The internal auditor of a small company has recommended to the CEO that it invest in a disaster recovery plan (DRP) because of several identified vulnerabilities. Traditional in-house DRP approaches are, however, not a viable option because the company lacks the necessary IT resources to implement and manage these tasks. The auditor has suggested that outsourcing disaster recovery to a cloud-based service provider may be a reasonable alternative. The CEO has no experience with cloud computing and has asked the internal auditor to provide him with more information. Required: Prepare a report outlining cloud computing. Your report should address the following: Describe how the services provided under cloud computing relate to disaster recovery planning. Outline the risks associated with this technology

The internal auditor of a small company has recommended to the CEO that it invest in a disaster recovery plan (DRP) because of several identified vulnerabilities. Traditional in-house DRP approaches are, however, not a viable option because the company lacks the necessary IT resources to implement and manage these tasks. The auditor has suggested that outsourcing disaster recovery to a cloud-based service provider may be a reasonable alternative. The CEO has no experience with cloud computing and has asked the internal auditor to provide him with more information. Required: Prepare a report outlining cloud computing. Your report should address the following: Describe how the services provided under cloud computing relate to disaster recovery planning. Outline the risks associated with this technology

Accounting Information Systems

10th Edition

ISBN:9781337619202

Author:Hall, James A.

Publisher:Hall, James A.

Chapter8: Financial Reporting And Management Reporting Systems

Section: Chapter Questions

Problem 17P

See similar textbooks

Similar questions

The internal auditor of a small company has recommended to the CEO that it invest in a disaster recovery plan (DRP) because of several identified vulnerabilities. Traditional in-house DRP approaches are, however, not a viable option because the company lacks the necessary IT resources to implement and manage these tasks. The auditor has suggested that outsourcing disaster recovery to a cloud-based service provider may be a reasonable alternative. The CEO has no experience with cloud computing and has asked the internal auditor to provide him with more information. Required: Prepare a report outlining cloud computing. Your report should address the following: List the key features of cloud computing
Which of the following statements is most accurate? a. ERP systems are commercial software packages that are sometimes called turnkey systems because they can be implemented by the user with little or no modification. b. Substantive tests provide evidence focused on the system controls. c. Public accounting firms that provide attest services are not allowed under SOX to offer IT advisory services. d. Both small and large firms that have standardized information needs are potential customers for commercial software. e. External auditors may rely on the work of internal auditors only if they report to the controller or the CEO of the client company.
You overheard a friend at a party say that computers and information technology will greatly decrease the demand for auditors. Do you believe this to be true. How would you respond to this comment?
You are the systems analyst of Crabtree Computers Limited. Several recent incidents of employee errors and omissions have made you realized that there are certain flaws in the internal controls and auditing systems of the company. You decided to take a number of steps to mitigate the existing risks and to improve the audit and control processes. You are concerned with the segregation of duties. Required 1. What functions must be separated? If ideal segregation of duties is not economically feasible, what are some compensating controls that would help reduce the risk of fraud or error? 2. Using a flowchart diagram, explain the risk assessment process that you will implement at Crabtree Computers Limited to endeavour to improve the current system. 3. The information system of Crabtree Computers Ltd. is deemed to be 90% reliable. A major threat in the procurement process has been discovered with an exposure of $300,000. Two control procedures are identified to…
After finishing your accounting degree, you joined an accounting firm. This is a medium-size accountingfirm with a reasonable range of clients. You are in an engagement meeting with one of your clients, andyour client's management raises some concerns. In particular, the management is concerned that theaudit tests that you perform will disrupt operations. Your client has recently implemented a datawarehouse. The management suggests that you draw the data for analytical reviews and substantivetesting from the data warehouse instead of the operational database. Further, the management pointsout that operational data are copied weekly into the data warehouse, and all data you need are containedthere.Required: Based on the given scenario, outline your response to the management's proposal and mentionany concerns you might have.
Some people believe database technology may eliminate the need for double-entry accounting. This creates three possibilities: (1) the double-entry model will be abandoned; (2) the double-entry model will not be used directly, but an external-level schema based on the double-entry model will be defined for accountants’ use; or (3) the double-entry model will be retained in database systems. Which alternative do you think is most likely to occur? Why?
Internal Control Considerations in End-User Computing Environments. Because of theuse of personal computers by many businesses, audit teams must know about the potentialinternal control weaknesses inherent in such an environment. This knowledge is crucial ifaudit teams are to make a proper assessment of the related control risk and to plan an effective and efficient audit approach.Required:In the following case study, assume that you are participating in the audit of Chicago Appliance Company and that the background information was obtained during the planning phaseof the engagement. You have been asked to (a) consider the potential internal control weaknesses that exist in this end-user application and (b) assess how those internal control weaknesses could alter the audit plan for the current year.Background InformationChicago Appliance is a wholesale distributor of electric appliances. Its sales in each of thelast two years have been approximately $40 million. All accounting…
Assume Ethan sets a meeting with Vick in two days to follow-up on his request. Vick has decided not to be part of the cover-up. Use the GVV framework to help Vick prepare for the meeting. Consider the following: What should Vick say to counteract Ethan's request? How might Vick's intended action affect the company and the external auditors? Who can Vick go to for support?
Suppose your company has built a database application that runs on a centralized database, but even with a high-end computer and appropriate indices created on the data, the system is not able to handle the transaction load, leading to slow processing of queries. What would be some of your options to allow the application to handle the transaction load?
Companies of all sizes try to reduce business risks, create disaster recovery plans, and also purchase insurance for what they cannot completely control. Therefore, the business risk is the risk that: Select one: a.The auditor will give an inappropriate auditor’s opinion when the financial report is materially misstated b.The entity’s business objectives will not be attained due to the external and internal environment affecting the entity and the industry in which it operates. c. An error will occur given the environmental characteristics of the account balance. d.The auditor will be exposed to loss to their professional practice from litigation or adverse publicity arising in connection with an audit.
You are conducting substantive tests on the accounts receivable file to verify its accuracy. The file is large, and you decide to test only a sample of the records. Because of the complexity of the database structure, you cannot access the database directly. The client’s systems programmer uses a utility program to write a query that produces a flat file, which he provides for testing purposes. Required Discuss any concerns you would have as an auditor and any actions you would take.
Leonard Moses is planning to grow its customer base and is in the process of creating an online web-based sales ordering system for customers to purchase products using personal credit cards for payment. At a recent meeting with the internal auditors, it was highlighted that there are risk associated with this system. Identify three risks related to an online sales system that management should consider. For each risk, identify an internal control that could be implemented to reduce that risk.