5.

Other data and

procedural controls
(Fault - tolerant systems, back up, and contingency planning)

A. Physical Security
B. Contingency Planning
C. Insurance
A. Physical Security
1. Fireproof storage

2. Backup for the vital documents, files and

programs.
B. Contingency Planning
Includes the development of a formal disaster
recovery plan.

Disaster recovery team - is the alternate processing

sites as well as the rate of each member.

Goal "to recover processing capability as soon as

possible"
Disaster recovery sites
★Hot Sites;
»»» facility that is cinfigured and ready to operate
within a few hours

★Cold Sites
»»» facility that provides everything necessary to
quickly install computer equipment, but doesn't
mean have the computee installed.
C. Insurance
• Should also be obtained to compensate the
company for losses when they occur.
II. Application Controls
»»Application controls pertain directly to the
transaction processing system.

1. Input Controls
2. Processing Controls
3.Output Controls
1. Input Controls
a.) Input controls attempt to ensure the validity,
accuracy and completeness of the data entered into
the system.

THREE CATEGORIES OF INPUT CONTROLS

1. Data observation and recording
2. Data Transcription
3. Programmed (source program)
Programmed (source program)
a. Control batch or proof totals
b. Completeness check
c. Hash total
d. Limit check
e. Logical (consistency) check
f. Self-checking digit
g. Record count
h. Sequence check
i. Validity check
j. Reasonableness check