Bpp learning Media is an acca approved Content Provider

 
 
6
Building controls into an information system and cyber security 
It is possible to 
build controls
into
a 
computerised
information system. A 
balance
must be struck 
between the degree of control and the requirement for a user-friendly system. 
Controls can be classified as: 

Security 
controls 

Contingency 
controls 

Integrity 
controls 
6.1 Security controls 
Security is needed to mitigate the risks to data which include: 

Human 
error 
– 
Entering incorrect transactions 
– 
Failing to correct errors 
– 
Processing the wrong files 

Technical error such as malfunctioning hardware or software 

Natural disasters such as fire, flooding, explosion, impact, lightning 

Deliberate actions such as fraud 

Commercial 
espionage 

Malicious 
damage 

Industrial 
action 

Cyber-attacks 
6.2 Integrity controls 

Data integrity
 
in the context of security is preserved when data is the same as in source 
documents and has not been accidentally or intentionally altered, destroyed or disclosed. 

Systems integrity 
refers to system operation conforming to the design specification despite 
attempts (deliberate or accidental) to make it behave incorrectly. 
Data will maintain its 
integrity 
if it is 
complete 
and 
not corrupted
. This means that: 
(a) The 
original 
input 
of the data must be controlled in such a way as to ensure that the results are 
complete and correct. 
(b) Any 
processing and storage 
of data must maintain the completeness and correctness of the data 
captured. 
(c) 
Reports or other