1. How did the Target breach happen? In other words, what factors allowed this theft to take place?
2. Was technology at fault? Would more investments in technical controls have helped?
3. What would a Security Impact Analysis say?
4. Given the major sources of risks, which controls would you have implemented and what protection would these controls have afforded?
5. Is the forced resignation of the CIO warranted? Why or why not?
6. What lessons can be learned from Target case?