Case study three Jason has started working a new job as database analyst in a leading firm that specialises in data processing Ken is one of the directors and becomes Jason's good friend. One day over coffee they both started discussion about latest technological developments regarding implementing controls in organisations. Ken has a firm view that biometric controls alone are enough, and they can stop unauthorised access to the centre. Staff can use these controls for access and the work of their firm was running smooth Ken is rather proud that they have one of the best systems in place which his created by their own programmers. Jason is not comfortable with the idea biometric controls and their efficiency as the appropriate controls in information processing environment. Jason also believes that controls shall be independent of firm's staff because only then integrity can be ensured. There is a need to implement separation of duties here. Analyse this scenario and conduct your research about whether just biometric controls are sufficient for organisations. Further, there is the issue of segregation of duties. Conduct your research to see if segregation works well in the given scenario and what functions can be segregated Questions a) What faults do you see in the director's statement? b) The director has suggested biometric controls, should these be the only controls that the company relies on? c) With respect to the information system can separation of duties be an be an adequate control. Explain your reasoning d) When using separation of duties as a control which functions should be separated? e) Explain possible risk that could be expected if the functions are not separated