Building Cyber Resilience

Act as a cybersecurity strategist for a large consumer-facing company. Create a resilience plan for preventing, detecting, and responding to a major breach that exposes account credentials and personal data. Cover identity protection, password policy, multi-factor authentication, incident response, customer communication, legal obligations, and post-breach rebuilding of trust. Include lessons on how the company should redesign systems and incentives so a single compromise cannot cascade across millions of users.