Re: risk assessment - non electronic data

[Alexander Swensen <alex.swensen () gmail com>]

On Wednesday 01 October 2008 10:20:34 am s0h0us () yahoo com wrote:
> Hello everyone,
> I'm looking for some advice on performing information security risk
> assessments for non-electronic data (hardcopy instances of confidential
> information). I've going through the process of identifying confidential
> documents, and verifying that it is securely stored...anything else I
> should be doing? thanks in advance


If they are stored under lock and key, make sure its a quality lock. Its not 
hard to pick a junk file cabinet lock.