Using the information below, (1) establish control objectives and (2) identify corresponding key risks for each control objective, and (3) develop audit procedures.

Data Center Management: Veronese & Tiffany Inc. installed a backup data center at its Sarnia, ON office three months ago. The center is used for testing and development work with full capabilities to handle complete backup processing in the case of a failure of the company's primary computer center in Kitchener, ON. The new data center consists of a large IBM mainframe, 15 tape drives, 20 disk drives, and network communications equipment to link the center to the company's primary network. Approximately, three employees work to cover the center's three shifts (one per shift) that provide functions of scheduling, security, software support, operations support, and library facilities. The center is designed to operate 24 hours per day 365 days per year. An automatic fire suppression system was installed last month. At that time, the Data Center Manager held a meeting for all three data center employees to verbally instruct them as to their responsibilities in the event of a fire emergency. A security officer was hired prior to the start-up of the computer center to administer security procedures for the protection of the facility. The officer reports directly to the morning shift employee. Devices were installed at entrance and exit points of the computer facility to detect magnetic items (tapes and/or disk packs) passing through. This was done to prevent the unauthorized removal of tapes or disks. Due to budgetary constraints (and the limited number of current users accessing the facility), the project to restrict entry to and exit from the data center via proximity cards is currently put on hold. Currently, access is restricted via use of a pin pad lock. The correct combination of the pin pad lock is known to the Data Center Manager, three shift employees, and the security officer only. Lastly, the Data Centre Manager proudly announced to his team in this month's communication that the next fiscal year's budget Veronese & Tiffany Inc. has an approved placeholder for a project to install security cameras within and outside the data center.