Misuse

From Open Risk Manual

Definition

Misuse is a Cyber Risk sub-category defined as the use of entrusted organizational resources or privileges for any purpose or manner contrary to that which was intended.

Includes administrative abuse, use policy violations, use of non-approved assets, etc. These actions can be malicious or non-malicious in nature. Misuse is exclusive to parties that enjoy a degree of trust from the organization, such as insiders and partners.

References

  • VERIS