The SWIFT Heist: A Cybersecurity Case

ABSTRACT In 2016, cyber criminals exploited cultural differences to conceal a nearly $1 billion attempted fraud at Bangladesh Bank via the Society for Worldwide Interbank Financial Telecommunication (SWIFT) network, the primary messaging network through which international payments are initiated. With an emphasis on control environments and activities, this teaching case uses the 2016 Bangladesh Bank heist as a case study of the importance of IT controls in a global, technology-driven, networked environment. Students experience the case background through popular media outlets (i.e., podcasts) and apply their knowledge of the COSO Internal Control framework to analyze the existence, design, and effectiveness of the internal control system at Bangladesh Bank. Overall, this case provides an engaging, multimedia classroom activity in which accounting students can apply their knowledge of cybersecurity, risk management, and internal control systems. Data Availability: Data are available upon request.