Problem
As you begin to think about the new data that the sales team wants to collect, you recall that you were recently asked to complete an IT asset inventory. In addition to the age of its IT assets, you recall from the inventory exercise that the company owns workstations and laptop computers for all employees and that there are no authentication controls on any of those devices. You know that employees often take their laptop computers home or to other locations to work remotely. You know that employees often email company information to their personal email accounts so that they can work from their personal devices. IT employees have also been known to access company customer databases over the internet to solve problems if there is an issue with customer account access or the company website is down.
I. Identify five to seven potential risks to the security of the data that the company already collects from customers.
II. Identify three to five measures that the company could take to better protect the data it collects. These measures can be administrative or technical in nature.