Corporate Risk Analysis Approach for Information Leakage

Abstract

In this paper, We showed a method of risk management against information leakage of companies which has been frequent in recent years. We classified the risk of information leakage into four types from impact and probability, and showed each type of countermeasures through case studies. We also clarified the risk management procedure using ArchiMate. Risk analysis, risk assessment, and selection of risk measures depend on the company's situation. This paper concludes that companies are required to manage the risk of information leakage appropriate to the situation.