
122 Enterprise Business Portals II with IBM Tivoli Access Manager
that it is designed to avoid. For IMC’s employee portal, the following threats are
identified and have to be considered when designing the architecture:
Unauthorized access to IMC’s design plans for future vehicles could result in
industrial espionage.
Disgruntled employees could destroy or alter information.
Unauthorized access to confidential information about employees.
In 4.10.6, “Performing risk assessment” on page 166, we describe the risk
management approach in the example of IMC’s proof of concept implementation.
4.7 Security design objectives
Improving IMC’s security ...