|
NEWS AND OTHER COMMUNICATIONS
 Red Flags Rule Delayed until June 2010
At the request of Members of Congress, the Federal Trade Commission is delaying enforcement of the “Red Flags” Rule until June 1, 2010, for financial institutions and creditors subject to enforcement by the FTC. The Rule was due to become effective on November 1, 2009 and once again it has been delayed. In anticipation of the enforcement, the AICPA developed a practice guide for members, which provides guidance on developing an Identity Theft Prevention Program (ITPP) as required by the FTC’s Red Flags Rule.
Firms can use the template as a starting point to set up their ITPP, but it must be tailored to reflect the firm's business situation. In addition to internal use, this template can be used by CPA firms to provide guidance to their clients in setting up an ITPP. Learn More>>
Download a copy of the AICPA Specialized Communities Annual Report for 2008-2009
Within its pages, you will find a summary of some of the initiatives the IT Community undertook this past year. These and other activities were accomplished through the combined efforts of our dedicated volunteers and professional staff. We hope this gives you a flavor of the value our members receive.
Thank you for your membership and support of our AICPA Specialized Communities. Learn More>>
ABCs of IT Security for CPAs #8: A CPA’s Introduction to Peripherals Security Management
 IT Section Members Only
Peripheral devices are fueling a growing trend of security breaches, information leakage, and data theft inside and outside networked environments. Many such devices can operate at a level of sophistication comparable to servers and workstations, but receive little attention where security and monitoring is concerned. Peripheral devices provide alternate pathways into and out of protected environments. Organizations are experiencing great difficulty in defining, enforcing, and securing peripheral device policies across heterogeneous networks and computing assets. This paper highlights some of the most widely used peripheral devices, the potential security threats and how to thwart them. Learn More>>
IFRS for Small and Medium Entities Now Available
The International Accounting Standards Board (IASB) has issued new IFRS rules for small and medium entities. Concerns over the cost and complexity of full IFRS implementation prompted the IASB to review how the standard could be simplified for smaller businesses. The result is a full, self contained 230 page document applicable to more than 95% of companies worldwide. IFRS for SME is effective immediately and available for use as of July 9, 2009, the issue date.
IFRS for SME significantly reduces the compliance burden for qualifying entities by eliminating many of the complex options available under full IFRS, simplifying many of the recognition and measurement principles, reducing required disclosures, and disallowing certain fair market revaluations. The AICPA has provided guidance regarding the costs and benefits of IFRS for SME implementation at http://www.ifrs.com/index.html . Additional information and related material can be found on the IASB website.
Business Intelligence in the Enterprise: A Framework for Enterprise Business Reporting
IT Section Members Only
In this second paper of a 3-part series, the basic business reporting architecture and its introductory terminology and principles are provided to enable the reader to learn the architecture’s potential applicability for their organization. The paper also provides practical guidance for initiating and managing an enterprise business reporting (EBR) initiative by explaining leading practices and identifying project risk factors that must be addressed to ensure the success of any business reporting project. After reading this paper, readers should be able to help evaluate existing EBR projects to identify areas of potential risk, as well as review existing business reporting architectures to help identify where they may need to be modified to conform them to an enterprise standard that incorporates proper internal controls over application and data integration. Learn More>>
ABCs of IT Security for CPAs #7: Introduction to Security Maintenance Considerations
IT Section Members Only
Computer systems require routine maintenance and upkeep to keep current and secure. Likewise, system security also follows a routine maintenance path and is itself an eternally ongoing work-in-progress—a constant cycle of evaluation, implementation, and monitoring. Security maintenance demands a breadth of expertise and wealth of knowledge across a broad range of disciplines within any real-world computing environment. In a constant struggle to keep the wolves at bay, knowledgeable security maintenance personnel should be prepared to thwart threats of attack to their company assets. Procedures and methods that include routine assessments, evaluations, identifications, implementations, resolutions, validations and verifications are among the many activities through which security must be maintained. Learn More>>
ABCs of IT Security for CPAs #6: Introduction to Perimeter Security
IT Section Members Only
Like a military formation securing an outpost in an active combat zone, organizations must prepare their stationary targets for a never-ending barrage of attacks from all sides that can vary in frequency and intensity. The Internet is the vehicle by which hostiles reach business’ networks and its fortifications, and begin launching automated and manual attacks. This article introduces the cornerstones of network perimeter security. Learn More>>
Federal Trade Commission Launches Red Flags Web site
Entities covered under the Red Flags Rule can now access resources to guide in the design and implementation of identity theft prevention programs. Learn More>>
CAQ Lessons Learned - Performing an Audit of Internal Control in an Integrated Audit (publication)
The Center for Audit Quality (CAQ) has developed a new practical pointers reference source for public company auditors that provides lessons learned from integrated audits of internal control over financial reporting (ICFR). Learn More>>
InfoTech Update by e-mail
Receive a FREE monthly e-newsletter containing updates on trends, news, legislation, events and more on information technology for the accounting profession. Sign up today >>
 Subscribe to the InfoTech Update RSS feed
AICPA/CICA Privacy Risk Assessment Tool
The Privacy Risk Assessment Tool is designed to assist CPAs/CAs, management, owners and other privacy professionals in assessing privacy risks within their or their clients organization. It provides the organization with principles and criteria that is contained in many privacy laws and regulations worldwide including good privacy practices to benchmark against. Learn More>>
|