You are the external auditor for Dumpadollar National Bank, a large bank within the Dallas metropolitan area. Dumpadollar has an extensive online real-time update database system. One of the controls exercised by the information systems management of Dumpadollar is to print out each day a listing of all sensitive utility programs used. This data is obtained from the operating-system log. The listing is checked to detect any unauthorized use of these utility programs.

During a review of this log, you notice that Delores Sleek, Dumpadollar's DBA, had used a pointer-maintenance utility on the database. This utility is capable of adding, deleting, or modifying the pointers that establish the logical relationships between records on the database. You recall that the pointer fields in a record are important because they contain the addresses of other records that are logically related in some way to the current record. For example, they might chain transaction records to a customer-account record.

You are concerned about unauthorized use of this utility, and you express your concern to Harry Thompson, the information systems manager. He explains that sometimes a pointer in the database is corrupted and that Delores is the only person with sufficient knowledge of the database to be able to correct the pointer. When you ask how often a corrupted pointer occurs, Harry informs you that Delores reports the occurrence of one about once a month. When you ask why a corrupted pointer occurs, Harry says he does not know and that you will have to talk with Delores.

Required. Write a brief report to your supervisor documenting why you are concerned about the current situation and informing him what action you now intend to take.