Security Issues Case 10: Real-Wire Real-Wire is a public electronic funds transfer (EFT) network with its head office and major com- puter switch based in Chicago. It is currently under contract to the Department of Treasury to assist in e-commerce and EFT overload processing, which has increased their workload by 15-20% on occasions. The compa has computer switches in each capital city throughout the United States, including Alaska and initiatives when federal systems are overloaded. They have handled ny awaii, which are linked into a national communications network. Approximately 200 financial institutions (banks, building societies, and credit unions) use the network to provide automatic teller machine and point-of-sale services to their customers. Real-Wire has only been in operation for 15 years, but during that time it has been ve cessful. When the United States began to deregulate its financial markets in 1985 and foreign banks began to enter the marketplace, Real-Wire obtained substantial new business because it ry suc could offer these financial institutions immediate EFT services Your As a consultant specializing in computer controls and audit, you have been hired by the man aging director of Real-Wire to examine the state of controls within the EFT system. She explains to you that an increasing number of potential customers are requesting some type of independent assurance that controls within the system are reliable. Accordingly, she has decided to initiate a controls review of the entire system so that a third-party "letter of comfort" can be provided to est in com- ystem e com- potential customers. The initial part of your controls review focuses on the main switch in Chicago. As part of your review, you examine the status of disaster recovery planning for the switch. In terms of short-term recovery, controls appear to be in place and working. Backup tapes for all data and programs are stored both on- and off-site to enable recovery if programs and data are lost for some reason. In e CPA addition, protocols for short-term recovery are well documented, and operators seem familiar with and well trained in these protocols. From time to time they have to exercise these protocols because