Katipunan, Joan
Manuel, Acelyn Dyan
Santiago, Sara Mae
Sionomio, Minorca Vhea
Talictic, Claire
IT - 152 B
August 26, 2015

Separation of Duties Arcadia Plastics follows the philosophy of transferring people from job to job within the organization. Management believes that job rotation deters employees from feeling that they are stagnating in their jobs and promotes a better understanding of the company. A computer services employee typically works for six months as a data librarian, one year as a systems developer, six months as a database administrator, and one year in systems maintenance. At that point, he or she is assigned to a permanent position.

Required: 1. Discuss the importance of separation of duties within the information systems department.

Separation of duties is a classic security method to manage conflict of interest, the appearance of conflict of interest, and fraud. It restricts the amount of power held by any one individual. It puts a barrier in place to prevent fraud that may be perpetrated by one individual. Fraud will still occur if there is collusion.

2. How can Arcadia Plastics have both job rotation and well-separated duties?

Because the employee will have performed several highly incompatible tasks, this company needs to employ strong password access controls and constantly require its employees to change their passwords. This is especially necessary because these employees have either designed or viewed authorization access tables. Strong controls over program maintenance, such as program modification reports, are also a necessity. The key is that when an employee transfers from one job to another, she or he should have absolutely no access to any functions in previous positions.