Content Comparison

1

Client Data Breach

A data breach may occur in one of our client’s software environments which may result in exposure of critical information.

• A.9.1.1

• A.5.1.1

• Run Salesforce Health Checks

• Report to Authorities

2

Staff Breach

A staff member may expose critical data from a client’s software environment which could then be published.

• A.7.1.1

• A.7.2.2

• A.7.2.3

• Employee Induction

• Management Reviews

3

Hardware Loss

We may experience the failure of our hardware (primarily work laptops) which could result in loss of critical information to perform our duties.

Information Continuity

4

Software Failures

Software we use might fail; this could include either Salesforce or other key services.

• Information Continuity

5

Employee Fraud

An employee might defraud Vertic but stealing critical information.

• A.7.1.1

• A.7.1.2

• Employment Agreements

• IT Policy

• Report to Authorities

6

Employee Injury

An employee might get injured whilst performing their duties for Vertic.

• Information Continuity

7

Natural Disaster

A natural disaster might strike impacting our geographic area.

• Information Continuity

8

Software Development Standard Breach

An employee or contractor might breach our development standards.

• Development Standards

• Internal Audit

• Salesforce Health Checks

9

Physical Security Breach

An employee or contractor might breach physical security policies, such as leaving laptops unattended.

• A.6.2.2

• Physical Security Policy

10

Contractural Relations Breach

A supplier might breach their contractural obligations with Vertic.

• Supplier Review

• Management Review

11

Damage caused by Third Party

A third party, such as visitors, might cause physical or virtual damage to critical Vertic assets.

• A.6.1.3

• A.6.1.4

• Information Continuity

• Supplier Engagement

12

Malicious Code

An employee or contractor might deliberately produce malicious code.

• Development Standards

• Health Checks

13

Equipment Theft

An employee might defraud Vertic but stealing critical hardware infrastructure or laptops.

• A.6.2.1

• Information Continuity

14

Sensitive Data Threat

Sensitive data might be under threat outside of Vertic’s control.

• A.6.2.1

• Report to Authorities

15

Security Information System Failure

Our VQMS processes might fail resulting in critical data exposure and/or loss.

• A.5.1.1

• A.5.1.2

• A.6.1.1

• A.6.1.2

• A.6.1.5

• A.7.2.1

• Information Continuity

• Employee Induction

• Roles and Responsibilities

16

Production Data Loss

Whilst performing our duties, we might experience production data loss.

• A.8.2.1

• A.8.2.2

• A.8.3.2

• A.8.3.3

• IT Policy

• Information Security Policy