Question

A company called Digitizer provides a service for many other companies by converting their paper documents to digital files. The documents include employee information, medical records, business records, and many others. Digitizer hires relatively unskilled employees to organize the documents and prepare them for scanning.

a. What are some potential risks here?

b. Describe some actions Digitizer can take or policies it can adopt to reduce the risks.

Answer 1

Solution 1):-

The Potential risk are

1) As the number of companies are more, there may be chances of documents begin swapped between clients as the working force are less skilled.

2) The client data can be shared with some other client from the employees of Digitizer

Solution 2):-

Precaution to be taken by the Digitizer group:-

2) The employees should be given enough training such that they scan the correct document for a given client

3) The employees should be assigned to single service company, this helps in preserving client data/information protected for avoiding data sharing.

4) Non Disclosure Agreement (NDA) policy should be placed, before assigning the work from client