FT Schools – Cyber attack on UK’s airports

Cybercrime refers to illegal activities carried out using computers, digital networks, or the internet, including hacking, data theft, and online fraud.

Award [1] for a definition that shows limited knowledge of cybercrime.

Award [2] for a definition that shows clear and accurate knowledge of cybercrime, similar to the example above.

Possible answers include an explanation of any one of the following:

• Loss of trust – Around 8.7 million customers had personal data accessed, so customers may lose confidence in MAG’s ability to keep their information secure.
• Risk of fraud/scams – Stolen information, such as email addresses and phone numbers, could be used for phishing or other scams, causing customers to blame MAG for failing to protect their data.
• Damage to customer loyalty – Customers concerned about data security may be less willing to use MAG’s services, such as airport parking, WiFi, lounges, or Fast Track.
• Customer dissatisfaction – Customers may be unhappy about the inconvenience and concern caused by the breach, damaging their relationship with MAG.

Award [1] for identifying a relevant reason and [1] for explaining this in the context of MAG, up to the maximum of [2].

Possible answers include an analysis of any two of the following:

• Damage to reputation – Customers may lose trust in MAG because personal information belonging to around 8.7 million customers was accessed. This could damage the reputation of the business and reduce customer loyalty.
• Higher costs – MAG may need to spend more on cybersecurity specialists, improved IT systems, and monitoring to reduce the risk of another attack. These additional costs could reduce profitability.
• Legal or regulatory consequences – A major loss of customer data may result in investigations by regulators. This could increase MAG's costs and management workload.
• Customer relations – Customers whose email addresses, phone numbers, vehicle registrations, or postcodes were accessed may be concerned about scams or phishing. MAG may therefore need to provide additional support and communication to affected customers.
• Opportunity costs – Senior managers and employees may have to spend significant time dealing with the cyber attack rather than focusing on other business activities.

Mark as a 3 + 3.

Award [1] for identifying a relevant impact, [1] for explaining the impact, and [1] for appropriate application to MAG, up to the overall maximum of [6].

Cybersecurity refers to the protection of computer systems, networks, and data from unauthorised access, damage, theft, or other digital threats.

Award [1] for a definition that shows limited knowledge of cybersecurity.

Award [2] for a definition that shows clear and accurate knowledge of cybersecurity, similar to the example above.

Possible answers include an explanation of any two of the following:

• Protecting customer data – MAG stores information such as customers’ email addresses, phone numbers, vehicle registrations, and postcodes. Effective cybersecurity can reduce the risk of unauthorised access to this information.
• Protecting business operations – Cyber attacks can disrupt an organization’s computer systems. Although MAG’s airport operations were unaffected by this attack, effective cybersecurity can reduce the risk of future operational disruption.
• Protecting reputation – Customers expect businesses to protect their personal information. Strong cybersecurity can help MAG maintain customer trust and protect its brand reputation.
• Reducing financial risks – Cyber attacks can create significant costs, including cybersecurity specialists, system repairs, compensation, and possible regulatory penalties.
• Protecting stakeholders – Strong cybersecurity can protect customers from risks such as phishing and fraud following the theft of personal information.

Mark as a 2 + 2.

Award [1] for identifying each relevant reason and [1] for explaining this in the context of MAG, up to the maximum of [4].

Possible advantages include an explanation of any one of the following:

• Reduced risk of future cyber attacks – Investment in stronger security systems and specialist staff could make it more difficult for hackers to access MAG's computer systems and customer data.
• Improved customer confidence – Greater investment in cybersecurity could reassure customers that MAG is taking the protection of their personal information seriously.
• Reduced risk of disruption – Better cybersecurity could help protect important airport systems and reduce the possibility of future attacks disrupting operations.
• Lower long-term costs – Preventing a major cyber attack could avoid the potentially high costs associated with recovering data, repairing systems, and managing the consequences of a breach.

Possible disadvantages include an explanation of any one of the following:

• Higher costs – Advanced cybersecurity systems, specialist employees, and staff training can be expensive, increasing MAG's operating costs.
• Opportunity cost – Money spent on cybersecurity cannot be used for other purposes, such as improving airport facilities or customer services.
• No guarantee of complete protection – Cyber threats continually change, so even significant investment cannot remove the risk of future attacks completely.
• Continuous expenditure – Cybersecurity systems and staff training need regular updating as new threats emerge, creating ongoing costs for MAG.

Mark as a 2 + 2.

Award [1] for identifying a relevant advantage/disadvantage and [1] for explaining this in the context of MAG, up to the maximum of [4].