Case 6.2

Trust Services is an assurance and advisory services based on a common framework to address the risks and opportunities associated with information technology. Availability, security, processing integrity, online privacy, and confidentiality are the five trust services principles. For each principle, the Trust Services framework contains Criteria, which demonstrate the attributes that the entity must meet to be able to demonstrate that it has achieved the principle. The Criteria is to be used as benchmarks to measure and present the subject matter and against which the practitioner evaluates the subject matter.

WebTrust and SysTrust services differ from each other in a variety of ways. The WebTrust services highlight matters such as security, privacy, availability, confidentiality, and processing integrity. On the other hand, SysTrust services are focused on providing assurance that a company has an effectively controlled information system. One of the significant benefits to vendors is the removal of cash handling by sales personnel roaming the stadium. The use of the Spot Card in place of cash reduces the handling of cash, which in turn reduces the risk of loss of cash through error or misappropriation. The primary benefit to the fan is convenience. They no longer have to handle cash to purchase goods as long as they have their Spot Card with an available balance on the chip. The primary benefit to First Union is the generation of fees related to the sale and installation of the Spot Card system. Profit margins that are built into the sale and installation lead to profits for the bank.

In accordance to AUC-315 and AUC 330, one of the most crucial controls that both the stadium and First Union should have implemented is thorough testing of all proposed system changes. In addition, both the stadium and bank personnel most likely worked together to design specific back-up contingency plans in the event of a disaster. By using AT 501 A CPA may be able...