Jeff Flaherty, senior director of global communications and public affairs at Marriott, said that as part of the company’s integration efforts, Marriott conducted an assessment of the legacy Starwood information technology systems prior to and after the close of the transaction.

Part of the problem could be that two years after the acquisition, the Starwood and Marriott systems weren’t merged yet, Lyon said. The security team was managing two parallel systems, which expands the target and draws resources thin, he said. Consolidating them makes them easier to protect, he said.