Risk types

Internet Technology Risks 

IT risks abound for organisations relying on the Internet. Some major risks are:

  1. The absence of secure and confidential communications networks; for instance, e-mail; instant messaging; and VoIP
  2. The absence of measures to ensure the security and confidentiality of data from hackers; viruses; and network intruders
  3. The absence of secure and robust business continuity and disaster recovery systems
  4. An insecure website providing inadequate security from hackers and malware
  5. The absence of a robust identity and access management procedures to protect the IT network

Legal compliance risks 

Legal compliance risks surround almost every aspect of Internet use. Major compliance risks include:

  1. Inadequate website management, such as inaccurate information; misleading information; lack of a privacy statement; breach of copyright; and general failure to comply with legal, regulatory and professional provisions
  2. Failure to observe relevant applicable law and jurisdictional provisions arising in dispute processes
  3. Failure to comply with the wide variety of data protection provisions so giving rise to criminal or civil proceedings
  4. Failure to observe the statutory provisions regarding the monitoring of employees' use of e-mail and the Internet

Operational risks 

Operational risks arise from the behaviour of personnel who use Internet technologies while in the course of the organisation's business.  These include:

  1. Inadequate management and supervision of employees' use of e-mail
  2. Inadequate management and supervision of employees' use of the world wide web
  3. Inadequate management and supervision of the organisation's website
  4. Failure to manage and supervise employees' use of Internet technologies when providing legal services electronically

Internet Use Risks 

The use of Internet technologies gives rise to risks which, if unaddressed, have the potential to damage the organisation's reputation in addition to resulting in criminal or civil proceedings. Organisations should therefore introduce policies and procedures governing the employees' behaviour when using Internet technologies. Some of the most important policies include: 

  1. E-mail and electronic communications use policy
  2. Website use and management policy
  3. Electronic delivery of legal services policy
  4. Business continuity and disaster recovery policy
  5. Data protection management policy
  6. Mobile communications policy