Site organization Lack of defined disciplinary process Theft of equipment in case of information security incident Site organization Lack of formal policy on mobile Theft of equipment computer usage Site organization Lack of control of off-premise assets Theft of equipment Site organization Lack or insufficient 'clear desk and Theft of media or clear screen' policy documents Site organization Lack of information processing of media or facilities authorization documents Site organization Lack of established monitoring Theft of media or mechanisms for security breaches documents Site organization Lack of regular management Unauthorized use of reviews equipment Site organization Lack of procedures for reporting Unauthorized use of security weaknesses equipment Site organization Lack of procedures of provisions Use of counterfeit or compliance with intellectual rights copied software
Site organization Lack of defined disciplinary process in case of information security incident Theft of equipment Site organization Lack of formal policy on mobile computer usage Theft of equipment Site organization Lack of control of off-premise assets Theft of equipment Site organization Lack or insufficient 'clear desk and clear screen' policy Theft of media or documents Site organization Lack of information processing facilities authorization of media or documents Site organization Lack of established monitoring mechanisms for security breaches Theft of media or documents Site organization Lack of regular management reviews Unauthorized use of equipment Site organization Lack of procedures for reporting security weaknesses Unauthorized use of equipment Site organization Lack of procedures of provisions compliance with intellectual rights Use of counterfeit or copied software
D2.2-DITEN.docx