|
|
 |
Quantitative
assessment
A simple way of quantifying what you should be spending on
Digital Rights Management (DRM) based Content and Document Security
is shown below.
Investment required
= risk per person x number of people IP value x
ROI expected*
* from a software
investment
The typical IP value can
be determined by estimating the value of your specialized
information, processes and customers or the damage doe by leaking
this information. The risk per person is known from a number of
established studies over a range of industries and organizations.
There are no ZERO risk situations. If this is not recognized then an
intelligent assessment is not being made. If you do not already have
figures for risk assessment and IP value you can perform an
effective estimate by using the tables below.
| Assessing
risk |
Chance
per person per year of information leakage. (for simplicity
you may only want to count individual with access to high
value data |
| Low:
Companies with jobs for life, excellent established pension
schemes, very little staff turnover, high morale, no competing
rivals, no opportunity for staff to move out as independent
contractors |
1% |
| Normal:
Companies with low staff turnover, good job security, good
morale, few competing rivals, little opportunity for staff to
move out as independent contractors/consultants |
5% |
| High:
Corporate culture with interns; temps; regular transfer of
staff between competing companies, good opportunity for staff
to move out as independent contractors/consultants |
10%+ |
| Assessing
IP (Intellectual
Property)
value |
|
| Low:
Customer/Client lists which are readily commercially
available. Summary "The is nothing special that we have
that anyone would want" |
No
value
|
| Normal:
Customer/Client lists, business plans, product plans, IP,
confidential documents which would be of value to a rival
company or consultant. Summary "If Universal Exports
or The Guardian get this then it would be quite useful to
them" |
5%
of company turnover
|
| High:
Customer/Client lists, business plans, product plans, IP,
confidential documents exist which are of very high importance
to the company. Surprising few companies are willing to admit
that this is actually the case often greatly to the detriment
of those failing to recognize this. Summary "If Universal
Exports or The Guardian get this then there will be a drop
in share price, layoffs, board resignations or loss of market
share" |
10%+
of company
turnover
|
next
>>
BHR Content
Protection
|
