Security Breaches

The fraudulent attempt to obtain sensitive information such as usernames, passwords and credit card details by disguising oneself as a trustworthy entity in an electronic communication.

• Physical theft/exposure

• Phishing

• Insider threat

• Ransomware

Something as simple as including the wrong person in the Cc field of an email or attaching the wrong document to an email could cause a data breach.

• Employee negligence/error

• Cyber attack/criminal hacker

• Unauthorised access

• Physical theft/exposure

It can come in various forms, including denial of service, malware and password attacks.

• Employee negligence/error

• Cyber attack/criminal hacker

• Unauthorised access

• Physical theft/exposure

A breach of these controls means that someone has gained unauthorised access to sensitive data, such as bank details stored by HR, or potentially compromised business critical information.

• Employee negligence/error

• Cyber attack/criminal hacker

• Unauthorised access

• Physical theft/exposure

This type of data breach can be caused by improper disposal of sensitive information, or simply leaving a confidential document in plain sight.

• Employee negligence/error

• Cyber attack/criminal hacker

• Unauthorised access

• Physical theft/exposure

It is a type of malicious program that demands payment after launching a cyber attack on a computer system.

• Ransomware

• Cyber attack/criminal hacker

• Unauthorised access

• Physical theft/exposure

It is a malicious threat to an organization that comes from people within the organization, such as employees, former employees, contractors or business associates, who have inside information concerning the organization's security practices, data and computer systems.

• insider threat

• Cyber attack/criminal hacker

• Unauthorised access

• Physical theft/exposure