Stone Group banner

Stone Group

Threat

Low
Casual or opportunistic threat actor only able to mount unsophisticated attacks.
Medium
Motivated, targeted threat actor such as organised crime or journalists or hackers applying professional methods to access the physical device and / or data.
High
Government-sponsored organisations using sophisticated techniques with unlimited time and resources to access the physical device and / or data.

Risk Appetite

Low
All results must lead to no further actions or risk treatments.
Medium
Additional risk treatments are available but at additional cost.
High
Most cost-effective risk management approach which manages risk but has recommendations for additional risk treatments.

Categories Of Data

Low
Non-confidential data which might be available in the public domain.
Medium
Personal Data and Corporate Data.
High
Same as (2) but including special category and / or corporate secret data.

Volume Of Data

Low
A known number of data carrying media are being disposed of which contains a total of under 10Tb of overall capacity of storage.
Medium
A known number of data carrying media are being disposed of which contains over 10Tb of overall capacity of storage.
High
An unknown number of data carrying media are being disposed of.

Business Impact

Low
Press coverage and brand erosion.
Medium
Possible legal action by data subjects and possible regulatory action.
High
Same as (2) but possible share price damage and / or competitive advantage erosion.

Scope

You should state the scope which this DIAL rating can be used. Is it for a particular collection, a particular site or can it be used as a company wide DIAL

Valid To Date

The date the certificate will expire