2023-15 – Usage of shadow IT
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Confidential information
Dreiging
Employees employ "own" cloud services (e.g. Dropbox) or alternative IT solutions to circumvent limitations. As a result, data may be processed without proper agreements or may remain accessible to the employee after termination of contract.
Risicocategorie
Vertrouwelijkheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Add terms about the usage of software and (cloud) services to Code of conduct (A.8.19 Installation of software on operational systems)