Risk Management in Cloud Data Security: Overview, Preventions, and Lessons Learnt from Uber Data Breach

Student name :

 Risk Management in Cloud Data Security:
 Data breach Incident Response and Data Recovery
 Electronic Legal action Support
 Forensic Recovery
 Permeation Testing
 Business Continuity Planning
 Insurance and Liability Planning (Sherstobitoff,
2008)
Overview of Risk Management

What is a Data
Breach
 Lost, Leakage or Stolen personal
information held by any organisation by
an unauthorised way is Data Breach
 Data Breach causes:
• Internal threats
– Employee carelessness
– Employee unawareness
– Mischievous employees actions
• External threats
– Hackers
– Information Thieves
– Merchants, Retailers and Vendors

 To avoid PANIC!
The company have to accept first: hack is
happened, so we need to take control over
the situation (Adebayo, 2012).
For effective control proper prevention,
detection and control techniques must be
available.
In Case of any Data Breach

 During late 2016, Uber data breach occurred
 Huge data breach affected 57 million drivers
and customers
 On-time disclosure of the hack was not done
 Chief security officer resigned post breach
 Data hack could have been prevented with
proper risk management
 Post breach, immediate disclosure could have
been done
Uber Data Breach: Details of the Hack

 Uber Technologies Inc. will pay 148 million dollar
for failing in on-time disclosure of huge data
breach
 Uber had lost 57 million users’ trust for the
company
 Uber also invested in recognizing the hackers and
paid $100,000 to the hackers for deleting the
downloaded data files (Lee, 2017).
Cost of Uber Data Breach