Why is it risky to allow programmers to create user subschemas and assign access authority to users? What unethical technique do programmers sometimes use when they are not allowed to assign access authority to users?

Why is it risky to allow programmers to create user subschemas and assign access authority to users? What unethical technique do programmers sometimes use when they are not allowed to assign access authority to users?

Accounting Information Systems

10th Edition

ISBN:9781337619202

Author:Hall, James A.

Publisher:Hall, James A.

Chapter11: Enterprise Resource Planning Systems

Section: Chapter Questions

Problem 10MCQ

See similar textbooks

Related questions

Q: How can the use of passwords actually circumvent security? What actions can be taken to minimize…

A: A password is a combination of letters (eg. a, b, E, etc.), numbers (eg. 1,4,7, etc.) or symbols…

Q: Which of the following is NOT a control implication of distributed data processing? a. redundancy b.…

A: Distributed data processing is a computer network system in which different computers across the…

Q: You have a client where you are not required to test their controls. However you may choose to do…

A: We perform the test of controls to evaluate whether the controls are working effectively for two…

Q: How do automated authorization procedures differ from manual authorization procedures?

Q: Now consider “segregation of duties.” Determine why it is important in an IT environment. What are…

A: Introduction:- Segregation of Duties is a basic building block of sustainable risk management and…

Q: Are computer ethical issues new problems or just a new twist on old problems?

A: Ethics: Ethics can be defined as a conduct adopted by an individual in making the selection between…

Q: Discuss how EDI creates an environment in which sensitive information, such as inventory amounts and…

A: Electronic Data Interchange: Electronic data interchange (EDI) is the channel between the computer…

Q: What is meant by data mining, and why must technical analysts be careful not to engage in it?

A: Data mining: Data mining is considered as a process utilized by corporations to turn raw data in to…

Q: What is the importance of using an isolated environment to perform penetration testing? What are the…

A: Will be explain:

Q: Explain why deficiencies in internal controls might not always result in significant misstatements…

A: Internal controls are the systems, rules, and processes implemented by a company to ensure the…

Q: Why is human behavior considered one of the biggest potential threats to operating system integrity?

A: Operating system: The system which provides the basic functioning of a device by interconnecting the…

Q: What is the fundamental concept behind the rule of least access? Explain why this is a potential…

Q: Which of the following is NOT a test for identifying application errors? a. reconciling the source…

A: Application errors are those errors which occur when an application fails to work according to the…

Q: Should the FASB have overturned the software revenue recognition portion within ASC 985-605? As part…

A: Financial accounting standards board (FASB): This is the organization that creates, develops, and…

Q: Your organisation is disturbed that some staff members are clocking on for others who do not report…

A: Accounting Information System: AIS collects, records, stores and processes accounting and other data…

Q: Which one of the following is NOT a limitation of internal control? Objectives of internal control…

Q: Give an explanation about this statement: Why does control or internal control fails?

A: Internal control refers to the process of implementing and exercising the various mechanisms, rules,…

Q: Which of the following is NOT an advantage ofcommercial software?a. Costb. Independencec.…

A: The software market has infiltrated every aspect of a business or service as technology has…

Q: What does auditing around the computer mean versus auditing through the computer? Why is this so…

A: Auditing Around the Computer and Auditing Through the Computer: In auditing around the computer,…

Q: Which preventive, detective, and/or corrective controls would best mitigate the following threat,…

A: (e) The company should apply a preventive and detective control mechanism to remove internal control…

Q: In the absence of protocols, networks would be unusable. Describe the significance of these…

A: Answer: Concept: Network can be defined as the connection of devices sharing data provided under…

Q: What is the effect of not returning all client-provided documents upon request?

A: If an auditor is not returning all client provided documents upon request, then this act is an…

Q: User acceptance testing is more important in an object-oriented development process than in a…

Q: Even with a high-end machine and sufficient data indexes, your company's database application cannot…

A: This question deals with Your company's database application cannot handle the transaction load,…

Q: Identify instances for which feedback becomes useless in helping to control activities.

A: Definition: Internal Control: Internal control refers to the plan of a company. Implementation of…

Q: Describe an internal control that would prevent an employee from removing a computer and then…

A: Definition: Internal control: Internal control is a process which ensures continuous reliability of…

Q: If detective controls signal error flags, why shouldn’t these types of controls automatically make a…

Q: ntages of using different man

A: Software is combination of many program that works together to achieve a desired function. These…

Q: Auditors of ERP systemsa. need not be concerned about segregation of duties because these systems…

A: Auditors of Enterprise Resource Planning: The responsibility of an auditor is to gather knowledge…

Q: Networks would be inoperable without protocols. Explain their importance and what functions they…

A: Protocol: Protocols are the rules and instruction which are formed and followed to send or receive…

Q: What are the computer ethical issues regarding unemployment and displacement?

A: Computer Ethical Issues Regarding Unemployment and Displacement In a new age of technology world,…

Q: How can an organisation use their information system to prevent employees from making inappropriate…

A: Here discuss about the details about find out of the fraudulent purchases which are related with the…

Q: ERP systems use the best-practices approach in designing their applications, yet goodness of fit is…

A: ERP: Enterprise Resource Planning is management software that helps in integrating all the…

Q: Your para-planner sends out unauthorized information to your client. Your client acts on the…

A: Paraplanners are junior members of a financial planning team. They are responsible for collating…

Q: Which of the following is true of the correcting entry method? a.It cannot be used to correct a…

A: A correcting entry is a journal entry used to rectify the net effect of an error.

Q: During a test data procedure, why should the developers bother testing bad data?

Q: What are the computer ethical issues regarding misuse of computers?

A: Ethics is an internal mechanism of an individual which can be applied to various situations to…

Q: Controls over data management systems fall into two categories: access controls and backup controls.…

A: Data Management System: It is a software program that is used to create, modify, retrieve, and…

Q: The quality of the environment in which internal control operates has a pervasive effect on many…

A: Concept Pervasive effect Pervasive effect means that the effect is spread to most of…

Q: Explain why monitoring alone cannot completely eliminate the agency costs

A: The costs incurred as a result of conflict of interest between company and its stakeholders is known…

Q: Why is segregation of duties important in an IT environment. What are some advantages of using IT…

A: Segregation of Duties is a critical component of risk management and internal controls in a…

Q: Why bother with pseudocode? Why not spend the time developing actual source code?

Q: Why is it often difficult to obtain competent and meaningful user involvement in the SDLC?

A: System Development Life Cycle (SDLC): System Development Life Cycle (SDLC) is a system development…

Q: Discuss how rushing the system’s requirements stage may delay or even result in the failure of a…

Q: Which ways do malicious parties use side-channel type attacks to trick users into believing a…

A: First of all here i am considering CA as certifying Authority. Let's Begin, What is Digital…

Question

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Step by step

Solved in 2 steps with 2 images

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, accounting and related others by exploring similar questions and additional content below.