Question

Within the client’s IT system, supplier information is contained in a supplier master file (SMF). Each supplier has a unique supplier code. If the purchasing clerk attempts to place an order from a supplier not in the SMF, the order cannot be processed.

1. Explain what type of control the above information describes. Discuss the control’s strengths and weaknesses.

Answer 1

In this question Client's IT system is not allowing the purchasing clerk to attempt to place order from supplier who is not in the Supplier Master File (SMY). It is typical example of access control in which particularly Logical access controls.

Simply, Information system is not allowing access to unuathorised transaction or information.

Meaning : Access control is a security technique that regulates who or what can view or use resources in a computing environment. Logical access control limits connections to computer networks, system files and data.

Strengths : 1. This controls provides access to uthorised users only means no unauthorised user can aceess data. 2. It controls thefts and leakages of system information 3. Access controls limits the use of information, means it doesn't process unauthorised information to users.

Weakness: 1. Problems may be faced by users while delegating work to sub users.

2. It will reduce the efficiency and speed of working while accessing the data.