Assignment 10: Evaluate Delta’s Exposure to Crowdstrike

For this assignment, you will reply to another student’s post about the 2024 Crowdstrike incident, identify a specific way that Delta Air Lines was vulnerable to this incident, and explain how the incident affected Delta’s operations.

Discussion Requirements

Choose one person’s initial post about the 2024 Crowdstrike incident. Look at the part of the incident upon which they focused, and consider how Delta Air Lines was exposed to impacts from that part of the incident. Determine how Delta’s exposure to Crowdstrike affected their operations, and try to narrow down (as best as you are able with publicly available resources) how Delta’s security policies might have made them more vulnerable to the Crowdstrike issue.

Post one respectful reply to this other person’s initial post, in which you explain how the part of the Crowdstrike incident they discussed applied to Delta Air Lines at the time. Explain why Delta was vulnerable and how this vulnerability ultimately affected their operations. Cite at least one source that contains information related to your post. This citation may be informal – a link to the source is sufficient. Note that you are unlikely to find a detailed security policy from Delta, since that information is considered confidential. However, you should be able to infer parts of their policy – and some of the risks they missed – by looking at the publicly available news articles about the incident.

Also reply to any questions I post. Some of these replies may be posted after we have started the next discussion.

As a reminder, you must do your own writing. Use of ChatGPT or other artificial intelligence tools is NOT PERMITTED, beyond the use of the automated word completion and grammar checking that may be available in Microsoft Teams.

Completion Standards

A complete post for this assignment:

1. Explains how the part of the Crowdstrike incident identified in the original post impacted Delta Air lines.
2. Hypothesizes how Delta’s information security policy may have made them vulnerable to the Crowdstrike bug.
3. Cites at least one source used for making the hypothesis.
4. Is conducted in a civil and professional tone using proper English language skills (in other words, avoid text message speak and slang).

Assessment

Successful completion of this assignment satisfies the following course student learning outcome:

• SLO 3. Critically evaluate and manage information security policies, principles, processes, services, and technologies to manage risks and security threats for ensuring a secure information system technology infrastructure.