Advice

[Dom_]

Our business manager just emailed me this:

 

Suggest two additional management controls that computerised systems might have in order to maintain the integrity and confidentiality of the financial information

 

Any ideas?

 

Cheers,

 

Dom

[leco]

Our business manager just emailed me this:

 

Suggest two additional management controls that computerised systems might have in order to maintain the integrity and confidentiality of the financial information

Any ideas?

Cheers,

Dom

 

Difficult to answer as the question assumes a knowledge of what is currently in place.

[Guest TheLibrarian]

Card controlled access to the finance PC's.

 

Enforce complex passwords and agressive password aging policy.

 

Workstation hard drive encryption.

 

System password for booting.

 

Password protected / encrypted backups.

 

Entirely isolated finances network.

[budgester]

How about.....

 

1. Finance users with a clue about security.

 

2. More time to work on existing security rather than having to answer stupid questions.

[dhicks]

Suggest two additional management controls that computerised systems might have in order to maintain the integrity and confidentiality of the financial information

 

Sounds like an exam questions - are they asking for practical advice, or are they doing a GCSE or something?

 

I've just set up QuickBooks working over Terminal Services, so now our accounts department logs in to a TS server to do enter accounts information, no files full of accounts data go anywhere. I intend to add VPN access at some point too.

 

--

David Hicks