BigCo – the attack

Megan, the Chief Information Security Officer (CISO) of a multi-national corporation, gets the call at 3:00 AM about major sections of her company BigCo’s network being down. The CISO is responsible for the cybersecurity of the company, ensuring compliance, risk management, and sufficient defenses are in place. It’s the highest-level position in cybersecurity. It can be at the Director level, Vice President, or directly under the CEO, depending on the importance of cybersecurity within an organization. Megan is a Director of Information Security at BigCo with the title of CISO, and she reports to the Chief Information Officer (CIO). Typically, the CIO will exist over the information technology and information security departments. In this case, Megan reports to the CIO, Mark.

Megan knows getting a call at 3:00 AM means this outage must be bad because she typically wouldn’t be called in the middle of the night for a typical network outage...