Dela Cruz, Jumar James B.

Activities for Week 3 & 4

Let’s Check. MCQ

I. True or False:
1. False. 1. B
2. False. 2. D
3. False. 3. A
4. True 4. C
5. True 5. C
6. False
7. False
Let’s Analyze
III. Questions:
1. Explain brief the concept and importance of system controls.
- System controls are used for enhancing efficiency and increasing
productivity. It allows the avoidance, identification and/or correction of
conditions which may result in failure or damage to the product.
2. Distinguish briefly between general controls and application controls.
3. Enumerate and explain in your own words the components of General controls.
-- General controls are measures which ensure a stable and well controlled control
environment for a business. These controls provide fair assurance that prior uses are
permitted, reviewed, and accepted for the production and improvements to computer
programs.
-- System controls are input controls, execution controls and output functions. Where
input controls aim to ensure that the data entered into the device is correct, reliable
and complete. Process management seeks to ensure that process variability is
regulated within defined parameters, and extracted from the existing understanding
of the product and method, to ensure product quality. Hardware controls are visible
and built-in devices, which identify and routinely inspect system malfunctions.
4. Give some examples of computer frauds.
- Distributing hoax emails
- Accessing unauthorized computers
- Engaging in data mining via spyware and malware
- Hacking into computer systems to illegally access personal information, such
as credit cards or Social Security numbers
 - Sending computer viruses or worms with the intent to destroy or ruin another
party's computer or system.[2]

In a Nutshell
1. General controls is for segregating duties in a computer information system
environment – providing reasonable assurance that development of, and changes to
computer programs are authorized, tested and approved prior uses.
2. Application controls is for preventing all other, unwanted applications from running –
they may be malicious, untrusted, or simply undesirable.
3. Input controls try to ensure the validity, accuracy and completeness of the data
entered into the system.
4. Output controls govern the accuracy and reasonableness of the output of data
processing and prevent authorized use of output.
5. Control is essential in an AIS to avoid, identify and/or correct certain conditions
which can affect a business firm's performance.
6. There are two types of controls-general controls and controls of operation.
7. General controls include organizational / personnel controls, information security /
software controls, hardware controls, device and data system access controls or
controls, or access to equipment and data files, and other administrative and
procedural controls like safety and disaster controls.
8. Application controls include input controls, configuration controls, and output
controls.
9. Process control seeks to ensure that process variability is regulated within defined
parameters, and extracted from the existing understanding of the product and method,
to ensure product quality.
10. Computer fraud has to be written-manipulation of inputs and software changes