BSI ID: G 0.20

Using information, software or devices that come from unreliable sources or whose origin and accuracy have not been sufficiently verified can pose serious risks. Among other things, this can lead to business-critical information being based on incorrect data, calculations producing incorrect results or wrong decisions being made. The integrity and availability of IT systems may also be compromised.

Examples:

• A recipient may be tricked into performing certain actions that are detrimental to themselves or others by emails whose origin they have not verified. For example, the email may contain interesting attachments or links that, when clicked, cause malware to be installed on the recipient's computer. The sender of the email may be fake or imitate that of a known communication partner.

• Assuming that a statement is true because it ‘is in the newspaper’ or ‘was broadcast on TV’ is not always justified. This can result in false statements being incorporated into business-critical reports.

• The reliability of information disseminated via the Internet varies greatly. If statements are taken from the Internet without further source checks, this can result in wrong decisions.

• If updates or patches from untrustworthy sources are installed, this can lead to unwanted side effects. If the origin of software is not checked, there is an increased risk that IT systems will be infected with malicious code.