen living in the United States? What are the biggest assets of a credit reporting agency?
b. Summarize the circumstances of the incident described in the report. Describe the sequence of events and failures that resulted in the loss of confidential information assets.
c. Who were the persons most significantly involved in the incident? Explain their roles and responsibilities, as well as your analysis of their behavior. Did each act appropriately?
d. How many customers were impacted by the incident?
e. Why do you think the incident was not reported to impacted victims sooner? Do you agree with the handling of the incident?
f. What do you consider the appropriate protection or compensation to provide to victims impacted by the theft of data from Equifax? If credit report monitoring is offered, how long should that service be provided at no cost to the victim?
g. What do you suggest to be the appropriate role of government in large security events with broad impact across the population?
h. What are 5 improvements that would help Equifax avoid an incident like this in the future? Refer to security controls that you have learned about this semester.
i. Should we, as persons who may appear in credit reporting agency records, have the ability to “opt out” of services?
j. Did you learn anything unexpected by reviewing the Equifax report?
3. Students must include citations of all sources of information considered and reviewed. If other students, working professionals, books, videos, or sources were consulted, links or short descriptions must be included. Submissions including content copied from additional sources but not including references to such source information may be considered incomplete and may receive a reduced score.
4. Please submit before July 15, 2020 by 11:59pm to receive full credit. Homework should be submitted via eLearning.
Homework assignments must be submitted on time to receive full credit. Specific details of each homework assignment will be provided in separate documents. Homework is to be submitted electronically using approved UT Dallas systems and must be received by 11:59pm on the assigned date. Late homework will lose one letter grade per day and will be counted as a zero after four days.
Always cite sources and indicate with whom you collaborated. There is no room for dishonesty, plagiarism, or cheating. Properly citing sources and collaborations will help students avoid these pitfalls.