Any idea of which network security and cyber risk metrics should one consider in a report to gain a better understanding of the systems, networks, and data, that would have supported business operations to be secure of Sony Pictures Entertainment (SPE) considering the cyber hack that happened in 2014?

Topic

[Ojodale123Participant]

Considering the Sony Picture hack, businesses should be more focused on cyber security even when they think it is not an essential part of the business.The risk to operation, reputation and legal can sometimes be more expensive for the business.

[oebieParticipant]

Hi ChuckSibs

A great resource for controls, benchmarks and metrics can be found at the Center for Internet Security.

https://www.cisecurity.org

If you are looking specifically for metrics you can apply immediately, have a look at these:

https://www.cisecurity.org/white-papers/cis-controls-v7-measures-metrics/

Hope that helps !

Andre

[cvannoteParticipant]

#65421 – being that internal education as well as vendor education is an important aspect in the overall preventative stragegy, can anyone suggest a suggested framework by role types?

[cvannoteParticipant]

Are there any benchmark reports suggesting the costs associated to downtime in the media industry? In essence when a company is designing a cyber risk strategy what types of resources are available to access the potential financial and reputational risk?

[SDW2020Participant]

Here is a good article on the Sony hacks – https://www.theverge.com/2014/12/18/7415735/everything-you-need-to-know-about-the-sony-hacks

[mgalloParticipant]

The below is also a good resource discussing the Sony Hack and costs incurred as a result of the hack: https://www.whitehouse.gov/wp-content/uploads/2018/03/The-Cost-of-Malicious-Cyber-Activity-to-the-U.S.-Economy.pdf

This source also discusses the economic costs of malicious cyber activity more broadly.

[sarafernandesParticipant]

The most recent news regarding Sony Attack and how fuzzy it is the participation of a nation-state in the attack
https://www.hollywoodreporter.com/features/five-years-who-hacked-sony-1257591
I’m amazed how politics and hackers go hand-in-hand!

[#2020Participant]

Here is another great article that is essentially a chronology of the attack and covers a lot of the types of data compromised.
https://www.riskbasedsecurity.com/2014/12/05/a-breakdown-and-analysis-of-the-december-2014-sony-hack/#theanalysisgame

[#2020Participant]

This is another great article that is essentially a chronology of the attack and discusses the types of data compromised.
https://www.riskbasedsecurity.com/2014/12/05/a-breakdown-and-analysis-of-the-december-2014-sony-hack/#theanalysisgame

[Author]

Replies