~/Cedric

7f9fc0c0-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Eavesdropping. Vulnerability: No access monitoring device when equipment is inactive

7f9fbd9b-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Software malfunction. Vulnerability: No report for maintenance operations

7f9fc02e-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Data from untrustworthy sources. Vulnerability: Software retrieval from a non-authenticated source

7f9fbe28-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Breach of information system maintainability. Vulnerability: No maintenance procedure

7f9fbfb9-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Saturation of the information system. Vulnerability: No filter to protect the system against saturation

7f9fc1c0-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Server. Threat: Equipment malfunction or failure. Vulnerability: No service level management

7f9fc135-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Server. Threat: Abuse of rights. Vulnerability: The principle of least privilege is not applied

7f9fc2a8-4f02-11e9-b3ea-0800277f0571 Risks

Asset: IT Organization. Threat: Breach of information system maintainability. Vulnerability: No organisation for management of security incidents

7f9fc333-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Network. Threat: Eavesdropping. Vulnerability: Wireless network connections are poorly managed

7f9fbcca-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Breach of information system maintainability. Vulnerability: Documentation not up to date