Question

Review the Robatelli's Pizzeria Case Study.

Ensure proper governance of Information Technology assets.

Create a 700- to 1,050-word risk assessment process for IT functions.

Describe the objectives of governance of Information Technology and the general controls in an IT system.

Include a test of control activity in each of the following five categories:

1. Authentication
2. Network security
3. Physical security
4. Organizational structure
5. 5.Business continuity

Answer 1

Solution: The objectives of application controls ensure validity, completeness, and transaction accuracy. The categories are detailed below: Authentication • It denotes a vital step in maintaining internal controls. • It confirms user identity and users are been authenticated with passwords. • The companies provide unique id that permits access to approved systems. Network security • It allows organization to work at profitable levels, it introduces risk and hence it ensures security. • It is built on rules, policies and procedures created for IT risk prevention. • It monitors activities, unauthorized access and misuse. • Firewall implementation, authentication based privacy controls and encryption type determination are useful tools. Physical security • It ensures resource security. It protects personnel and equipment from harm. • It ensures protection from theft and damage of software. Organizational Structure • It could be developed by IT governance committee whose target is alignment of budget and IT investments with current business strategies. • It oversees any alteration if required. Business continuity • It helps to conduct business without interruptions.

• The continuity planning could identify and plan risks for avoiding obstacle in continuation of firm. • It helps creating back up data strategy and restore IT systems. It could be used as disaster recovery plan.