risk
No acceptable-use policy for messaging and telecoms
Because acceptable-use policies for email, messaging, and telecommunication services are absent, personnel use insecure channels without guidance, so sensitive information is inadvertently or deliberately disclosed through unsanctioned communications.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Awareness & Training
- Data Protection & Privacy
- taxonomy
- iso-27005-vulnerability
- inherent_rating
- medium
Details
- risk_id
- aware-no-acceptable-use-policy
- category
- cyber_security
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-vulnerability
Source
No record-specific source URL is provided.
Connections
- UC-TRAIN-01 — Deliver security awareness training to all personnel mitigates No acceptable-use policy for messaging and telecoms
- strength
- related
- rationale
- Training on safe use of email/messaging gives the guidance that reduces inadvertent disclosure via insecure channels even absent a formal AUP.
- UC-TRAIN-04 — Communicate control responsibilities and reporting channels mitigates No acceptable-use policy for messaging and telecoms
- strength
- related
- rationale