Data Breach Assignment 2022

Running head: IS AUDIT REPORT
IS AUDIT REPORT
Name of the Student
Name of University
Author note

1IS AUDIT REPORT
Executive Summary
Data breach is a very serious problem for every organisation in this globe. It is responsible
for significant loss of financial as well as sensitive information of a particular company. It
continues to provide threat to the privacy of an organisation and critical infrastructure of the
information. In 2020, Norwegian Cruise Lines faced a massive data breach. On March 13,
2020, this organisation discovered that their database was inside the dark web. According to
DynaRisk, 29,969 data records were breached. They mentioned that agents of the
organisation were in severe risk of being targeted by the cyber attacks. This report will
clearly describe regarding the background of the organisation and technology environment. In
this report, it will also discuss regarding the identification of the issues, procedure of IS audit,
and potential solution.

2IS AUDIT REPORT
Table of Contents
Introduction................................................................................................................................3
Background to the Case.............................................................................................................3
Identification of problem............................................................................................................4
Audit approach and Potential solution.......................................................................................5
Conclusion..................................................................................................................................9
References................................................................................................................................10
Appendix..................................................................................................................................12

3IS AUDIT REPORT
Introduction
Data breach is considered as an incident that is responsible for exposing confidential
information (Aung, Lwin and Lin 2020). It may disclose the social security number, bank
account details, credit or debit card number and personal health information of a person. A
data breach can accidental or intentional. A black hat hacker may hack the database of a
company where many people shared their personal details. Retailers, hospitals, government
offices, corporations and colleges are all been targeted as data breaches.
In this report, at first, back of the data breach of Norwegian Cruise Lines will be
discussed (Andoh-Baidoo and Lee 2020). After that, it will discuss regarding the detection of
the problem of such incident. Then it will discuss regarding the audit approach and potential
solution of the occurred incident.
Background to the Case
Norwegian Cruise Lines is the third largest cruise lines in the globe by passengers.
They offer various cruise tours in different parts of the world. They offer “freestyle crusing”
which features no enforcement of dress codes, no specific timing for dinner, a pleathora for
onboard entertainment and family friendly activities. At the time of voyage, passengers can
watch live shows like “After Midnight” or the Tony award nominated “Rock of Ages”
musicals. Young people can spend their time at onboard water parks and kids clubs. They
have “freestyle dining” facility (Cruises & Cruise Deals | Plan Your Cruise Holiday | NCL,
2020). With the help of this facility, passengers can get acquainted with many globally
inspired eateries such as French style bistro and a teppanyaki restaurant of Japan. Norwegian
Cruise Lines give conventional cruise buffets and formal dining rooms.
Norwegian Cruise Lines develop a new innovative technology platform named
“Cruise Freedom”. It is a mobile application. It helps to enhance the guest experiences from
the moment of booking throughout Norwegian Cruise. It helps to stress free embarkation day
with mobile check in for reserving a table at one of Norwegian speciality restaurant (Cruise
Freedom™ | Norwegian Cruise Line | Technology and Mobile Apps, 2020). They push the
limits of innovation via technology on its young and modern fleet. For developing this mobile
application, they give a contract to a company named DeCurtis. They create elegantly simple
solutions to solve complicated problems. It is the main focus of the company in last twenty
years. This mobile application helps the make a revolution and truly modifies guest and crew