Get startedGet started for free

Threats: Data misuse, privacy violations, sensitive content

1. Threats: Data misuse, privacy violations, sensitive content

Let’s now consider threats involving the threat of data misuse, privacy violations, and the exposure of sensitive content. These have serious business implications, not least of which is the high monetary cost associated with data recovery and possible litigation, criminal prosecution and fines when user privacy rights have been breached. Reducing the risk of this type of threat is therefore highly important, but difficult to manage and often resource-intensive for many organizations. Data misuse is the inappropriate use of any type of data (especially user data). The consequences can be as serious as to cause legal or regulatory violations, or it can result in using the data in a way that was not intended when originally collected. Data misuse can happen in many ways. One example is exposing sensitive content when an application accidentally displays an entire credit card number instead of just the last four digits. Another example is when screenshots that contain sensitive data are accidentally created, and then made public, without redaction. Allowing access to restricted content is another type of data misuse. This occurs when a user is able to access sensitive or restricted data, due to faulty permissions or inadequate server security. Inadvertently making unacceptable content public is something that may happen when users are allowed to provide public-facing content, such as reviews, images, or videos, without any additional oversight. Accidentally exposing sensitive data, even when the data loss appears to be restricted to just a small violation, can still have huge additional ramifications. the end result may still be a loss of credibility for the organization, identity theft for its users and customers, and… legal or regulatory action and fines.

2. Let's practice!

Create Your Free Account

or

By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.