Many businesses today exchange goods, services, information and knowledge using network-enabled technologies. Within such businesses, proper protection of confidential information is essential to achieving desired benefits and mitigating their associated risks. Failure to adequately restrict access to critical business information from outsiders (intruders) may result in unauthorized knowledge and use of confidential information by inappropriate parties.

This tool outlines the business risks associated with inappropriate access to systems, data or information, suggests best practices to counter these risks, and shares questions to consider.