Risk items Impact Response measures Information security risks Inappropriate information security framework and inadequate control of the system, network, and privacy management mechanisms may lead to higher risk of information systems being hacked, as well as an increase in probability for personal information leakage.