StudentShare
Contact Us
Sign In / Sign Up for FREE
Search
Go to advanced search...
Free

A framework for online internal controls - Essay Example

Cite this document
Summary
The web based tools and the internet facilitate many useful activities of a business that influence customer and suppliers relationship. Need for online control has risen to help guide online based transactions because security is of concern…
Download full paper File format: .doc, available for editing
GRAB THE BEST PAPER98% of users find it useful
A framework for online internal controls
Read Text Preview

Extract of sample "A framework for online internal controls"

A frame work for online internal controls Summary of the article The web based tools and the internet facilitate many useful activities of a business that influence customer and suppliers relationship. Need for online control has risen to help guide online based transactions because security is of concern. Current profusion of online controls like encryption, digital certificates, digital signatures, virtual private networks has created difficulty in understanding objective of online controls.

To enable auditors and accountants understand the objective and purpose of internal online control, it gets categorized on the frameworks of Committee of Sponsoring Organization (COSO). A conceptual framework becomes developed based on the objective of internal internet control, and this was useful to the managers. Transfer of data without modification while in transit becomes data integrity while data confidentiality is the inability of unauthorized persons to access data. Encryption, communication protocols, security algorithms become employed to ensure data security and confidentiality.

Non-repudiation is requiring covering problems of post Facto denial. It proof that an electronic document becomes sent and received by only the intended persons. Mutual authentication of identity involves verification of identities of transacting parties. After authentication, the user and the machine get identified and get allowed computer system access. This becomes authorization (Deshmukh 4473). Online internal controls become classified on the COSO framework, and this classification is useful for accountants and auditors.

The conceptual framework is logic because all its four dimensions can be achieved. Online transactions must comply with the three transaction act. Authorizations of the parties involved in a business transaction get achieved through passwords, digital signatures and certificates, virtual private networks. All these security measures have proved to be effective. These two classifications have enabled us to understand the purpose and objective of online internal control without understanding the knowledge of the technical part (Deshmukh 4474).

What are the online internal controls? Based on the COSO, internal controls are a system of balances and checks that keep the business moving according to owners wish while protecting the assets of the business. Different organizations like ISACA, COSO, AICPA, have defined internal controls and its components differently. Committee of Sponsoring Organizations acknowledges the control environment as the foundation of internal control because it gets concerned with the people aspect. The control environment has elements like human resource polices and procedures, management philosophy and operating style, management commitment to ethics.

All business face risk and risk management involve analyzing this risk and taking proactive actions to prevent them from happening. Security policy is the online equivalent of the control environment and risk prevention. Security policy becomes designed for the whole information system, and the process is multidisciplinary (Deshmukh 4476). To ensure that management’s directives get carried out, there are polices and procedures that become commonly referred as control activities. Online equivalent of control activities involves perimeter security, infrastructure security, and message content security.

Message information security deals with message security as it travels over the internet, extranets, and intranet. Infrastructure security deals with protection of the organization IT infrastructure. Control activities become carried out through passwords, firewall, and digital certificates network ant intrusion techniques. It is the security policy of an organization that deals with information and communication issues. It delineates ways of communication such as pagers, alerts, reports. Comments regarding the article Internal controls should be monitored regularly to assure they are functioning as expected by management.

Online monitoring becomes carried out by automated software tools and the human inspection and observation to some extent. The conceptual frame work for internal control becomes based on the aim of online internal control. Technical, human, legal, and audit are the four basic dimensions of internal control that have become used to forge the conceptual framework (Deshmukh 4477). Online control objectives are validity of transactions, authorization, and mutual authentication of identity, end to end data integrity, and non-repudiation, audibility, and confidentiality of transactions.

Legal status of an online transaction defines the validity of a transaction. Uniform Electronic Transaction Act, Uniform Computer Information Transactions Act, and Electronic Signatures in National Global and Commerce Acts are the three primary acts that govern electronic based transactions. For the essence of proper funds management, the transaction should show auditability. This prevents fraud because the transactions become validated, properly recorded and controlled (Deshmukh 4478). . Works Cited Deshmukh, Ashutosh.

"A Framework for Online Internal Controls." Association for Information Systems 31 December 2004: 7.

Read More
Cite this document
  • APA
  • MLA
  • CHICAGO
(“A framework for online internal controls Essay Example | Topics and Well Written Essays - 500 words”, n.d.)
A framework for online internal controls Essay Example | Topics and Well Written Essays - 500 words. Retrieved from https://studentshare.org/business/1451177-a-framework-for-online-internal-controls
(A Framework for Online Internal Controls Essay Example | Topics and Well Written Essays - 500 Words)
A Framework for Online Internal Controls Essay Example | Topics and Well Written Essays - 500 Words. https://studentshare.org/business/1451177-a-framework-for-online-internal-controls.
“A Framework for Online Internal Controls Essay Example | Topics and Well Written Essays - 500 Words”, n.d. https://studentshare.org/business/1451177-a-framework-for-online-internal-controls.
  • Cited: 0 times

CHECK THESE SAMPLES OF A framework for online internal controls

AICPA Ethics & COSO Framework for Internal Controls

As a member of the AICPA, Harold Potter has some responsibilities to his customers and the wider society.... This is because the AICPA has rules that each member has to adhere to.... hellip; As a member of the AICPA, Harold Potter has some responsibilities to his customers and the wider society.... This is because the AICPA has rules that each member has to adhere to....
9 Pages (2250 words) Essay

Payroll System and Internal Control

In the paper, the conception of payroll system as well as internal control regarding the case of Trolley Dodgers which is based on real issues and cases of contemporary auditing will be elaborately discussed.... Various aspects that include the different features of employee's… ud, internal control weaknesses and problems, suggested control methods relating with this particular case study along with a summative conclusion will also be taken into account in the discussion of this paper. A payroll system is used by an organisation primarily in order to aintain a list of the names, addresses and necessary information among others especially of the employees working within the organisation (Lambert, 2005)....
8 Pages (2000 words) Essay

Strategy at Amazon Based on the External Environment and the Internal Resource Capability

The purpose of this study is to understand the strategy of the company by looking at the external environment and the internal resource capability.... Consumer customers are comprised of individuals who buy the company's products through its online retail stores.... Seller customers are composed of people who use the company website as an online venue to sell their own products and services.... om generally participates in the online retail industry....
9 Pages (2250 words) Case Study

Statutory Audits, Information Security and the Digital Divide

This will set the framework for further analysis of the interconnectedness of the different concepts and how they work together to support organizations to keep running.... Thus, there is a need for controls and ethics to reduce challenges to information security.... Most businesses attain information security through the institution of controls.... the board of directors and top managers, institute controls and ensure they are working (Nnolim, 2007, p....
9 Pages (2250 words) Research Paper

The Effect of Internal Audit Reports to Stakeholders on Audit Quality and Earnings Performance

It helps the company to accomplish its objective by bringing a systematic and disciplined… h to evaluating and improving the efficiency of the company's governance, internal controls, and risk management (Institute of international Auditors, 2010, p.... An internal audit is an independent and objective consulting and assurance activity in which the idea of adding value to enhance the operations of a company is the guiding principle.... The internal audit department provides an objective, reliable, and neutral service to the management, the board of directors, and the audit committee (Ljubisavljević and Jovanovi, 2011, p....
9 Pages (2250 words) Essay

Use of COBIT as Corporate Governance Audit Methodology

he section 404 of Sarbanes Oxley act pertains to the internal control assessment & accountability of the management of the organization whereby the company is required to submit an internal control evaluation report pertaining to the procedures of financial reporting.... This would mean companies will have to be controlled by internal auditors whose practices and evaluation of company financials will have to be made accountable to external auditors, financial analysts, the media, and the public at large....
6 Pages (1500 words) Essay

The Internal Control System of Clive Peeters in Light of the Embezzlement Case

Despite the accounting discrepancies, the company reported that the " view expressed by the Managing Director and the Chief Financial Officer is that these misappropriations occurred despite the sound system of risk management and internal controls that existed within the business which was operating efficiently and effectively in all material respects in relation to usual and foreseeable financial reporting risks.... The purpose of this report is to examine the internal control system of Clive Peeters in light of the embezzlement case that occurred before, during and shortly after FY June 2009, and their implications with regard to possible changes for the future....
13 Pages (3250 words) Research Paper

Disaster Recovery

nbsp;… controls from NIST special edition have been discussed with rationale.... Likewise, the gaps from the case study have been identified and controls are selected for the same.... The rationale for cost, resource management, type of contingency site and security posture is reflected in the controls.... nbsp;Security structure addresses internal, external and specialized framework security.... nbsp; The incident handling process is not defined in any of the official internal documents of the bank....
11 Pages (2750 words) Assignment
sponsored ads
We use cookies to create the best experience for you. Keep on browsing if you are OK with that, or find out how to manage cookies.
Contact Us