ABSTRACT

The national press are ringing. Customer records from your organization have been found in a recycling centre. And instead of coming to you, the person who found them has gone to the media. HR says it has a clear policy that old records should be shredded. But apparently the department got a school leaver to do it, and no one checked the bin bags. You sigh. It was down in black and white: ‘Shred all old client records.’

‘Summon the risk committee,’ you tell your assistant. ‘We have to manage these risks properly.’ Wearily you pick up the phone to talk to the Daily Mail reporter.