IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 5.2 Manipulation of data or software
There are a number of ways in which data or software can be manipulated:
through incorrect data acquisition, changes to access rights, modification of
accounting data or of correspondence, changes to the operating system
software etc. A perpetrator can only manipulate data and software to which he
has access. The more access rights a person has, the more serious
manipulations he will be able to carry out. If such manipulations are not
detected in time, smooth IT operations may be seriously impaired.
Data or software can be manipulated out of revenge, to intentionally create
some damage, to obtain personal gains or for financial reasons.
Example:
In 1993, the software used for specific financial services of a Swiss financial
institution was manipulated by a staff member. This made it possible for him
to obtain sizeable amounts of money illegally.
It is a by no means uncommon occurrence for customer databases to be copied
by staff on leaving a company. Other risks include the malicious destruction
of databases or threatening to destroy databases.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000