Coercion, blackmail or corruption may lead to the impairment of the security of information or business processes. Through the threat of violence or other disadvantages, an attacker may for example try to force the victim to ignore security policies or bypass security safeguards (coercion).

Instead of threatening, attackers may also specifically offer money or other advantages in order to make employees or other people their instruments for carrying out security violations (corruption). For example, there is the risk that a corruptible employee may forward confidential documents to unauthorised persons.

In principle, coercion or corruption can impair all fundamental information security values. Amongst other things, attacks may seek to forward confidential information to unauthorised persons, manipulate business-critical information or disrupt the smooth operation of business processes.

There is a particularly high risk if these attacks are directed against senior managers or people in positions of special trust.

Lingitud teemad

Lingid
is blocked by CON.7.A13 Transporting Necessary Data and Storage Media [User] (S)
is blocked by CON.7.A17 Use of Dedicated Travel Hardware [IT Operation Department] (H)
is blocked by OPS.1.1.2.A3 Controlled Hiring of IT Administrators (B)
is blocked by OPS.1.1.2.A4 Termination of IT Administration Duties [Human Resources Department] (B)
is blocked by OPS.1.1.2.A15 Division of Administrative Activities (H)
is blocked by OPS.1.1.2.A17 Dual Control in IT Administration (H)
is blocked by OPS.2.1.A16 Security Vetting of Employees (H)
is blocked by OPS.2.2.A19 Security Vetting of Employees [Human Resources Department] (H)
is blocked by SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B)
is blocked by SYS.3.2.3.A12 Using Apple IDs (S)
is blocked by SYS.3.2.3.A25 Using the Configuration Option for AirPrint (H)
is blocked by SYS.3.2.3.A26 No Connections to Host Systems (H)
is blocked by NET.1.2.A37 Time Synchronisation Across Locations (H)