# data[].attributes.body
Email available to all could be a very serious problem within a company. Any employee can access their email on compnay time and computers, any email could potentially have an enclosed attrachment and contain a virus or Trojan. Spam also gives this risk in the same context, any link or attrachment could easily introduce a worm, trojan or other viruses and spyware. Also with no IP log the company would not know who is responsible for the viruses.  In the less dangerous manner, employees being able to access their emails at any time could distract employees from getting work done. This is breaking the
Data Protection Act because emails could introduce any number of viruses like worms or trojans if not treated with caution, all of the data being held in the company would be at risk.

# data[].attributes.headline
Entrance doors are not protected by keypads etc.

# data[].attributes.subject
Entrance doors are not protected by keypads etc.

# data[].attributes.body
Having no physical security in place at the entrance doors means that anyone can get into the building and get access to the information that is showed in the non-protected computers, leave and possibly use or sell it. the staff would not know the difference between someone coming in without permission or a member of staff because there is no precussions that would keep someone out of the building. This is breaking the Data Protection Act, anyone off the streets can walk in and take information as they please.

# data[].attributes.body
Not having a firewall in the companies security is dangerous. Firewalls basically keep out all intruding virues like Trojans, Spyware, Malware and other kinds of dangerous and harmful programs. Due to the lack in security in other areas like downloads and websites are not being monitored and staff can install software at will, then the greater chance of a virus being introduced to the system is great because there is no firewall in place. Even using a harmless site like Youtube can harm the system without the assistacne of a firewall in place. This is breaking the Data Protection Act because all of the data is at risk when no protection is in place to stop spyware or other viruses.

# data[].attributes.headline
IP address log is not kept of sites visited and downloads are not monitored

# data[].attributes.subject
IP address log is not kept of sites visited and downloads are not monitored

# data[].attributes.body
No IP address log means that any member of staff can visit any site and the company would not know what the employees were doing with there time. Any member of staff can access any site and download what ever they wish. There is no monitoring system in place to check what employees are doing. Downloading can cause alot of problems, it can introduce Worms and Trojans into the comanies system and no one would know whos fault it would be. Downloading things like illegal copies of movies or games from the internet is breaking the Computer Misuse Act law.

# data[].attributes.headline
All staff has access to all of the business' clients personal information

# data[].attributes.subject
All staff has access to all of the business' clients personal information

# data[].attributes.body
All members of staff have access to client information, including accounts numbers, bank details and names and address. any member of staff can take this information and sell it to others. The manager has even overheard his staff discussing account detials with other supplies and providing address information to others over ther phone. This breaking the Data Protection Law, all data should be secure and only be accessible to a select few. This is why Access Levels to files should be included in the business' security.

# data[].attributes.headline
Data is backed up once a month and kept in a plastic box on a server

# data[].attributes.subject
Data is backed up once a month and kept in a plastic box on a server

# data[].attributes.body
Data should be backed up everyday and not once a month. The threat that this poses is that if any member of staff was to lose their work just before the next backup was to happen then they would have lost all the work they have done inbetween backups. Also keeping the data tapes in a plastic box on top of a server is a very bad thing to do, severs tend to produce massive amounts of heat, plastic melts, this is not a secure place for backups. Data tapes should be kept in a fire proof box and kept in a locked and secure cabinet. This is breaking the Data Protection Act, anyone can just walk into the server room and take the backups containing client information and also the data types could be distroyed due to the servers the plastic box is one top of, the box would melt with the heat and ruin the tapes.

# data[].attributes.headline
Staff are allowed to install and remove software

# data[].attributes.subject
Staff are allowed to install and remove software

# data[].attributes.body
Staff being allowed to do this is a very bad security issues. employess can remove any piece of software they want which would cost the business money, the business pays for the software's liences. Also this could be an even more dangerous threat, staff installing software can mean that virues, worms, trojans or anything else can be put onto the system depending on the way they have installed them or how many computers the same program has been installed on. This means that if the employee was to use a USB pen which has been introduced to a large number of computers then the risk of it picking up a virus along the way is high. This is all breaking the Computer Misuse Act law.

# data[].attributes.body
Having unrestricted access to the internet means that employees can access whatever they want too. this could be anything from games too inappropriate content. Any website could potentially inroduce a dangerous virus into the system, this could be anything like any type of spyware which if not monitored or the system is not protected by a firewall or other precautions then the companies information about their clients and even about the employees can be taken, sold or used to commit identity fraud.  This also means that company employees can get distracted from their work being on social meadia sites or game websites. This is breaking both the Computer Misuse Act and Data Protection Act.

# data[].attributes.body
No log on or passwords means that 50 employees can sit at any computer and see other peoples work, there is no privacy so anyone can see all the data and info. A company should have different Access Levels to files for their employees, so data can be secure i.e. cleaners, employees, database writters, people who back up the data, the CEO and other higher employees with access to more. All members of staff should get different access levels depending on the area in which they work in the company. For example the Director of the company would have access to everything, where someone working at the administation desk would only have access to things like clients contact details so to contact the clients for meetings. Members of staff having access to other peoples work and files is breaking the Data Protection Act law.