Sony's Operations And Development Of Business Continuity Plan

It’s not news that Sony is a global company or that (25%) of all Play Station profits’ for the past seven years came from Sony to Japan. After all that’s what international marketing and the global economy are all about, companies like Sega, Nintendo, Microsoft, X-Box doing business around the world. The global economy now reaches every corner of the United States. Current interest in international marketing can be explained by changing competitive structures coupled with shifts in demand characteristics in markets throughout the world. With the increasing globalization of markets, companies find they are unavoidably enmeshed with foreign customers, competitors and suppliers. A significant portion of all products made in the United

| “Security controls are the management, operational, and technical safeguards or countermeasures employed within an organizational information system to protect the confidentiality, integrity, and availability of the system and its information” (NIST SP 800, 2009). The control allows the organization to efficiently mitigate the risk coming from the use of information System (IS) to conduct business operations and processes.

Sony has multiple networks, but the PlayStation Network has over 77 million users. In April 2011, Sony characterized a security breach as an “illegal and unauthorized intrusion” of the Sony networks. In fact, there was a series of breaches by different groups of hackers. The information provided by registered users, including usernames, passwords, names, and addresses, was compromised. In addition, the credit card information of users who make online purchases may have been compromised. Sony did not announce this information until a week after the last breech. The network was shut down after the last of the breaches.

What type of attack was launched on Sony? The assault on Sony network is believed to have been started with a simple spear phishing attack. This phishing attack allow the hacker group ‘Guardian of peace’ to gain access to the network by stealing network credentials. More than likely the simple phishing cause an un-trained employee to give up their network credentials with out a fight. “Analysis conducted by AlienVault revealed that the source code was specifically designed to target the Sony Pictures. The source code examined by Alien Vault used a simple login and password to gain access to Sony Pictures corporate network”( ). Experts believe that the hacker recycle a previous found code from all ready pre-existing malware, specialist had a look at the code and uncovered that this preexisting code was modified/written and send out by Korean speaking hackers.

This case study, written in 2009 is not the only case where a major data breach has occurred within organizations. In the late 2011 Sony’s PlayStation Network (PSN) was breached impacting up to 77 million user’s accounts including data on names, address and possibly credit card details. In late 2013 Target had a cyber-attack that compromised a large quantity of its data and had 110 million accounts compromised. Finally in September 2014 Apple had their iCloud server breached by hacking that compromised all the users of the online server. These occurrences still have some unanswered questions and several experts have yet to decipher the actual reason as to why the security breach occurred.

Within this security profile three controls and two family controls were selected to be enforced in order to explore the security awareness and the training being done that can be used as counter measures against any cyber security threats that may pose a problem to the network. The three controls that are being examined within management, technical, and operational families will be based on the needs of the VA and how best to implement them.

In April of 2011, Sony had a major breach in its video gaming online network. Countless amounts of customer data were stolen, including personal information such as where they lived, who they were, and possibly even their credit card information. This attack happened to about seventy seven million Sony accounts (Cunningham). Cyber or Internet threats have been both increasing and been getting more and more sophisticated. In 2011, Saudi Arabia and Israel had been getting back at each other with personal information. Hackers from both countries gained financial and personal information about the other countries’ citizens and published it. A 19-year-old Saudi Arabian posted the financial information of six thousand Israelis. For revenge, Israeli hackers secretly gained credit card numbers and financial details from thousands of Saudi Arabians

The purpose of the report is to explore the current vulnerabilities in the information system network and outline potential

Preventive controls can be as simple as locks and keys to access sensitive areas of a building, clearances to access classified data, or the use of complex passwords with encryption. Detective controls can be as simple as cameras or motion detector systems in a building, or, as complex as a network intrusion detection system (NIDS) on the network. Corrective controls, usually combined with preventive and detective controls, help reduce the damage once a risk has manifested. This can be done by performing regular backups in the event of a system crash. Below is an illustration (Figure 4-1) of the three main types of security

It is almost impossible to find the top reasons why most security breaches happen on a secure network compromising hundreds to thousands of users’ personal information. This happens today more often than one would like to think and the consequences are astronomical for users, employees and customers of the companies. To protect a network and thoroughly secure confidential information, one has to examine the top vulnerabilities and think outside of the normal box to protect the network. When a security breach happens, there is usually a pretty simple reason why it has happened. This paper will discuss one of the highly publicized security breaches to happen in years, the Sony PlayStation Network & Qriocity music and video service that

Now a day, companies are focusing and investing more on IT security, where the company’s and customers’ personal and financial information managing and storing. Certainly, more cost involves in this process. Companies who failed in security breach prevention paid and paying huge amount. Example for this is Target. This multinational grocery stores company’s data breached in 2013 this affecting its business. Furthermore, by 2015 nearly 1000 Target employees lost their jobs and the company is facing legal suits from bankers and customers.

The purpose of each control on the Sphere of Protection is to protect the valuable information and information systems assets. The focus of each control is management, operational, and technical controls in which sums up the sphere of protection.  Management controls cover security processes designed by strategic planners and performed by security administration (2) Operational controls deal with operational functionality of security in organization and (3) Lastly, technical controls address tactical and technical implementations related to designing and implementing security in

On January 15th, 2015, The Toronto Star published a news article detailing the recent decision of Sony to close all fourteen of their stores located in Canada. Sony decided that they close all outlets across Canada over the course of the next two months, which would directly affect 90 of their employees. In their company statement, it was stated that the company would instead be directing their sales through telesales and online stores and the Tokyo-based Sony Corporation forecasts a $2.3 billion (U.S) deficit for the business year to March. Sony has been cutting retail operations since 2014 such as by closing their outlet in Toronto Eaton Center and will continue to close their outlets located in areas such as Vancouver, Montreal, Calgary, and Ottawa.

By defining key controls based on cyber threats (translated into business risks), an organization can more easily right-size the its control set and adapt it to their needs. Risk assessment processes that are near real-time, gated by the change control process, provide continuous feedback on the sufficiency of controls within an

Back in 2002, Sony geared themselves toward a vertical strategy as reported by Rob Weisenthal, VP and CFO of Sony Corp. of America, “Under the USA umbrella, we undertook a number of vertical initiatives for each operating division. These have already produced significant operational streamlining and financial performance improvements.” As discussed in his release, Weisenthal talked about Sony Pictures Entertainment and their strategy to restructure television operations, where core programming competencies were focused on. Film and television digitalization efforts have been expanded and have engineered a significant reduction in their corporate overhead. In addition, he mentionted that Sony Music has made long