2023-14 – Inadvertent installation of malware
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Confidential information in endpoint devices or servers
Dreiging
Data breach or leak due to inadvertent installation of malware
Risicocategorie
Vertrouwelijkheid, Integriteit
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Use antivirus software where possible A.8.7 Protection against malware
- Make sure devices are regularly patched/updated (A.8.8 Management of technical vulnerabilities)
- Implement A.8.19 Installation of software on operational systems
- Implement a proper firewall, network monitoring and/or NDS/IDS (A.8.20 Network controls)
- Implement A.8.23 Web filtering