Please enable JavaScript.
Coggle requires JavaScript to display documents.
Internal Threats (Use of portable storage devices (Preventing access to…
Internal Threats
Use of portable storage devices
Preventing access to files which a user
doesn’t need
Training users of the security
risks of removable media
Logging who downloads which files,
when and from which terminals
Disabling access to USB ports or
removable media
Users overriding security controls
Procedural – incident processes
Legal – laws
Technical – firewalls, settings, antivirus
Physical – fences, gates, locks
Unintentional disclosure of data
This can happen when too much confidential information is
given to an employee or customer.
It can also happen if data stored on paper, hard disks or removable media is left on trains or in cars.
It can happen if computer security or encryption is not used or or sufficient to stop a data breach occurring.
Intentional stealing or leaking of information
If IT systems are compromised.
If information is not destroyed before it is disposed of.
It can happen if incorrect file privileges are given to users.
Visiting untrustworthy websites and downloads from the Internet
Websites that are untrustworthy may be harmful or
contain downloads which contain malware