Target Corporation Cyber Security Policy

Did the Target corporation have or use a cyber security policy? Where key controls enforced and tested at all levels of the management framework? Where their policies in place to handle, and guide the implementation of technology and protocols for support? Did Target conduct annual or semi-annual training of staff, management to cashiers, on how to identify potential security issues and what to do? Where adequate audits conducted to test the key controls, policies, and procedures that were and are in place? All of these questions will be asked after a data breach or cyber theft has occurred but was these questions asked prior to the intrusion.
Several mistakes were made by Target’s Executive team. The biggest issues within the Executive management team was unity, primarily the domineering presence and strong-armed control that the Chief Executive Office, Greg Steinhafel, exhibited. The Chief Executive Office is the person that is
But, the actual compromise data did not fall into the criteria of what the law required for notifications. This created an ethical dilemma for the Executive team, just because the law states that notification does not require notification for the data type in the breach. But, the heavy-handed control of the Executive staff team, he forced public notification that a larger number of data elements were compromised, under protest of other Officers. Even though the first notification was not correct, the media decided to combine both notifications and came to the conclusion of how many data elements were access during the breach. With the prevailing news stories, correct or not, Target’s reputation and sales suffered, Chief Marketing Officer Jeffrey Jones summed it up the best, “That’s hammering us” (Kinicki & Williams, 2013, pg. 37,