In cases involving external individuals, it cannot be assumed that they will handle information and information technology according to the rules specified by the organisation they are visiting.
Visitors, cleaning staff, and third-party personnel can pose a threat to internal information, business processes, and IT systems in various ways, ranging from the improper handling of technical equipment and attempts to "play" with IT systems to the theft of documents or IT components.
Examples:
- Unaccompanied visitors can access documents, storage media, or equipment, damage these items, or extract sensitive information.
- Cleaners can accidentally loosen connectors, let water leak into equipment, misplace records, or dispose of them with the rubbish.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)