Ipremier Company

Question 1

I believe ipremier Company did well during the 75 minutes attack, the situation was handled

professionally by all parties involved. Mr. Leon from the ops performed excellently by bringing to the

CIO's attention the matter at hand as quick as possible and had to make that drastic decision to call the

CIO in the middle of the night. Joanne Ripley the technical operations leader did great on her side by

responding swiftly at that time of the night and heading straight to the colocation facility to find out and

try to resolve the problem. The CEO, VP of business development, the company's CTO all did well by

calling in and all bringing in ideas to address and resolve the issue.

Even though they handled the matter professionally, there is a point that I strongly feel the CIO

didn't handle it too well. He is responsible for whatever that happens to the company's reputation be it

good or bad. At the moment they were not sure if their systems have been intruded or if there was some

sort of distributed DOS attack (Denial of Service), if I was Bob Turley I would have ordered that the plug

be pulled even if it means losing the data that would help the company figure out what had happened.

If the website was hacked, it means customers information such as credit cards, social security numbers

would have been compromised. I feel pulling the plug would have been a better move in managing the

potential risk. The company did not have any emergency procedures or equipment such as binder and

proper firewall to help tackle the problem.

If the attack had not come to a halt on its own, and coupled with a possible intrusion, the consequences on

Ipremier would have been much more severe.

Pulling the plug would have reduced the aftermath of a possible intrusion attack, even though it will

have its own public relations consequences, which could have been managed.

Question 2

The company's operational procedures were deficient in responding to the attack because they did not

have proper procedures or response to potential attacks such as this. ipremier didn't

...