These questions relate to the case study "Autopsy of a data breach: The Target case".

1. Have you received a notice that your data has been compromised in the last year more than once?

2. What inconveniences has changing your password caused for you?

3. When it comes to investments in IT security, how much importance needs to be stressed on the human element?

4. As CIO, what immediate measures would you take to improve your company's third- party risk management?

4. Has anyone in the class had their information sold on the black market?

5. Has anyone had to buy back their information from a hacker?

6. How can cybercriminals be tracked at a global level and prosecuted?

7. Why did the credit card companies have to respond differently in this case? What were some of the ways they responded, such as J.P. Morgan Chase?

8. What were some of the outcomes of this breach to ensure better accountability? Do you have any ideas on how to have accountability for all stakeholders?

9. Can you identify any similarities or differences between this case and IVK?