Accounting Information Systems (1st Edition) by Vernon Richard

Discussion

1. Phishing is a type of social engineering. Give two examples of phishing.

2. If social engineering is a common reason that confidential information was revealed, what

needs to be done to prevent this from occurring?

Problem

2. Many internal auditors and IT professionals believe wireless networks and mobile devices

pose high risks in a firms network system. Collect information to examine whether this

concern is valid. If so, identify the risks and the general controls to help reduce these risks.