Robatelli’s Continuing Case Solution – Chapter 14
Do not make these Teaching Notes available for the general public. Please do not post
Teaching Notes on an open website where they can be scanned by Google. When the
Teaching Notes have been posted openly online in the past, it has caused problems for
faculty at other institutions who are using the Teaching Notes in their classes.
a. Discuss whether Robatelli’s Internet order activities can be termed e-commerce.
b. Given the privacy practices described in the AICPA Trust Principles, describe the
kind of customer data that Robatelli’s could reasonably collect and store, and also
describe some data that Robatelli’s should not collect and store. Explain the
reasons for these differences.
Robatelli’s must have name, address, and phone number at a minimum. If the
customer pays by credit card, they would also need credit card type, number,
expiration date, and the name as it appears on the card. Robatelli’s does not need
c. Describe the internal controls related to Internet orders that Robatelli’s should have
in place.
The entire set of hacking and network break-in controls would be beneficial to
Robatelli’s. This would include firewall, encryption, security policies, security breach
resolution policies, secure socket layers (SSL), anti-virus software, vulnerability
In addition, the software that Robatelli’s uses to process e-commerce orders should