Riordon Manufacturing Audit Risk
Introduction
As Information Systems become more complex and business organizations become better prepared at protecting these systems so has the means in which attacks on these systems evolved. Many new issues have emerged and are changing the way in which or world views hackers and the chaos that these individuals can cause. The purpose of this section is to discuss some of the most visual and controversial of these issues. Finding solutions to avoid these attacks are what drives the need for security and security systems to constantly evolve and adapt to new threats and avoid being overrun and or shut down due to malicious actions of hackers who only wish …show more content…
This challenge is so potentially perverse because it combines social engineering with software-based tools to provide a complex attack profile. Companies are fined millions of dollars for violating Information security laws and increasing the risk of sabotage. An organization have several overlapping IT security regulations with different controls, it can cause chaos and ambiguity with respect to which regulations apply, how it impacts internal audit, behavioral risk, operational risk, evidence, policies, and procedures, culture, and integrity. (360factors, …show more content…
Accessing data within an organization on a regular basis is much easier with the help of an insider, and security firms are reporting an increase in the number of data breach incidents that can be linked to an insider who has been coerced by the hackers into co-operating.
Riordan needs to make sure the applications used within the company are having good security in place where only the authorized users can access the information he is allowed to view and work on.
The applications, and any access logs are closely monitored to make sure any unauthorized user is not trying to gain access to confidential documents. The application should also restrict users with multiple sets of keys to be used in combination to login and gain access to make sure the authorized user is logging in.