Applying the Lessons from the Equifax Cybersecurity Incident to Build a Better Defense

摘要

The Equifax data breach in 2017 was one of the largest in history, with 148 million people affected. Using the Cybersafety method, we reconstructed the attack flow and Equifax’s hierarchical safety control system structure. We identified 19 systemic failures spanning the four levels of the hierarchy and, based on our analysis of the reasons for the failures, we provide recommendations that managers can use to strengthen their organization’s cybersecurity.