Page 50 - Auditinf Electronic System

➢ Cons for organizations for implementing EDI
▪ Only applicable with trading partners who also implement EDI.
▪ conducting business over the internet is not risk free.

Third: What are the Risks enabled by IT:

There are two kinds of Risks enabled by IT are:

❖ Certain types of IT risks that tend to be common across organizations and
industries were introduced due to reliance on IT:
1. Selection risk.
2. Availability risk.
3. Hardware/software risk.
4. Access risk.
5. System reliability and information integrity risk.
6. Confidentiality and privacy risk.
7. Fraud and malicious acts risk.

1. Selection Risk: Selection of an IT solution that is misaligned (in suitable) with
a strategic objective and / or is insufficiently flexible.

Results: incompatibilities between the IT solution and the organization’s existing
systems and/or hinder future organizational changes and growth.
Causes: unqualified decision-makers and inadequate information supporting the
selection decision.

2-Availability Risk: Unavailability of the system when needed.

Results: cause delays in decision-making, business interruptions, lost revenue, and
customer dissatisfaction.
Causes: hardware/software failures, unscheduled maintenance, natural disasters, and
viruses and other malicious acts.

3-Hardware / Software Risk: Failure of hardware/software to perform properly.

Results: may cause business interruptions, temporary or permanent damage to or
destruction of data, and hardware/software repair or replacement costs.
Causes: natural wear and tear, environmental damage caused by such things as
excessive humidity, disasters such as fires and floods, not patching hardware or
software, and viruses and other malicious acts.

50 51
‫جميع الحقوق محفوظة ـ الإعتداء على حق المؤلف بالنسخ أو الطباعة يعرض فاعله للمسائلة القانونية‬