Integrity, Internal Control and Security in Information Systems: Connecting Governance and Technology

ISBN-13: 9781402070051 / Angielski / Twarda / 2002 / 204 str.

Michael Gertz;Erik Guldentops;Leon A.M. Strous

Opis

IT Governance is finally getting the Board's and top management's attention. The value that IT needs to return and the associated risks that need to be managed, have become so important in many industries that enterprise survival depends on it. Information integrity is a significant part of the IT Governance challenge. Among other things, this conference will explore how Information Integrity contributes to the overall control and governance frameworks that enterprises need to put in place for IT to deliver business value and for corporate officers to be comfortable about the IT risks the enterprise faces. The goals for this international working conference are to find answers to the following questions: - what precisely do business managers need in order to have confidence in the integrity of their information systems and their data; - what is the status quo of research and development in this area; - where are the gaps between business needs on the one hand and research I development on the other; what needs to be done to bridge these gaps. The contributions have been divided in the following sections: - Refereed papers. These are papers that have been selected through a blind refereeing process by an international programme committee. - Invited papers. Well known experts present practice and research papers upon invitation by the programme committee. - Tutorial. Two papers describe the background, status quo and future development of CobiT as well as a case of an implementation of Co biT.

Spis treści

Preface. Acknowledgements. Part one: Refereed papers. 1. A cautionary note regarding the data integrity capacity of certain secure systems; C.E. Irvine, T.E. Levin. 2. Developing secure software. A survey and classification of common software vulnerabilities; F. Piessens, B. de Decke, B. de Win. 3. Establishing accounting principles as invariants of financial systems; N.H. Minsky. 4. Integrity and internal control in modern banking systems; J. Jones. 5. Diversity as a defense strategy in information systems. Does evidence from previous events support such an approach? C. Bain, D. Faatz, A. Fayad, D. Williams. Part two: Invited papers. 6. Data quality: developments and directions; B. Thuraisingham, E. Hughes. 7. Security in electronic payment systems EMV and CEPS; M. Ward. Part three: Tutorial 'COBIT and IT Governance'. 8. Governing information technology through COBIT; E. Guldentops. 9. Implementation of the COBIT-3 maturity model in Royal Philips Electronics; A.C.E. van Gils. Part four: Vendor white papers. 10. Business process security. Managing the new security challenge with X-Tra Secure; B.J. Wattel. 11. The information integrity imperative; M.K. Nayar. Part five: Panel session. 12. The way forward; L. Strous. Index of contributors. Index of keyword.