A Report on IS Security Risk and Management in Microsoft Dynamics

This report explores information security risks and management techniques within Microsoft Dynamics. It examines services provided by Microsoft Dynamics, general management controls (GMC), and various application controls, comparing their functionalities. The report analyzes risk management techniques employed by Microsoft Dynamics, including risk identification, assessment, and control, emphasizing the importance of audit plans and processes. Recommendations are made for enhancing existing security services, highlighting the need for continuous updates to address evolving technological threats. The audit process, including compliance, security, and governance policies, is detailed, along with the audit report sections and follow-up methods. The report concludes with suggestions for improving the protected security system within Microsoft Dynamics.

Running head: IS SECURITY RISK AND MANAGEMENT
IS Security Risk and Management
Name of the Student
Name of the University
Author Note

1IS SECURITY RISK AND MANAGEMENT
Table of Contents
Introduction......................................................................................................................................2
Services provided by the Microsoft Dynamics................................................................................2
General Management Controls of Microsoft Dynamics..................................................................3
Different types of Application Control of Microsoft Dynamics.....................................................4
Comparison between the general management control and application control.............................5
Risk Management techniques used by Microsoft Dynamics...........................................................6
Importance of audit plans................................................................................................................7
Audit Process...................................................................................................................................8
Recommendation.............................................................................................................................8
Conclusion.......................................................................................................................................9
Reference.......................................................................................................................................10

2IS SECURITY RISK AND MANAGEMENT
Introduction
The principal purpose of the document is to find out the different types of techniques by
which Information Security organizations gathers and uses information to evaluate the
performance of different departments such as information related to the employee, the physical
assets of the company and financial structures so that organization can achieve its business goals
during the final audit process (Peltier, 2016). The entire processed which can be implemented on
both informal or formal method. The foremost purpose of this report is to influence the
performance of the employees of the selected organization. The services provided by the
organization and how information security is used in the system is described in this document.
The security measures of the corporation and its efficiency is described in this paper with greater
importance. Along with that the different types of application controls are also examined in the
central units of the paper. The risk management techniques used by the company is analyzed and
all the possible risk identification techniques are discussed with it. The importance of
maintaining any type of data concerning the growth and development of the company is
discussed in the audit section of the paper. The paper concludes with an appropriate conclusion
and recommendation regarding the existing control systems used in the Microsoft dynamics and
also provides sufficient information in case of any changes (Rhodes-Ousley, 2013).
Services provided by the Microsoft Dynamics
The purpose of this section of the product is to find out the services provided by the
Microsoft Dynamics such as the enterprise resource planning products for different types of
market sections such as dynamics GP for SMB, dynamics AX geared for different types of
organizations with all the latest updated specifications so that the organizations can be benefitted

3IS SECURITY RISK AND MANAGEMENT
by them (Wolenik, 2014). For the small and medium sized business Corporations Microsoft
dynamics introduced the Microsoft Dynamics 365 business central such as the Enterprise
Resource Planning and Customer Relationship Management programs. Microsoft Dynamics
have provided an integrated support system with the help of the Dynamics NAV and Dynamics
CRM for sectors such as finance and other operational sections of any organization (Ruivo et al.,
2013). Different organization uses office 365 and power BI for different types of purposes. The
other services provided by Microsoft Dynamics are Microsoft Dynamics Management Reporter
which are used in finance and analyzing sectors, Dynamics RMS used in the retails, for
marketing purpose also Microsoft Dynamics are used, Net breeze which is used in Microsoft
Dynamics social listening and customer engagement software (Birch, 2013).
The application of the different types of services provided by the Information Security
helps business of the Microsoft Dynamics a great way as it provides more security the
applications as wide range of people starting from external stakeholder like vendors to internal
stakeholders such as management teams so there is a tremendous need of security of the
applications which will make the organization work in a more efficient way and improve the
productivity. The external threats coming from the malicious software’s, logic bombs, viruses
can be neutralized with the help of the information security systems (Balaban &
DUMITRAŞCU, 2014).
General Management Controls of Microsoft Dynamics
The general management control used in Microsoft Dynamics is one of the best control
measures globally providing support to coordination, allocation of the available resources, the

4IS SECURITY RISK AND MANAGEMENT
motivation of the employees and performance management. The application of the general
management control systems of Microsoft has provided the company with greater discipline in
the technologies and departments in which it was implemented. The controls involve extensive
measurement of the applications with the management accounting. The GMC of Microsoft
Dynamics is also used in the different types of resource allocation process, it also provides
economic security to any systems against the internal and external threats. The GMC of
Microsoft Dynamics is helpful in different sociological sectors which involves communication
and motivation of the employees. GMC helps to minimize the threats which have the employees
of the organization of Microsoft Dynamics regarding the strategic planning. The inefficiency of
the management accounting, cost accounting, differential accounting and responsibility
accounting of the Microsoft Dynamics can be analyzed and reviewed using the GMC. It helps in
providing the best possible solution in various types of departments such as budgeting and
product costing taking in consideration of the different types of distraction such as quality of
products and customer satisfaction as these non-financial measures helps to maintain long term
partnership with all the stakeholders of the organization. The application of the GMC helps the
Microsoft Dynamics in a long-term basis. It provides efficient defensive techniques considering
all the factors which the Microsoft Dynamics corporation faces as threats. The GMC followed in
Microsoft Dynamics environment is continuously updated as per the requirements because due to
the vast improvement of the technology fresh threats are created every day and primitive
techniques are often backdated (Polino, 2013).

5IS SECURITY RISK AND MANAGEMENT
Different types of Application Control of Microsoft Dynamics
The application control used by the Microsoft dynamics corporations helps in providing
security to all of the stakeholders of the association by restricting any types of unauthorized
external factors from getting involved into the internal system and damaging important data as it
may have a direct negative impact on the development of the organization (Shamala, Ahmad &
Yusoff, 2013). The control applications of Microsoft Dynamics are based on the system in which
it is being implemented, maintaining the privacy of the organization in one of the most important
objectives of the application controls. The application control methods help in keeping a track of
all the active processes of the company and also helps in validating them so that the chances of
error are minimized to a significant extent (Jacobs, 2015). The validation property of the
application control helps to validate only the valid data throughout the system from the initial to
final stages of the processes. The Authentication mechanism is the other type of services
provided by the control application. System authorization is the other very important feature
provided the control system which helps in authorizing the users of any system. The control
application of Microsoft plays a huge role in the forensic control of the organization by
controlling the mathematically and scientifically correct data depending upon the output and
input from the system. All the different types of services provided by the control application of
Microsoft Dynamics helps in maintaining data security and data integrity of the organization
eliminating risks faced from illegal software and network access.
Comparison between the general management control and application control
The general management control is defined as the type of control which involves
management and development of activities such as maintaining the data security and data

6IS SECURITY RISK AND MANAGEMENT
integrity of the system, maintaining the important data files which can have an impact on the
organization and other types of computer operations. The GMC involves the entire system
associated with the organization along with its internal and external components and all the data
and process of the corporation. It provides security to the assets and records of the system. The
general management control helps in the effective functioning of the control applications because
of its feature such as authorization and validation of the data which are transmitted within or
outside the organization.
The application control is defined as the type of control which is specific to a computer
application and individual transaction. This type of tests is completed when a system is being
implemented in the organization. The practice of application control is very crucial in the
certification process of the organization as it provides a greater sense of reliability to the
management teams of the organizations. The auditors and management team help in developing
the application control of the organizations. The three different types of categories of application
control are Processing controls which include the financial transactions, Input controls constitute
the effective storing and authorization of the transaction and Output control which includes the
accuracy of the processing result.
Risk Management techniques used by Microsoft Dynamics
In this section of the report the different types of risk management techniques used by
Microsoft Dynamics is analyzed. Microsoft Dynamics have introduced different kinds of risk
management processes in their business digital processes to ensure availability, confidentiality,
reliability, security and integrity of the organization as it vital sensitive financial data, sales and

7IS SECURITY RISK AND MANAGEMENT
payroll data. Due to the massive data breaching because of the unauthorized access to systems,
Microsoft dynamics introduced new and innovative counter measures against those unethical
reasons. The use of advanced analytics to optimize the risk management techniques is one of the
most effective measures of Microsoft Dynamics. Predictive modelling is the other type of risk
management technique formulated by the Microsoft Corporation to enhance their security
threads (Rejda, 2011). Using the cloud services is the other type of risk management technique
adopted by the Microsoft Corporation for faster reporting regarding any sorts of issues related
with the risk factors (de Bakker, Boonstra & Wortmann, 2012).
The three steps which the Microsoft Corporation corporates in the risk management techniques
are as follows:
o Risk Identification: It is the process of estimating all the probable risks which the
organization may face during any process (Bates et al., 2014).
o Risk Assessment: It is the process in which the risk quantification is done and also it
productivity and probable impacts are assessed.
o Risk Control: It involves all the preventives measures by which every organization can
manage and protect against each available risk. The organization also implements an
effective measure if the threat is already spread to the system and potentially harm the
particular organization (Sledgianowski, Gomaa & Tan, 2017).
Importance of audit plans
This unit discusses the importance of audit plans used by Microsoft Dynamics is
analyzed. The audit planning of Microsoft Dynamic environment is a continuously updated plan

8IS SECURITY RISK AND MANAGEMENT
in which is an integral part of the audit process which includes all the data related to the services
offered by the companies, transaction details, access report, audit logs and safeguarding other
issues (Wu & Olson, 2014). The audit plan is helpful in focusing on important areas of the audit
paper and also to concentrate on the problematic areas so that the entire process can undergo
smoothly.
Audit Process
The audit process of Microsoft Dynamics is described in this section of the report helps
in designing the audit process, compliance, security and governance policies of the concerned
organizations (Guénin-Paracini, Malsch & Paillé,2014). It helps in having an idea about the
issue such as
o Authorization of the user was accessing the system and when?
o Who is responsible for the changes in data of a particular application?
o The details of the data before and after the change.
o The method by which the various action is taken and its validation.
o What locale was used to update the methods.
The audit report section involves the discussion draft, formal draft, final report and the
statements obtained from the clients. The audit review system of Microsoft dynamics is followed
by the Audit follow up method which is helpful in developing the annual audit report to the
higher authorities of the Microsoft Corporations (Hall, 2015).

9IS SECURITY RISK AND MANAGEMENT
Recommendation
The existing security services provided by the Microsoft in the field of Microsoft
dynamics use a very protected security system known as Microsoft Dynamics NAV 2018 which
is very efficient at the same time very user friendly. It allows the administrators of the systems to
manage user access to objects and data in their database securely and provides a very fast and
secured data retrieval process also. As the system is hosted on MySQL server and sometimes
there are few server issues related with it if those issue can be resolved then the efficiency of the
system can be further enhanced.
Conclusion
From the above report it can be concluded that there are different types of Information
Security control methods such as general management control and application control which are
helped in minimizing the impact of the threats. This report evaluated the security and risk
management techniques which are incorporated by the Microsoft dynamics authorities. The
different types of application controls and its relevancy with the Microsoft Dynamics is deeply
examined in the report. The three basic steps of risk management techniques are given in this
paper which help in understanding the method by which the Microsoft corporation control their
auditing process in the Microsoft dynamics environment. The importance of the audit planning
and the audit procedure provides the idea about maintaining the data security and data integrity.

10IS SECURITY RISK AND MANAGEMENT
Reference
Balaban, M. I., & DUMITRAŞCU, D. D. (2014). THE ADVANTAGES OF THE CRM–TYPE
SYSTEMS FOR RESOURCES PLANNING AND MANAGEMENT IN COMPANIES.
In Proceedings of the INTERNATIONAL MANAGEMENT CONFERENCE (Vol. 8,
No. 1, pp. 117-127). Faculty of Management, Academy of Economic Studies, Bucharest,
Romania.
Bates, D. W., Saria, S., Ohno-Machado, L., Shah, A., & Escobar, G. (2014). Big data in health
care: using analytics to identify and manage high-risk and high-cost patients. Health
Affairs, 33(7), 1123-1131.
Birch, A. (2013). Implementing Microsoft Dynamics AX 2012 with Sure Step 2012. Packt
Publishing Ltd.
de Bakker, K., Boonstra, A., & Wortmann, H. (2012). Risk managements' communicative effects
influencing IT project success. International Journal of Project Management, 30(4), 444-
457.
Guénin-Paracini, H., Malsch, B., & Paillé, A. M. (2014). Fear and risk in the audit
process. Accounting, Organizations and Society, 39(4), 264-288.

11IS SECURITY RISK AND MANAGEMENT
Hall, J. A. (2015). Information technology auditing. Cengage Learning.
Jacobs, S. (2015). Engineering information security: the application of systems engineering
concepts to achieve information assurance. John Wiley & Sons.
Peltier, T. R. (2016). Information Security Policies, Procedures, and Standards: guidelines for
effective information security management. Auerbach Publications.
Polino, M., 2013. Building Dashboards with Microsoft Dynamics GP 2013 and Excel 2013.
Packt Publishing Ltd.
Rejda, G. E. (2011). Principles of risk management and insurance. Pearson Education India.
Rhodes-Ousley, M. (2013). Information security: the complete reference. McGraw Hill
Education.
Ruivo, P., Johansson, B., Oliveira, T., & Neto, M. (2013). Commercial ERP systems and user
productivity: A study across European SMEs. Procedia Technology, 9, 84-93.
Shamala, P., Ahmad, R., & Yusoff, M. (2013). A conceptual framework of info structure for
information security risk assessment (ISRA). Journal of Information Security and
Applications, 18(1), 45-52.
Sledgianowski, D., Gomaa, M., & Tan, C. (2017). Toward integration of Big Data, technology
and information systems competencies into the accounting curriculum. Journal of
Accounting Education, 38, 81-93.
Wolenik, M. (2014). Microsoft Dynamics CRM 2013 Unleashed. Sams Publishing.