Milestone 4

Running head: Capital One 1

Preventing Capital One Breach

Name: Rakesh Kalumula

Id: 002836752

2

The administrative factor that led to the security incident in the capital one left out a lot of

questions on how the intruder got in without the administration coming to notice. The capital one

data breach investigations took place and found that a Seattle resident by the name Paige

Thompson. She was involved in the computer fraud that led her to access about one hundred

million applications of credit cards and getting access to other data that was made possible

through the misconfigured firewall (Novaes Neto, 2020).

Thompson executed a command which later retrieved all security credentials for all the

administration account, which enabled her to copy more than seven hundred folders that were

hoisted by the amazon—making confusion of how all this was made without the knowledge of

the administration. The administrative factors that were not secured led to this breach because

the capital one was not monitoring the credit cards and identifying protections to its members

over and over. Freezing of credit cards should be carried to ensure that if someone else tries to

access other people's accounts, they will have to give passwords so that they access them. The

administration should also be proactive towards cybersecurity and give out knowledge to their

members about the cyber-attacks (Rao, 2016).

The physical control that led to this breach was that the capital one breach would have been

caused because there was no enough performance in monitoring services by the organization.

Thus if the organization did this, then they would have noted that they were being attacked.

Hence organizations are supposed to use available tools or monitor the systems consistently and

diligently because they are not supposed to assume the data integrity (Vorobiev, 2017).

3

Some of the technical issues that affected the capital one organization were that they did not use

appropriate software-defined perimeter type of technology. Thus they assumed they would not

have problems that made them not closing their cloud environment and software as a service for

access through their own devices, location, and users. Avoiding all these technical issues will

never be an effect on the capital one breach or to any organization (Novaes Neto, 2020).

Organizations should also be aware of their weakness and strengths. They should be able to fix

their weakness so that it won’t be known to the outside people or hackers. This will be of benefit

since the hackers will not use their weakness to them so that they can cause breaches to an

organization (Rao, 2016).

4

REFERENCES

Novaes Neto, N., Madnick, S., de Paula, M. G., & Malara Borges, N. (2020). A Case Study of

the Capital One Data Breach (Revised).

Vorobiev, E. G., Petrenko, S. A., Kovaleva, I. V., & Abrosimov, I. K. (2017, May). Analysis of

computer security incidents using fuzzy logic. In 2017 XX IEEE International

Conference on Soft Computing and Measurements (SCM) (pp. 369-371). IEEE.

Rao, B. T. (2016). A study on data storage security issues in cloud computing. Procedia

Computer Science, 92, 128-135.