AICPA Trust Principles, IT controls Accounting, Finance Case Study

Student
Professor
Course
Date
AICPA Trust Principles
According to AICPA guidelines, five types of risks inherent to IT systems include security, process integrity, availability, confidentiality, and online privacy (Williamson, AICPA Trust Service). The control systems that an organization can consider to mitigate these risks are authentication, organizational structure, and implementing measures to prevent hacking and other types of data theft (Williamson, General IT Controls). In 2019, British Airways (BA), a large UK-based airline, faced an enormous data breach causing it to compromise the information 500,000 customers. The attackers directed a false code to the third-party script of BA’s website that enabled them to hold their control. After this, they were able to scrap the credit card number of each passenger entering their details to book their tickets online (Stokel-Walker). Hence, it tricked customers into disclosing their personal information.
As for the five categories of AICPA’s trust principles, this disaster falls under the category of ‘online privacy’ because it affected the customers as they were trying to interact with BA through specified ...