2023-19 – Improper treatment of information
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
(Confidential) information
Dreiging
(Confidential) information is mistreated because classification or status is unknown, or it is unknown how it is supposed to be treated
Risicocategorie
Vertrouwelijkheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Create an Information classification policy (A.5.12 Classification of information)
- Create instructions for proper labelling of information (A.5.13 Labelling of information)
- Implement A.5.10 Acceptable use of information and other associated assets