Risk Possible Impact Mitigations
Information Security
The information the company
holds can be leaked, tampered with
or disregarded if not understood
by the staff the security it needs.
This can compromise the personal
information of customers, vendors,
staff other companies the company
works on projects with. This can
lead to loss of profit, reputation
and trusting employees.
The company will clearly lay out
how private information
pertaining to how to treat it and
handle this kind of information. It
will also explain the importance
of why it needs to be conducted
in this manner. The expectations
of what will happen if there is a
breach of information will also be
laid out.
Unclear expectations and
policies
When a company does not have its
expectations clearly outlined via
rules and or policies, it is easy for
them to be violated and
misunderstood. If this is not done
well, it will lead to technology
safety issues.
The company will have a clear
handbook for all staff that has the
policy clearly laid out. This
handbook will also have the rules
staff need to adhere to, along with
the consequences if not followed.
Leadership Adherence
If leadership is not leading by
example by following the policies,
procedures and rules, the
employees that they oversee will
not take the safety and security
measures seriously, which will
lead to security breaches.
Consequences will be laid out
clearly to leadership so they are
aware of the expectations on how
they should be conducting
themselves when it comes to the
policies, procedures and rules.
Terminated Employees
When a person's employment has
ended with the company, but
management and security fail to
terminate their access, there are
many security risks involved. The
private information the company
hold is at risk of being leaked. The
finances are at risk of being
violated. The safety of the staff is
at risk if the former employee is
disgruntled.
The terminated employee's
supervisor will be responsible for
terminating all of their accesses,
along with the head of the
technology will remove all
accesses to the network and all
other things that the department
controls. Having two people
responsible for making sure
access is terminated it will not be
easily missed or forgotten.
