Monday, June 18, 2018

InfoSec audits not conducted:

1.InfoSec audits not conducted:
2.Client files left out on the desk overnight
3.Inventory control and access control policies not followed
4.Record cabinets cannot be locked or are left unlocked.
5. Regular Firewall maintenance not conducted
6. Computer always left logged-in
7. Client personal data shared with everyone via email
8. Databases/systems not backed-up 
can you write 3 to 4 lines  threats,risks,countermeasures above every  points

No comments:

Post a Comment