2023-06 – Account sharing
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Laag |
| Impact | Hoog |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Confidential information stored in application, cloud services An (ex-)employee damages or leaks information from (cloud)
Dreiging
application, due to account sharing.
Risicocategorie
Vertrouwelijkheid, Integriteit
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Laag | Hoog | Midden | Laag |
Behandelingsmaatregelen
- Reset all shared passwords as part of the HR off boarding process (A.5.18 Access rights)
- Maintain register of all used Suppliers & services (A.5.9 Inventory of information and other associated assets)
- Forbid personal account sharing in the Access control policy (A.5.15 Access control/ A.5.17 Authentication information)