Misconduct on the part of individuals can result in sensitive information being passed on without permission. Confidential information could be discussed within earshot of outsiders— for example, while chatting during a break at a conference or talking on a mobile telephone in a public place. It is equally conceivable that the supervisor of a department might suspect an employee of collaborating with the competition. In order to prove it, the supervisor asks the head of the IT Operation Department to provide "unofficial" access to the employee's e-mails. The head of the IT Operation Department instructs the e-mail administrator to set up this access without obtaining the necessary approval.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)