Cybersecurity Foundation case studies
Cybersecurity Foundation · Put your knowledge to work in context.
The PECB Cybersecurity Foundation is an entry-level training course and certificate exam for people who need a working grasp of core cybersecurity principles and how a cybersecurity program is built and run. PECB positions the course as an in-depth exploration of core cybersecurity principles and concepts aligned with industry best practices such as ISO/IEC 27032 and the NIST Cybersecurity Framework. The Cybersecurity Foundation case studies are 5 cases and about 3,931 words.
102:10 ransomware at a 340-bed hospital
Northbrook Regional Health is a 340-bed hospital with a 24/7 emergency department. At 02:10 on a Saturday the night shift reports that the electronic medication administration system is throwing file-access errors, and shared drive folders now show files renamed with a .locked extension.
780 words, about 4 min2Push bombing and a $180,000 detection budget
Vantage Loop is a 220-person B2B SaaS company. All staff use push-based MFA; the help desk resets MFA by asking callers for their employee ID and manager's name, both of which appear on LinkedIn and in email signatures.
753 words, about 4 min3Vendor breach with no contract language
Halden Freight is a 600-person freight broker. Its cloud transportation-management vendor, contracted three years ago, processes shipment records that include customer names, delivery addresses and 3,400 scanned driver licence images.
758 words, about 4 min4Shared admin password after a resignation
Corvane Components runs two manufacturing plants with 1,800 staff and 60 Windows servers. Administrative access to all servers uses a single local account, svc-admin , whose password has been unchanged for 11 months and is stored in a spreadsheet on a finance file share, because the previous tooling project was cancelled.
814 words, about 4 min5An 'accept' entry in a water utility's risk register
Riverton Water operates 12 treatment sites for a town of 85,000. Each site has a Windows Server 2012 R2 SCADA host running the vendor's HMI; three sites still use PLC firmware v3.8, which the vendor will not support after December.
826 words, about 4 min