An entity has many employees that access a database. The database contains sensitive information concerning the customers of the entity and has numerous access points. Access controls prevent employees from entry to those areas of the database for which they have no authorization. All salespersons have certain access permission to customer information. Which of the following is a true statement regarding the nature of the controls and risks?

a. Because there is no segregation of duties among the salespersons, risk of collusion is increased
b. Only one salesperson should be allowed access permission
c. Sales department personnel should not have access to any part of the database
d. A salesperson’s access to customer information should extendonly to what is necessary to perform his/her duties

A salesperson's access to customer information should extend only to what is necessary to perform his or her duties.

Explanation:

In accessing information in an organisation, user rights should be created to limit the amount of information an individual can access. This can also provide relevant information to a person to do their jobs.

For example a cashier should not have access to the audit reports of an organisation. It does not have relevance to their job.

So in this scenario a good control is when a salesperson's access to customer information extend only to what is necessary to perform his or her duties.

in 2001, dell computer became the world’s largest personal computer vendor, continuing to

gain market share and post profits in an industry struggling with slumping sales and billions of

dollars in losses. dell sells 90% of its pcs directly to the final customer, largely bypassing the

reseller channel that accounts for most of the world’s pc sales. this direct customer relationship

is the key to dell’s business model, and provides distinct advantages over the indirect sales

model. dell’s direct relationship with the customer allows it to tailor its offerings to customer

needs, offer add-on products and services, and use the internet to offer a variety of customer

services. in addition, dell’s pcs are built to customers’ specifications upon receipt of an order,

giving dell additional advantages over indirect pc vendors who must try to forecast demand and

ship products based on those forecasts. dell’s direct sales and build-to-order model has achieved

superior performance in the pc industry in terms of inventory turnover, reduced overhead, cash

conversion, and return on investment (kraemer, et al., 2000).

explanation: