Sony attack in 2014

1.Access to systems and assets is NOT controlled well 

2.The network is NOT monitored to detect potential cybersecurity events 

3.Public relations are NOT managed after the incident happen.

Explain how does these 3 points have, and how to improve them, write one and half page each point.

 https://www.riskbasedsecurity.com/2014/12/a-breakdown-and-analysis-of-the-december-2014-sony-hack/#secondroundofleaks
https://www.welivesecurity.com/2014/12/22/sony-hack-5-lessons-learn/

Use the link I provide to answer the question about 2014 Sony attack. If you gonna using more from internet, make reference.