Robatelli’s Continuing Case Solution – Chapter 4
Do not make these Teaching Notes available for the general public. Please do
not post Teaching Notes on an open website where they can be scanned by
Google. When the Teaching Notes have been posted openly online in the past, it
has caused problems for faculty at other institutions who are using the Teaching
Notes in their classes.
1. Describe the new risks of Internet orders that Robatelli’s management should
have considered. The risks you describe should be specific to the Internet
order system.
The Internet poses risks in the following areas:
• Security
• Confidentiality
• Availability
2. Describe internal controls that Robatelli’s should have implemented to lessen
the risks you identify in part 1.
Exhibit 4-5 presents internal controls and the related risks. Of particular
interest to Robatelli’s should be the user authentication controls and the
hacking controls.
3. If Robatelli’s decides to move its data and software to a public cloud
computing model, what additional risks should it consider?
If Robatelli’s moves its data and software to a public cloud computing model,
it would effectively transfer control of its data and software to a third party