During your audit of WilcoxonSports, Inc., a retail chain of stores, you learn that a programmer made an unauthorized change to the sales application program even though no work on that application had been approved by IT management. In order for the sales application program to work, the programmer had to make modifications to the operating software security features. The unauthorized change forced the sales program to calculate an automatic discount for a customer who happens to be thebrother-in-law of the programmer. The customer and programmer split the savings from the unauthorized discount. The programmer modified the program and returned it to the librarian who placed it into the files for live production

use. No other information was forwarded to the librarian.

Requirements:

1. What recommendation do you have for management of WilcoxonSports, Inc., to prevent this from recurring?

2. Explain why you believe the suggested internal control improvements will prevent problems in the future.