系统分析与设计 第十四章ppt.ppt

Systems Analysis and Design in a Changing World, 4th Edition * Objectives of Integrity Controls Ensure that only appropriate and correct business transactions occur Ensure that transactions are recorded and processed correctly Protect and safeguard assets of the organization Software Hardware Information Systems Analysis and Design in a Changing World, 4th Edition * Points of Security and Integrity Controls Systems Analysis and Design in a Changing World, 4th Edition * Input Integrity Controls Used with all input mechanisms Additional level of verification to help reduce input errors Common control techniques Field combination controls Value limit controls Completeness controls Data validation controls Systems Analysis and Design in a Changing World, 4th Edition * Database Integrity Controls Access controls = management user Data encryption Transaction controls = transaction log Update controls Backup and recovery protection Systems Analysis and Design in a Changing World, 4th Edition * Output Integrity Controls Ensure output arrives at proper destination and is correct, accurate, complete, and current Destination controls - output is channeled to correct people Completeness, accuracy, and correctness controls Appropriate information present in output Systems Analysis and Design in a Changing World, 4th Edition * Integrity Controls to Prevent Fraud Three conditions are present in fraud cases Personal pressure, such as desire to maintain extravagant lifestyle Rationalizations, including “I will repay this money” or “I have this coming” Opportunity, such as unverified cash receipts Control of fraud requires both manual procedures and computer integrity controls Systems Analysis and Design in a Changing World, 4th Edition * Fraud Risks and Prevention Techniques Systems Analysis and Design in a Changing World, 4th Edition * Designing Security Controls Security controls protect assets of organization from all threats External threats such as hackers, viruses,