Scribd
Upload
404 views22 pages

Physical and Logical Access Controls

The document discusses physical and logical access controls. It defines internal controls and describes their objectives to provide reasonable assurance regarding financial reporting, operations, asset protection and compliance. Physical access controls relate to general security and restricting access to sensitive areas. Logical access controls provide authorization for applications and involve granting, monitoring and revoking access while preventing conflicts of duties. The Companies Act in India requires directors and auditors to ensure adequate internal financial controls are in place and operating effectively within organizations.

Uploaded by

Taranpreet Singh Saini
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
404 views22 pages

Physical and Logical Access Controls

The document discusses physical and logical access controls. It defines internal controls and describes their objectives to provide reasonable assurance regarding financial reporting, operations, asset protection and compliance. Physical access controls relate to general security and restricting access to sensitive areas. Logical access controls provide authorization for applications and involve granting, monitoring and revoking access while preventing conflicts of duties. The Companies Act in India requires directors and auditors to ensure adequate internal financial controls are in place and operating effectively within organizations.

Uploaded by

Taranpreet Singh Saini
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 22

PHYSICAL AND LOGICAL

ACCESS CONTROLS
Submitted by:
Taranpreet Singh Saini
601016

MIT, PUNE

Outline

Internal
Controls

Physical
Access
Controls

Logical
Access
Controls

Regulations

MIT, PUNE

WHAT ARE INTERNAL CONTROLS?

MIT, PUNE

Internal Controls
The process designed, implemented and maintained by those

charged with governance, management and other personnel to


provide reasonable assurance about the achievement of the
entitys objectives with regards to reliability of financial reporting,
effectiveness and efficiency of operations, safeguarding of assets
and compliance of applicable laws and regulations.
The terms control refers to any aspect of one or more of the
components of the internal controls.

MIT, PUNE

Formula of Internal Control

General
Controls

IS
Controls

Internal
Controls

MIT, PUNE

IS Controls

IS Controls
Application
Controls

IT General
Controls

MIT, PUNE

Objective of IS Controls

Maintaining Confidentiality
Preserving Integrity
Ensuring Availability

MIT, PUNE

Internal Controls

Physical Access
Controls

Logical Access
Controls

MIT, PUNE

Some Terms
Risk

Control
Control Objective

Risk is generally
defined as the
combination of
the probability of
an event and its
negative
consequence

It is generally a
contention and
states a criteria for
implementing and
evaluating the
entitys control
procedures in a
specific area.

Control Design

Control Operation

Documented
Blueprint of the
Control

Actual Execution
of the Control
which is
documented is
operating as
required.

MIT, PUNE

PHYSICAL ACCESS
CONTROLS
General Security

10

MIT, PUNE

What are Physical Access Controls?

11

MIT, PUNE

12

Illustrative Physical Access Control Objectives


Enforcement of Policies and Procedures relating to management

and security.
Restriction of access to sensitive areas.
Proper execution of procedures for Visitor Management
Revocation of access privileges on termination of employment
Constant monitoring of the premises
Screening of baggage and frisking of employees and visitors

MIT, PUNE

LOGICAL ACCESS
CONTROLS
Application and General Security

13

MIT, PUNE

14

What are Logical Access Controls


They refer to controls that provide relevant authorization to

appropriate personnel for the applications.


This area of controls include
Granting Access
Monitoring Access
Revoking Access
Preventing Conflict of Roles Segregation of duties

MIT, PUNE

15

Illustrative Control Objectives for Logical Access Controls (Security)


Execution of security administration policies and procedures
Avoidance of conflict of duties of personnel having security roles
Approvals, Authorization and Documentation of access of new

employees
Revocation of access of terminated employees performed in a
timely manner
Periodical Review of user access roles and rights
Enforcement of access password complexity parameters in all
systems

MIT, PUNE

What are Logical Access Controls?

16

MIT, PUNE

17

MIT, PUNE

18

MIT, PUNE

What are Logical Access Control?

19

MIT, PUNE

REGULATIONS
Under the Companies Act perspective

20

MIT, PUNE

21

Regulations Companies Act 2013


Section Reference

Regulatory Requirement

Section - 134

The directors would provide a responsibility statement have


laid down internal financial controls to be followed by the
company and are adequate and were operating effectively.

Section - 143

The auditors report shall state that whether the company has
adequate internal financial control system in place and the
operating effectiveness of such controls.

MIT, PUNE

THANK YOU

22

You might also like