Underärenden
| Rubrik | Beskrivning |
|---|---|
| Revenue Loss | The organization experiences reduced current or future revenue because a control deficiency disrupts operations: (1) Causes customer loss; (2) Prevents sales; and/or (3) Otherwise impairs revenue-generating activity. |
| Contractual Default / Termination | The organization breaches, defaults on, loses, terminates or fails to renew a contract because it cannot meet required security, data privacy, compliance, resilience and/or performance obligations. |
| Loss of Competitive Advantage | The organization loses market position, strategic differentiation, intellectual advantage or customer preference because a control deficiency (1) Exposes data; (2) Disrupts performance; and/or (3) Weakens stakeholder confidence. |
| Reputational Harm / Loss of Stakeholder Trust | Customers, partners, regulators, investors, employees or the public lose confidence in the organization, resulting in: (1) Reputational damage; and/or (2) Diminished brand value. |
| Regulatory / Legal / Contractual Financial Liability | The organization incurs fines, penalties, judgments, remediation, settlements, damages, indemnification costs or other financial liability due to legal, regulatory or contractual noncompliance. |
| Exposure from Unaddressed Vulnerabilities | Known Exploited Vulnerabilities (KEV) remain exploitable because they are not remediated, mitigated or otherwise addressed, increasing exposure to compromise. |
| System / Service Compromise | Technology Assets, Applications and/or Services (TAAS) are compromised, resulting in loss of confidentiality, integrity, availability, authenticity and/or safety. |
| Revenue Loss | The organization experiences reduced current or future revenue because a control deficiency disrupts operations: (1) Causes customer loss; (2) Prevents sales; and/or (3) Otherwise impairs revenue-generating activity. |
| Contractual Default / Termination | The organization breaches, defaults on, loses, terminates or fails to renew a contract because it cannot meet required security, data privacy, compliance, resilience and/or performance obligations. |
| Loss of Competitive Advantage | The organization loses market position, strategic differentiation, intellectual advantage or customer preference because a control deficiency (1) Exposes data; (2) Disrupts performance; and/or (3) Weakens stakeholder confidence. |
| Reputational Harm / Loss of Stakeholder Trust | Customers, partners, regulators, investors, employees or the public lose confidence in the organization, resulting in: (1) Reputational damage; and/or (2) Diminished brand value. |
| Regulatory / Legal / Contractual Financial Liability | The organization incurs fines, penalties, judgments, remediation, settlements, damages, indemnification costs or other financial liability due to legal, regulatory or contractual noncompliance. |
| Exposure from Unaddressed Vulnerabilities | Known Exploited Vulnerabilities (KEV) remain exploitable because they are not remediated, mitigated or otherwise addressed, increasing exposure to compromise. |
| System / Service Compromise | Technology Assets, Applications and/or Services (TAAS) are compromised, resulting in loss of confidentiality, integrity, availability, authenticity and/or safety. |
| Failure to Achieve Strategic / Mission Objectives | A control deficiency materially prevents, delays or degrades the organization's ability to achieve strategic, mission or program objectives. |
| Intellectual Property / Trade Secret Loss | The strategic or competitive value of proprietary data, trade secrets, research, designs, source code or other Intellectual Property (IP) is reduced when it is: (1) Improperly disclosed; (2) Stolen; (3) Copied; and/or (4) Rendered non-exclusive, |
| Fraud / Theft / Direct Financial Loss | The organization or its stakeholders suffer direct monetary loss through: (1) Fraud; (2) Theft; (3) Unauthorized transactions; (4) Diversion of funds; or (5) Other financially harmful activity. |
| Loss of Authorization / Certification / License | The organization loses or is unable to obtain or maintain an authorization, certification, accreditation, license or other permission required to operate, sell, contract or access a market. |
| Revenue Loss | The organization experiences reduced current or future revenue because a control deficiency disrupts operations: (1) Causes customer loss; (2) Prevents sales; and/or (3) Otherwise impairs revenue-generating activity. |
| Contractual Default / Termination | The organization breaches, defaults on, loses, terminates or fails to renew a contract because it cannot meet required security, data privacy, compliance, resilience and/or performance obligations. |
| Loss of Competitive Advantage | The organization loses market position, strategic differentiation, intellectual advantage or customer preference because a control deficiency (1) Exposes data; (2) Disrupts performance; and/or (3) Weakens stakeholder confidence. |
| Reputational Harm / Loss of Stakeholder Trust | Customers, partners, regulators, investors, employees or the public lose confidence in the organization, resulting in: (1) Reputational damage; and/or (2) Diminished brand value. |
| Regulatory / Legal / Contractual Financial Liability | The organization incurs fines, penalties, judgments, remediation, settlements, damages, indemnification costs or other financial liability due to legal, regulatory or contractual noncompliance. |
| Exposure from Unaddressed Vulnerabilities | Known Exploited Vulnerabilities (KEV) remain exploitable because they are not remediated, mitigated or otherwise addressed, increasing exposure to compromise. |
| System / Service Compromise | Technology Assets, Applications and/or Services (TAAS) are compromised, resulting in loss of confidentiality, integrity, availability, authenticity and/or safety. |
| Failure to Achieve Strategic / Mission Objectives | A control deficiency materially prevents, delays or degrades the organization's ability to achieve strategic, mission or program objectives. |
| Intellectual Property / Trade Secret Loss | The strategic or competitive value of proprietary data, trade secrets, research, designs, source code or other Intellectual Property (IP) is reduced when it is: (1) Improperly disclosed; (2) Stolen; (3) Copied; and/or (4) Rendered non-exclusive, |
| Fraud / Theft / Direct Financial Loss | The organization or its stakeholders suffer direct monetary loss through: (1) Fraud; (2) Theft; (3) Unauthorized transactions; (4) Diversion of funds; or (5) Other financially harmful activity. |
| Loss of Authorization / Certification / License | The organization loses or is unable to obtain or maintain an authorization, certification, accreditation, license or other permission required to operate, sell, contract or access a market. |
| Revenue Loss | The organization experiences reduced current or future revenue because a control deficiency disrupts operations: (1) Causes customer loss; (2) Prevents sales; and/or (3) Otherwise impairs revenue-generating activity. |
| Contractual Default / Termination | The organization breaches, defaults on, loses, terminates or fails to renew a contract because it cannot meet required security, data privacy, compliance, resilience and/or performance obligations. |
| Loss of Competitive Advantage | The organization loses market position, strategic differentiation, intellectual advantage or customer preference because a control deficiency (1) Exposes data; (2) Disrupts performance; and/or (3) Weakens stakeholder confidence. |
| Reputational Harm / Loss of Stakeholder Trust | Customers, partners, regulators, investors, employees or the public lose confidence in the organization, resulting in: (1) Reputational damage; and/or (2) Diminished brand value. |
| Regulatory / Legal / Contractual Financial Liability | The organization incurs fines, penalties, judgments, remediation, settlements, damages, indemnification costs or other financial liability due to legal, regulatory or contractual noncompliance. |
| Exposure from Unaddressed Vulnerabilities | Known Exploited Vulnerabilities (KEV) remain exploitable because they are not remediated, mitigated or otherwise addressed, increasing exposure to compromise. |
| System / Service Compromise | Technology Assets, Applications and/or Services (TAAS) are compromised, resulting in loss of confidentiality, integrity, availability, authenticity and/or safety. |
| Failure to Achieve Strategic / Mission Objectives | A control deficiency materially prevents, delays or degrades the organization's ability to achieve strategic, mission or program objectives. |
| Intellectual Property / Trade Secret Loss | The strategic or competitive value of proprietary data, trade secrets, research, designs, source code or other Intellectual Property (IP) is reduced when it is: (1) Improperly disclosed; (2) Stolen; (3) Copied; and/or (4) Rendered non-exclusive, |
| Fraud / Theft / Direct Financial Loss | The organization or its stakeholders suffer direct monetary loss through: (1) Fraud; (2) Theft; (3) Unauthorized transactions; (4) Diversion of funds; or (5) Other financially harmful activity. |
| Loss of Authorization / Certification / License | The organization loses or is unable to obtain or maintain an authorization, certification, accreditation, license or other permission required to operate, sell, contract or access a market. |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.