CASE :MWEB BUSINESS: HACKED

1.   What technology issues led to the security breach at MWEB?

The technology issues are compromised subscribers account details, published logon and password details that were published on the internet by hackers and MWEB previous web based self-service management system outsource to Internet Solution not yet migrate to the new MWEB network. So the reason is hackers gained access to Web based Internet Solutions self-service management system and it led to security breach that MWEB don’t have total control.

2. What is the possible business impact of this security breach for both MWEB and its customers?

Possible business impacts for MWEB are:
1.They have to notifying all customers and find fast solution like contacting these customers to reset their passwords, as an added security measure.
2.They have to work together with Internet Solution to solve this issue. They need to determine reason for breach and this leads to interruption of business processes.
3.They will lose trust of customers and takes time to gain back customer trust to company.
4.They need to immediately implement proper policies and controls of their systems.
5.They need to prepare for legal action and financial risks. This is threat to customer retention and reputation.
Possible impacts for MWEB customer are:
1.They need for explanation about the issue from MWEB.
2.They need for behavioral recommendations when this issue happens.
3.They loss of personal information such as privacy. The data lost or is inaccurate.
4.They feel inconvenience because they have to change password or could not access the service.
5.They lost trust in the company because of disappointed.

3. If you were an MWEB customer, would you consider MWEB's response to the security breach to be acceptable? Why or why not?

MWEB’s response to the security breach is acceptable because they respond quickly to the incident, migrate the Internet solution self-service management system to new secure server, contacting their customer to reset their passwords, as an added security measure and advice for immediate action, investigate thoroughly this incident and provide solution and report. The result note that no personal information was lost and that none of MWEB’s clients suffered any losses as their usernames and passwords had been recreated and changed. MWEB also successfully repels 5000 attacks a day.

4. What should MWEB do in the future to avoid similar incidents?

To avoid similar incident, MWEB should implement up to date security system or devices or protocol to their network such as Digital certificates, Intrusion detection system, MIS audit, regular and thorough testing and improved identity management. Moreover, MWEB should working closely with Internet Solutions to investigate the nature and source of the breach to ensure hacked doesn’t happen again.