Cybersecurity and Canadian Digital Banking

Case About Desjardins Data Breach

It seems like almost on a weekly basis the media publishes another about a data breach. This case is based on the data breach at Desjardins Group but there were announcements of data breaches in other financial organizations such as Capital One and Trans Union. Not only are these breaches being done by external parties but Desjardins introduced that there are also internal sources of data breaches with disgruntled employees. This puts a new twist on how companies and students need to think about security. This introduces new factors to traditional security thinking and the role of other areas of the organization like human resources in building security protocols.

Students entering the business world will need to be able to deal with data breaches and as government legislation catches up the need to have a response plan to a data breach is also key. Does technology like artificial intelligence have role to place especially when the data breach is internal? Students should respond to the case with a data breach response plan. Plans that are proactive are better than those that are reactive. Ideally plans that can establish industry wide responses are even better especially those that enable companies and sectors to recognize both internal and external risks.

Some of the issues that this case raises include:

• Data privacy
• Data security
• The role of human resources
• Business process reengineering
• Information system ethics

Questions

Students are required to take the first ten minutes to read the following articles in preparation to answer the five questions asked:

Amanda Connelly. July 15, 2019. MP probe massive Desjardins data breach in emergency committee meeting. Retrieved from https://globalnews.ca/news/5495478/desjardins-data-breach-public-safety-committee/ July 19, 2019.

Benjamin Shingler. June 21, 2019. What you need to know about the Desjardins data breach. Retrieved from:https://www.cbc.ca/news/canada/montreal/desjardins-data-breach-explain-1.5185163July 19, 2019.

Rukavina, Steve, (July 15, 2019). Desjardins to offer all members free, lifelong protection after data breach. Retrieved from

https://www.cbc.ca/news/canada/montreal/desjardins-data-breach-protection-1.5212030 October 12, 2019.

1. Now that you have done your research, explain your understanding of the data breach that happened at Desjardines in 2019?

1. Explain five policies that Desjardines could implement to minimize illegal or unauthorized access to sensitive data?

1. Explain how being ethical could have prevented the data breach.

1. What background checks need to be done on employees and do they vary depending on the employee's position?

1. Explain five ways how Desjardines could you useartificial intelligence to help detect internal data breaches?