Audit accounting unit 3

After reading Chapter 5 of your Forensic Accounting and Fraud Examination textbook, complete the following problems, which will help you apply your knowledge of fraud prevention and risk management:

· Case 46 on page 164.

· Case 47 on page 164.

46. Geox Company produces and sells a specialized software package used by valuation analysts throughout the world. The software contains a series of modules connected to online databases in such a way that valuation analysts can quickly and accurately calculate estimated market values for private companies. Geox uses a subscription model to sell its product. Subscribers pay an initial fee, which permits them to immediately download and begin using the software. At the end of one year, subscribers must pay an annual fee or the subscription expires and the software stops working.

Geox began operations only several years ago with three brothers pitching in and working together in the garage of the oldest brother, Ricky. He developed the concepts behind the product and its marketing. Middle brother Zeek is a software engineer and did all the programming work. The youngest brother, Tricky, developed the Web site and did all of the work setting it up and billing customers. He manages everything to do with accounting.

Geox has rapidly grown from only a handful of subscribers to more than 10,000. Because of this growth, Tricky hired three full-time staff members for technical support and service. He does all of the billing himself with the help of his wife and oldest son. His present billing system was designed for only a small number of subscribers. Customers input their payment information into a secure Web form on Geox's site. Tricky then receives the payment details via e-mail. He then e-mails the customer a code from his database, which the customer inputs into the software to make it work for one year.

Tricky has become very good at handling the customer subscriptions and payments, despite the large number of transactions. Still, the large customer load often causes him to work too many hours, so he wants an automated system to handle all customer orders. He found an open-source shopping cart system that he likes on the Web. He prefers an open-source system so that Zeek can customize it as needed. Zeek is one of the world's best programmers, and he would never tolerate relying on any accounting system to which he could not make programming changes.

Tricky is presently using the Isolex accounting system, which is also a completely open source. It handles all payroll and expenses. It also handles revenues, but Tricky enters them manually, in weekly totals. All main data files in the Isolex system are stored in MySQL databases. This means that Zeek can easily integrate the Isolex system with any of the many online shopping cart and billing systems that also support MySQL. Tricky is considering three open-source shopping cart and billing system packages. He is very worried about security because he has heard many stories of hackers breaking into online systems such as the one he is contemplating.

a. Assume that you are called in as a forensic accountant to advise Geox. How would you suggest evaluating the contemplated open-source shopping cart systems?

b. How does the fact that the systems are open source affect their security?

47. Rimco Automobile Company specializes in repairs and custom modifications for high-performance sports cars. Dana Peaker, the CEO, is a former race car driver. Over the last 10 years, she has managed to open 18 shops in major U.S. cities. Rimco has Page 165been very profitable. Because it provides such specialized services for very expensive automobiles, it is able mark up both labor and materials at least four times cost and in many cases more than 100 times cost.

Rimco's operations have several divisions, each with it is own national division manager.

· Basic engine and automobile repairs.

· Collision repairs.

· Interior customization.

· Body customization.

· Parts procurement and distribution.

· Central office support.

Most of the profits come from the two customization divisions. Each division manager updates monthly budgets and plans for his or her area in each of the 18 stores. The central office support division includes the CEO, various administrative staff, accounting, internal auditing, IT, and security support.

The stores are connected to the main office through a network of VSAT satellite dishes, which permits all transactions to be centrally recorded in real time.

Donna Hacher, a member of the IT support group, is in charge of security. She constantly ensures companywide information security through a series of procedures that include the following:

· Checking to see that all of the latest security patches are applied to all company software.

· Telling all employees to notify her of any security problems.

· Teaching employees about not sharing their login passwords for the accounting system.

Overall, Donna feels pretty good about security because she recently moved all accounting functions to the latest version of the Zelical Accounting system, which has one of the best reputations in the industry for security features. She believed that with such a secure accounting system, her main concern would be ensuring that employees do not share their login passwords with others, for that would be the likely opening for any type of attack.

a. Describe Rimco's ISMS.

b. What weaknesses exist in the ISMS?