ES3 - Dispossession

Assets

The assets that need to be protected in order to prevent the impact caused by this event are:

• sensitive information

The principal threat agents are:

• employees, etc.

Vulnerabilities

The vulnerabilities that might be exploited are:

• information containers are not particularly heavy and can be easily moved, etc.

Impacts

The primary impacts of such an event are:

• Loss of the monetary value of assets (LMV), etc.

Consequential impacts are:

• Unanticipated costs, etc.

Risk treatment plan

ES3.1a Precautions

We take precautions against fire, floodadd other environmental hazards as appropriate, <<>>, wilful damage and theft for all physical information containers, whether within our scope of control, outside of it (whilst travelling and working away form the office on a temporary or extended basis) or in transit (in person or by courier or post). We know what our assets are, where they are and who is responsible for them. We require our employees and contractors to return them when requested to do so. Nevertheless it is still possible that such containers may be damaged or destroyed by fire, floodadd the same environmental hazards as above, <<>>,stolen, lost or misappropriated (e.g. lost in the post). Containers may also be deliberately discarded or reused by someone who is not permitted to see the original contents.

Risk assessment

Circumstance	LMV		ICB		UDI
	Likelihood of impact	Magnitude	Likelihood of impact	Magnitude	Likelihood of impact	Magnitude
Loss
Theft (from office premises)
THE TABLE CONTINUES LOOK AT THE VARIOUS EVENT-CIRCUMSTANCE-IMPACT COMBINATIONS. NOTE THAT NOT ALL COMBINATIONS ARE POSSIBLE. FOR EXAMPLE LOSS OF THE MONETARY VALUE OF A CONTAINER THAT IS DISPOSED OF IS NOT CONSIDERED AS THE DISPOSAL IS A DELIBERATE ACTION AND THE VALUE OF THE ITEM WILL HAVE BE WRITTEN OFF.
Disposal and reuse	N/A		N/A