Alejandro reviewed the user access protocols for Ponder Products. Alejandro is concerned that the accounting system could be subject to malicious attacks on user accounts that are currently protected with a username and password. The system has the capability to send a message to a user's cell phone or email address. How could Alejandro use the messaging capabilities of the system to further protect it from attack? Enable two-factor authentication Enable fingerprint scanners Enable read-only access for all users Enable administrator access for all users

Alejandro reviewed the user access protocols for Ponder Products. Alejandro is concerned that the accounting system could be subject to malicious attacks on user accounts that are currently protected with a username and password. The system has the capability to send a message to a user's cell phone or email address. How could Alejandro use the messaging capabilities of the system to further protect it from attack? Enable two-factor authentication Enable fingerprint scanners Enable read-only access for all users Enable administrator access for all users

FINANCIAL ACCOUNTING

10th Edition

ISBN:9781259964947

Author:Libby

Publisher:Libby

Chapter1: Financial Statements And Business Decisions

Section: Chapter Questions

Problem 1Q

See similar textbooks

Similar questions

A group of IT experts disclosed the “internet cookies” vulnerability of your organisation in a recent online security test. Describe to your management the security concerns that “internet cookies” portend?
One physical computer can be used to host multiple instances of operating systems, and multiple users can separately access those separate operating systems. This is an example of: A) blockchain. B) value chain. C)Virtualization. D)distributed computing. Controls that are designed to apply to an entire control environment are called:. A)Integrated controls. B)Application controls . C)General controls . D)Governance controls. This internal control framework is used by many public companies that file with the SEC in the United States: . A)COBIT. B)PCAOB. C) ERM. D)coso. In conversations, Bob told Alice that a property for sale had an "ocean view." She was so motivated that she made an offer and gave money as a down payment. When she went to see the property the ocean was not visible because it was too far away. Which element of fraud is illustrated by this story?. A) Misappropriation of assets. B)Corruption . C)Material fact .…
The four fundamental characteristics of blockchain ( decentralization, immutability,security, and transparency)create a system with: Distrust inthe quality of its data Trust, for asystem without the need forcentralized authority The needfor a lot of oversight Two manyusers to make it effective
As users determine new computer application needs, request must be sent to both the system programmers and the database administrator. Why is so important that these two group perform separate functions and what are these functions?
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (i)To facilitate working from home, an employee installed a modem on his office workstation. An attacker successfully penetrated the company’s system by dialing into that modem.
General Controls. Indicate the benefits of each of the following examples of general controls. a. Echo checks are designed and built into the computer by the manufacturer.b. The company schedules regular maintenance on its computer hardware.c. The company involves users in its design of programs and selection of prepackaged software and programs.d. New programs are tested and validated prior to being implemented.e. Documentation is required prior to modifying existing programs using “emergency”change orders.f. The duties of system analysts, programmers, and computer operators are appropriatelyseparated.g. Appropriate backup and data retention policies are implemented.h. The access rights granted to employees are periodically reviewed and evaluated, giving consideration to known changes resulting from promotions and transfers within the company.
Questionnaires can be administered both onpaper and via the Internet. Online questionnaires allow for the use of complex analysis tools and real-time results. However, online questionnaires have idiosyncratic challenges. Three such challengescan be computer access concerns, gettingusers to participate, and employee concerns for privacy of results. Discuss when each concern is likely to impact the onlinequestionnaire and how you would addresseach challenge
Control Objectives and Procedures Associations. Exhibit 7.64.1 contains an arrangement of examples of transaction errors (lettered a–g) and a set of client control procedures and devices (numbered 1–15). Make a copy of the exhibit page and complete the following requirements.Requireda. Opposite the examples of transaction errors lettered a–g, write the name of the transaction assertion clients wish to achieve to prevent, detect, or correct the error.b. Opposite each numbered control procedure, place an “X” in the column that identifies the error(s) the procedure is likely to control by prevention, detection, or correction.
sibility Mode Print Find The CEO of your company is concerned about cyber security and has asked you to perform a "breach of customer data” risk assessment. Beyond the costs of resolving the technical concerns, a breach of customer data will create potentially several unplanned costs such as: (1) forensic examination; (2) notification of customers and third parties; (3) increased call center costs; (4) public relations costs; (5) legal defense and potential settlements; and, (6) federal or state fines, penalties, and potential required future audits. You worked with the Director of Security to perform the risk assessment and your summary of the risk assessment is the following. The Director of Security believes there is only a 5% chance over the next three years of a breach of customer data. However, if a breach of customer data occurs the 10-50-90 range of impact to the company as measured in net present value is - $100M, -180M, and-250M respectively. The IT organization has suggested…
Identify two specific IT-related risks in computerized accounting information systems. Propose a strategy that might be implemented to mitigate or eliminate each selected risk. Be sure to effectively support your rationale.
Hackers can disguise their message packets to look as if they came from an authorized user and gain access to the host’s network using a technique calleda. spoofing.b. spooling.c. dual-homed.d. screening.