Leonard Moses is planning to grow its customer base and is in the process of creating anonline web-based sales ordering system for customers to purchase products using personalcredit cards for payment. At a recent meeting with the internal auditors, it was highlighted thatthere are risk associated with this system. Identify three risks related to an online sales systemthat management should consider. For each risk, identify an internal control that could beimplemented to reduce that risk.

Internal Control -Internal control is the collection of guidelines, policies, and processes that…

Leonard Moses is planning to grow its customer base and is in the process of creating an online web-based sales ordering system for customers to purchase products using persona credit cards for payment. At a recent meeting with the internal auditors, it was highlighted t there are risk associated with this system. Identify three risks related to an online sales syste that management should consider. For each risk, identify an internal control that could be implemented to reduce that risk.

Leonard Moses is planning to grow its customer base and is in the process of creating an online web-based sales ordering system for customers to purchase products using persona credit cards for payment. At a recent meeting with the internal auditors, it was highlighted t there are risk associated with this system. Identify three risks related to an online sales syste that management should consider. For each risk, identify an internal control that could be implemented to reduce that risk.

Pkg Acc Infor Systems MS VISIO CD

10th Edition

ISBN:9781133935940

Author:Ulric J. Gelinas

Publisher:Ulric J. Gelinas

Chapter2: Enterprise System

Section: Chapter Questions

Problem 2DQ

See similar textbooks

Similar questions

uppose your company has an e-commerce Website for selling different types of goods and services. Discuss the followings:i)Ethical concerns associated with storing and analyzing user data?ii) How would you use intrusion detection system to control security threats that face this website?
Using the following table as a guide, describe for each function (see Figure 11.1): A risk (an event or action that will cause the organization to fail to meet its goals/objectives). A control/process or use of technology that will address the risk. Function Risks Controls and Technology Marketing Finance Billing AR (debit) Sales (credit) Collections Cash (debit) AR (credit)
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (f) A company purchased the leading “off-the-shelf” e-commerce software for linking its electronic storefront to its inventory database. A customer discovered a way to directly access the database by entering appropriate SQL code.
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (e)A company’s programming staff wrote custom code for the shopping cart feature on its website. The code contained a vulnerability that could be exploited when the customer typed in the ship-to address.
Discuss some of the security issues related to e-business and recommend control activities. Why should the product and financial stability of the companies that are on your short list pf AIS be investigated?
The computer processing portion of a sales order system is represented by the flowchart. Answer the following questions.a. What type of data processing system is this? Explain, and be specific.b. The auditor suggests that this system can be greatly simplified by changing to direct access files. Explain the major operational changes that would occur in the system if this were done.c. The auditor warns of control implications from this change that must be considered. Explain the nature of the control implications.d. Sketch a flowchart (the computerized portion only) of the proposed new system. Use correct symbols and label the diagram.
has hired you to review its sales order procedures for internal control compliance and to make recommendations for changes. You are required to:a. Create a data flow diagram of the current system. b. Create a system flowchart of the existing system. c. Analyze the internal control weaknesses in the system. ; andd. Prepare a system flowchart of a redesigned computer-based system
Identify at least three risks that auditors need to consider for companies that process web-based sales transactions, including credit card payments.
Many large companies use an electronic data interchange (EDI) to communicate with key customers and suppliers. Explain the benefits and risks involved when companies use EDI. Explain one way that the use of EDI affects internal controls and the auditor's testing.
The ABC Company is switching from its legacy centralizedsystem to a fully distributed system. Underthe new model, all employees will work from PCsconnected to a local area network. a. Outline a plan of action to ensure that the propercontrols over hardware, software, data, people,procedures, and documentation are in place.b. Discuss any risks the company may face if thedevised plan is not implemented.
You are the administrator of a web server to configure the level of access for users. Then need to be authenticated first before having access to some web pages. What criteria of information security has been addressed in this configuration? Choose one of the below options and justify your answer. - integrity - scalability - availability - confidentiality
Information Risk Analyst (IT Controls Audit) will help the organization assess risk controls and their effectiveness for current and future design improvements. To be successful in this career path YOU must be familiar with the concept Information Risk. a. Explain the term ‘information risk’ in your own words. b. Discuss three (3) causes of information risk. c. Discuss the three (3) main ways to reduce information risk. d. Differentiate between ‘assurance services’ and ‘non-assurance services,’ giving examples of each.