2023-01 Mobile device lost

Asset	Confidential information stored on (or accessible through) mobile devices
Threat	A laptop, tablet or phone is lost and confidential information (source code, e-mail, customer details) gets into wrong hands.
Category	CONFIDENTIALITY
Likelihood	M
Impact	L
Exposure	L
Owner	Management

Treatment	ACCEPT
Measures	Create an Endpoint device policy (A.8.1 User endpoint devices) Create a Cryptography policy (A.8.24 Use of cryptography) Create rule to report loss of devices in Code of conduct (A.6.8 Information security event reporting)
Residual exposure	L
Responsible	Security officer

The exposure is expressed as a factor of the likelihood and impact.

Likelihood / Impact	High	Medium	Low
High	H	H	M
Medium	H	M	L
Low	M	L	L

Click here to see the definitions of likelihood and impact

Likelihood	Description	Frequency
Low	It is not likely to materialize It has never happened to organizations similar to ours	Less than once per year
Medium	It is likely to materialize It has happened to organizations similar to ours	Once or twice per year
High	It is very likely to materialize It has happened to our organization before	Multiple times per year

Impact	Description	Financial	Personal health	Reputation	Legal
Low	Some data or information is not accurate or available Small amounts of non-sensitive personal data leaked Small damage or consequences	Below € 10.000	One person experiences inconvenience	Incidental (local) media attention	A possible claim
Medium	Most data or information is not accurate or available Large amounts of non-sensitive personal data leaked Considerable damage or consequences	Between € 10.000 and € 50.000	Multiple persons experience inconvenience, one person suffers an injury	Incidental nationwide media attention or frequent local media attention	A lawsuit, multiple claims
High	Most or all data or information is not accurate or available Large amounts of sensitive personal data leaked Large damage or consequences for the continuity of the organization	Above € 50.000	Multiple persons suffer injuries, fatal consequences	Frequent nationwide media attention	Multiple lawsuits