Hello, im Wei Han form Team 7.Our solution for iPremier case is divided in short/long term aspects.
For short term, we suggest iPremier to not pull the plug
There are several reasons: We know iPremier can not identify the exact problem, and don't have a solution to it in short term. Even they pull the plug down, it won't help them solve the problem.Pulling down system might wipe data would be vital for future investigation. It will also create customer panic
.
Insteadly, we suggest iPremier to form 3rd party team help investigate the attack immediately.
If customer information stolen if confirmed, then iPremier should issue a credit card fraud alert to banks. and also prepare compensation.
For PR issues, we suggest iPremier to inform there customer there is an attack, which is currently under investigation. And keep its' customers updated on any development.
On the long term side, we suggest iPremier form a development team in charge of security system improvement. They may consider data encryption, upgrade firewall, logging and audit policy.
iPremier may need a new emergency plan for such kind of event. The relationship with Qdata need re-assess since Qdata seems cannot provide proficient service on security issues.