SarbanesOxleyFocus.com

February 28, 2009

Top 13 Electronic Data Interface (EDI) Security Risk

Filed under: design, download, implementation — admin @ 4:58 am

1. Loss of business continuity/going-concern problem. Inadvertent or deliberate corruption of EDI-related applications could a. ect every EDI transaction entered into by an organization, impacting customer satisfaction, supplier relations, and possibly business continuity eventually.

2. Loss of confidentiality of sensitive information. Sensitive information may be accidentally or deliberately divulged on the network or in the mailbox storage system to unauthorized parties including competitors.

3. Increased exposure to fraud. Access to computer systems may provide an increased opportunity to change the computer records of both a single organization and that of its trading partners by sta. of the trading parties or by third-party network

4. Manipulation of payment. A situation where amounts charged by or paid to suppliers are not reviewed before transmission. A erefore, there is a risk that payments could be made for goods not received, payment amounts could be excessive, or duplicate payment could occur. (more…)

Popularity: 36% [?]

February 22, 2009

Top 12 Application Control Risk and What Could Go Wrong (WCGW)

Filed under: checklist, control — admin @ 2:42 am

1. Weak security
2. Unauthorized access to data
3. Unauthorized remote access
4. Inaccurate information
5. Erroneous or falsified data input
6. Misuse by authorized end users
7. Incomplete processing
8. Duplicate transactions
9. Untimely processing
10. Communications system failure
11. Inadequate training (more…)

Popularity: 29% [?]

February 19, 2009

Download Sarbanes Oxley Testing Documentation Template

Filed under: control, template — admin @ 3:56 am

This Sarbanes Oxley Testing Documentation Template contain information about:

Sample Details
- What is being tested?
- What is the population? (List the entire population or reference where the population source.)
- How many items tested?
- How were items chosen?

Description of Validation Performed
Test procedures should only include steps that are actually performed in testing the control description from above.

Validation Results/Findings
The test results should answer the test procedures. The results should reference appropriate supporting documentation.
The exceptions should be listed out individually (with reference information) under the test result steps. (more…)

Popularity: 30% [?]

February 15, 2009

Five benefit of project management software

Filed under: program changes, sarbanes oxley — admin @ 5:10 am

1. Personal Gantt chart. Renders Gantt views such as those in Microsoft Project to outline each team member’s own tasks across multiple projects.

2. Task delegation. Once assigned by the project manager, tasks may be delegated from team leaders to team members or from peer to peer. A e delegation feature can also be disabled if desired.

3. View nonworking time. Team members can report nonworking time to the project manager, such as vacation or sick leave, and also report work time that cannot be devoted to the project. (more…)

Popularity: 21% [?]

February 9, 2009

Penalties and Requirements under Sarbanes Oxley Act

Filed under: control, reporting, sarbanes oxley — admin @ 10:33 am

Penalties and Requirements under Title VIII of the Act
It is a felony to knowingly destroy or create documents to “impede, obstruct, or influence” any existing or contemplated federal investigation.

Auditors are required to maintain “all audit or review work papers” for five years.

A statute of limitations on securities fraud claims is extended to five years from the fraud and two years after the fraud was discovered, from three years and one year, respectively.

Employees of issuers and accounting firms are extended “whistleblower protection” that would prohibit the employer from taking certain actions against employees who lawfully disclose private employer information to, among others, parties in a judicial proceeding involving a fraud claim. Whistleblowers are also granted a remedy of special damages and attorney’s fees.

Penalties and Requirements under Title IX of the Act
Maximum penalty for mail and wire fraud increased from five to ten years. (more…)

Popularity: 24% [?]

Newer Posts »

Powered by WordPress