• Legislation and regulations risks

Risk Test measure (section number/s)
Processing and storing data do not comply with some laws:
– Laws in home country
– Laws in other countries in which the data can reside
5.1.3, 5.8
Countries have conflicting laws. 5.1.3, 5.8
Legislation is unclear. 5.1.3, 5.8
It is not clear where data is stored, which causes uncertainty about legal risks. 5.1.3, 5.8, 5.9
Legal issues arise when the service is down. 5.1.3, 5.8
There is no agreement with the service provider about safe handling of data. 5.1.3, 5.8
Legislation changes. 5.8, 5.9.3
Reliability of a regime in a country is questionable. 5.1.3
Third parties gain access to company data by citation or investigation (jurisdiction). 5.1.3, 5.8