Preview

Explain The Failure To Secure Sensitive Data

Powerful Essays
Open Document
Open Document
1728 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Explain The Failure To Secure Sensitive Data
3.3 Failure to Secure Sensitive Data
Many researchers have been concerned about the security of sensitive data. There are a lot of improvement and evolution of technologies in internal auditing. First of all, sensitive data is information that must be protected from unauthorized access to safeguard the privacy or security of an individual or organization. There are three main types of sensitive data such as personal information, business information and classified information. Sensitive personally identifiable information (PII) is data that can be traced back to an individual and that, if disclosed, could result in harm to that person. Examples of PII includes biometric data, medical information, personally identifiable financial information (PIFI) and unique identifiers such as passport or Social Security numbers. Second type of sensitive data is business information. Sensitive business information includes anything that poses a risk to the company in question if discovered by a competitor or the general public. For example trade secrets, …show more content…
Auditors have access to an organization’s financial, sales and distribution, customer and supplier records. Activities such as collection of data relating to the customer base of a retail company could be sold to competitors. There are a lot of information technology (IT) software and hardware have been used in auditing to help auditors to store data and information. One of today’s most exciting computing paradigm shift in information technology is cloud computing. Major challenge to adopt cloud infrastructure is to secure sensitive data. Other than cloud computing, there are many manual and electronic records that fails to secure sensitive data. The internal audit team is exposed to the risks around data security and privacy that it examines for its
Continue Reading
View Writing Issues

You May Also Find These Documents Helpful

  • Good Essays

    Understand Legislation, Policies and Procedures for Confidentiality and Sharing Information Including Data Protection
    • 1075 Words
    • 5 Pages

    Understand Legislation, Policies and Procedures for Confidentiality and Sharing Information Including Data Protection

    Sensitive personal data means personal data consisting of information as to - (a) the racial or ethnic origin of the data subject,…

    • 1075 Words
    • 5 Pages
    Good Essays
    Read More
  • Good Essays

    Wk 5 Chapter 11 & 13 Learning Check
    • 627 Words
    • 3 Pages

    Wk 5 Chapter 11 & 13 Learning Check

    Before any strategy takes place, an auditor must determine the end result desired from the Information Technology being used as well as the type of technology being dealt with. The most important thing is security thus it is vital to know this technology in and out to be able to determine its strengths and weaknesses. This allows for proper compensation to combat such attacks whether they are fraudulent or accidental in nature. It is necessary to be familiar with different types of proven viable internal control setups to properly test and gage an IT’s internal control system. There are three different strategies use when testing internal controls. First includes assessing the controls using user control information. In this strategy, an auditor would gather computer-generated reports and compare those to all documentation on specific transactions. This process is also known as auditing around the computer because it deals with more hard copy documents. The next strategy entails using application controls to determine the level of risk…

    • 627 Words
    • 3 Pages
    Good Essays
    Read More
  • Satisfactory Essays

    Unit 1 Assignment 2
    • 313 Words
    • 2 Pages

    Unit 1 Assignment 2

    By understanding what controls and strategies are already in place for this company to protect this data, the company can now move forward and decide on a desired result, develop a workable plan and monitor its process. I feel the key to this company’s problem with breach of sensitive online data is fire wall and encryption.…

    • 313 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Better Essays

    Unit 219 Nvq L3 Business and Administration
    • 1681 Words
    • 7 Pages

    Unit 219 Nvq L3 Business and Administration

    Any information stored in an organisation has to follow the security and confidentiality procedures. Information security and confidentiality is the process where data is kept away from unauthorised access, disclosure, destruction, use or modification. It applies to both physical and electronic data. All organisations store a large amount of confidential information about their employees, customers, company’s status,…

    • 1681 Words
    • 7 Pages
    Better Essays
    Read More
  • Good Essays

    FXT2 Task2
    • 825 Words
    • 4 Pages

    FXT2 Task2

    1. Describe the nature of the incident. The nature of this event describes an internal breach of security in order to access and manipulate sensitive data. This internal breach was caught by the auditor, but the communications from the auditor to those who’s data was breached was intercepted.…

    • 825 Words
    • 4 Pages
    Good Essays
    Read More
  • Satisfactory Essays

    Information Technology
    • 277 Words
    • 1 Page

    Information Technology

    Information technology has become spreading widely throughout our society. We live in a modern world with Internet access from our home, fast food chains, offices, schools and on our mobile devices, such as iPhones, iPods, Blackberries and Android Phones. Nowadays, the use of internet became essential to communicate distantly and the use of social medias for interactions as well as businesses through online marketing or other called as the e-commerce. The rapid advancement of this system has elevated the importance of the IT function. Information technology in the modern enterprise has developed gradually from a back-office component to a most important operational constituent that could improve businesses performances and increases shareholders value. Enterprises such as marketing, sales and finance are now cooperated by information technology. The core success of an organization is information technology because it serves daily operational support and enables enterprise wide change. Since information technology is essential in a modern enterprise it is sometimes serve as a threat in today’s organization. One of the examples is the personal information which can be sending through the use of systems and it can be a threat if this information consolidated from banks and accounts pertaining to financial aspects. In these cases, applying triad could be helpful that is Confidentiality, Integrity and Availability. The protection of the information from disclosure to unauthorized users is confidentiality while integrity refers to protecting information from being modified by unauthorized users. Ensuring that authorized users are able to access the information when needed is availability.…

    • 277 Words
    • 1 Page
    Satisfactory Essays
    Read More
  • Powerful Essays

    Security Awareness Policy
    • 1733 Words
    • 3 Pages

    Security Awareness Policy

    Information is one of the most valuable assets owned by the corporation, and securing information is the responsibility of every employee. Many security breaches…

    • 1733 Words
    • 3 Pages
    Powerful Essays
    Read More
  • Powerful Essays

    Nt1330 Unit 1 Assignment
    • 2207 Words
    • 9 Pages

    Nt1330 Unit 1 Assignment

    7 Assessments of vulnerabilities and Compliance 8 Conclusion 11 References 12 Abstract This paper gives an idea regarding the important aspects of the database security. It mainly focuses on the security parameters such as confidentiality, authenticity and availability of the data. It also explains the different threats for the security in an organization in relation to the database. The basic steps which are required to control the loss of data are explained in detail. Among the controls the encryption process is the one which has to be followed to control the access into an…

    • 2207 Words
    • 9 Pages
    Powerful Essays
    Read More
  • Better Essays

    Cmgt 442 Week 4 Individual Assignment Outsourcing Risks
    • 1256 Words
    • 6 Pages

    Cmgt 442 Week 4 Individual Assignment Outsourcing Risks

    The most risky part of outsourcing data storage is that the organization may not be aware on exactly how the data is handled and managed. Especially on data that are sensitive, a simple mistake can open huge opportunities for a potential leak. When it comes to information technology, information security is extremely important. The safety of information must be considered in terms of confidentiality, integrity, availability, and non-repudiation (Byrnes & Proctor,…

    • 1256 Words
    • 6 Pages
    Better Essays
    Read More
  • Better Essays

    Maintaining Security and Privacy of Business Records
    • 962 Words
    • 4 Pages

    Maintaining Security and Privacy of Business Records

    Description of Overall Problem Businesses need to ensure the secure storage of company files and the guaranteed privacy of employee information. With the increased use and demand for network computing, information security has become a high priority. With all the ways in which someone can gain access to private and confidential information, the previous safe measures need to be enhanced and improved (Yaoxue Zhang; Laurenc T. Yang; Yuezhi Zhou; Wenyuan Kuang. 2010). For example, employee and company files are…

    • 962 Words
    • 4 Pages
    Better Essays
    Read More
  • Satisfactory Essays

    Nt1310 Unit 1 Assignment
    • 533 Words
    • 3 Pages

    Nt1310 Unit 1 Assignment

    Art.3 AUDITABILITY Organizations are under increased pressure to audit every action that a user performs within a database. This is due to increased focus on security, risk, accountability and avoidance of fraud and corruption. While security prevention measures (logins, firewalls, tokens etc.) are important to prevent unauthorized access to the data in the first place, as this survey shows, most breaches occur by users who are authorized but are either negligent or malicious.…

    • 533 Words
    • 3 Pages
    Satisfactory Essays
    Read More
  • Satisfactory Essays

    1.1 Explain The Purpose And Benefits Of Respecting And Supporting Other People At Work
    • 2721 Words
    • 11 Pages

    1.1 Explain The Purpose And Benefits Of Respecting And Supporting Other People At Work

    2.2 Outline requirements for security and confidentiality in an organisation Confidentiality and information security are key factors for an organisation. It allows organisations to ensure they preserve these along with…

    • 2721 Words
    • 11 Pages
    Satisfactory Essays
    Read More
  • Better Essays

    Michaels Stores Compan Michaels: Data Security Threats
    • 813 Words
    • 4 Pages

    Michaels Stores Compan Michaels: Data Security Threats

    Data Security Solutions For Michaels I. Data Security Data security would be a method that corporations use to keep important and confidential information protected. Access to this type of secure information is limited to those who have the authorization to view it. Data security is enforced so that private information that a corporation has about its employees, customers and others that they conduct business with is kept safe from any potential corruption from those who want to use it to their advantage. Many companies go to great lengths to keep their data safe and sound from hackers who can get confidential information from their systems. If a company is not careful and does not protect their confidential information many problems can occur. Some of these problems include identity theft of customers and employees. Hackers can steal information such as social security numbers, addresses, credit card information and many other key pieces of information that can let hackers easily access ones identity. The focus of this research paper would be about the Michaels Stores…

    • 813 Words
    • 4 Pages
    Better Essays
    Read More
  • Good Essays

    Summary: Companies Should Not Be Held Liable For Losses
    • 838 Words
    • 4 Pages

    Summary: Companies Should Not Be Held Liable For Losses

    These risks have to be borne by the business as a part of its normal business risks. Further it is the responsibility of the company to maintain the highest level of security for its accounting information system. The physical security should be fool proof, authentication system should be the most advanced, virus protection should be the latest, and backup should be done at a safe place outside the premises. Such measures are required to ensure that attacks on the accounting information system like identity theft and loss of irreplaceable data do not take…

    • 838 Words
    • 4 Pages
    Good Essays
    Read More
  • Better Essays

    Administrative Ethics Paper
    • 1274 Words
    • 6 Pages

    Administrative Ethics Paper

    As an administrator, we are avowed in by morals to value the confidentiality of data we intake, and use for the company. Confidentiality data can have but is not restricted to, staff private data and recompense records.…

    • 1274 Words
    • 6 Pages
    Better Essays
    Read More

Related Topics