Controls by management while taking a risk, Other Subject

Assignment Help:

Controls 

When Management chooses to moderate a risk, they will do so by execute one or more of three dissimilar types of controls.

Administrative

Administrative controls (also called procedural controls) consist of accepted written, procedures, standards, policies and strategy. Administrative controls form the framework for running the business and organization people. They notify people on how the business is to be run and how day to day operations are to be conducted. Regulation and rules created by government bodies are also a type of managerial control because they notify the business. Some industry sectors have policies, events, standards and guidelines that must be followed - the Payment Card Industry (PCI) Data Security Standard required by master card and visa is such an instance. Other examples of administrative controls consist of the corporate password policy, security policy, hiring policies and disciplinary policies.

Administrative manage form the basis for the selection and implementation of logical and physical controls. Physical and Logical controls are manifestations of administrative controls. Administrative controls are of principal importance.

Logical

Logical controls (also called technical controls) use software and data to control and monitor access to information and computing systems. For instance: network, passwords and host based network intrusion detection systems, firewalls, data encryption and access control lists,are rational controls.

An significant logical control that is often overlooked is the principle of least privilege. The standard of least license requires that an entity, system or program process is not arranged any more access privileges than are necessary to execute the assignment. A blatant example of the failure to adhere to the principle of least opportunity is logging into Windows as user manager to examine Email and surf the Web. Contravention of this principle can also occur when an individual collects additional access privileges over time. This occurs when employees' job duties change, or they are promoted to a new position, or they transfer to one more section. The access rights required by their new duties are frequently added onto their previously existing access rights which may no longer be necessary or suitable.

Physical

Physical controls check and control the environment of the work place and computing conveniences. They also control and monitor access to and from such services. For instance: locks, doors, heating and air conditioning, smoke and fire alarms, fire cameras, barricades ,suppression systems,  fencing,  cable locks, security guards, etc. Separating the network and work place into functional areas are also physical controls.

An significant physical control that is often overlooked is the separation of duties. division of duties make sure that an individual can not entire a serious task by himself. For instance: an employee who submits a request for repayment should not also be able to approve payment or produce the ensure An applications programmer should not also be the server manager or the database administrator - these roles and responsibilities must be estranged from one another.


Related Discussions:- Controls by management while taking a risk

Boolean algebra, let f(x,y,z)=xy''+xyz''+x''yz'' show that f(x,y,z)+xz''=f(...

let f(x,y,z)=xy''+xyz''+x''yz'' show that f(x,y,z)+xz''=f(x,y,z)

Describe the key elements in a therapeutic contract, Problem 1: a) Des...

Problem 1: a) Describe the key elements in a therapeutic contract. b) How do these relate to the ethical obligations of the counselor? c) Discuss what happens when th

Geography, can you help me with my homework please im in 7th grade and im h...

can you help me with my homework please im in 7th grade and im having a hard time with my homework

Aims of education, mention the aims of education in present scenario

mention the aims of education in present scenario

Describe language development in deaf children, Describe language developme...

Describe language development in deaf children. How is it similar, in the early stages, to language development in hearing children? What is "homesign" and what does it suggest abo

Electronic benefit transfer, Electronic Benefit Transfer Electronic Fun...

Electronic Benefit Transfer Electronic Funds Transfer at Point of Sale (EFTPOS) is an Australian and New Zealand electronic processing system for credit cards, debit cards and

Explain any five differences between dyeing and printing, Question 1 Expla...

Question 1 Explain any five differences between dyeing and printing Question 2 Describe any five synthetic dyes along with its suitability and properties Question 3

Modern, Modern, Contemporary, and Postmodern Art: Generally, contempo...

Modern, Contemporary, and Postmodern Art: Generally, contemporary art is described as any form of art in any medium that is generated in the present day. Though, within the a

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd