Question

could someone help me

DISCUSSION QUESTIONS 5.1 Do you agree that the most effective way to obtain adequate system security is to rely on the integrity of company employees? Why, or why not? Does this seem ironic? What should a company do to ensure the integrity of its employees?

Answer 1

The statement is ironic because employees represent both the greatest control strength and the greatest control weakness. Honest ,skilled employees are the most effective fraud deterrent . However , when fraud occurs, it often involves an employee in a position of trust. As many as 90% of computer frauds are insider jobs by employees.

Employers can do the following to maintain the integrity of their employees.

1. Human resource policies : Implement human resource policies for hiring , compensating, evaluating , counseling , promoting and discharging employees that send messages about the required level of ethical behavior and integrity.
2. Hiring and firing practices : Effective hiring and firing practices include:

• Screen potential employees using a thorough background checks and written tests that evaluate integrity.
• Remove fired employees from all sensitive jobs and deny them access to the computer system to avoid sabotage.

3. Managing director employees : Some employees who commit a fraud are disgruntled and they are seeking revenge or” justice” for some wrong that that perceive has been done to them. Companies should have procedures for identifying these individuals and helping them resolve their feelings or removing them from jobs that allow them access to the system . One way to avoid disgruntled employees is to provide grievance channels that allow employees to talk to someone outside the normal chain of command about their grievances.
4. Culture : Create an organizational culture that stresses integrity and commitment to both ethical values and competence .
5. Management style : Adopt an organizational structure , management philosophy, operating style, and appetite for risk that minimizes the likelihood of fraud.
6. Employee training : Employees should be trained in appropriate behavior , which is reinforced by the corporate culture . Employees should be taught fraud awareness , security measures , ethical considerations , and punishment for unethical behavior.