Organizational Responsibility
Organizations must protect personal and corporate information and use it only for its stated purpose.
Consequences of Data Misuse
Legal, financial, and reputational consequences; e.g., Equifax, Uber, Facebook breaches.
Privacy Legislation — Canada
Must comply with PIPEDA (federal) and provincial laws like BC’s PIPA.
International Privacy Laws
GDPR and California privacy laws apply when dealing with clients in those jurisdictions.
Personal Information Definition
Covers more than contact info; requires high levels of protection.
General Information Safeguards
Hardware/software access limits, segregation of duties, system documentation, management oversight.
External Threat Controls
Firewalls, antivirus, phishing protection, patch updates.
Application Controls
Controls over input, processing, output, database, communication, and personnel.
End-User Computing Risks
Unmonitored tools (e.g., spreadsheets) can create errors and inconsistent data.
Direct Data Access Risks
Employees extracting data into personal applications without audit trails; may compromise accuracy.
Mitigation Strategies
Disable exports, use data warehouses, enforce internal controls.
Blockchain Definition
A secure, decentralized digital ledger; tamper-resistant and transparent.
Blockchain in Banking
Faster payment processing.
Blockchain in Cryptocurrency
Foundation for digital currencies like Bitcoin.
Blockchain in Legal & Supply Chain
Smart contracts; product origin tracking and authenticity verification.
Big Data
Data sets too large for traditional tools; requires advanced computing for processing.
Artificial Intelligence (AI)
Simulates human intelligence; automates tasks and supports predictive analytics.
AI in Accounting
Automates reconciliations, advanced analytics, predictive/prescriptive decision-making.
Real-Time Information
Systems must be networked company-wide for timely, accurate, and consistent financial info.
Cloud/Hosted Solutions — SaaS
Subscription-based software hosted by vendors (e.g., cloud accounting apps).
Cloud/Hosted Solutions — IaaS
On-demand cloud infrastructure: servers, storage, computing power.
Cloud Benefits & Risks
Lower cost, faster implementation; risks include privacy, service interruptions, vendor dependency.
Systems Reliability — Privacy & Confidentiality
Ensure lawful data collection, storage, and sharing; protect employee and financial data.
Systems Reliability — Security, Integrity, Availability
Access controls, accurate and complete data, consistent availability with role-based access.