{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Awareness & Training","Data Protection & Privacy"],"inherent_rating":"medium","taxonomy":["iso-27005-vulnerability"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aaware-no-acceptable-use-policy","description":"Because acceptable-use policies for email, messaging, and telecommunication services are absent, personnel use insecure channels without guidance, so sensitive information is inadvertently or deliberately disclosed through unsanctioned communications.","details":{"category":"cyber_security","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"aware-no-acceptable-use-policy","taxonomies":["iso-27005-vulnerability"],"treatment":"mitigate"},"id":"risk:aware-no-acceptable-use-policy","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aaware-no-acceptable-use-policy","sourceIds":["iso-27001","nist-800-53","nist-csf-2","nydfs-500","sox"],"sourceUrl":null,"title":"No acceptable-use policy for messaging and telecoms","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:06caba359dc2d65a4c9d56804c34395ff5e555522dff95ca64b630e97981f249","properties":{"rationale":"Training on safe use of email/messaging gives the guidance that reduces inadvertent disclosure via insecure channels even absent a formal AUP.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-train-01-5f513831.json","sourceId":"uc:UC-TRAIN-01","targetDetailPath":"/data/v1/records/risk-aware-no-acceptable-use-policy-e874ca5c.json","targetId":"risk:aware-no-acceptable-use-policy","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0b12f962c7cc946d84a55d30bfc4421c097d291249fa8b3bfdfd1fc507fb4729","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-train-04-48d1a2b1.json","sourceId":"uc:UC-TRAIN-04","targetDetailPath":"/data/v1/records/risk-aware-no-acceptable-use-policy-e874ca5c.json","targetId":"risk:aware-no-acceptable-use-policy","type":"mitigates"}],"schemaVersion":1}