Accounting Information System Assignment
Assignment
Accounting Information System
Instructions:
- Mention question number clearly in their answer.
- Avoid plagiarism
- All answered must be typed using Times New Roman (size 12, double-spaced)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Provide examples of business concerns describing the Preventive, Detective and Corrective Action with reference to Internal Control.
Internal control is divided to three functions:
- Prevent control that must be applied before the issue is occurred to avoid any errors or bias in the discussion making process. For example, employees swipe their business card to access the building to prevent non-employee to enter the company building.
- Detect control will be applied after the issue is occurred by identifying the recourses of this errors. For example, we receive the invoice of the good that doesn’t match with actual number of good we received.
- Correct control focuses on the effect of the problems that occurred by enabling to respond and take actions. For example, company raise the awareness of control system and revise the polices. (ACCA, n.d.)
- A disaster recovery plan (DRP) is a documented process or set of procedures to execute an organization’s disaster recovery processes and recover and protect a business IT infrastructure in the event of a disaster. It is “a comprehensive statement of consistent actions to be taken before, during and after a disaster”. Describe a Disaster Recovery Plan (DRP) for Information Technology of a Saudi Business Concern.
Saudi Aramco on 2012, was attack by malware called “Shamoon” that wiped three-quarters of PCs in the company. There weas no major problems in Aramco operations , however losing the data affects the production process. This attack documented to be beneficial as a reference in the future that will provide Aramco the best security procedures. One of the most common way of Describe a Disaster Recovery Plan is Backup and archive. EXPEC computer center at Aramco have different criteria to evaluate the backup and archive systems. “These systems are IBM Tivoli Storage Manager (TSM), CommVault® Simpana, and Interica Intelligent Data Store (IDS).”(Aldossari, 2015)
- Personal information about customers is collected, used, disclosed, and maintained only in compliance with internal policies and external regulatory requirements and is protected from unauthorized disclosure. With reference to Privacy Concern how would you deal with SPAM and Identify Theft problem of your business organization?
The basic principles on securing customer data are
- Remind my employee to be careful about any sceptics emails that comes from external user.
- Report spam for the phishing e-mails to IT department to deal with it.
- Prevent to use the business account for personal use on any website.
- Install internal control system to prevent data thieves from hackers
