For example, if competitors hacked into a company's data base and deleted customer records, a significant loss of revenues could result. Users must be able to trust that data are accurate and complete. Disclosure of Information Probably the most serious attack is disclosure of information. If the information taken off a system is important to the success of an organization, it has considerable value to a competitor. Corporate espionage is a real threat, especially from foreign companies, where the legal reprisals are much more difficult to enforce.
Insiders also pose a significant threat.
Limiting user access to the information needed to perform specific jobs increases data security dramatically.