Reference no: EM132490384

Question - An employee at Human Resource department (HR) at XYZ University decides to visit work on a Sunday evening. He has a key to the outside door, and since there is no key required for the computer room, he simply walks into the computer room. The employee is really one of the nation's most notorious computer programmer/hackers who had been convicted five time for manipulating various firms' data files. He opens the documentation bookcase, located in the computer room and finds the procedural documentation, the systems documentation, user manuals, application documentation, and operator manuals. He examines the documentation to understand the payroll program in HR and to find the location of the payroll files. He accesses the information systems library in HR and accesses the payroll program, reprograms it, and runs a payroll job that creates one electronic funds transfer (to a new account opened by the operator under an assumed name). On Monday, the employee transfers the funds to a Swiss bank account and does not show up for work.

Required - List any internal controls violated in this situation and propose a solution either to prevent, detect or correct it.