2. Below is a description of a business process. The computer system requires all users to log on with a user identification (their first initial and the first six letters of their surname), and a password that is assigned to users when they join the firm (that is unable to be changed). The users have access to the internet and several have installed Window Live Messenger and other chat programs on their machines. The main task of John, one of the staff members, is to perform data entry. Each day he receives a bundle of orders from the customer assistant, with Johns job being to enter the details into the system. John first enters the customer name, address and contact number then clicks on the Next button to enter the items and quantities ordered by the customer. If the customer name is not provided the computer will prompt John to go back and fill the detail before proceeding to the next screen. In addition, the computer will only accept numeric values for the quantities ordered. Once all orders are entered John clicks Done button and the computer displays the numbers of orders entered on the screen. John usually ignores this, because by the time orders have been entered it is usually luchtime.

Required: a. Identify the risks in the process, and suggest an internal control for each risk

b. Classify the control as general or application; as manual or computerised