Mobile insecurity

The proliferation of mobile computing has brought on a number of challenges, specifically around security issues. Smartphones are repeating a pattern witnessed in the 1980s with desktop computers. They flood into the corporate fold without any rational plan. And very often, they are introduced by employees who can’t resist the status statement these devices make. The greatest obstacle to security is the users themselves. People believe nothing of value resides on their device, yet much can be used for identity theft, intellectual property theft or espionage. Everyone likes these devices for the immediacy and convenience, and don’t want to be bothered with security barriers, especially passwords. This is why many users deactivate the password protection, which to begin with is very rudimentary and requires only a four-digit PIN identification. In a regular notebook, that would never be accepted as security. To learn more, read the article “Mobile insecurity” in the September 2011 CAmagazine online.

The Top Ten Tech Issues

The Canadian Institute of Chartered Accountants (CICA) Information Technology Advisory Committee conducts an annual survey of the most important IT issues facing the profession, which provides interesting insight into the prevalence and impact that technology has on businesses. While some topics come up every year, the relative importance of several issues changes from survey to survey.

This year was no different. Information management rose to the top spot from No. 3, pushing last year’s No. 1 issue, legislation and regulatory compliance, to second place. The impact of the recession, No. 2 last year, fell to No. 10 in this year’s survey, while new and emerging technologies rose to No. 3 from No. 5. (To learn more, read the article "The Top Ten Tech Issues" in the September 2011 CAmagazine online.)

Data-Centric Security - A CICA White Paper

In most organizations, data that was once static and stored in one place now moves freely from platform to platform throughout the organization and beyond. Because data is now often generated and modified by users and is resident in different forms and versions in different places simultaneously, maintaining a secure environment is a growing challenge. A White Paper issued by the Canadian Institute of Chartered Accountants (CICA) suggests that a data-centric policy should be the focus for management, auditors and others involved in securing data in this new mobile environment. The term “security” is taken in its broadest sense to include confidentiality, integrity (accuracy, completeness and validity) and availability. (Read the CICA publications on Data-Centric Security and

20 Questions Directors Should Ask About IT Security.)

AICPA/CICA Privacy Maturity Model

The AICPA/CICA Privacy Maturity Model (PMM) is based on Generally Accepted Privacy Principles (GAPP) and the Capability Maturity Model which has been in use for almost 20 years. In developing the PMM, it was recognized that each organization’s personal information privacy practices may be at various levels, whether due to legislative requirements, corporate policies or the status of the organization’s privacy initiatives. It was also recognized that, based on an organization’s approach to risk, not all privacy initiatives would need to reach the highest level on the maturity model. Each of the 73 GAPP criteria is broken down according to the five maturity levels. This allows entities to obtain a picture of their privacy program or initiatives both in terms of their status and, through successive reviews, their progress. (For more information, visit the CICA Privacy Resource Centre online.)

Smarter Evidence and Discovery Management

"There is no question that the influence and role of eDiscovery in litigation in Canada continues to develop. While eDiscovery has been a fixture in the US for many years, there has been a slower, pragmatic and perhaps sensible approach to the disclosure of electronic documents in this country. However, as documents are now overwhelmingly formed and maintained primarily in electronic form, it is acknowledged that eDiscovery has arrived in Canada and is here to stay." Visit the KPMG website and read the publication Smarter Evidence and Discovery Management.

AICPA Top Technology Initiatives Survey 2011

The American Institute of Certified Public Accountants (AICPA) 2011 Top Technology Initiatives Survey rates the proliferation of smartphones, tablet computers and mobile devices in the workplace as the top business technology concern. Mobile devices edged out information security, which had topped the list of tech concerns several years in a row. The survey provides feedback on the technology issues that are of greatest importance, as well as emerging technologies. (Read the article "Mobile Devices Top CPAs' Tech Survey Rankings" in the Journal of Accountancy online.)

IBM Global CEO Study 2010

In May 2010, IBM published Capitalizing on Complexity. This study is the fourth edition of IBM's biennial Global CEO Study series. To better understand the challenges and goals of today's CEOs, IBM consultants met face-to-face with the largest-known sample of these executives. Between September 2009 and January 2010, IBM interviewed 1,541 CEOs, general managers and senior public sector leaders who represent different sizes of organizations in 60 countries and 33 industries. Access to the full study findings and case studies are available on the IBM website along with the related press release.

The top 10 tech issues for 2010

Annually, the Information Technology Advisory Committee (ITAC) of the Canadian Institute of Chartered Accountants (CICA)  consults with the profession to learn what its greatest concerns are. In performing an analysis of the top 10 technology issues, newer technologies and their impact on business were considered and were addressed within the context of the more established issues. This year, the top ranked issue was compliance requirements. This is followed by the impact of the recession, information management, public trust and emerging technologies (such as cloud computing, social networks and personal technology). Other top 10 issues include collaborative-extended enterprises, infrastructure, IT governance, IT resources and skills, and knowledge management. Learn more by reading the online article "The top 10 tech issues" in the September 2010 issue of CAmagazine.

Data Level Assurance - a new research study

In recent years, corporate reporting has evolved towards the reporting of data elements such as performance metrics, statistics and a variety of ad hoc measurements of business activities. There are indications that many users are replacing increasingly complex and cumbersome financial statements with the easier-to-understand data elements often reported on corporate websites or in news releases. Since users are relying on this information, some have questioned whether there is a need for assurance on the data being reported. In response, the Canadian Institute of Chartered Accountants (CICA) has published a research study, Data Level Assurance, to recommend solutions to data level assurance issues and to suggest a future course of action for the profession in this area.

Business & Technology - a new CICA eNewsletter

Technology is pervasive in most organizations. It may result in reducing certain risks and introducing new ones. It must be carefully managed to ensure its potential is reached. It must be effectively controlled to ensure its integrity and the integrity of the information it provides. Recently, the Canadian Institute of Chartered Accountants (CICA) introduced a new publication called Business & Technology to provide timely information on technology issues impacting business. Interviews, articles and discussion commentary address critical issues of IT governance, risk management, security and controls, information processing and integrity, facilities management and the latest in technology, trends and techniques to ensure businesses maximize their IT investment. The inaugural issue explores the technology implications of the move to International Financial Reporting Standards (IFRS): IT implications of IFRS; Podcast: IT & IFRS — The European Experience; and ITAC Brief - ‘IFRS and Spreadsheets: A High-Risk Combination’. (Subscribe to the CICA eNewsletters and webinars.)

Data Security Remains Top Concern for CPAs, Survey Shows

According to the American Institute of Certified Public Accountants' (AICPA) 21st annual Top Technology Initiatives Survey, data security will remain the most pressing concern over the next 12 to 18 months. This is the eighth consecutive year the issue has made the top of the list. The results of the 2010 survey will be discussed at the AICPA Top Technology Initiatives Webinar on June 23, 2010. The webinar will put the survey results in context using practical examples to provide participants with an introduction to each initiative and its implication for their clients. (Read the article "Data Security Remains Top Concern for CPAs, Survey Shows" at the Journal of Accountancy online.)

5 Ways to Keep Customer Information Safe

Every time you do business with a customer or a client, you wind up with access to some very sensitive information, such as payment accounts. Without appropriate protection in place, clients may find themselves asking why they should trust you. If you handle any part of your business online, the chances of someone gaining access to information immediately goes up. But, there are steps you can take to keep your customers' information safe. (Read the article "5 Ways to Keep Customer Information Safe" at Open Forum online.)

Privacy guidelines take aim at identity theft and security breaches

The Canadian Institute of Chartered Accountants (CICA) and the American Institute of Certified Public Accountants (AICPA) have expanded their privacy framework to include guidance for securing personal information. The changes address best practices for securing portable devices and ensuring the strength of privacy controls. The guidance also covers disposal and destruction of personal information. (Read the article Guidelines Aimed at Thwarting ID Theft, Security Breaches Unveiled at Journal of Accountancy online.)

Financial Reporting in Flux - A Role for XBRL

According to a recent blog posting, companies are being asked to make available to the public increasing quantities of data directly from their systems on a real time basis. That is the trend! Companies may deny it and resist it, but it is being demanded by stakeholders. The implications are tremendous, not the least of which are issues around establishing data integrity and obtaining independent assurance. There is a need for a standard with which the data can be presented and used. By filling this need, XBRL will achieve a new level of usefulness. Indeed, that is a role in which XBRL will achieve its full potential. (For more information, visit the XBRL Canada Blog. )