Audit finding: File storage rooms containing a variety of unmarked public and sensitive data were accessible to all employees. Which of the following is an administrative control to remediate the security violations in the data room? Responses Develop and distribute a policy addressing personnel access rules to different levels of data classification or a policy addressing where sensitive data is allowed to be stored Implement a SIEM rule to alert when unauthorized users attempt to enter the storage room containing sensitive data Implement a badge access system to monitor and grant or deny access based on specified permissions Update standards to include OWASP Top 10 guidance
Added by Matthew B.
Step 1
Step 1: Identify the need for controlling access to the file storage rooms containing public and sensitive data. Show more…
Show all steps
Your feedback will help us improve your experience
Akash M and 89 other AP CS educators are ready to help you.
Ask a new question
Labs
Want to see this concept in action?
Explore this concept interactively to see how it behaves as you change inputs.
Key Concepts
Recommended Videos
An auditor is examining the financial statements of a wholesale cosmetics distributor with an inventory consisting of thousands of individual items. The distributor keeps its inventory in its own distribution center and in two public warehouses. An electronic inventory file is maintained on a computer disk, and at the end of each business day, the file is updated. Each record of the inventory file contains the following data: · Item number. · Location of item. · Description of item. · Quantity on hand. · Cost per item. · Date of last purchase. · Date of last sale. · Quantity sold during the year. The auditor plans to observe the distributor's physical count of inventory as of a given date. The auditor will have available a computer tape of the data on the inventory file on the date of the physical count and a generalized audit software package. Required: The auditor is planning to perform basic inventory-auditing procedures. Identify the basic inventory-auditing procedures and describe how the use of the generalized audit software package and the tape of the inventory file data might help the auditor perform such auditing procedures. Organize your answer as follows: Basic Inventory - Auditing Procedure How a Generalized Audit Software Package and Tape of the Inventory File Data Might Be Helpful 1. Observation of the physical count, making and recording test counts where applicable 2. By determining which items are to be test counted by selecting a random sample of a representative number of items from the inventory file as of the date of the physical count
Akash M.
Access controls are often a target as an initial attack vector or to escalate privileges. Protections to prevent access controls from being used to successfully attack systems include (select all that apply): a. Invalidation of tokens (JWT) after logout. b. Model access controls should enforce record ownership. c. Deny by default. d. Implement access control mechanisms iteratively throughout the application.
The following data items are maintained in a company's database for each inventory item that it holds in stock: part number, part name, part description, bin location, unit price, unit cost, unit measure, quantity on hand, quantity on order, item activity, special prices allowed Required: List the audit objectives that you could accomplish by using generalized audit software to access and manipulate these data items. Briefly explain how you would use generalized audit software to accomplish these objectives. Hint: You might wish to consult a standard auditing textbook to find typical audit objectives and a typical audit program (set of audit procedures) for inventory. You should then try to work out how generalized audit software could be used to assists you in the execution of this program.
Recommended Textbooks
Computer Science and Information Technology
Introduction to Programming Using Python
Computer Science - An Overview
Transcript
Watch the video solution with this free unlock.
EMAIL
PASSWORD