Question

Question #4 (10 marks) Scenario: Company B is a software company that employs many computer programmers. The company uses accounting software that was created by one of the employees. In order to be more flexible and share the workload, all of the programmers have access to the accounting software program in case changes are needed. 1. Based on the scenario, identify the weakness. 2. What could go wrong? 3. Provide a recommendation to address/remove the control weakness

Answer 1

1. This is a major control weakness of lack of Logical secutiry and also lack of clearlt defined roles.

2. Since all the programmers have access to the software and can make changes whenever needed, they can either individually or collude with other employees and indulge in fradulent activity like entering wrong data or deleting some data

3. Reccommendtion=

• The software should be password protected and should be given to only those employees who are in the accounting department
• The software should clearly identify the name or IP address of the employee who made a change in the software
• The accounting data must be encrypted and stored in secured folders