2023-30 – Uncontrolled installation of software
| Veld | Waarde |
|---|---|
| Status | Actief |
| Behandeling | Accepteren |
| Kans | Midden |
| Impact | Midden |
| Blootstelling | Midden |
| Restblootstelling | Laag |
| Eigenaar | Management |
| Verantwoordelijke | Security Officer |
Asset
(Confidential data stored on) production systems or workstations
Dreiging
Malware is installed when new software is installed Unlicensed software is installed Confidential data is unwillingly shared with third parties
Risicocategorie
Vertrouwelijkheid, Integriteit, Beschikbaarheid
Risicoscore
| Kans | Impact | Blootstelling | Restblootstelling |
|---|---|---|---|
| Midden | Midden | Midden | Laag |
Behandelingsmaatregelen
- Define rules for installation of software on servers and workstations (A.8.19 Installation of software on operational systems)
- Implement A.8.2 Privileged access rights