-
Fangzhou Hou posted a new activity comment 7 years, 11 months ago
I read the article “75% of Orgs Lack Cybersecurity Expertise”. According to this article, a study from Tripwire found that 66% of respondents faced increased security risks due to this workforce shortage; and 69% have attempted to use technology solutions to fill the gap. Moreover, a full 72% said they had challenges hiring skilled cyb…[Read more]
-
Fangzhou Hou posted a new activity comment 7 years, 11 months ago
In the contexts of being attacked by or unwittingly becoming a resource for distributed denial of service (DDoS), which is a bigger threat to an organization’s network and computer resources and why: Spam phishing or Spear phishing?
Generally, the spam phishing attack is a form of electronic junk mail sent to users, and it’s a very dan…[Read more]
-
Fangzhou Hou posted a new activity comment 7 years, 12 months ago
You are right, Yu Ming, DRP and BCP are similar but different from each other. Actually, the Disaster Recovery Plan is part of the BCP, besides DRP, there are many other methods to ensure the business continuity of an organization. For example, an effective backup plan can also mitigate the risks and enhance the continuity of the business.
-
Fangzhou Hou commented on the post, Systems Administration, on the site 8 years ago
Thanks Patrick, I just figured it out, Windows OS can directly run the connection file,
-
Fangzhou Hou commented on the post, Systems Administration, on the site 8 years ago
Hi Patrick,
Since I was not able to download the “Windows Server 2012 R2 Database” to my PC, so I borrowed my friends’ Mac to finish the previews assignments. Do you mean the Tech Challenge 2, 3, and 4 can be solved directly through the Azure on the website and no need to download the windows server 2012 R2 right?
-
Fangzhou Hou posted a new activity comment 8 years ago
I was trying to run the Secure Download Manager (SDM) on my PC to download the Windows Server 2012 R2, but the SDM showed that
“Assert Failure.
Expression: [mscorlib recursive resource lookup but]
Description: infinite recursion during resource lookup within mscorlib. This may be a bug in mscorlib, or potentially in certain extensibility p…[Read more] -
Fangzhou Hou posted a new activity comment 8 years ago
I read the article “Survey Says Most Small Businesses Unprepared for Cyberattacks”. According to this article, over 78% of small-business owners still don’t have a cyberattack response plan, even though more than 54% were victim to at least one type of cyberattack which include:
1. Computer virus – 37%
2. Phishing – 20%
3. Trojan horse – 1…[Read more] -
Fangzhou Hou posted a new activity comment 8 years ago
Are the terms Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) synonyms or are they different? If they are different, what are the differences?
The Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) are different. Disaster recovery is a subset, which is a small part of the overall business continuity. It is the…[Read more]
-
Fangzhou Hou posted a new activity comment 8 years ago
Outsourcing and SLA audit questions
– Are management requirements and expectations clearly defined
in the contract?
– Do policies regard purchase services, and, in particular,
third party vendor relationships exist?
– Do clearly defined benefits and business purposes exist to support
the decision to outsource?
– Do contract reviews and…[Read more] -
Fangzhou Hou posted a new activity comment 8 years ago
Explain common SLA issues identified by auditors
A service level agreement (SLA) is defined as a contract between a service provider and a customer. However, things can get confusing when creating an SLA policy if you’re not seeing it work as expected. For example, a newly created SLA policy may not apply to existing tickets, or an updated S…[Read more]
-
Fangzhou Hou posted a new activity comment 8 years ago
What controls can be implemented to mitigate the risks associated with outsourcing?
Risks:
1. Security breach including confidentiality, IP and trade secrets.
2. Infrastructure breakdown (software/hardware/network failure).
3. Poor selection of vendor.
4. Poorly designed disaster recovery systems/ processes.Controls:
1. Require vendors…[Read more] -
Fangzhou Hou posted a new activity comment 8 years ago
What are the benefits and risks of out-sourcing?
Benefits of out-sourcing:
First of all, out-sourcing can significantly decrease the cost. For example, if a car manufactory wants to produce a new model of vehicle, it’s not necessary to produce every parts of the vehicle, but outsource some of them to other manufactories. Moreover, this can a…[Read more] -
Fangzhou Hou commented on the post, Week 7 Questions, on the site 8 years ago
I agree with you Said, and it’s good that you mentioned the potential fraud. Indeed, IT personnel already have technical skill in programing or developing the information systems. However, if they don’t have basic understanding of function concepts of finance and accounting, they may never know what those exact number means. In that way, the use…[Read more]
-
Fangzhou Hou posted a new activity comment 8 years ago
Question 2: As we continue to learn about business processes and ERP systems we often discuss financial or account related terms and concepts. How much finance and accounting knowledge should IT personnel supporting business applications know and learn? Explain
Generally, IT personnel already have technical skills in cyber areas, but for…[Read more]
-
Fangzhou Hou posted a new activity comment 8 years ago
Question 1: As we’ve seen in the P2P and OTC Processes many different often non-financial business functions are involved with ERP system transactions that post to accounting records. If you are responsible for Finance / Accounting controls for your company how would you manage the risks coming from these non-Financial function jobs?
If I’m res…[Read more]
-
Fangzhou Hou commented on the post, Week 7 Questions, on the site 8 years ago
Exactly, I agree with you that management needs information to help them make good decisions. With the help of information systems and databases, separate information now is gathered and meaningful, which allows decision makers better understand the business. Developing these information systems and databases require IT personnel have basic…[Read more]
-
Fangzhou Hou posted a new activity comment 8 years ago
I totally agree with you, Brou. Miami is near the coastline, and the risk that natural disasters occurred is higher than other three cities. I also agree with you that Tulsa and Denver may be the better choice to locate the data center, but I was thinking which one of them is the best choice?
-
Fangzhou Hou commented on the post, Week 6 Questions, on the site 8 years ago
Exactly, and the upper management may involve in strategic decision making, so they are able to touch the sensitive business information. The damaging level is totally different if the top level manager’s personal mobile device or PCs are attacked, since the information they have are usually more valuable than operation level employees.
-
Fangzhou Hou commented on the post, Week 6 Questions, on the site 8 years ago
Yes, you are absolutely right Said. International business in the most cases is really difficult to the company, since every country wants to ensure their own business benefit, and protect the local industries by setting the import tariff.
-
Fangzhou Hou posted a new activity comment 8 years ago
Good post Loi, and I totally agree with you that Miami is the not a good choice to locate the data center. Actually, to mitigate the risk of natural disasters may damage the data center, I think to transfer the risk to the third party might also work like purchasing an insurance.
- Load More