6. Privacy and Data Protection
Why: Increased U.S. efforts to integrate modern information technology into health-care treatment and payment systems is focusing more attention on this issue. Also, the Federal Trade Commission is looking at Internet advertising and behavioral targeting. And cloud computing is raising global concerns related to security, location of data, national jurisdictions, and availability of evidentiary privileges.
Who's Most at Risk: Virtually all organizations. Every business is now global, and data are becoming increasingly mobile.
How to Minimize the Risk: By recognizing that their information is an inherent aspect of their wealth, companies can invest with greater confidence in the governance evolution that properly funds and values information security, information management, and the emergence of automated management controls.