Core Concepts of Accounting Information Systems, 12th Edition

PART FOUR

INTERNAL CONTROL SYSTEMS AND COMPUTER CRIME, ETHICS, AND PRIVACY

CHAPTER 9Introduction to Internal Control Systems

CHAPTER 10Computer Controls for Organizations and Accounting Information Systems

CHAPTER 11Computer Crime, Fraud, Ethics, and Privacy

Managers have many responsibilities within an organization and one of the most important is to safeguard the assets of the firm. This is no small task. Although people normally think first about safeguarding cash and other physical assets, think about the huge electronic data repositories of most firms. This might well be the most valuable asset the firm possesses and protecting this sensitive information, both proprietary and client data, is critical.

Chapter 9 introduces the subject of internal control using the 1992 COSO Report which identifies the five components of an internal control system. Next we offer updates and additional guidance that COSO has published since the 1992 Report. We also expand upon the concept of enterprise-wide risk management, which must be considered first to determine what controls are necessary to mitigate the risks that are identified.

Chapter 10 examines various types of computer controls that are commonly used within AISs: enterprise level controls, general controls for IT, and application controls for transaction processing. This chapter also includes a discussion of business continuity planning. In light of the fact that natural and man-made disasters are becoming more frequent, firms ...