Question

Name Wannarat Natilerdsak Student ID6101139

IAC 326 Accounting Information System

Homework

Chapter 4 Relational Databases

Explain the importance and advantages of databases.

Essay Questions

1). Explain the importance and advantages of databases?

Answer:

Chapter 5: Computer Fraud

Explain the threats faced by modern information systems.

Explain the fraud triangle.

Define computer fraud and discuss the different computer fraud classifications.

Essay Questions

2). What are the common threats to a computerized accounting system and explain examples?

Answer:

3). What are components of the fraud triangle behind a worker’s decision to commit workplace fraud with explain meaning?

Answer:

4). What are the Computer fraud classification using the data processing model?

Answer:

Chapter 6: Computer Fraud and Abuse Techniques

Compare and contrast computer attack and abuse tactics.

Explain how social engineering techniques are used to gain physical or logical access to computer resources.

Describe the different types of malware used to harm computers.

Essay Questions

5). Explain the three common computer fraud and abuse techniques?

Answer:

6). What the examples for defending against social engineering?

Answer:

7). What is the meaning of Malware as your understanding? How does Malware work?

Answer:

Chapter 7: Control and Accounting Information Systems

Essay Questions

8). What are the important functions of Internal Controls with explanation?

Answer:

9). What are the two basic categories of controls over information systems and meaning?

Answer:

10). What are primary objective of an Accounting Information Systems?

Answer:

Answer 1

1. Explain the importance and advantages of databases

Answer – Database management system manage complete flow data process in a systematic way . This Database system help to reduce database errors and improve in consistency . Proper data base system help to improve data security . This system introduced cost benefit system .Most important factor is to maintain proper data integrity . This system represents quick access of data faster way as well as accurate way . This will definitely improve complete financial , operational cycle of any Organization

2) What are the common threats to a computerized accounting system and explain examples?

Normally there are several types of computer threat which all disturb computer security system, access by Unethical person, Few types of computer fraud includes Trojan, Virus, Malware , hackers etc. Common threats which negatively affect confidentiality, integrity and availability of data, this would be mis configured software and unpatched Operating System

3) What are components of the fraud triangle behind a worker’s decision to commit workplace fraud with explain meaning?

What is Fraud Triangle – Fraud Triangle is a Design framework . This design framework help us to identify the reason behind a workers / Employees decide to commit fraud at Workplace , It help us to identify motive , reason that someone in committing fraud .Definitely with help of this triangle , We can identify fraud, detect fraud

Major three reason behind this Fraud Triangle –

1. Motive – Understand individual motive ( rather fraudster motive to do fraud . One of the major factor will be Economic pressure , meeting Liability , debt , Life style manage etc.
2. Opportunity - Opportunity normally pop up when Internal Control is weak . Fraudster are well confident that nothing will come in to picture because Internal control system is weak.

Self Justification

4. What are the Computer fraud classification using the data processing model

Computer fraud classified as – Input fraud, Process fraud, Output fraud , Storage data fraud , Data Fraud , Email threats, Denial Service attack, Computer instruction fraud – basically tampering with software data , develop software program to carry out Unauthorized access.

Input fraud also invite Inventory , payroll, cash related fraud.

5) Explain the three common computer fraud and abuse techniques?

Major Three common Computer fraud and abuse Techniques

Hacked – Hacked into the system and trap system processing ,

Malware – includes Trojan horse, Logic bomb

Superzap – Unauthorised use of Superzap , a software utility that bypass regular system controls

Virus – infected into the system

6) What the examples for defending against social engineering?

Couple of main defending factor against Social Engineering :

Education – Awareness education to Employee . As security professional , find a way to make employee about Security.

Any Organization , need to convince management to increase more budget on Security matter

Awareness – Most important factor is to understand Companies present on Online Portal. We need to be awre about any sensitive and dangerous information which create impact on security

Acceptable Use Policies- Company needs to implement proper acceptable user policy in the Organization. Management will not allow to downloading any unapproved program

Constant Update – Windows update

Verifying Identity

7)What is the meaning of Malware as your understanding? How does Malware work\

Malware is really dangerous treats . This one easily damage services , stealing data, mess viruses, ransom ware

Malware normally creates by Hackers . Malware is a combination of Malicious + Software

Virus – They can spread without control and clean up all files and badly affected other file also

Spyware – Managed to Spy on Individual . Spy on password , credit card number etc,

Worms – Effect and destroy entire network either local or across Internet ,

8)What are the important functions of Internal Controls with explanation

Most important function of Internal Control would be :

1. Established proper Risk Management system and review the same
2. Effectiveness and efficiency of operation improvement
3. Established Policies and procedures , Business continuity plan ,
4. Quality of Information , Effective communication
5. Separate Evaluation , Ongoing monitoring ,
6. Integrity , Organizational Structure
7. Board of Director and Audit committee
8. Assignment of Authority and responsibility

9)What are the two basic categories of controls over information systems and meaning?

Most important basic categories of Control would be detective , preventive and Corrective action . Also certain important features are segregation of duties , access control , Audit , document standardization , Periodic reconciliation

10)What are primary objective of an Accounting Information Systems?

Primary objective of Accounting Information System ( AIS) – Collect , Store and process the data of Accounting and financial and provide the same to Users .

Following factors are included in AIS:

People , process , Information technology ( mainly hardware ) , data, Software and Internal control system

AIS system always ensure that Internal Control system should be in place to ensure accuracy of data .

AIS system always focus to provide useful data / information to users for perfect decision making