P1.E.2 Systems Controls & Security Measures

Question 1

Information System Controls

P1.E.2 Systems Controls & Security Measures

Answer 1

1. Software
2. Hardware
3. Data security
4. Administrative

Question 2

Threats to Information Systems

P1.E.2 Systems Controls & Security Measures

Answer 2

1. Input manipulation
2. Program alteration: trap-door
3. Direct file alteration
4. Data theft
5. Hardware theft
6. Sabotage
7. Virus: replicates data
8. Trojan Horse: appears useful but contains malicious code
9. Phishing: social engineering

Question 3

Threats to Information Systems
(Internet-Specific System Risks)

(P1.E.2 Systems Controls & Security Measures)

Answer 3

1. Interception data
2. User judgement
3. Direct attacks

Question 4

Application Controls

P1.E.2 Systems Controls & Security Measures

Answer 4

1. Input controls: inputs are accurate, complete and valid.
2. Processing controls: ensures the security, safety and validity of the data that has been input into the system. Ensures data is processed with no loss, deterioration or manipulation.
3. Output controls: maintain completeness and accuracy of data as well as ensuring no unauthorized users accessed data.

Question 5

Hot Site

P1.E.2 Systems Controls & Security Measures

Answer 5

Replication of company’s data center. Used as a back up to switch over in case of a regular system fail.

Question 6

Warm Site

P1.E.2 Systems Controls & Security Measures

Answer 6

Site where hardware and software are kept.

Question 7

Cold Site

P1.E.2 Systems Controls & Security Measures

Answer 7

Contains infrastructure to support company’s data processing equipment but doesn’t contain hardware.

Question 8

How does segregation of duties enhance system security?

P1.E.2 Systems Controls & Security Measures

Answer 8

1. Authorization: should be separate from recording transactions
2. Recordkeeping: should be separate from authority to take custody of assets
3. Custody: should be separate from reconcilement
   4 Reconciliation: should be separate from other functions responsibilities

Question 9

Firewalls

P1.E.2 Systems Controls & Security Measures

Answer 9

1. Security system that restricts access between networks
2. Deters unauthorized access to a network
3. Used to limit traffic that is allowed on a network

Question 10

Most appropriate control to verify user is authorized to execute a particular online transaction

(P1.E.2 Systems Controls & Security Measures)

Answer 10

Compatibility check. It verifies user access information, such as user ID, password and security profile is correct.