Description

  • Question 1: The Chief Information Officer recently heard about the 2019 Capital One AWS breach and requested an immediate analysis of whether your company should continue with its plans to use AWS for all future projects. You have been tasked with providing a report (300-400 words) to explain the issue that occurred and to give a recommendation as to whether AWS should still be used. In your report, describe who you think was principally at fault for the breach, and how you think the breach could have been prevented or its impact reduced (i.e. whether you would add or change any technology or business processes)
  • Question 2: Who is responsible for security in specific examples (i.e. Microsoft 365 hosted exchange, AWS S3, GoDaddy hosting, etc.)? Where do the responsibilities begin and end? (150 words)