Practice Test | CPA 2023. 8. 28.

오전 7:39

The following memorandum is intended to outline various options for data storage for 3WAT,
Inc.'s mobile workforce and address data safety, data integrity, and data access issues.

The company's current approach allows for storage of data on the individual laptops of
3WAT's highly mobile workforce. The somewhat obvious weaknesses in doing business this
way include compromised data safeguarding, loose controls over data, and uneven access to
information.

Data safeguarding issues should be initially addressed with a mobile device security policy
speci!cally addressing handheld devices. Information technology policies should include an
educational component and be joined with companion human resources policies that
address the consequences of noncompliance with the mobile device security policy.

E"ective policies will mirror controls that remove users from security decisions. Users must,
for example, be required to use passwords for access to company networks, be limited to
using only company-owned devices for company data, and take responsibility for assigned
hardware.

Improved controls and uniform access to data can be accomplished in a range of ways.
Connections to company networks may take the form of virtual private networks (VPNs) that
connect to 3WAT's internal network or the use of cloud computing. VPNs are more secure but
more expensive. The company's security requirements may require more rigorous controls
than those a"orded by the cloud.

The mobile workforce is an important tactic in modern business. An enterprise architecture

that addresses data safety, data integrity, and data access issues is vitally important. I have
outlined a few issues and solutions or action steps in the preceding memorandum and look
forward to the opportunity to assist in the revisions to the company's infrastructure and to
incorporate these approaches into a revised policy.

https://cpa.becker.com/section/B/V4.1/practiceTest/session?practiceTestId=10686418 1페이지/1페이지