T 2.8 Uncontrolled use of resources

Resources - regardless of what type - may only be used for their intended purpose. The persons responsible for the procurement and use of resources must prevent their uncontrolled use as well as monitor their correct use. However, inadequate control of the use of these resources may lead to numerous threats.

Examples:

• The use of private data media by employees may lead to the infection of corporate PCs due to malware.
• The use of the wrong cleaning products may damage the computer monitors.
• Using the wrong type of ink in an ink jet printer may result in the printer malfunctioning or becoming soiled with ink.
• In a company, the use of DVDs was not regulated. Only after conducting a random plausibility check it was discovered that an inexplicably larger number of DVDs had been used the past six months. After questioning the employees, it was discovered that many employees used these DVDs to record small amounts of data for data exchange purposes. After that, they simply disposed of the DVDs because they had not been told that a DVD recorded in the multi-session mode can be reused if only a small amount of data is recorded on them.