Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (j) An attacker gained access to the company’s internal network by installing a wireless access point in a wiring closet located next to the elevators on the fourth floor of a high-rise office building that the company shared with other companies.

Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (j) An attacker gained access to the company’s internal network by installing a wireless access point in a wiring closet located next to the elevators on the fourth floor of a high-rise office building that the company shared with other companies.

Contemporary Auditing

11th Edition

ISBN:9781337650380

Author:KNAPP

Publisher:KNAPP

Chapter3: Internal Control Issues

Section3.8: The Boeing Company

Problem 6Q

See similar textbooks

Related questions

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: Internal controls: The process is designed, implemented, and maintained by those charged with…

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: PREVENTIVE CONTROLS : 1. IF THERE IS ANY INFORMATION ABOUT THE COMPANY'S CUSTOMERS THAT COULD…

Q: A multimediacourse graduate used design software to create paychecks that lookedidentical to those…

A: The question is related to computer instruction fraud. It inculdes tampering with the software that…

Q: The following is a list of 10 common security problems. For each problem, describe why it is a…

Q: Identify two to three (2-3) information technology tools that affect privacy. Next, discuss the main…

A: The Answer :

Q: Listed here are five scenarios. For each scenario, discuss the possible damages that can occur.…

A: Note: Since you have posted a question with multiple sub-parts, we will solve the first three…

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: (e) The company should apply a preventive and detective control mechanism to remove internal control…

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: A criminal remotely accessed a sensitive database using the authentication credentials (user ID…

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: Internal Controls The Internal controls are written procedures that are introduced to ensure that…

Q: A procurement agent for a large metropolitan building authority threatens to blacklist a building…

Q: Which of the following is true of internal control? One of the major purposes of internal control is…

A: Internal controls are the procedures that are implemented by the entity to ensure that the correct…

Q: The best way to enact a broad fraud prevention program is toa. Install airtight control systems of…

A: Fraud is the act of deliberately conducting false reporting of facts, to acquire funds or property…

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: An organization bought the main "off-the-rack" internet business programming for connecting its…

Q: Select the correct answer(s) for the following multiple-choice questions. Note that there may be…

A: b) The type of computer fraud that is the most difficult because it requires the most skill is…

Q: The best way to enact a broad fraud prevention program is toa. Install airtight control systems of…

A: Fraud is the act of deliberately conducting false reporting of facts, to acquire funds or property…

Q: Select the correct answer(s) for the following multiple-choice questions. Note that there may be…

A: Fraud: Fraud is gaining unfair benefits by doing something illegally such as "fake statement",…

Q: Is it an entity inherent risk for the information below? A computer network and personal computers…

A: Inherent risk is the risk of material misstatement in financial statements before considering the…

Q: rom home, an employee installed a modem on his office workstation. An attacker successfully…

A: Internal ControlsThe Internal controls are written procedures which are introduced to ensure that…

Q: Computer Frauds and Missing Control Procedures. The following are brief stories ofactual employee…

A: "Since you have posted a question with multiple sub-parts, we will solve first three sub-parts for…

Question

Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why?

(j) An attacker gained access to the company’s internal network by installing a wireless access point in a wiring closet located next to the elevators on the fourth floor of a high-rise office building that the company shared with other companies.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, accounting and related others by exploring similar questions and additional content below.

Similar questions

Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (i)To facilitate working from home, an employee installed a modem on his office workstation. An attacker successfully penetrated the company’s system by dialing into that modem.
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (g) Attackers broke into the company’s information system through a wireless access point located in one of its retail stores. The wireless access point had been purchased and installed by the store manager without informing central IT or security.
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (c) A criminal remotely accessed a sensitive database using the authentication credentials (user ID and strong password) of an IT manager. At the time the attack occurred, the IT manager was logged into the system at his workstation at company headquarters.
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (a) An employee’s laptop was stolen at the airport. The laptop contained personally identifying information about the company’s customers that could potentially be used to commit identity theft.
The following is a list of 10 common security problems. For each problem, describe why it is a problem and choose a control plan from this chapter that would prevent or detect the problem from occurring. Criminals posing as small business owners obtained names, addresses, and social security numbers from an organization whose business is providing such information only to legitimate customers who have a right to the data. An executive of a financial services firm implements a wireless network so that she can work at home from anywhere in her house. After setting up the network, she logs on using the default password. An organization’s top salesman uses a consumer-grade instant messaging (IM) client (e.g., AOL Instant Messaging). Such clients bypass antivirus and spam software, don’t have auditing and logging capabilities, and allow users to choose their IM names. A financial analyst’s laptop was stolen from his car. The laptop contained the names and social security numbers of…
Listed here are five scenarios. For each scenario, discuss the possible damages that can occur. Suggest a preventive control.a. An intruder taps into a telecommunications device and retrieves the identifying codes and personal identification numbers for ATM cardholders. (The user subsequently codes this information ontoa magnetic coding device and places this strip on a piece of cardboard.)b. Because of occasional noise on a transmission line, electronic messages received are extremely garbled.c. Because of occasional noise on a transmission line, data being transferred is lost or garbled.d. An intruder is temporarily delaying important strategic messages over the telecommunications lines.e. An intruder is altering electronic messages before the user receives them.
Listed here are two scenarios. For each scenario, discuss the possible damages that can occur.Suggest a preventive control.A. An intruder taps into a telecommunications device and retrieves the identifying codes andpersonal identification numbers for ATM cardholders. (The user subsequently codes thisinformation onto a magnetic coding device and places this strip on a blank bank card.)B. Because of occasional noise on a transmission line, electronic messages received are extremelygarbled.Problem # 4 (30
3. Which of the following is not a computer facility control? (a) Place the data processing center where unauthorized individuals cannot gain entry to the facility. (b) Limit access to the data processing center all employees of the company. (c) Buy insurance to protect against loss of equipment in the computer facility. (d) Use advanced technology to identify individuals who are authorized access to the data processing center. 4.For internal control over computer program changes, a policy should be established requiring that: (a) All proposed changes be approved by a responsible individual and logged. (b) The programmer designing the change should be responsible for ensuring that the revised program is adequately tested. (c) All program changes be supervised by the information system control group. (d) To facilitate operational performance, superseded portions of programs should not be deleted from the program run manual.
3. Which of the following is not a computer facility control? (a) Place the data processing center where unauthorized individuals cannot gain entry to the facility. (b) Limit access to the data processing center all employees of the company. (c) Buy insurance to protect against loss of equipment in the computer facility. (d) Use advanced technology to identify individuals who are authorized access to the data processing center. 4.For internal control over computer program changes, a policy should be established requiring that: (a) All proposed changes be approved by a responsible individual and logged. (b) The programmer designing the change should be responsible for ensuring that the revised program is adequately tested. (c) All program changes be supervised by the information system control group. (d) To facilitate operational performance, superseded portions of programs should not be deleted from the program run manual. 5. Auditing "around the computer": (a) Assumes that accurate…
Which preventive, detective, and/or corrective controls would best mitigate the following threat, and why? (f) A company purchased the leading “off-the-shelf” e-commerce software for linking its electronic storefront to its inventory database. A customer discovered a way to directly access the database by entering appropriate SQL code.
Your friend's small business is heavily dependent on information systems and needs to protect them at all costs. What are some of the information security threats and how should these risks be controlled?
Write a one-page memo analyzing the relationship between fraud and internal controls. Explain the principles underlying these approaches. Include a note on the limitations of internal controls.