SB094 Does not use personal devices for work unless authorised to do so
Has separate work and personal devices. Only uses personal devices for work if authorised by the employer, using measures highlighted in the database. Working with sensitive corporate information on personal devices poses security risks as this information can be maliciously used if the device is breached or lost or stolen. Personal devices are also not a part of the corporate network and having a company's Intellectual Property on them can be a breach of GDPR.
Personal devices typically have basic protection unless paid for, usually provided by the manufacturer. Not using a personal device for work prevents potentially sensitive information being stolen from a device more susceptible to compromise.
Behaviours in SebDB are ranked by their impact on risk. Tier 1 behaviours have the biggest impact, Tier 4 behaviours the least.
A privacy violation occurs when an unintended person learns about someone elses private information.
Data theft is the intentional stealing of data.
A data leak is when data is accidentally or intentionally disclosed to unauthorised people.