This underscores the persistent and evolving nature of cyber threats and the need for organizations to remain vigilant, adapt their BC/DR strategies, and bolster cybersecurity to withstand the dynamic digital landscape.
Post your responses to the questions below and comment on at least two other students' posts. Make sure your responses are thoughtful and reference the materials you are learning in the class! How did Sony Pictures Entertainment adapt its communication strategies post-cyber-attack, despite the computer system disruptions, and what alternative methods were employed to relay critical information within the organization? Considering the Sony hack, what specific gaps in the studio's disaster recovery and business continuity plans became apparent, especially in technology availability and cyber-attack preparedness, and how can these insights guide the development of stronger plans for organizations facing similar threats?
1. After the cyberattacks disabled Sony Pictures Entertainment's email systems, file servers, internet access, and other computing resources, the company shifted to alternative communication methods to maintain operations. The employees relied on text messaging and personal emails to communicate and share information to each others. The organization also reverted to manual workarounds, which allowed critical functions to continue despite losing the corporate IT systems (Roman, 2015). Additionally, Sony implemented a phone-tree system to relay updates and important information throughout the organization when traditional electronic communication channels were unavailable (Roman, 2015). This last one shows their was a semblance off a business continuity plan in action. This incident showed the importance of maintaining communication methods that do not require corporate technology. As Roman (2015) states, organizations should maintain printed business continuity plans, call trees, alternative forms off contact in can the company systems are unreachable. Quite an interesting parallel but the Smart Choice framework also emphasizes this concept as identify the true problem and considering alternatives that is beyond the most obvious ones. Rather than viewing this issue solely as restoring email and computer systems, Sony had to redefine the problem as maintaining business operations and communication under severely constrained conditions. This broader framing encouraged the use of alternative communication methods and manual processes that would otherwise have been overlooked. 2. The Sony hack exposed several weakness in the BC/DR planning. Many BC/DR focus on very local events like natural disasters, or items which will have a high likely chance off occurring. While Sony's experience revealed that the organization was unprepared for a global loss of computing resources. The attack shut down critical systems across the company, and demonstrated that their continuity planning did not account for a large scale cyber incident. A major gap was the assumption that technology resources would remain available during a crisis. The employees were forced to rely on manual processes because key systems became unavaiable. This highlighted the need for orgnaizations to prepare for scenarios involving the complete loss of email, file servers, internet access, and remote connectivity (Roman, 2015). Effective plans should therefore include manual workarounds, printed contact lists, call trees, and procedures that allow essential business functions to continue without technology. The Smart Choices framework provides useful guidance for strengthening such plans. The authors argue that decision makers should challenge assumptions and constraints embedded in their problem definitions and consider whether those assumptions unnecessarily limit available alternatives. In Sony's case, continuity planning appears to have been constrained by the assumption that only localized disruptions would occur. Had planners questioned this assumption and broadened the problem definition to include a complete cyber-induced shutdown of enterprise systems, they may have developed more resilient alternatives and contingency plans. References Roman, J. (2015). Sony hack: Business continuity lessons. BankInfoSecurity. Hammond, J. S., Keeney, R. L., & Raiffa, H. (2015). Smart Choices: A Practical Guide to Making Better Decisions. Boston, MA: Harvard Business Review Press