This article discusses the potential sources of risk for data breaches in organizations and suggests a risk management approach to mitigate them. The sources of data breach discussed include untrustworthy employees, business partners, hackers, and weaknesses in organization software. The article suggests that organizations should ensure that employees with system passwords are given those passwords under one-time basis to avoid them causing harm to the system in case of incidences like termination of work contract. To control hacking, the organization should ensure that its systems are up to date.