You have just been appointed auditor of BAS Limited. As part of the audit planning process, Monica Nagpal has visited the premises and noted the following issues during her preliminary assessment:

BAS Limited's IT function is under the overall control of the Finance Director. However, the day-to-day operations are the responsibility of the IT Manager who has had significant IT experience in a large multi-user environment.

The key modules of BAS Limited's Financial Management System (FMS) are currently undergoing significant modification. The systems analyst who initially implemented the FMS was recently dismissed as a result of a disagreement with the IT Manager.

A few days after the dismissal, the systems analyst returned to BAS Limited's IT department and made some unauthorised changes to the FMS.

Subsequent to the dismissal of the systems analyst, the FMS development work lost direction. The programmers, who received their detailed instructions from the systems analyst, had no written instructions or documented system specifications for the FMS modifications. All such instructions and specifications had been given by the systems analyst verbally.

Only IT department staff are allowed access to the IT department. When Monica Nagpal visited, however, she was able to enter the department, review existing FMS documentation, and make changes to a FMS program under development via a terminal which was logged on but not attended by a programmer. During this period, she was not asked for identification and was left alone for long periods of time.

REQUIRED

CS 2 - 1. From the information above, identify five (5) significant general control weaknesses.

CS 2 - 2. For each weakness in 1 above, specify your recommendation to overcome the identified risk.