Symantec Data Breach: Causes and Critical Security Controls

Running head: INFORMATION SYSTEM SECURITY
Information System Security
Name of the Student
Name of the University
Author Note

Symantec breach revealed client list, passwords: report
Abstract:
The main aim of this report is providing an
important overview of the data breaches.
This report has described what the data
breach actually is and it affects
organization. For a deeper analysis of the
data breach, the data breach case of
Symantec has been discussed and analysed
in this report. Critical security controls for
fighting against this type of data breach
cases has been also discussed.
Keywords – Symantec, Data Breach
I. Introduction
The information system is actually
some socio technical, formal and a typical
type of organizational design which is
mainly designed for collation, storing,
process and distributing of the
information. From the perspective of a
social technical there are mainly four
components of an information system.
In the aspects of information
security, information security breach is one
of the important issues of current
generation (Sen and Borle 2015). There
are several of information security breach
cases and it just keep increasing. Proper
measure should be followed for tackling
this type cases.
In this report the data breach case
of Symantec which happen recently will be
discussed. This data breach happened in
the last June month due to which a big list
of Symantec’s clients and password has
been leaked due to which those clients od
Symantec came into the danger.
II. Details of the Breach Causes
In this case, there are several of
aspects which are associated with this data
breach issue. There are some important
critical factors which lead to this data
breach issue. As per the statement of
Symantec the data breach occurred in this
context as the attack was performed on a
demo lab which was not connected to the
corporate network of the Symantec
(Novinson and Novinson 2019). As per the

Symantec it is quite impossible for the
hackers to breach the data which is
connected with the corporate network of
them.
Though Symantec is one of the
largest cyber security organization in
world, they were completely unaware
about the breach which was going to be
performed. This showed the major
problem of the security in the demo lab of
them. In this aspect Symantec does not
identified any of the security problems in
their demo lab before the breach
(Novinson and Novinson 2019). This
showed Symantec that their demo labs are
not safe anymore. Thus, it is very much
important for the Symantec to properly fix
this data breach issue in the demo labs so
that they can avoid any type of data breach
cases in the future.
For the data breach which
happened in the Symantec there are no
security measure solely. As per the
Symantec this data breach occurred as the
targeted system was a demo lab which is
used for the testing purposes (Novinson
and Novinson 2019). Due to this, the data
breach case of Symantec was not very
much important to them so, no security
measures for particularly this data breach
is taken by Symantec. Although, as per the
statement of Symantec this data issue of
the deo lab can be resolved easily if this is
integrated within their corporate network.
According to the statement of
Symantec their security measures are quite
capable, up-to-data and sufficient for
protecting against this type of security
breach and attack cases. They have giver
their statement that this attack become
possible as the hackers targeted one of
their demo labs which is used for the
testing purposes (Novinson and Novinson
2019). If the attack was performed on the
corporate sector of Symantec then the
hackers would have been never successful
due to the up-to-date and sufficient defend
mechanism of them.
III. Critical Security Controls
Though for the Symantec data
breach occurred in the demo lab it can be
painful for them in several of cases. Thus,