Type: Risk acceptance
Subject: R-05
Decision requested: Accept the residual risk recorded for R-05 - Chained exfiltration: Drive read to Calendar outbound write
Inherent / residual: Critical / High
Control owner: InfoSec
Context: Treatment: Reduce - residual remains permanently. What we can commit to: We can require a person to approve every outbound action, and to see the recipients and the content before it goes. What remains: The pathway still exists. A determined insider, or anyone using a compromised session, can still move data out by approving their own action. Approval records who did it; it does not prevent it. Basis for acceptance: Yes - accept that approval is a deterrent and an audit trail, not a barrier against a motivated insider.
No verification items specific to this connector.
Ruling:
Amendment or condition: