Premium Essay

COSO Compliance Paper

Submitted By
Words 1269
Pages 6
In regards to the updating of the IT system for the purpose of storing and retrieving information, six areas of risk requiring COSO compliance emerge. The six areas are the proper implementation and maintenance of the new system, the security of the sensitive identity and financial information that is stored on the system, a proper backup security and access methods in the case of a system failure, proper access to the information for the clients and those doing authorized business on a client's behalf, and timely and effective communication to all clients regarding any change to the operation of the system or any threat or potential threat to sensitive information held by company.
The first area of risk that must be addressed is the implementation and use of the new IT system. In order to establish and maintain environment control, the board of …show more content…
The reviews will serve as a monitoring of the effectiveness of the system. Employees who use the system on a daily basis will naturally monitor the system for malfunctions.
The second area that must be addressed is the security of the sensitive information being stored by the IT system. The environment control is accomplished by the same mechanisms as the implementation of a new system. The security measures of the IT system should be the first factor considered in the comparison of options for approval. In addition, the firm will only deal with providers that exceed the industry standard for security.
The increased security standards are driven by the great deal of exposure that comes with faulty security. A failure of the security measures could expose clients to possible identity theft or other financial crimes. The exposure comes in two forms in this case. First, the firm would have liability to the clients and would have to make them whole. In addition, the firm would be exposed to a lawsuit if negligence caused the

Similar Documents

Premium Essay

Law Syllbus

...|Learning Team |Review the assignment options described below. These options are found in the University of | |10 | |ERM Paper |Phoenix Material: ERM Paper located on the student website. | | | | | | | | | |Option 1: Write a paper of no more than 1,750 words in which you identify potential tort | | | | |risks that arose in the Business Regulation simulation. Identify a tort violation from the | | | | |simulation. Then use the 7-step process as defined in the Harb article to apply the risk | | | | |management process to mitigate the business risk associated with that violation. | | | | | | | | | |Option 2: Write a paper of no more than 1,750 words in which you identify potential tort | | | | |risks that arose in the Product...

Words: 1021 - Pages: 5

Premium Essay

Law 531

...[pic] Course Syllabus Law 531 Business Law Course Start Date: 11/13/12 Course End Date: 12/24/12                   Please print a copy of this syllabus for handy reference. Whenever there is a question about what assignments are due, please remember this syllabus is considered the ruling document. Copyright Copyright ©2009 by University of Phoenix. All rights reserved. University of Phoenix© is a registered trademark of Apollo Group, Inc. in the United States and/or other countries. Microsoft©, Windows©, and Windows NT© are registered trademarks of Microsoft Corporation in the United States and/or other countries. All other company and product names are trademarks or registered trademarks of their respective companies. Use of these marks is not intended to imply endorsement, sponsorship, or affiliation. Edited in accordance with University of Phoenix© editorial standards and practices. Course Description                                                                                                            This course prepares students to evaluate the legal risks associated with business activity. Students create proposals to manage an organization’s legal exposure. Other topics include the legal system, alternative dispute resolution, enterprise liability, product...

Words: 2508 - Pages: 11

Premium Essay

Riordan Corporate Compliance Plan

...Introduction The paper provides an overview of the Riordan Manufacturing Company and explains the purpose of the Corporate Compliance Plan. Next, the paper emphasizes four main issues which are Enterprise and Product Liability, Real and Intellectual Property, Governance and International Law related to Riordan's situation. The paper concludes with the Riordan's future legal responsibilities that can affect workforce productivity, customer relationships and customer relationships. 1. Organization Overview Owned by Riordan Industries, Riordan Manufacturing is an international plastic manufacturing company specializes in manufacturing plastic parts for the beverage manufacturing industry, automotive industry, and fan manufacturers with its headquarters lodged in California. After its foundation by Dr. Riordan in 1991, Riordan Company has tried to expand its capability in terms of production of plastics and beverages containers. The company has increased its level of productivity and opened a number of new manufacturing branches in Albany, Michigan, Pontiac, and China, Hangzhou. Riordan's product line includes plastic beverage containers produced at the plant in Albany, Georgia, custom plastic parts are produced at the plant in Pontiac, Michigan, and plastic fan parts produced at the newest facilities in Hang Zhou, China. Riordan's major clients are automotive parts and aircraft manufacturers, the Department of Defense, beverage makers and bottlers and appliance manufacturers...

Words: 1593 - Pages: 7

Premium Essay

Corporate Compliance Report

...Running head: CORPORATE COMPLIANCE REPORT Corporate Compliance Report Corporate Compliance Report With so many corporate scandals and misappropriation of finances, the United States government has developed many laws and action agencies to aid in reducing the amount of corporate mishandlings. Regulatory legislation mandating a report on internal controls is now a corporate obligation. Risk management is a fundamental area of importance to stakeholders. Organizations that are best practice companies look to the Committee of Sponsoring Organizations for guidance to develop efficient internal controls, enterprise risk and against fraudulent activities. This paper will outline a plan to implement enterprise risk for an organization of choice. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) “is dedicated to guiding executive management and governance entities toward the establishment of effective, efficient, and ethical business operations on a global basis. It sponsors and disseminates frameworks and guidance based on in-depth research, analysis, and best practices” (COSO, 2006). COSO is a private-sector program funded and sponsored by five professional organizations. The Committee conducted an 11-year research study to analyze instances of fraudulent financial reporting and determine contributing factors that lead to financial statement fraud (COSO, 2006). COSO’s research demonstrated that most fraudulent behavior involved the chief...

Words: 1730 - Pages: 7

Premium Essay

Corporate Compliance

...{text:bookmark-start} Corporate Compliance Report {text:bookmark-end} In order for any company or organization to be successful, it is essential that the management team take steps to identify, access and manage risk. For many businesses, risk management has been identified as a way to thwart and reduce losses, as well as develop business performance. A collection of new tools have been introduced over the past few years to help measure enterprise risk. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) has also played a major role in helping companies manage risk. COSO was formed in 1985 and is a U.S. private sector initiative whose major goal is to identify the different factors that lead to fraudulent activities such as fraudulent financial reporting and make recommendations to reduce the incidences. COSO established a variety of internal controls and criteria that companies and organizations can use to assess their control systems in order to manage risk. “In 2001, COSO initiated a project, and engaged PricewaterhouseCoopers, to develop a framework that would be readily usable by managements to evaluate and improve their organizations’ enterprise risk management” (COSO Executive Summary, 2004). Based on the many COSO recommendations of risk management, many companies and businesses have implemented enterprise risk management techniques within their organization. The goal of this paper is to summarize a plan to apply enterprise risk management for...

Words: 1169 - Pages: 5

Premium Essay

Sox and Its Effects on It Security Governance

...taihoonn@empal.com Abstract The Sarbanes-Oxley (SOX) Act is a United States federal law enacted on July 30, 2002 in response to a number of major corporate and accounting scandals including those affecting Enron, Tyco International, Adelphia, Peregrine Systems and WorldCom. This paper discusses the effects of Sarbanes-Oxley (SOX) Act on corporate information security governance practices. The resultant regulatory intervention forces a company to revisit its internal control structures and asses the nature and scope of its compliance with the law. This paper reviews the implications emerging from the mandatory compliance with Sarbanes-Oxley (SOX) Act. Issues related to IT governance and the general integrity of the enterprise are also identified and discussed. Industry internal control assessment frameworks, such as COSO and COBIT, are reviewed and their usefulness in ensuring compliance evaluated. 1. Introduction Accounting scandals at some of the big corporations like Enron, HealthSouth, Tyco and WorldCom had a devastating impact on investor confidence. Clearly, it was possible to engage in frauds of such magnitude because of the inability of auditors to detect early signs of such possibilities. This paper reviews the impact of legal controls on Information Technology (IT) governance practices, especially in the case of SOX Act. The resultant crisis in the financial markets and massive media coverage of the frauds created a situation where...

Words: 3348 - Pages: 14

Premium Essay

Sarbanes Oxley Act of 2002

...Sarbanes-Oxley Act of 2002 ACC/561 Sarbanes-Oxley Act of 2002 Following a number of discovered fraud scandals committed by well-known corporations and in order to restore public confidence in the stock market and trading of securities, the United States congress passed the Sarbanes-Oxley Act in the year 2002. As a result of the act endorsement by the New York Stock Exchange and the Securities and Exchange Commission, among many other national overseeing committees, a number of rules and regulations were proposed and adopted and that demanded new processes and programs be instilled for ensuring compliance with the requirements of the new law. The new rules and regulations pertaining to the enacted law have a common goal: 1. Pass accountability and responsibility of the accuracy and truthfulness of financial statements directly to the executives and board members of a company or corporation 2. Increase transparency of corporate accounting and performance record reporting 3. Business reporting ethics to be emphasized with in-place steps and procedures adopted to detect and prevent any type of fraud or manipulation of stakeholders for private benefit. Traditionally, preparation of a company’s financial statements including day-to-day management of the company has been the responsibility of the board of directors and upper management team of the company. The new law clearly rests the responsibility for accuracy and truthfulness of the published financial records on...

Words: 1295 - Pages: 6

Premium Essay

Riordan Corporate Compliance Plan

..."Using the New COSO Risk-Management Guidance" article and the Riordan Virtual Organization located on the student website, and the Committee of Sponsoring Organizations of the Treadway Commission (COSO) website at www.coso.org. Read the article "Using the New COSO Risk-Management Guidance". Read The Executive Summary of the article Enterprise Risk Management — Integrated Framework at the COSO website: • On the home page, click the Guidance tab. • Select the Enterprise Risk Management link. • Click MORE. • Select the Download (English) the free executive summary link. Research additional information in the Guidance and Resources sections at the COSO website. View the Riordan virtual organization. Create a corporate compliance plan consisting of no more than 2,450 words for Riordan. Focus your plan on managing the legal liability of officers and directors of Riordan. The plan must also address how to handle situations when laws are violated or in question (such as when to call in legal counsel, what rights the employees have, or who to turn to when actions are taken against Riordan). Your plan must also include the following: • Enterprise liability • Real and intellectual property • Governance principles of regulatory compliance requirements • The specific international laws or aspects of the law that must be adhered to by Riordan and an outline of these steps for employees to adhere to these laws Format your Corporate Compliance Plan as if you were...

Words: 2615 - Pages: 11

Premium Essay

Corporate Compliance

...Corporate Compliance Plan for Riordan Manufacturing October 19, 2009 Riordan Manufacturing is a profitable company generating large amounts of revenue for Riordan Industries. This compliance plan will outline the company’s legal processes and standards to ensure the company will be able to continue to operate and remain profitable in the future. The plan will address the laws that affect the company and provide a guideline for ensuring employees adhere to these laws. Riordan Manufacturing was started in 1991 by Dr. Riordan. He started the company by developing a process for turning polymers into high tensile strength plastic substrates. He patented these processes. In 1992 he purchased a manufacturing plant that made fans and started to get into the manufacturing business instead of just research and development. In 2000 the company started to venture out and expanded into China. This plan will outline an Alternative Dispute Resolution (ADR) for the company to use to keep them on track with their mission. Then discuss enterprise and product liability. Briefly discussed will be issues with international law and how those laws affect the expansion into China. The paper will cover tangible and intellectual property, legal forms of business as well as governess. The paper will also cover enterprise risk management as outlined by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). It will conclude by wrapping up with a discussion on laws that Riordan must...

Words: 4209 - Pages: 17

Premium Essay

Riordan Corporate Compliance Plan

...Corporate Compliance Plan Paper University of Phoenix LAW/531: Business Law Group: DB12MBA01 Joseph Balistocky, JD, MFCC April 17, 2012 Workshop 6 Riordan Corporate Compliance Plan Riordan Manufacturing is a $1 billion Fortune 100 organization with approximately 550 employees specializing in plastic patient design with operations in the United States and China that realized $46 million in revenue last year. Due to concerns originating out of the company’s expansion into e-Commerce and increasing international sales, the company has decided to implement a enterprise risk management (ERM) program based on internationally recognized Committee of Sponsoring Organization of the Treadway Commission (COSO) Guidelines. The COSO design was chosen for its emphasis on defining processes that enhance an organization’s management responsibilities, legal risks and rights of employees in relation by advocating a dispute management process (University of Phoenix, 2012). Management Responsibilities At Riordan Corporation, the executive level officers also act in a fiduciary capacity with responsibility for acting in the best interest of the organization while upholding a high standard of corporate behavior. The executive level senior management of the organization along with the internal auditor level officers of the company are included in the Riordan organizational chart with clear duty responsibilities outlined in detail with corporate...

Words: 2360 - Pages: 10

Premium Essay

Corporate Complisnce

...Corporate Compliance Plan Katrina Le`Vere University of Phoenix LAW 531 February 28, 2012 Riordan Manufacturing Legal Issues Riordan Manufacturing is a global plastic manufacturing company located in San Jose, California. The company employs more than 500 people producing plastic beverage containers, custom plastic parts, and plastic fans. Riordan’s major customers are the Department of Defense, beverage makers, manufacturers of automotive parts, aircraft, boilers, and appliances. Success has been a trademark of the company until a recent early termination of the vice president in the Sales and Marketing Department. The incident exposed legal issues the Riordan Board of Directors must immediately address to minimize the legal liabilities and ensure these situations never happen again. The legal issues began with the vice president of Sale and Marketing, Jill Baker, who received an employment termination effective immediately after working five years for the company. The company security guard escorted her off the premises. Jill gave documents to Jim Smith, a former Riordan employee who is currently an employee with a competitor. Jill had made sexual advances toward Jim and he decided to blackmail her unless she provided him with Riordan internal documents. Jill Baker is suing Riordan Manufacturing for wrongful termination. Prior to her termination she received an educational assistance payment of 50,000 dollars from the company that paid for her Master’s in Business...

Words: 1955 - Pages: 8

Free Essay

Doc 1

...rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww principles of business management studied throughout the course. The paper will be focus on managing the legal liability of the company and addressing alternative dispute resolutions, enterprise liability, and international law, tangible and intellectual property, legal form of business and governance. This compliance plan will be structured...

Words: 679 - Pages: 3

Premium Essay

Rik Management Audit

...Risk-Based IT Audit Risk-Based Audit Methodology Apply to Organization’s IT Risk Management Kun Tao (Quincy) Cal Poly Pomona Author Note This paper was prepared for GBA 577 Advanced IS Auditing, taught by Professor Manson. March 2014 Page 1 of 26 Risk-Based IT Audit Table of Contents Abstract .......................................................................................................................................... 3 Introduction .................................................................................................................................... 4 Methodology................................................................................................................................... 6 Risk-based auditing methodology: Risk assessment...................................................................... 6 IT Risk Management................................................................................................................... 7 IT Risk Control Framework........................................................................................................ 8 Identifying assets...................................................................................................................... 13 Determining criticality and confidentiality levels......................................................................14 Threat and vulnerability identification................................................................

Words: 6057 - Pages: 25

Premium Essay

Riordan Corporate Compliance Plan

...Riordan Corporate Compliance Plan Riordan Manufacturing Riordan Manufacturing is a global plastics producer with an employee base of 550. The company has projected annual earnings at $46million and is owned by Riordan Industries. There are different segments of the company but the major customers are the automotive parts manufacturers, aircraft manufacturers, the Department of Defense, beverage makers, bottlers, and appliance manufacturers. The company has recently undergone some strategic changes in manufacturing and marketing. Some of those recent changes are beginning to effect employee retention numbers. Situation Analysis Riordan Manufacturing has many issues and opportunities laid before them. The company must identify the proper issues in order to make the right adjustments. For the company to prosper, they must first take care of their employees. Issue Identification There are a myriad of issues that exist for Riordan Manufacturing. The company has gone through some recent structural changes because of the ever changing industry. Riordan decided to switch from an individual sales model to a team-based sales model. The issue with the above is that the individuals are used to being compensated solely based on their own performance; now there is apprehension about compensation at the team rate. Another issue is just the pay itself. Some managers are concerned that employees may take proprietary information and share it with competitors after leaving the company. Higher...

Words: 11305 - Pages: 46

Premium Essay

Weekly Summary

...Security Monitoring Activities CMGT/442 May 21, 2012 Security Monitoring Activities Any company that considers data an asset must realize the importance of risk management. Managing risk helps a company identify vulnerabilities and allows actions to be taken to reduce or stop these vulnerabilities. Risk management is also helpful in the attainment of goals and higher profits by attempting to eliminate any risk that may cost the company extra money to rectify. This paper will discuss security monitoring activities that must be addressed for both internal information technology (IT) and electronic commerce (e-commerce) applications of an organization. The recommended course of action will also be discussed when potential risks have been identified. According to Bejtlich (2004), security monitoring is defined as the collection, analysis, and escalation of indicators and warnings to detect and respond to intrusions. Security monitoring is an important part of risk management for internal applications such as payroll, human resources, and inventory. Security monitoring should also be used in the risk management of external applications like sales and marketing. Security Monitoring Process Security monitoring should be considered and used as a routine task to monitor and analyze the use of the network. Failure to use security monitoring would indicate that an organization believes there are no credible risks to the network. This thought process could...

Words: 1068 - Pages: 5