Outsources non-core business functions, including network hosting or management. Ability to create, deploy and enforce security policy is constrained. Strong need to protect critical online supply chains. Highly attractive target for hackers and industrial espionage. Business interruption carries significant financial losses, both in terms of customers and suppliers.
Senior management carries responsibility for liabilities and equity loss.
The potential financial loss and liability exposure from attack or misuse is limited, but security incidents will lead to difficulties in brand equity, consumer confidence and supply chain operations. Medium Risk Target provides a reasonable return for the effort required to compromise the information security infrastructure. Attack or misuse will result in significant financial loss and liability exposure. High Risk Target is a likely candidate for attack or misuse, either because of its high profile or the value of the information it contains. Successful attack or misuse will cause substantial financial loss and liability exposure.