Threat Impact on data associated Impact on Financial losses Other issues integrity, with finding, productivity affecting confidentiality, fixing, repairing, operations and and availability and restoring a reputation of information system Data: copied 1 1 3 4 5 without permission This would cost, This could impact The copying of If our data were just not for the management’s data, itself, is not copied by an reasons listed in productivity as it the problem. The unauthorized the column copes with the problem is what is party, they could header. potential then done with use that data for problems that that data, and any number of arise from correcting it. purposes that someone getting There would be would damage our our data. significant costs operations and both in staff time cause us to spend and financial significant resources in resources correcting correcting the problems. problem. Of particular concern: the reputation hit that our credit union would take. Data: disclosed to 5 1 3 4 5 people who have no By definition, if the This would cost, This could impact The copying of If our data were right to know it data were but not for the management’s data, itself, is not copied by an disclosed to reasons listed productivity as it the problem. The unauthorized unauthorized above copes with the problem is what is party, they could persons, it is no potential then done with use that data for longer problems that that data, and any number of confidential. arise from correcting it. purposes that
Threat Impact on data integrity, confidentiality, and availability of information associated with finding, fixing, repairing, and restoring a system Impact on productivity Financial losses Other issues affecting operations and reputation Data: copied without permission 1 1 This would cost, just not for the reasons listed in the column header. 3 This could impact management’s productivity as it copes with the potential problems that arise from someone getting our data. 4 The copying of data, itself, is not the problem. The problem is what is then done with that data, and correcting it. There would be significant costs both in staff time and financial resources in correcting problems. 5 If our data were copied by an unauthorized party, they could use that data for any number of purposes that would damage our operations and cause us to spend significant resources correcting the problem. Of particular concern: the reputation hit that our credit union would take. Data: disclosed to people who have no right to know it 5 By definition, if the data were disclosed to unauthorized persons, it is no longer confidential. 1 This would cost, but not for the reasons listed above 3 This could impact management’s productivity as it copes with the potential problems that arise from 4 The copying of data, itself, is not the problem. The problem is what is then done with that data, and correcting it. 5 If our data were copied by an unauthorized party, they could use that data for any number of purposes that
Cyber%20security%20risk%20assessment.docx