Why does the MGM Resorts example support the claim that cybersecurity is a business issue rather than only an information technology issue?

### Why this is right The example links a security incident to business services and substantial financial impact. When reservations, payments, and operations are disrupted, decisions affect customers, revenue, service delivery, and organizational risk. ### The concept Information technology teams may investigate and restore systems, but management must consider business priorities, acceptable disruption, financial exposure, customer communication, and risk reduction. The material also notes that the incident began through social engineering, showing that a compromised account can have effects beyond the individual user. ### What a good answer covers - Name operational services that were disrupted. - Explain that disruption affected business operations across multiple properties. - Include the approximate US$100 million impact described in the material. - Explain why financial and operational consequences require management decisions. ### Terms - **Social engineering**: Manipulating people into actions that can compromise security, such as revealing access information. - **Compromised account**: An account accessed or controlled by an unauthorized party. ### Remember When an incident affects services, customers, or finances, it is a business risk.