~/Cedric

No incident monitoring to foresee malfunctions (trend charts) Vulnerabilities

Users poorly trained or not trained at all Vulnerabilities

The organisation's activity is impaired by its industrial relations Vulnerabilities

Lack of understanding of responsibilities Vulnerabilities

Conflictual situation between persons Vulnerabilities

No definition of privileges limiting the possibility of installing software on workstations Vulnerabilities

Obtaining an advantage through selling equipment Vulnerabilities

No detection system of malicious programs Vulnerabilities

What is the antivirus policy? Version updates? Antivirus definition updates? Update checks?

No awareness or information concerning copyright law Vulnerabilities

No substitute organisation for sensitive functions Vulnerabilities