Wenlin Zhou

I agree with you. The company should provide security training for IT staff now and forever. Because management does not understand technology, they are not in a very good position to judge a person’s depth of knowledge and experience in the field. Decisions are often based on the certifications a person has achieved during his or her career. M…[Read more]

I agree with your opinion. An organization that can demonstrate an infrastructure protected by robust security mechanisms can potentially see a reduction in insurance premiums. A secure organization can use its security program as a marketing tool, demonstrating to clients that it values their business so much that it takes a very aggressive…[Read more]

Q:How does the control environment affect IT?

The control environment is the internal control of the environment. It stands for the upper manager’s attitude and awareness in the organization in order to reduce the risk of the entity. This environment includes many aspects such as business structure, corporate culture, values, operating style, h…[Read more]

What are some current system-related risks that you have experienced in your organization?

Data leak is a system-related risk. The USB port, digital cameras, MP3 players, and external hard drives can now be used to remove data from a computer and the network to which it is connected. Employees can easily copy data from the devices to their home…[Read more]

I agree with you. Walmart focus on the ” low price everyday “strategy, so Walmart would chose the lower price supplier, and then customers was able to buy cheaper product, this is a Walmart’s profit-driven. What’s more, the Walmart chose the vender and supplier was also obey the law. Compliance-driven controls are focused on obeying the law.…[Read more]

Q1: Describe a business process you have experienced (either as an external or internal participant) and what your role was.

When I was work in a bank, my job was a financial center client service.

My duties:
– help customers to open checking account
– help customers to apply credit account
-identify customer financial needs, goals and…[Read more]

I agree with your opinion. Sabanes-Oxley Act in the US is not an overreaction. I thought the law is not enough to reduce the business risk such as Lehman Brother case. By implementing the law, the senior manager still did some wrong things leading to bankruptcy. So I thought the Sabanes-Oxley Act should be improved and revised in order to…[Read more]

Question: The Sabanes-Oxley Act in the US and many similar laws in other countries were enacted as result of high profile control failures. Are these laws a sufficient reaction to the failures or are they an overreaction? Explain.

SOX is the appropriate law, and it is a sufficient reaction to the failures. The SOX also called Public Company…[Read more]

I agree with your thoughts, however, I think the environment should include more aspects. For example, many companies have high values and seek to promote honesty and integrity among their employees on a day-to-day basis. What’s more, competence is the knowledge and skills necessary to accomplish tasks that define the individual’s job.

Question: In your own words, how would you define a control environment?

The control environment is the internal control of the environment. It stands for the upper manager’s attitude and awareness in the organization in order to reduce the risk of the entity. This environment includes many aspects such as business structure, corporate culture,…[Read more]