2023-24 – Leaking confidential information during testing/demo
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
Confidential information in application
Dreiging
A sales person uses a live production environment of another customer An engineer uses production data to simulate an error on dev/test/acceptation environment
Risicocategorie
Vertrouwelijkheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Proper separation of DTAP environments (A.8.22 Segregation in networks)
- Create and maintain a proper set of proper test/demo data (A.8.33 Test information)