Katastrophic has recently upgraded its accounting software. The consultant who installed the software has explained that a new option makes the system available through the Internet for staff remote access capability . Previously, staff only had access to the system when they were physically in the headquarters building. With remote access to the system, they would be able to access the system from anywhere by entering their user name and password. Currently, user name and password specifications are not regulated. For example, passwords are allowed to be as short as three characters and may remain unchanged for up to six months. Some of the staff expressed interest in being able to access the system from home, especially on weekends, instead of making the drive to the plant. Additionally, some managers have expressed a desire to be able to access some of the reports, when they are away at business meetings.

Q)How could information already in the accounting system have been used to minimize the opportunity for fraud and what would be some of the risks in allowing remote access.