CYBERSECURITY INCIDENT HANDLING: A CASE STUDY OF THE EQUIFAX DATA BREACH

摘要

Public communication strategies are an important component of corporate cybersecurity incident handling and crisismanagement. This paper studies the recent Equifax data breach using an improved version of business communicationmodel for cybersecurity incident handling, which highlights and examines the scapegoating strategy often used incorporate crisis management. This study uses Equifax public release documents for text data analysis and evaluatesthe effectiveness of Equifax incident handling strategies for the massive data breach. The paper also discussesimplications for cybersecurity education and workforce preparation.