~/Cedric

Maintenance contract monitoring not organised Vulnerabilities

No operational qualification procedures Vulnerabilities

No measures in the event of interruption of air-conditioning service Vulnerabilities

No monitoring of maintenance contracts for fire-fighting equipment Vulnerabilities

Possibility of using the organisation's resources without supervision (self-service equipment, etc.) Vulnerabilities

The security responsibilities concerning authorisation management are not formalised. Vulnerabilities

No continuity clause for service provision Vulnerabilities

No contractual clauses concerning the use of fraudulent copies of software Vulnerabilities

No procedure for checking work carried out by external personnel on the organisation's equipment Vulnerabilities

No instructions aimed at eliminating risk-inducing behaviour in the use of information resources Vulnerabilities