Risk Management Plan of Sony

Risk Management Plan

Sony’s Data Security Breaches In 2011

Name: Weiqian Zhang
Student ID: 23588101
Due date: 1 April, 2014
Lecturer: Warren Gillian
Unit Name: Introduction To Risk Principles
Unit Code: BFF5902

Introduction

As a multinational comprehensive corporation, Sony owns diversified business in electronics, games, entertainment and financial services fields.   The consumer electronics and game business, such as computers, cameras and video game consoles, are the popular products, which create major income for Sony. In particular, the PlayStation series are the best-selling products among them.   Not only the PlayStation consoles but also the PlayStation Portable (PSP) broke Nintendo’s long-standing lead in the game market.

On April 20, 2011 Sony’s PlayStation Network has been turned off and caused users of PlayStation consoles cannot connect to the online service, but Sony explained the PlayStation Network outage as normal system maintenance. On April 26, one week after the attack occurred, Sony announced that over 70 million users’ personal information has been hacked and leaked through online game from PlayStation consoles and other Internet services provided by Sony. The leaked information included account name and password, personal details (name, address, birthday, etc.), credit card information (card number, security questions, etc.) and order history. This intrusion becomes one of the largest information leakages in history and caused approximate one hundred million dollars losses for Sony. Because of the delayed announcement, Sony might face lawsuits and investigations in several countries. Sony explained that the announcement has been released as soon as possible after the experts identified there was an intrusion.

The following report includes 4 parts. In the first part, it will identify the risks and their possible consequences occurred on the Sony case. After that, the level of risk will be shown as a risk matrix, which...