Risk Assignment

Risk Assignment

1. Types of risk

   • Fraud
     • False billing
     • Financial (funds) fraud
     • Advanced Fee Frauds
     • Identity theft
     • Phishing
   • Cyber terrorism
     • Sabotage of computer based information systems
     • Introducing malicious viruses to vulnerable computer networks
     • Website defacing
     • Denial-of-service attacks
   • Computer crime
     • inappropriate use of corporation I.T
     • theft of hard/software
     • unauthorised access and info theft
     • Fraudulent modification of data/programs
     • sabotage of computing facilities
     • premeditated virus infection and disruptive software

2. Internal comtrols

   • application controls
     • input
     • processing
     • output
   • General controls
     • Organisational
     • Documentation
     • Acess
     • Asset-management
     • management practice
     • Information systems