Question 3

Table 1, which is shown on the next page, lists ten (10) threats or system failures (numbered 1-10) and 14 control procedures (shown using the letters a-n). Match each threat / system failure (see column one of Table 1) to the most appropriate control procedure (see column two of Table 1) that could be used to eliminate/minimise that threat or system failure. Each control procedure may only be used once and only select ten (10) control procedures from the list.

In the answer table (immediately below), place a letter (a-n) in the second column of the answer table for each row of this table (representing the most appropriate control procedure for the respective threat / system failure).

Place your answers in the second column

Answer Table:

Threat / System Failure	Control Procedure (a-n)
1
2
3
4
5
6
7
8
9
10

Table 1: Ten threats or system failures and fourteen control procedures

Threat / System Failure

Control Procedure

While moving the new payroll program from testing status into production status, John, the programmer, made a last-minute change to the payroll program. Thereafter, each time he executed/ran the payroll program using the live payroll data, the amount of money direct deposited into his bank account for his fortnightly pay was overstated by 30%. This situation continued for the next twenty fortnightly pay periods. Flooding destroyed all of the data records at Kelantan Tech Company. Sales are affected because the company is unable to restore its accounting information system. The accounts receivable department sent 87 cheques to the computer centre for processing. No one realised that one cheque was dropped/misplaced along the way. Thus, the computer only processed 86 cheques. After careful screening and selection of employees, an organisation issues its employees name badges with magnetic strips that store the employees personal information. Employees in the IT function can scan their badge, which enables them to gain access to select rooms within the IT centre depending upon the permissions that have been stored on their card. Recently management discovered that employees are sharing their badges to enable them to gain access to every room in the facility. Confidential and proprietary information is transmitted over the open Internet via email and thus could be a security risk. James was just hired as a computer operator at Vampire Inc. Just a few days after being hired, he discovered that he would not be allowed to write computer programs. This was contrary to what he was told initially, and he is now quite unhappy with his circumstances.

Documentation control plans Segregation of programmers from computer operations Business continuity planning Biometric security system Protection tabs, doors, and rings Batch control total Edit test Check digits Selection and hiring control plans Use a VPN Use a firewall Concurrency controls Install a UPS Populate input screens with master data

Question 3

Threat / System Failure

Control Procedure

A customers credit card account number is wrongly entered into the computer by Maria. A data entry clerk entered an invoice value of $5,000,000 instead of $5,000 for one of the credit sales transactions. A scheduled 30-minute outage for a companys order processing system turned into a 24-hour outage after a system update failed due to a power failure. Two travelling sales representatives from the same company accessed the inventory database at the same time and promised to sell, to different customers, the last of a particular item of inventory that was in stock.