SCENARIO:

The CEO of a government contracting firm was notified that an auction on the dark web was selling access to their firm$$s business data, which included access to their military clients database. The CEO rapidly established the data being $$sold$$ was obsolete, and not tied to any government agency clients. How did this happen? The firm identified that a senior employee had downloaded a malicious email attachment, thinking it was from a trusted source.

ATTACK:

For the given scenario, identify and explain the type of Attack?

RESPONSE:

How should the company respond to this Attack? Briefly explain TWO actions that must be taken by the company.

IMPACT:

What could be the operational and financial impact of above attack on the company.

SECURITY MEASURE$/$ CONTROLS:

What are some steps you think the firm could have taken to prevent this incident?