Diagnosing Cyber Vulnerabilities in Organizational Supply Chains
This paper examines the 2017 Equifax data breach as a case study for diagnosing cyber vulnerabilities in organizational supply chains. It provides background on how attackers exploited a known Apache Struts vulnerability to compromise the personal information of nearly 150 million consumers. The paper then discusses the importance of robust cyber defenses — including patching, encryption, multi-factor authentication, and end-user education — and the often-overlooked risks posed by internal users. Finally, it surveys applicable U.S. government requirements, including the Gramm-Leach-Bliley Act and FTC enforcement, arguing that regulatory compliance and proactive security practices are essential for protecting sensitive data in the digital age.
- Introduction: Cybersecurity stakes and Equifax breach overview
- Background on the Equifax Breach: Apache Struts exploit and breach consequences
- Importance of Cyber Defenses: Organizational hardening and supply chain security
- End-User Risks and Awareness: Phishing, weak passwords, and user training
- Applicable Government Requirements: GLBA, FTC, GDPR, and regulatory compliance
- Conclusion: Key takeaways on breach prevention
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- Uses a well-documented, high-profile real-world case (the 2017 Equifax breach) to ground abstract cybersecurity concepts in concrete, verifiable events.
- Balances technical detail — such as the Apache Struts framework vulnerability — with broader organizational and policy implications, making the argument accessible to both technical and non-technical readers.
- Systematically addresses multiple dimensions of cybersecurity (technical defenses, human factors, and regulatory compliance), giving the paper a comprehensive analytical scope.
Key academic technique demonstrated
The paper demonstrates effective use of a case study as an analytical anchor. By introducing the Equifax breach early and returning to it throughout each section, the author maintains a clear thread of argument. Each subsequent section — cyber defenses, end-user risks, government requirements — is tied back to the Equifax example, showing how abstract principles manifest in practice. This technique keeps the paper focused and prevents the discussion from becoming a general survey.
Structure breakdown
The paper follows a classic problem-analysis-prescription structure. The introduction and background sections establish the problem using the Equifax case. The middle sections diagnose contributing factors: inadequate organizational defenses and end-user vulnerabilities. The government requirements section shifts to external accountability mechanisms. The conclusion synthesizes the argument into actionable takeaways. This logical progression suits the subject well and makes the paper easy to follow at the undergraduate level.
Introduction
Cybersecurity has become a critical concern for organizations of all sizes and industries. With the increasing dependence on technology, cyber threats are growing more sophisticated and frequent, posing a significant risk to organizations and their customers. In recent years, numerous high-profile cyber breaches have occurred, affecting major corporations and compromising sensitive information. One such example is the Equifax breach that occurred in 2017, which exposed the personal information of nearly 150 million consumers (Wang & Johnson, 2018). This paper discusses the Equifax cyber breach, the importance of cyber defenses, and applicable government requirements.
References
Dongre, S., Mishra, S., Romanowski, C., & Buddhadev, M. (2019). Quantifying the costs of data breaches. In Critical Infrastructure Protection XIII: 13th IFIP WG 11.10 International Conference, ICCIP 2019, Arlington, VA, USA, March 11–12, 2019, Revised Selected Papers 13 (pp. 3–16). Springer International Publishing.
Gaglione, G. S., Jr. (2019). The Equifax data breach: An opportunity to improve consumer protection and cybersecurity efforts in America. Buffalo Law Review, 67, 1133.
Wang, P., & Johnson, C. (2018). Cybersecurity incident handling: A case study of the Equifax data breach. Issues in Information Systems, 19(3).
Create your account
Always verify citation format against your institution’s current style guide requirements.