Albert Gonzalez, 28, was involved in some of the major data breaches between 2005-2008 including Heartland, Hannaford Bros., 7-Eleven, T.J. Maxx, Marshalls, BJ’s Wholesale Club, OfficeMax, Barnes & Noble, Sports Authority, Dave & Busters, Boston Market, Forever 21, and DSW. He stole data from over 170 million credit and debit cards as part of an international criminal organization. Data security experts emphasize the importance of securing IT environments, managing and retaining data securely, and managing IT risk and compliance to keep consumer information safe from cyber criminals.

1. 1

2. 2

3. 3

4. 4
Albert Gonzalez, 28
With accomplices, he was involved in data
breaches of most of the major data breaches:
Heartland, Hannaford Bros., 7-Eleven, T.J.
Maxx, Marshalls, BJ’s Wholesale Club,
OfficeMax, Barnes & Noble, Sports Authority,
Dave & Busters, Boston Market, Forever 21,
DSW and others.
The public trusts that we will
keep their information safe
from crooks like these.

5. 5
Source:

6. 6
Number of incidents per year.
Source:

7. 7

8. 8
Source:

9. 9
Source:

10. 10
Source:

11. 11
Source:

12. 12

13. 13
Source:

14. 14

15. 15
Source:

16. 16
1. Securing the IT environment
2. Managing and retaining data
3. Managing IT risk and compliance
4. Ensuring privacy
6. Managing System Implementations
7. Preventing and responding to computer fraud
10. Managing vendors and service providers
http://www.aicpa.org/InterestAreas/InformationTechnology/Resources/TopTechnologyInitiatives/Pages/2013TTI.aspx
Orange text are all
PCI related

17. 17

18. 18
Determine
Objectives
Assess
Risk
Apply
Controls
Assess
Controls
Monitor

19. 19

20. 20
Source: Internal Control Guidelines California Local Agencies 2015 SCO

21. 21
 Source: AICPA’s Auditing Standard AU-C §315.A91

22. 22

23. 23

24. 24

25. 25

26. 26
utility model

27. 27

28. 28

29. 29
Efficiency
Agility
Innovation

30. 30

31. 31

32. 32

33. 33

34. 34

35. 35

36. 36

37. 37

38. 38

39. 39

40. 40

41. 41

42. 42

43. 43

44. 44

45. 45

46. 46

47. 47

48. 48