ChoicePoint Case Study

Paper Summary:

This paper presents a casestudy that discusses the systemic challenges that ChoicePoint is facing. The paper specifically discusses the internal challenges and data breaches that the company has experienced. Existing processes and their impact on individual's privacy are analyzed and recommendations are made regarding legislative changes required that will protect individual privacy, yet allow enough latitude for the personal data industry to still respond to the needs of corporate and government customers.

Table of Contents:
Introduction
ChoicePoint's Systemic Challenges
The Personal Data Industry Needs To Change
Privacy Advocates
ChoicePoint's Response to Congress
Conclusion

From the Paper:

"Only by completely re-ordering the company's approach to managing data privacy at the process and system level and also making GRC a corporate strategic priority by creating a Chief Governance Officer will ChoicePoint be able to overcome the risk of being massively regulated by congress. Derek Smith needs to get out of the business of selling data to small and medium businesses as well; these transactions are not scalable in a GRC framework as proposed in this paper and the incremental revenue is not worth the risk. Ultimately ChoicePoint will be able to work with congress only by disclosing how errant their processes and systems have become and how they welcome periodic audits of their GRC strategic plans and ISMS initiatives. To be anything less than accountable and willing to disclose is to risk intensive regulation."

Sample of Sources Used:

• A. Baldwin, Y. Beres, S. Shiu. (2007). Using assurance models to aid the risk and governance life cycle. BT Technology Journal, 25(1), 128-140. Retrieved August 5, 2008, from ABI/INFORM Global database. (Document ID: 1238704541).
• Jason Bellone, Segolene de Basquiat, Juan Rodriguez. 2008. Reaching escape velocity: A practiced approach to information security management system implementation. Information Management & Computer Security 16, no. 1 (January 1): 49-57 www.proquest.com (Accessed August 7, 2008).
• Joel Brenner 2007. ISO 27001: RISK MANAGEMENT AND COMPLIANCE. Risk Management 54, no. 1 (January 1): 24-26,28-29. www.proquest.com. (accessed August 7, 2008).
• Lawrence D Bodin, Lawrence A Gordon, Martin P Loeb. 2008. Information Security and Risk Management. Association for Computing Machinery. Communications of the ACM 51, no. 4 (April 1): 64. www.proquest.com (Accessed August 4, 2008).
• Steve Cocheo (2004). FCRA package, a big win wrapped with new strings. American Bankers Association. ABA Banking Journal, 96(1), 7-10. Retrieved August 6, 2008, from ABI/INFORM Global database. (Document ID: 536921151).

More papers on ChoicePoint Case Study:

• Case Study # 127803 : "Dental Case Study"
• Case Study # 121828 : "AcuScan Case Study"
• Case Study # 127681 : "Nursing Case Study"

APA Citation:

MLA Citation: