Combining Decision Making Trial and Evaluation Laboratory with Analytic Network Process to Perform an Investigation of Information Technology Auditing and Risk Control in an Enterprise Resource Planning Environment

Wen‐Hsien Tsai, Yu‐Wei Chou, Kuen‐Chang Lee, Wan‐Rung Lin and Elliott T.Y. Hwang

Systems Research and Behavioral Science, 2013, vol. 30, issue 2, 176-193

Abstract: The research examined different types of risk through interviews with experts. The risks studied include business interruption risk, process interdependency risk and system security risk. The decision making trial and evaluation laboratory is used to find the relationship among risks and combined with the analytic network process to select the optimal measures for reducing risks. The results indicate that information technology (IT) consultants prefer the Disaster Recovery Plan (DRP). They usually use the remote replication or High Availability (HA) to protect data. IT personnel believe that all of the IT risk controls are important. Auditors indicate that data access control is very important because users have to execute data access every day. Users of IT express a preference towards data input/output control as the most important control. The results achieved from all experts indicate that the most important controls overall are data input/output control, data access control and so on. Managers need to consider these risks to avoid any potential problems. Copyright © 2012 John Wiley & Sons, Ltd.

Date: 2013
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (4)

Downloads: (external link)
https://doi.org/10.1002/sres.2129

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bla:srbeha:v:30:y:2013:i:2:p:176-193

Ordering information: This journal article can be ordered from
http://www.blackwell ... bs.asp?ref=1092-7026

Access Statistics for this article

More articles in Systems Research and Behavioral Science from Wiley Blackwell
Bibliographic data for series maintained by Wiley Content Delivery ().