IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 2.9 Poor adjustment to changes in the use of IT
The rules created for IT applications and the application environment are
subject to permanent change. This is due to changes in the staff, moving of
employees to different rooms, usage of new hardware or software, or changes
in the supply chain. The following examples show that risks may be incurred
if the required organisational adjustments are not properly taken account of:
- Staff members forget to transfer the necessary file access rights to the
person who is to take over from them while they are on holiday. This can
cause delays in IT operations.
- On account of alterations to a building, changes are made to the previous
escape routes. Due to insufficient information provided to the staff, the
building cannot be evacuated within the required time.
- When an IT procedure is modified, a large quantity of printing paper will
be required. If the procurement unit is not informed, continuity of IT
operations and service will be impaired.
- On their arrival, electronic documents are not scanned automatically for
macro viruses, as this problem is not known yet, or no virus scanning
programs are available.
- Before electronic documents are transferred, no care is taken to ensure that
they have been stored in a format which is readable by the recipient.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000