arizonagolfclub - SysTrust Principle: Availability l...

Info iconThis preview shows pages 1–5. Sign up to view the full content.

View Full Document Right Arrow Icon
Group Exercise: Arizona Golf Clubs 1. Read the Arizona Golf Clubs case and list all control weaknesses for each of the following control categories and relate each control to the appropriate SysTrust principle Security Segregation of Duties Development Physical access Logical access Data storage Data transmission Documentation Minimize downtime Disaster recovery Protecting networks Internet
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
SysTrust Principle: Security l Security plan and segregation of duties r No restrictions on program changes (Trish) l Physical access controls l Okay - No problems documented l Logical access controls r No restrictions on access to data l Protection of computers and networks l Okay - No problems documented l Internet controls l Okay - No problems documented Arizona Golf Clubs
Background image of page 2
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Background image of page 4
Background image of page 5
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: SysTrust Principle: Availability l Minimizing system downtime r No backup for server l Disaster recovery plan l On-site backup exists r No off-site backup for program files r Audit trail only exists for 1-2 months Arizona Golf Clubs SysTrust Principle: Integrity of Processing r Production data should be read-only for query access (Trishs deletion of A/P) l Okay No other problems documented Arizona Golf Clubs Other issues l Development controls r No project development plan r No processing schedule r No periodic performance evaluations r No post-implementation review l Documentation standards r No user manuals r No systems documentation Arizona Golf Clubs...
View Full Document

Page1 / 5

arizonagolfclub - SysTrust Principle: Availability l...

This preview shows document pages 1 - 5. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online