Question

VG) Scenario: Company B is a software company that employs many computer programmers. The company uses accounting software that was created by one of the employees. In order to be more flexible and share the workload, all of the programmers have access to the accounting software program in case changes are needed. 1. Based on the scenario, identify the weakness. 2. What could go wrong? 3. Provide a recommendation to address/remove the control weakness

Answer 1

Solution

The control weakness noted in the given scenario is that all the programmers have access to the accounting software program.

This would give rise to potential security threats to the entity's data stored in it. Also, since the software is developed by one of the employees and all the other programmers have access to it, there is a possibility of the employees to indulge in malicious or fraudulent acts for their own personal benefit. Unauthorized changes may be made in the software program and it may be done to support their fraudulent activities.

This weakness in the controls may be mitigated by

1) Restricting the access to the accounting software to one or two authorized personnels.

2) It should be ensured that any changes to the software program is made only after it is approved by a competent authority and it has to be done under the supervision of a higher authority.

3) The work performed by the programmers have to be monitored by a higher authority.