~/Cedric

7f9fbd55-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Breach of information system maintainability. Vulnerability: Applications are not checked before installation

7f9fbfe8-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Corruption of data. Vulnerability: The remote maintenance link is permanently activated

7f9fbdc9-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Software malfunction. Vulnerability: No passing up of information for a centralised malfunction analysis

7f9fbf59-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Saturation of the information system. Vulnerability: Requirements defined for a project without taking into account special situations that put the system under limit conditions.

7f9fc179-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Server. Threat: Forging of rights. Vulnerability: Possibility of remote system administration

7f9fc0ef-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Business application. Threat: Remote spying. Vulnerability: Password for accessing the system or application changed rarely or not at all

7f9fc27a-4f02-11e9-b3ea-0800277f0571 Risks

Asset: IT Organization. Threat: Theft or destruction of media, documents or equipment. Vulnerability: Physical access authorisations are not checked regularly

7f9fc1ee-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Server. Threat: Malware infection. Vulnerability: Lack of a system hardening policy

7f9fc2d7-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Network. Threat: Eavesdropping. Vulnerability: No partitioning of communication networks

7f9fc363-4f02-11e9-b3ea-0800277f0571 Risks

Asset: IT Room or Datacenter. Threat: Theft or destruction of media, documents or equipment. Vulnerability: The principle of least privilege is not applied