Case Study of National Australia Bank Data Breach

Case study of
National
Australia Bank

INTRODUCTION....................................................................................................................................3
MAIN BODY...........................................................................................................................................3
Overview of addressed problem...........................................................................................................3
Describe common security issues that an auditors need to investigate................................................4
Describe NAB’s response to the data breach.......................................................................................4
Propose information security measures NAB should adopt................................................................5
Role of cloud computing in information security................................................................................6
CONCLUSION........................................................................................................................................6
REFERENCES.........................................................................................................................................8

INTRODUCTION
Data breach is confirmed incident in that confidential. Sensitive as well as other protected data
has been accessed or may disclose with an unauthorized fashion. In addition to this, data breaches may
include personal health information, personally identifiable information, trade secrets or intellectual
property. Moreover, common data breach exposures involve personal information of particular person
such as credit card number, social security number, health care history as well as other corporate
information like customer lists, manufacturing processes and software source code.
This report is based on National Australia Bank case study of data breach. It is fourth largest
bank in Australia with contacted approx. 13000 customers. Respective report will give overview of
addressed problem along with common security issues which an auditors need to investigate.
Moreover, it will also describe response of National Australia bank in case of data breach. In addition
to this, security measures which National Australia Bank have adopt in relation of their data breach
will also elaborate. In the end role of cloud computing in information security will explain.
MAIN BODY
Overview of addressed problem
In the cased addressed problem is related to data breach which taken place in National
Australia Bank. Data breach is confirmed incident in that confidential. Sensitive as well as other
protected data has been accessed or may disclose with an unauthorized fashion. In addition to this,
data breaches may include personal health information, personally identifiable information, trade
secrets or intellectual property. Moreover, common data breach exposures involve personal
information of particular person such as credit card number, social security number, health care
history as well as other corporate information like customer lists, manufacturing processes and
software source code. NAB has contacted approx. 13000 customers for advising that some personal
information provided when only their accounts was set up uploaded without any authorisation, to
servers of two data services company.
Describe common security issues that an auditors need to investigate
There are several security issues which auditors need to investigates with National Australia
Bank while conducting audit related to data breach situation. Explanation of these are as follows :-
 Malicious insiders – In organisation many staff member have access to important information
and there will be always a chance that someone will may misuse it. That sounds cynical, but
unfortunately the lure of financial gain from selling data on the dark web is too great for