A practical approach for risk assessment of data leakage prevention in telecommunication industry

摘要

recently more incidents caused by improper data leakage prevention have occurred in many organizations which have been suffering a huge loss. The study of data leakage prevention is receiving considerable attention for reasons of privacy protection of personally identifiable information, preservation of an organization's brand and reputation, retention of intellectual capital. It is very challenging for senior management in telecommunication industry to identify, analyze and properly treat the data leakage risks due to the complexity and diversities of business process and supportive information systems. In this paper a practical method of risk assessment aimed to analyze and evaluate the risks of data leakage protection related to customer information in telecommunication company is presented, and the distribution view and transition view have been defined to describe and analyze the customer information which provides the basis for the risk assessment. A group of technical tests are proposed to find and verify the risky vulnerabilities which have been identified based on the method.