assignment

Arbonne MLM Information Security

Although no organization is absolutely one hundred percent breach-proof, organizations need to put measures to reduce security breaches, which can expose the organizations' information to unauthorized persons. Arbonne MLM faced a security breach in the year 2020, which ended up revealing personal information, including but not limited to emails, names, phone numbers, and transaction histories (Gatlan, 2020). Despite the organization putting measures in place, for example, through administrative, physical, and technical controls to curb the problem, the attackers were smart enough to breach and access the organization's data. An organization can choose to improve its security system by use of the authentication system. With this technical control, an employee will be required to prove him/herself before being allowed to access the organization's data generally by the use of passwords and username (Li, Wang & Sun, 2017). Also, the organization had a well-structured administrative system that allowed easy incident detection. For example, the organization had a competent risk assessment plan.

Notably, when it comes to the application of physical security, the company used its security team well in ensuring that all people affected by the breach remained informed. More importantly, physical security is essential to an organization because it provides that all computers and devices used in storing information are safe and free from access by unauthorized persons (Tun et al., 2018). Therefore, it will be useless to have firewalls, intrusion detector systems, and cryptography if there will be no physical security to guard computers. With all these measures to reduce the chances of attacks, the attackers remained smart and managed to attack. Notably, an investigation shows that the organization's technical controls were not competent enough to prevent the attack.Thus, Arbonne MLM Company should implement new technology that will help it in incident detection and prevention in the future. This will be a milestone to the organization in the improvement of its information security.

References