As a summer job, you have been hired as an intern in the internal audit department of a large national retail organization. As part of your job, you will assist with a vulnerability assessment before conducting a risk assessment.

Then, the team will consider how controls in information systems could affect privacy in the organization before testing these controls.

Question 1) For each of the following types of controls, describe the type of control and provide an example of that type of control that might contribute to improved privacy over customer data at the retail organization (4 marks):

logical access controls

firewalls

Question 2) Identify three types of personal application software to assist you in your Internal Audit job and explain why you selected them. (6 marks)