Please enable JavaScript.
Coggle requires JavaScript to display documents.
General Computer Controls Pt 2 - Coggle Diagram
General Computer Controls Pt 2
A purchased package system consist of 2 sub-sections
Implementation and testing of packages
4.) Access controls Continued
5.) Communication lines and networks:
Identification data
Different routes for sensitive data
Dial & dial back
Encryption of data
Passwords
6.) Password control:
Not easily guessed not shown on screen
Password strength:
Minimum 6 characters (Minimum length
Alpha /numerical
CAPITAL LETTERS AND small caps
and other - ! @ # *;
Changed regularly
Automatic system request
Re-use of password prohibited.
Confidentiality emphasised
Cancelled on resignation/ dismissal
Cancelled after period of inactivity
Use for authorisation
Limit access to part of system
Limit access to certain times of day
Authorisation levels linked
7.) Program libraries:
Passwords
Updating authorised
Access to backup programs controlled by access software
8.) Utilities
Stored separately
Use logged and reviewed
(These include antivirus, backup, disk repair, file management, security, and networking programs)
5.) Computer operating controls
Controls include:
Set-up and execution of programmes
Use correct programmes and data files
Hardware functioning
Operating procedures
Scheduling of processing
Objective:
Ensuring procedures applied correctly and consistently during processing.
Examples of these types of controls include, but are not limited to the following:
Scheduling of processing.
Set-up and execution of programs
The must be adequate user manuals in place;
Competent person to assist
There must be standardised procedures and operating procedures for the users of the system to follow;
Procedure manuals for staff
There must be continuous monitoring and review of the functioning of the computer hardware
Operating procedures
Segregation of duties
Rotation of duties
Operating instructions and manuals
Logs
Hardware checks
Supervision and review
Test against processing log
Use correct programs and data files.
Supervision and review