Risks

Risks

1. Risks: Accidental loss of data

   • Human error: Deleting file or throwing away paperwork
   • Equipment failure: database could fail and if there was no back up this would be a loss of data
   • Impacts
     • Organisation would have been breached the DPA is loss of data included personal information and so would be liable to prosecution

2. Risks; unautherised or unintended access to data

   • Espionage- Obtaining secret or confidential information without permission of the holder of information
   • Poor information security policy - Member of the public finds discarded print out
   • Impacts
     • Data is sensitive, a competitor may gain from selling it
     • A possible infringement of the DPA if the lost data is included

3. Risks: Intential destruction of data

   • This is is generally seen as being motivated by a desire to harm the organisation that holds the data
   • Examples
     • computer virus
     • targeted mallisious attack
   • 2 options when the data is lost
     • data needs to me replaced
     • loss is ignored
   • Impacts
     • depends on the revelance of the data
     • Failure to comply with the DPA
     • loss of customer relations

4. Risk; Intentional tampering with data

   • Data is changed in some way, but still available
   • Examples
     • Fraudulent activity
     • Hacking
   • Impacts
     • Decisions made with data that's been tampered with are flawed
     • Negative edition on reputation of organisation - seen as having poor data security