Thursday, 21 April 2016

Week 4 - The Australian Legal System and Jurisdiction

AYB115 Week 4

The profession of forensic accounting involves activities of:



 Investigation of frauds - thorough investigation and calculation of the impact on the business and therefore suggesting the arrest of the culprit for a criminal suit. Today, in the IT environment, where users' profiles are very similar and access controls are somehow lacking, this becomes critical. A general problem in forensic identification arises when a suspect is observed to have a particular rare trait, or combination of traits, also known to be possessed by the criminal (Balding and Donnelly, 1995).
 Legal disputes and/or arbitration
 Preparation and submission of expert reports
 Supporting of Judges in subjects relating to accounting
 Verification of accounting records
 Supporting in due diligence.

In essence, I'd like to draw my experience of studying law that as an evolutionary field, what I have learnt is the profession requires infinite of changing. For example back in the 18th and 19th century there was no legislation in regards to binding electronic contracts. However, now in the 21st century we have electrical signatures that allows contracts to be binding, and for such act to be legalised, this required constant development in the field of law. 

As this is also required in a profession of forensic accounting. We live in a society where technology innovation is constantly occurring. As such a crucial profession that mainly investigates fraud, it is essential that the profession acts similarly to the Law and continues to develop and control fraudulent acts from individuals and large corporations. The constant development will help the profession to 'keep up' with our innovative society.


Reference:

Balding, D. J. and Donnelly, P. (1995), Inference in Forensic Identification. Journal of Royal Statistical Society, 158 Part1, pp. 21-53

Week 3 - Governance and Management Responsibility

Week 3 AYB115 
The COBIT 5 is a toolset that allows managers to bridge the gap between IT requirements, technical issues and business risks. In essence, COBIT is designed to ensure good control over information to meet requirements of its audiences (i.e. Stakeholders). If the business had minimised virus, adware and maleware protection in 2016, crucial information including trading secrets could be obtained which may allow fraud, bribery or corruption to occur.  (Ahmed, 2009).

From my previous experience, if my computer did not install its yearly antivirus software, this leads the information of my computer out to the open. With the current technology innovation, crucial information can be easily stolen without proper maleware protection. 

Principle 1 of COBIT requires the Enterprise to meet stakeholders needs (commercial or not). As such, if the information was stolen this could amount to a risk of bribery to the stakeholders. Such risk also applies to Priniciple 3 of applying a single integrated framework, if information of the enterprises framework, this could lead to a risk of bribery or corruption.

Importantly, according to principle 2 of COBIT provides that there should be covering of the enterprises end-to-end perspective. This includes everything and everyone, internal and external. 

Principle 4 of enabling a holistic approach supports the development of an integrated framework. Enablers are factors that collectively influence whether something will work. The information leaked could lead to bribery.

The leak of principle 5 could lead to risks of fraud, bribery and corruption.

Conclusively, I disagree with the above statement and that  information security should not be minimised regardless of exaggeration to ensure enterprise information is protected.


Reference List:
Ahmad, A. (2009). Exploring COBIT Processes for ITG in Saudi Organisations: An EmpiricalStudy. The International Journal of Digital Accounting Research, 9(1577-8517), 99-126. Retrieved fromhttp://search.proquest.com.ezp01.library.qut.edu.au/docview/197412484/fulltextPDF?accountid=13380. 

Week 2 - Fraud, corruption and IT Governance and Policy

Week 2 - AYB115

In separation of management and governance allows both disciplines to govern their types of activities, different organisational structures and serve different purposes. I believe it is essential that governance ensures that stakeholder needs, conditions and options are evaluated to determine enterprises objectives, setting direction and decision making, and monitoring performance. In contrast, management plans, builds, runs and monitors activities in alignment with the direction set by the governance body to achieve the enterprise objectives. (Ahmad, 2009)

For example when I was employed at MacDonalds, if there was no management, or any sort of governance to monitor performance of employees, this would lead poor quality service and food. If such an arrangements were risks of fraud, bribery or corruption could occur internally.

With such a structure, this establishes the enterprises control reduces the risk of fraud and misconduct. Further, with management this also enables fraud detection. In prevention of bribery, the governance ensures the stakeholders needs and the enterprises objectives, as such, this ensures stakeholders participation. Further, monitoring and managing the potential conflict of interest of members of the enterprise (corruption). 


Hence, I agree with the above statement.

Reference List:


Ahmad, A. (2009). Exploring COBIT Processes for ITG in Saudi Organisations: An EmpiricalStudy. The International Journal of Digital Accounting Research, 9(1577-8517), 99-126. Retrieved from:http://search.proquest.com.ezp01.library.qut.edu.au/docview/197412484/fulltextPDF?accountid=13380.