Apata indicated four questions which must be asked on probable areas of risk: (1) Could this happen here? (2) How? (3) Are security measures adequate to prevent/detect the threat? (4) How can we improve on the measures?. The utili-zation of effective system security and controls can reduce considerable the incident occurrence and/or negative consequences by increasing the possibility of prevention and detection