risk
No acceptable-use policy for messaging and telecoms
Because acceptable-use policies for email, messaging, and telecommunication services are absent, personnel use insecure channels without guidance, so sensitive information is inadvertently or deliberately disclosed through unsanctioned communications.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Awareness & Training
- Data Protection & Privacy
- taxonomy
- iso-27005-vulnerability
- inherent_rating
- medium
Details
- risk_id
- aware-no-acceptable-use-policy
- category
- cyber_security
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-vulnerability
Source
No record-specific source URL is provided.
Connections
- UC-TRAIN-01 — Deliver security awareness training to all personnel mitigates No acceptable-use policy for messaging and telecoms
- strength
- related
- rationale
- Training on safe use of email/messaging gives the guidance that reduces inadvertent disclosure via insecure channels even absent a formal AUP.
- UC-TRAIN-04 — Communicate control responsibilities and reporting channels mitigates No acceptable-use policy for messaging and telecoms
- strength
- related
- rationale