CHAPTER 3: THE RISKS

Before deciding how to deal with the risks associated with your business’s computer and information systems, it is important to consider the breadth of those risks. It is not simply a case of ensuring a virtual perimeter as many of the risks are born from cultural issues or involve factors beyond your control. The National Archives guidance Managing Information Risk documents many of the risks that directors need to consider in assessing the impact a system failure or breach could have on their organisation. The following chamber of horrors is but a sample of the potential pitfalls.

Accidental disclosure

These are the types of security risk that the UK government has become so associated with. Laptops left in taxis, unencrypted ...

Get Managing Information Risk: A Director's Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.