Identify the it general control risks evident from the case

Reference no: EM132833699

Assignment: Midwest Health Systems

In this case, the context is Midwest Health Systems (Midwest) and the scenario is evaluating a enterpise information security architecture. Your analysis of this case will be framed around a number of questions that are presented at the end of this writeup. As laid out in our syllabus, your analysis should, at minimum, meet the "2-why" standard.

While you can find a number of strategies out there for conquering case analyses (many of them are very good), I recommend the approach of reading the case at least once without consideration of the questions. That opens the mind up to absorbing details that might otherwise erroneously get dismissed in a "know the questions, hunt for the answers" type of approach. After that, lay our your outline with each question framing a new major section. Then, re-read the case analysis and as you go through, build the outline of your answer with references to page numbers so you can quickly go back. Once the outline is built, you should have a clean connection between your point and some evidence from the case. At that point, it is a matter of polishing the communication without inadvertently changing the thesis.

The case can be found in your Harvard Coursepack, referenced in the Materials section of our syllabus. The case analysis must be submitted through Blackboard in Microsoft Word or .pdf format before 11:59pm Sunday, March 28th.

Case Analysis Questions:

1. Identify the IT general control risks evident from the case. For each risk identified, identifiy possible controls to mitigate those risks and explain why you believe the control would work.

2. Define residual risk and then identify at least three such risks from the case, mapping those examples conceptually to your definition of residual risk.

3. Do you agree with the audit team's conclusion that the only significant areas of concern in IT general controls are access security and change management? Please explain your answer at a "2-why" minimum standard.

4. What course(s) of action do you recommend that Nelson take based on your analysis of identified risks and suggested controls?

Reference no: EM132833699

Questions Cloud

Prepare the summary journal entry : Prepare the summary journal entry (or entries) to record the shipment of the six mixers (four from the 2020 sales and two from the 2021 sales)

Examples current events in the world : What are examples current events in the world that revolve around the category of Planning, Controlling and Organizing?

Do think a partnership that is teo family members : Do you think a partnership that is 2 family members or 2 friends more likely to survive than a partnership with 2 strangers that came together?

Determine the pinacle plantwide factory overhead rate : Pinacle Corp. budgeted $271,750 of overhead cost for the current year. Determine the Pinacle plantwide factory overhead rate

Identify the it general control risks evident from the case : Identify the IT general control risks evident from the case. For each risk identified, identifiy possible controls to mitigate those risks and explain.

What type of sampling method will you use : You will survey 50 people through any method you choose to find out information on your topic. You will then calculate the statistics for your data. It is impor

Record one journal entry to account for the payment : Record one journal entry to account for the payment of federal taxes. All tax payments are made in a timely manner on the payment due date

Does maria have contract of service or contract for service : Does Maria have a contract of service or a contract for service with Morneau Insurance Company. As the company's Payroll Manager

Describe an ethical dilemma in business : Explain how you would address the dilemma. As you draft your initial thread, review the text materials, and research related sources.

User Account

All Pages