The files both on-site and off-site should be password protected and encrypted to guard against alteration and unauthorized disclosure. The backup files should be kept locked in a secure place. 12.11 Match the threats in the first column to the appropriate control procedures in the second column (more than one control may address the same threat). Threat Applicable Control Procedures _a,p__ Uncollectible sales Restrict access to master data. _g,i__ Mistakes in shipping Encrypt customer information while orders to customers. in storage. __o_ Crediting customer Backup and disaster recovery payments to the wrong procedures. account. _f,m,o__ Theft of customer Digital signatures. payments. _e,j,k__ Theft of inventory Physical access controls on inventory by employees. __l_ Excess inventory. Segregation of duties of handling cash and maintaining accounts receivable. _a__ Reduced prices for sales Reconciliation of packing lists with to friends. sales orders. _d__ Orders repudiated Reconciliation of invoices with by customers who deny packing lists and sales orders. placing them. _h,q__ Failure to bill Use of bar-codes or RFID tags. customers. _h__ Errors in customer Periodic physical counts of inventory invoices _m,n_ Cash flow problems Perpetual inventory system. _c__ Loss of accounts Use of either EOQ, MRP, or JIT receivable data inventory control system. __a,b_ Unauthorized Lockboxes or electronic lockboxes. disclosure of customer personal information. _g,r__ Failure to ship orders Cash flow budget to customers. Mail monthly statements to customers. Credit approval by someone not involved in
The files both on-site and off-site should be password protected and encrypted to guard against alteration and unauthorized disclosure. The backup files should be kept locked in a secure place. 12.11 Match the threats in the first column to the appropriate control procedures in the second column (more than one control may address the same threat). Threat Applicable Control Procedures _a,p__ Uncollectible sales Restrict access to master data. _g,i__ Mistakes in shipping orders to customers. Encrypt customer information while in storage. __o_ Crediting customer payments to the wrong account. Backup and disaster recovery procedures. _f,m,o__ Theft of customer payments. Digital signatures. _e,j,k__ Theft of inventory by employees. Physical access controls on inventory __l_ Excess inventory. Segregation of duties of handling cash and maintaining accounts receivable. _a__ Reduced prices for sales to friends. Reconciliation of packing lists with sales orders. _d__ Orders repudiated by customers who deny placing them. Reconciliation of invoices with packing lists and sales orders. _h,q__ Failure to bill customers. Use of bar-codes or RFID tags. _h__ Errors in customer invoices Periodic physical counts of inventory _m,n_ Cash flow problems Perpetual inventory system. _c__ Loss of accounts receivable data Use of either EOQ, MRP, or JIT inventory control system. __a,b_ Unauthorized disclosure of customer personal information. Lockboxes or electronic lockboxes. _g,r__ Failure to ship orders to customers. Cash flow budget Mail monthly statements to customers. Credit approval by someone not involved in
rais12_Sm_CH12.docx