

Software Engineering Part 2: Software security: (7 marks) Assume you are performing preliminary security risk assessment....
Part 1: Software Testing (6 marks): Assume that you are building a web-based grocery shopping system (similar to the ones that Woolworths and Coles provide). The system allows customers to add grocery items to a (virtual) shopping cart and pay online. They will then be notified when the order is ready for pick-up in the selected store. 1. Identify one functional and one non-functional requirement related to that system (2 marks). 2. Describe how you would test those two requirements...
Part 1: Software Testing (6 marks): Assume that you are building a web-based grocery shopping system (similar to the ones that Woolworths and Coles provide). The system allows customers to add grocery items to a (virtual) shopping cart and pay online. They will then be notified when the order is ready for pick-up in the selected store. 1. Identify one functional and one non-functional requirement related to that system (2 marks). 2. Describe how you would test those two requirements...
Which role has the PRIMARY responsibility for the documentation of control implementation? Systems security engineer Control assessor Information System Owner (ISO) Information Owner/Steward When making determinations regarding the adequacy of common controls for their respective systems, Information System Owner (ISO) refer to the Common Control Providers’ (CCP) Privacy Impact Assessment (PIA) Business Impact Analysis (BIA) Authorization Packages Vulnerability Scans An organization-wide approach to identifying common controls early in the Risk Management Framework (RMF) process does which of the following? Considers...
The purpose of security policies is to help mitigate identified risks. Writing these policies is easier once you have created an asset inventory list, prioritized that list, and identified the major risk exposures found in those assets. The task of identifying your IT assets begins with recognizing that your IT infrastructure and supporting resources can be divided into the seven IT domains. The benefit of identifying the assets and prioritizing them across those domains is being able to document policies...
Risk management in Information Security today Everyday information security professionals are bombarded with marketing messages around risk and threat management, fostering an environment in which objectives seem clear: manage risk, manage threat, stop attacks, identify attackers. These objectives aren't wrong, but they are fundamentally misleading.In this session we'll examine the state of the information security industry in order to understand how the current climate fails to address the true needs of the business. We'll use those lessons as a foundation...
Dropdown options:
1-risk/return
2-equal to/greater or less than
3-self contained/stand-alone
4-variance/standard deviation
5-variance/beta coefficient
6-diversifiable/non-diversiable
7-is/ is not
8-diversifiable/non-diversifiable
9-random/non random
10-decreasing/increasing
11-2000+/500
12-reduces/increases
13-systematic of market/unsystematic or company-specific
14-diversifiable/non diversifiable
1. Basic concepts - Risk and return Professor Isadore (Izzy) Invest-a-Lot retired two years ago from Exceptional College, a small liberal arts college in North Carolina after teaching corporate finance and investment theory for 35 years. Yesterday, Izzy appear on EC LIVE, a television show produced for the students,...
PART 2 THE COSO FRAMEWORK CASE (22 MINUTES - 29 MARKS) Wellness is nutrition supplement provider and is planning a public offering in the next two years. The CEO and CFO are close friends since high school and their spouses and children have become friends too. Wellness has an independent audit committee of board of directors that oversees the external and internal auditors. The audit committee also sets management compensation based on financial results. The company is planning an expansion...
LO 10-6, 10 10-36 Based on an assessment of audit risk, the auditors are concerned with the following two risks: 1. The risk that that the client might be making duplicate payments to vendors. 2. The risk that the client's accounting clerk might be making unauthorized payments to himself. a. Assuming that the client has a manual accounting system, describe how the auditors can design a test to identify the duplicate payments and unauthorized payments. b. Assuming that the client...
A new version of the operating system is being planned for installation into your department’s production environment. What sort of testing would you recommend is done before your department goes live with the new version? Identify each type of testing and describe what is tested. Explain the rationale for performing each type of testing. [ your answer goes here ] Would the amount of testing and types of testing to be done be different if you were installing a security...
ask back to top Background You are a manager in the audit division at Miller Yates Howarth (MYH), an accounting firm with offices throughout the major regional centres of NSW and Queensland. Although a medium sized firm by national standards, MYH is the second largest regional accounting firm in Australia. Most of MYH’s audit clients are in the agriculture, mining, manufacturing and property industries. All those industries are currently under pressure, either from a downturn in commodity prices or fierce...