
358 ◾ Appendix A
Issues with third-party support
requirements to fix problems could give
access to confidential or PII
Not adequately destroyed electronic
media may leave confidential or PII
available to unauthorized persons
Actual customer information could be
used on training templates causing
disclosure of confidential or PII
Employees may be overheard discussing
confidential or PII outside the office
Documents could be inadvertently
delivered to wrong person
Discussing confidential or PII loudly in
office allowing others to hear details
Use of the speakerphone may allow
confidential or PII to be overheard
Company could be subjected to
electronic eavesdropping ...