Salesforce external auditor

Describe in some detail how the firm apple should go about implementing the strategic recommendation. Provide a timeline for implementation, a list of the resources or capabilities the company needs to acquire or develop, some assessment of costs involved (to the extent available financial information allows), the organizational/structural changes required and problems that might be encountered during the implementation. Talk in specifics. (HINT: If you recommend a merger or international strategy, for example, be sure to discuss how the structure/controls will have to change as a result!)

Provide a summary back-up plan. Discuss the conditions under which your strategic recommendation might not work. For example, does your strategic recommendation depend on the economic recovery or interest rates remaining low? If your strategic recommendation cannot be implemented as planned, then what would/could the company do?

(SalesForce)

Implementation Plan

Timeline: 1. Define your audit

a. Salesforce must determine which type of audit will be most beneficial to the company in its entirety, an internal audit or an external audit. External audits are

6

more costly than internal audits because of the time spent gathering all the necessary information and the monetary costs included in hiring a professional company to perform the audit. In comparison to the external audit, the internal audits procedures are a quicker process and the cheaper option for Salesforce. As a group, we have decided to do an external audit with Salesforce to add a perspective when analyzing the possible cyber security threats that may arise with the products and services that Salesforce provides. It is also important to list assets that may be most vulnerable and costly.

2. Define your threats a. After defining which audit has been chosen and listing the assets, Salesforce must

identify the assets that may be most vulnerable and identify possible threats to the most vulnerable assets. The reason for identifying the threats to the most vulnerable assets is important because those are the targets of the audit and may cost Salesforce the most money to repair. For example, the threats can be the security software selected to protect assets, employee mistakes or misuse of company assets, or an attack on Salesforce from a hacker. The threats to the selected assets may overlap, but every possible threat does need to be considered.