Output is incomplete, inaccurate, or inconsistent. Provide the software capability to scrutinize and analyze data. Incorporate control totals in report summaries. C33 Check the consistency of multiple versions of data. C34 Check report consistency from period to period.
Unauthorized individuals tamper with sensitive data and program files.
Identify sensitive data files and programs and protect them to an appropriate level of security. Establish standards to control the use of passwords. C37 Restrict access to supervisory and utility programs. C38 Lock computer terminals and other computer equipment or keep them in secure areas. When information systems processing is carried out at multiple sites with extensive use of telecommunications, use specific and appropriate security techniques.