Risk Evaluation Worksheet # Risk Description (Asset, Threat, and Vulnerability) 0 Sensitive account information is discarded in the regular trash, which I could lead to disclosure of customer financial accounts to unauthorized internal or external parties. Disclosure of this data violates several state privacy laws. 1 2 3 Page < 3 of 5 --------- Sensitivity Severity Likelihood Risk High High Moderate High - ZOOM + --------- Page < 4 of 5 ZOOM Risk Mitigation Plans Finding 0: Owner Action: Buy a shredder and install in convenient location, and publish a handling policy By Whom: Administrative Staff and Senior Management Finding 1: Owner Action: When: By end of Q2 2012 By Whom: Finding 2: Owner Action: When: By Whom: When: + --------- Finding 3: Owner Action: Page < 5 of 5 By Whom: When: --------- ZOOM + ---------