CMLP 2.10_English: Intellectual Property and Sensitive Information Thefts

Organizations involved in creating innovative products and global services have increasing levels of Intellectual Property which must be protected. In addition, all organizations hold information on staff, which must be appropriately secured, as well as information relating to partners, clients, vendors and other external stakeholders that is sensitive in nature and must be appropriately managed, to also protect their interests. Organizations face a wide range of threats to the protection of IP and sensitive information, whether from competitors, hostile governments, criminals, activists, hackers, voyeurs, or terrorist groups. The loss of IP or other sensitive information can have significant implications for organizations. There is enterprise risk in the loss of competitive advantage where IP or commercially sensitive information is compromised and exploited by competitors. There is also very significant business continuity risk, where duties to protect information may result in charges of legal liability and cause reputational damage. In specific contexts, failure to safeguard sensitive information can additionally present security risk. Protecting IP and sensitive information demands robust technological and process measures and responding to a suspected or established loss requires very rapid action to stem any further loss, alert affected 3rd parties and, where possible, repair any damage.