• Input • Processing • Output Management Information Systems Lecture 10 Security and Control ESTABLISHING A MANAGEMENT FRAMEWORK FOR SECURITY AND CONTROL Application controls
• Determines the level of risk to the firm if a specific activity or process is not properly controlled Management Information Systems Lecture 10 Security and Control ESTABLISHING A MANAGEMENT FRAMEWORK FOR SECURITY AND CONTROL Risk Assessment:
• Acceptable Use Policy (AUP) • Authorization policies Management Information Systems Lecture 10 Security and Control ESTABLISHING A MANAGEMENT FRAMEWORK FOR