According to NIST Links to an external site., an asset is any item of value related to the organizational objectives $($NIST$,$ n$.$d$.).$ This can be computer systems, data, or people. IAM is one of the key ways that organizations protect their assets by implementing policies, processes, and technologies. For this reason, attackers often look for and target weaknesses in the IAM program.

For this assignment, research a breach scenario and address the following:

Breach Scenario and Assets:

Explain the breach scenario.

Describe in detail the assets that were in jeopardy.

Protect, Detect, Respond:

What did the organization do to protect these assets?

How did they detect there was a problem?

How did they respond to the issue?

Mitigations:

What protections or safeguards were in place?

What else could have been added for enhanced security?

Are there any controls or IAM mechanisms that could have mitigated the incident?

How would you protect these assets in the future?