Case Study 7-2: Sony Pictures: The Criminals Won

1. Setting aside the political issues between North Korea and the United States, is there a reasonable way to respond to an anonymous threat found on the Internet somewhere? What elements would you require before canceling the film if you were CEO of Sony? If you were CEO of a chain of theaters?
2. What cybersecurity controls would you recommend Sony use to provide better security for unreleased digital films and e-mails? Be sure to include technology as well as organizational controls.
3. If you were a hacker, what approach would you have used to break into Sonys system? What do you think the most important SETA elements would be to prevent future cyberattacks against Sony or other media firms?