Module : Information Systems Audit and Controls

Please help on ALL questions below please

(a) Read the scenario below and answer the questions that follow: Vivid Securities Limited (VSL) is a medium-sized stock brokerage house. A recent study of the internal operating procedures has convinced VSL"s management of the need for rightsizing in all the departments. At present, the IT Department consists of eight employees as listed below: (i) System Analyst (ii) Software Developer (iii) Tape Librarian (iv) Database Administrator (v) Security Admin (vi) Network Admin (vii) Help Desk Officer (viii) Data Entry Operator. VSL"s management is of the opinion that certain functions can be consolidated to reduce the number of personnel in the IT Department. However, VSL's internal auditor is of the viewpoint that segregation of certain IT functions are of prime importance as their consolidation would compromise the security aspects of VSL's operations. (i) Explain what you understand by segregation of duty [2 marks] (ii) Why according to the internal auditor viewpoint segregation of certain IT functions are of prime importance as their consolidation would compromise the security aspects of VSL's operations [2 marks] (iii) In the event it is considered necessay to combine the functions of Software Developer and Database Administrator, identify any FOUR controls which in your opinion would mitigate the associated risks. [4 marks]