Exin Information Security Foundation based on ISOIEC 27002

The Annual Loss Expectancy is the amount of damage that can occur as a result of an incident during the year. The Annual Loss Expectancy is the size of the damage claims resulting from not having carried out risk analyses effectively. The Annual Loss Expectancy is the average damage calculated by insurance companies for businesses in a country. The Annual Loss Expectancy is the minimum amount for which an organization must insure itself.

Segregation of duties makes it clear who is responsible for what. Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud. Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change beunauthorized or unintentional. Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

If the risk analysis has not been carried out. When computer systems are kept in a cellar below ground level. When the computer systems are not insured. When the organization is located near a river.