lunes, 2 de agosto de 2010

Activity categorization

Segregation of duties - separating authorization, custody, and record keeping roles to limit risk of fraud or error by one person. Authorization of transactions - review of particular transactions by an appropriate person. Supervision or monitoring of operations - observation or review of ongoing operational activity.
Physical safeguards - usage of cameras, locks, physical barriers, etc. to protect property, such as merchandise inventory. IT Security - usage of passwords, access logs, etc. to ensure access restricted to authorized personnel. Top level reviews-Management review of reports comparing actual performance versus plans, goals, and established objectives.

No hay comentarios:

Publicar un comentario