HB-06Level 4 · Breach scenarioDBIR: Miscellaneous Errors · VERIS: Error
Data mishandling & error
- Level 4 · Breach scenario
- 29 signals
- 5 risk domains
A breach caused by a mistake: email or files sent to the wrong party, a share link set to public, a misconfigured repository, or data stored where it does not belong.
Classification
- Fed by risk domains One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
- Dimensions Every signal answers one of 3 questions.
- Evidence level
- Anchor
-
- DBIR: Miscellaneous Errors · VERIS: Error
- NIST CSF 2.0
-
- PR.DS-01
- PR.DS-02
- MITRE ATT&CK
-
- T1567
- T1567.002
-
0
Sequences
End in this breach scenario.
-
1
Cohort
Predict it.
-
29
Signals
Feed it.
-
5
Risk domains
Where those signals come from.
Sequences that lead here
No sequence ends here.
None of the 11 sequences in this version ends in Data mishandling & error. The cohort below predicts it, and 29 signals feed it.
-
CR-DH-02
Sensitive sharer with sensitive access
DH-B-03 + DH-A-01
The definition, in detail
Definition
It is the Miscellaneous Errors pattern in the Verizon DBIR and the Error action in VERIS, defined as anything done, or left undone, incorrectly or inadvertently.
Example
A benefits analyst attaches the wrong spreadsheet and sends every employee's salary to a vendor contact.
How it is measured
- Anchor
- DBIR: Miscellaneous Errors · VERIS: Error
- SOC signals
- DLP incidents, misdelivery
- Fed by
- 29 signals across 5 risk domains
How it is used
Programs measure toward Data mishandling & error by counting the 29 signals, 1 cohort and 0 sequences that point to it, and tie them to the incidents the SOC records as dlp incidents, misdelivery.
A breach scenario names what the evidence beneath it points toward. The organization’s own incidents confirm it; the signals, cohorts and sequences show where it is likely.
Technical mappings
Framework mappings; validate for your use case.
Continue exploring
"Data mishandling & error" (HB-06), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/breach-scenarios/hb-06-data-mishandling-and-error
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0. This page describes one breach scenario.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.