Hi. I just wonder if someone can give me an advise?ACCG3058 IS AUDIT AND ASSURANCE IS AUDIT REPORT...

Question

Hi. I just wonder if someone can give me an advise?

ACCG3058 IS AUDIT AND ASSURANCE IS AUDIT REPORT Important note: This is an individual assignment. You must complete the task independently. If you submit a report that is similar to any of your classmate’s reports it will be considered academic dishonesty. Refer to the Macquarie University Academic Honesty Procedure and associated documents. Please also refer to the submission instruction as per unit guide. Estimated student workload: 40 hours Task Perform a web search on recent (in the past 3 years) articles to find an interesting case study, such as news articles in relation to IS risks. You will need to provide the URL link to the original case in the appendix when you submit the assignment. Assuming that you are an IS auditor, prepare an IS audit plan and report to the management of your client. The document must include the followings: 1) Executive Summary You will need to prepare an executive summary document (0.5 page maximum) to the board of directors. 2) Background to the Case Background to the client’s business and computerised environment. - This is to demonstrate your understanding of the client’s business and IS environment. 3) IS Risks Identify IS risks from the case study, including analysing the likelihood, level of risks and implications to the business. 4) Audit Areas, Audit Objectives and Procedures Prepare an audit plan outlining the areas that you propose to audit. In addition, you will need to include audit objectives and audit procedures for each of the area(s) that you plan to audit. 5) Audit Questions and Documents For each of the audit objectives, provide at least three examples of interview questions that you will use to gather evidence from clients, including naming relevant documents that you may want to obtain for the audit. 6) Control Recommendations 1 Provide a set of recommendations of control mechanism(s) to mitigate for each of the IS risks. Identify the benefits of your recommendation to your client. Note: You can make use or adapt the audit table when answering questions 4 to 6. Required Write a report that addresses all of the above sections. Format requirements: “Times New Roman” size 12 with 1.5 line spacing, approximately 1500 – 2000 words in total (not including references). You must include the total of words used in your report. The report should have appropriate headings and subheadings (including an introduction and conclusion). You must acknowledge the use of the work of others (e.g. the academic journal articles on which your report is based) using the Harvard referencing style (see http://www.lib.mq.edu.au/research/referencing.html). Any ideas or quotations must be correctly cited in the body of your report and a reference list must be provided at the end of your report. Once you have submitted your report, check the originality report in turn-it-in and ensure similarity with other sources is referenced. You can resubmit your report until the due date. Please note that the originality report for a resubmission takes 24 hours to be produced. Please ensure that you allow adequate time, if you are considering resubmission. Review the marking rubric so that you understand the expected standards and how you will receive feedback. Submission Students will need to upload their assignment to http://ilearn.mq.edu.au (Turn-it-in) by 11.59p.m. on Friday 8th April (Week 7) Otherwise your assignment will be considered late. Penalties Please refer to the Unit Guide for information on penalties that may apply for missing the deadline. Marking Criteria Available via the Turnitin Link. 2 http://ilearn.mq.edu.au/ 3

auditreportaccg3058-5gvqali5-1wddz5by.pdf

Chirag · Accepted Answer

INFORMATION SECURITY AUDIT REPORT
EXECUTIVE SUMMARY:
The report was an assessment summary of the Cloud-based scheduling platform FlexBooker that faces recently, breach of the data of their customers in large amount which affects some 3.7 million people in January 2022. To review this breach of data audit is done in Information Security department. During the audit, the effectiveness and safety of computer systemsin IT department is reviewed to check and ensure that all the computer systems were managed adequately or not, systems are controlled and are totally secured and also audits the managers, employees and other IT professionals by asking various questions to them regarding the incident.While auditing, all strong and weak areas of whole system are identified.Main focus is on weak areas due to which data is breached and now it is traded on hacker forums.
While auditing it was reviewed that due to denial-of-service attack, the operations of the company is disrupted on 23rd December just few days before the Christmas. Flexbooker also provide this information to its customers via email that some of their personal data had been compromised due to cyber security hack. Company works with AWS to cut off this attack as quickly as possible. To avoid such incidents and attacks, it was suggested that sensitive data must be protected from such viruses and hacks in future. And verify the all-security control of third parties. Train the employees so that they can understand the data protection practices and keep the software and operating systems updated so that no further hacks will happen.
BACKGROUND TO THE CASE:
FlexBooker is a company that provides online appointment management solutions to the business organizations and customers. Company allows customers and organizations to add a booking widget to their website and also allows them that they can accept bookings online for classes, meetings or different types of classes and sessions. FlexBooker also offerstext message confirmations, emails and reminders to its customers on their website. They also provide an automated SMS based waitlist system that keepsthe appointments full for the customer and it also has the ability for its customers mainly business organizations to charge their clients for the bookings they made online.
FlexBooker Company provides the best solution to all business organizations which offers various services to their clients like appointments, online bookings for classes and sessions too. The tool of company for online appointment scheduling helps in booking appointments and syncing the calendar of employee which is easier than ever before. FlexBooker also provide the facility of real-time system books, confirms, and follows up with customers automatically which helps in saving the money and time of customers.
It was founded in 2014 to provide various types of facilities to its customers. FlexBooker provides a platform to help the millions of end-users in the wide range of industries and thousands of business locations to its users and organizations. Company is wholly owned by the co-founders of company.FlexBookerremains consistently profitable and free from any debts that automatically increase the strength of the company. And due to this company main focus is on serving best to its customers and provides its best services to them instead of thinking about the venture capitalists or private-equity firms.
In short, Flexbooker is a life saver! Flexbooker is all about Drive the business and Book the appointment even while sleeping.
Various other facilities provided by FlexBooker are:
1. Reservations on Mobile and Web: The application of FlexBooker may works on mobile, web or any other device so that customers can make the reservations from home.
2. Customization in Website: Customers can also customize their websites on FlexBooker. Customers can design and add various features in websites for their clients.
3. Automatic Reminders: FlexBooker also provides the facility of automatic reminders of text messages and emails so that customers do not forget about their scheduled appointments. Messages used as reminders are fully customizable. Customer can set the reminder message according to his own requirement.
4. Make Payment Online: With FlexBooker, businesses can easily take online payments from its clients by using debit or credit cards for any bookings and appointments made by their clients.
5. Advanced Customization: Customers can also do advanced customizations in their websites to provide better services to its clients.

ACCG3058 IS AUDIT AND ASSURANCE IS AUDIT REPORT Important note: This is an individual assignment. You must complete the task independently. If you submit a report that is similar to any of your...

Answer To: ACCG3058 IS AUDIT AND ASSURANCE IS AUDIT REPORT Important note: This is an individual assignment....

Answer To This Question Is Available To Download

Related Questions & Answers

Submit New Assignment