Answers
A member of staff removes the wrong file or record by mistake, often because they had no training.
Staff being able to open files they do not need, which can lead to mistakes and lost data.
Opening sites that are not genuine, which may carry phishing threats or malware onto the network.
Staff deliberately bypassing settings or restrictions to access data they are not authorised to see.
Small removable drives plugged into work computers, which can carry malware and are easily lost, stolen or broken.
Looking at another member of staff's screen or keyboard to read private data or sign in details.
Ignoring patches that fix known weaknesses, which allows unauthorised access to a system.
Sending confidential information, such as a file or email, to the wrong person by mistake.
Staff deliberately give confidential data to a rival or sell it, usually for financial gain.
Choosing sign in details that are weak, easy to guess or shared, which lets unauthorised people into systems.
Saving files or programs from websites onto a work device, which may contain harmful software.
Leaving a computer unlocked when away from it, allowing someone else to change settings or access data.
A member of staff who is unhappy and may deliberately damage systems or install malware as revenge.