How To
Risk Assessment Tool: Application for Removable Device Media
An excerpt from the form that the City of London uses to decide whether or not to grant officers permission to download data onto portable media
Part 2: Benefits Assessment Scoring
When officers at the City of London police wish to download information onto a portable media device, they must file a formal application to do so. This is the form decision-makers use to evaluate the benefits of the proposed data download. (To read about how the police force uses the tool, see "How To Tell If That USB Download Is Really Worth the Security Risk.")
Benefits are less easy to quantify directly. Three areas should be considered in determining benefits:
|
Area |
Response |
Scoring |
|
Does the proposal directly save money or generate income for the force? |
The sale of material prepared in the force. |
Scale from 0-40 |
|
Does the proposal have a direct operational benefit? |
Improve communications, reduce staff hours, or eliminate re-entry of information. |
Scale from 0-60 |
|
Does the proposal put officers at risk? |
For instance of corruption. |
Yes Scale -50 to 0 |
Read on to see an excerpt of the City of London's risk/benefit comparison.
mobile
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



