Continuing great job on the discussions – I enjoy your thoughtfulness and depth in answering. \u00a0I trust the questions help you explore and understand topics being discussed in a given week.
\nYou raised most of\u00a0the important\u00a0points but let me summarize my view.<\/p>\n
Q1<\/strong>: What is segregation of duties (SOD) and why is it a commonly used control? \u00a0– We discussed this topic in class. \u00a0Great examples of IT roles that should be segregated (e.g. development from DBA, development and security, development\u00a0and\u00a0move code, developers\u00a0not in\u00a0production system, development from\u00a0audits). \u00a0We’ll discuss controls related to development more thoroughly in future classes.<\/p>\n Q2<\/strong>: Security in an ERP system (e.g. SAP) is complex. What is the most fuzzy, difficult to understand component? \u00a0You nailed the core issue – ERP systems are large and complex. \u00a0Therefore the security is also large and complex – especially when there are complex requirements (many people needing broad\u00a0access).<\/p>\n Q3<\/strong>: What are Key competencies of person responsible for security? \u00a0I like the terms you chose. \u00a0Specifically: Skepticism and\u00a0curiosity Q4<\/strong>: Companies are dynamic entities. Best practices for managing system users and their security access? \u00a0 You provide many great ideas including: \u00a0Password policies and procedures, documenting change (more on this in a couple weeks), periodic user access reviews, least privilege access, proper management approvals, etc. \u00a0Bottom line is that security although sometimes viewed as a backroom IT task requires strong processes to be done well.<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" Continuing great job on the discussions – I enjoy your thoughtfulness and depth in answering. \u00a0I trust the questions help you explore and understand topics being discussed in a given week. You raised most of\u00a0the important\u00a0points but let me summarize my view. Q1: What is segregation of duties (SOD) and why is it a commonly […]<\/p>\n","protected":false},"author":22812,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[716552],"tags":[],"class_list":{"0":"post-3212","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-week-09-it-outsourcing-cloud-computing","7":"entry"},"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts\/3212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/users\/22812"}],"replies":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/comments?post=3212"}],"version-history":[{"count":1,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts\/3212\/revisions"}],"predecessor-version":[{"id":4907,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts\/3212\/revisions\/4907"}],"wp:attachment":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/media?parent=3212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/categories?post=3212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/tags?post=3212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nFunctional Knowledge – critical to effectively make decisions
\nDecision making – to which I would add good judgement.
\nData analytic – I call this basic smarts. \u00a0Security is highly complex and requires strong cognitive skills.<\/p>\n