Information Risk of Inadvertent Disclosure: An Analysis of File-Sharing Risk in the Financial Supply
Topics: Finance Risk Management
M. Eric Johnson
Journal of Management Information Systems, 2008
Firms face many different types of information security risk. Inadvertent disclosure of sensitive business information represents one of the largest classes of recent security breaches. We examine a specific instance of this problem—inadvertent disclosures through peer-to-peer file-sharing networks. We characterize the extent of the security risk for a group of large financial institutions using a direct analysis of leaked documents. We also characterize the threat of loss by examining search patterns in peer-to-peer networks. Our analysis demonstrates both a substantial threat and vulnerability for large financial firms.
