Question

What company policies or proceudres would you reccomend to prevent each of the following activities?A. A clerk in the human relations department creates a fictitious employee in the personnel computer file. When this employeeâs payroll check is received for distribution, the clerk takes and cashes it.B. A clerk in the accounts receivable department steals $250 in cash from a customer payment, then prepares a computer credit memo that reduces the customerâs account balance by the same amount.C. A hacker manages to break into a companyâs computer system by guessing the password of his friend-Champ, the name of the friendâs dog.D. An accounts receivable clerk manages to embezzle more than $1 million from the company by diligently lapping the accounts every day for three consecutive years.E. A computer virus on the companyâs local area network administrator traces a virus to an individual who accidentally introduced it when he downloaded a computer game on to his computer.F. A clerk at a medical lab recognizes the name of an acquaintance as one of those patients whose lab tests are "positive" for an infectious disease. She mentions it to a mutual friend, and before long, the entire town knows about it.

Answer 1

Answer: A) I would recommend putting a stronger security protocol in place for registering new employees especially the use of biometrics. Also frequent verification of Staff by way of head count.

B). An over ride process shoud be put in place for modification done on the system. Also a rotation of schedules amongst staff is important.

C). Stronger password security should be introduced such as the combination of alphabets, numbers and symbols. This password should have no bearing with personal interests of the staff and should be prompted for change frequently.

D). Staff should be made to go on leave compulsorily to give room for others to handle same schedule. Audit specialist may come and check the accounts at interval to see if there is anything suspicious. Also, a change in schedules or posting of Staff should be encouraged to prevent Staff from being too comfortable with a schedule and use it for his personal interest.

E). Internet sites not relevant to the job should be disabled. Also constant update of anti virus should be done by the IT department.

F). The company should have a policy confidentiality and that any staff who violates it with be sanctioned legally. Also medical results should be given to the patient enveloped and the content between him and the doctor.

Explanation: Company policies and procedures refers to laid down rules set by an organisation on how it's activities will be run.