6.3 - Impacts for if risk to data occurs

Question 1

List the impacts

Answer 1

• loss of intellectual property
• loss of service and access
• breach of confidential information/failure in security of confidential information
• loss of info belonging to third party
• loss of reputation
• threat to national security

Question 2

Loss of intellectual property

Answer 2

Anything an organisation/individual has created/designed themselves.

Example:
For individual - artwork, music, manuscript…etc

For organisation - primary data they have collected themselves for a new design / or a report for following analysis.

Impact:
- Competitors can use it to their advantage.

• The engagement in an upcoming announcement would decrease because its already was leaked before it got released (e,g music being leaked before it got released)

Question 3

Loss of service and access

Answer 3

If usernames + passwords stolen, individuals cannot access services they have already paid for /. or are using such as Wifi

Targeted malicious attacks on services could lead to DDOS attack so users cannot log into a web page or online service

Question 4

Failure in security of confidential information

Answer 4

If confidential information breached - lead to a loss of reputation as holder would be regarded as unreliable in protecting data — DPA broken.

Confidential info should be stored securely with physical / logical measures to keep integrity

Question 5

Loss of information belonging to third party

Answer 5

Example: cloud storage providers. If this service is hacked/unauthorised access - customers will be not happy, loss of reputation, legal action if sensitive data is lost.

Question 6

Loss of reputation

Answer 6

Failure to keep data safe - organisation cannot keep information secure, leading to loss of customers as customers can then choose their competitors, leading to a decline in sales.

Question 7

Threat to national security

Answer 7

If data that is related to government plans/millitary arrangements is lost, through unauthorised access this could be harmful to the country.

spies from foreign countries/terrorists can use classified info to target vulnerable locations or target them economically by stealing large amounts of money.

Question 8

Recent case of failures and information security