Compare and contrast issues between the Enron and Worldcom case studies. Discuss the following in detail regarding the Enron and Worldcom scandals: What parallels can you draw between these two disasters? Each company had auditing processes in place. Why did those processes fail to prevent some of the problems? What could have been done differently? For each company, how could IT have been better aligned with organizational processes?

Compare and contrast issues between the Enron and Worldcom case studies. Discuss the following in detail regarding the Enron and Worldcom scandals: What parallels can you draw between these two disasters? Each company had auditing processes in place. Why did those processes fail to prevent some of the problems? What could have been done differently? For each company, how could IT have been better aligned with organizational processes?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter7: Risk Management: Treating Risk

Section: Chapter Questions

Problem 2E

See similar textbooks

Similar questions

In 2006, Hewlett-Packard Development Company LP became embroiled in a controversy over methods used toinvestigate media leaks from its board. HP Chairperson Patricia Dunn could have simply asked the directors who was the source cited in the story, sought an apology and gone from there. With some direct face-to-face communication, the story would likely have ended quickly. It did not. “Not only did investigators impersonate board members, employees and journalists to obtain their phone records, but according to multiple reports, they also surveilled an HP director and a reporter for CNet Networks Inc. They sent monitoring spyware in an e-mail to that reporter by concocting a phoney tip. They even snooped on the phone records of former CEO and Chairperson Carly Fiorina, who had launched the quest to identify media sources in the first place.” The situation continued to escalate. For example, the New York Times reported that HP consultants even considered planting clerical or custodial…
The RAND Report: what is it and why should you care? Why did they choose to make it, exactly? Can you tell me about RAND Report R-609 and what it contained?Just what does this mean, exactly?
Look at IT audits from the perspectives of both Governance and Management.
Utilizing the CIA Triad as a resource. Please provide an example of a situation in which I am more significant than C. I'd be interested in hearing the reasoning for your answer. (Your solution must be related in some way to safety, but you have the choice of whether or not to include cutting-edge technology into it.)?
When conducting an audit, business risk must be considered. a) Define business risk in the context of an audit and outline various potential sources of risk. b) What is the relationship between business risk and the audit's preliminary analytical procedures? c) When preparing an audit engagement, there are four key areas to consider, each with its own set of sub-areas. Please indicate the four primary regions as well as the relevant sub-parts.
Who is responsible for the security breach at Equifax? What could Equifax have done better to minimize the damage?
Because NDCP is a membership cooperative, Dunkin' Donuts franchisees are both owners and customers. What might be some advantages to such an ownership structure in terms of getting the support of all stake holders for massive protection as the one NDCP undertook? What might be some disadvantages?
Provide some scenarios in which a company may use IT to conceal financial wrongdoing from an auditing firm, and some ways in which that firm can mitigate those risks.
How might XYZ Software Company arrive at the values in the table shown in Exercise 3? For each entry, describe the process of determining the cost per incident and frequency of occurrence.
Susan is the lead investigator for a security incident and realizes that she will not be able to complete her investigation without causing severe disruption to the business. The action she feels she must take exceedsthe authority granted to her under the incident response plan. What should Susan do? a)Shut down all business operations immediately until she develops a plan b)Take the action immediately to protect the business c)Discount the action as a possibility because it exceeds her authority d)Consult with higher levels of management
What is covered by the Rand Report? What inspired its construction, if anything?
Provide a short description of each of the five methods used to mitigate risk.