2023-23 – Customers send confidential data by email or post
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Confidential information
Dreiging
Customers send confidential data by email or post, such as a customer list or migration database. As soon as the data is received, it becomes our responsibility. 1. Violation of the organization's Information classification policy 2. Enhanced risk of data leaks
Risicocategorie
Vertrouwelijkheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Agree on information exchange with new customers (A.5.8 Information security in project management/ A.5.14 Information transfer)