Risks

New risk

Risk matrix 4 Critical 13 High 10 Medium 0 Low

Status:

Category:

Band: High Clear band filter Clear filters

Code

Title

Inherent

Residual

Status

Category

Requirements

RSK-003

Loss of customer backup data in a data centre failure

2 × 5 = 10

1 × 4 = 4

Mitigated

Operational

RSK-006

Misconfigured customer firewall exposes an internal service

3 × 4 = 12

2 × 3 = 6

Treating

Operational

RSK-007

Unauthorised access to the privileged credential vault

2 × 5 = 10

1 × 4 = 4

Mitigated

Technological

RSK-008

Failure of a colocation provider

3 × 4 = 12

2 × 4 = 8

Treating

Supplier

RSK-010

One engineer holds the knowledge of a customer platform

4 × 3 = 12

3 × 3 = 9

Treating

People

RSK-011

Departing employee keeps access to customer systems

3 × 4 = 12

1 × 3 = 3

Mitigated

People

RSK-012

Late patching of customer endpoints

4 × 3 = 12

2 × 2 = 4

Treating

Technological

RSK-013

Personal data in service desk tickets is handled carelessly

3 × 4 = 12

2 × 3 = 6

Treating

Compliance

RSK-014

A personal data breach is not reported within 72 hours

2 × 5 = 10

No value

Open

Compliance

RSK-021

Incident reporting duties under the Cbw are not met

3 × 4 = 12

2 × 3 = 6

Treating

Compliance

RSK-022

Insufficient monitoring coverage on customer networks

3 × 4 = 12

2 × 3 = 6

Treating

Operational

RSK-024

Unpatched firmware on network equipment

4 × 3 = 12

2 × 3 = 6

Treating

Technological

RSK-030

Misuse of customer data by staff

2 × 5 = 10

1 × 4 = 4

Accepted

People

13 total

Page 1 of 1

Risks

Are you sure?

Leave this page?