Conducting an information security audit

Gheorghe Popescu, Adriana Popescu and Cristina Raluca Popescu
Additional contact information
Gheorghe Popescu: Academy of Economic Studies
Adriana Popescu: Academy of Economic Studies
Cristina Raluca Popescu: University of Bucharest

Manager Journal, 2008, vol. 7, issue 1, 76-82

Abstract: The rapid and dramatic advances in information technology (IT) in recent years have without question generated tremendous benefits. At the same time, information technology has created significant, nunprecedented risks to government and to entities operations. So, computer security has become much more important as all levels of government and entities utilize information systems security measures to avoid data tampering, fraud, disruptions in critical operations, and inappropriate disclosure of sensitive information. Obviously, uses of computer security become essential in minimizing the risk of malicious attacks from individuals and groups, considering that there are many current computer systems with only limited security precautions in place. As we already know financial audits are the most common examinations that a business manager en- counters.This is a familiar area for most executives: they know that financial auditors are going to examine the financial records and how those records are used. They may even be familiar with physical security audits. However, they are unlikely to be acquainted with information security audits; that is an audit of how the confidentiality, availability and integrity of an organization'Â’s information are assured. Any way, if not, they should be, especially that an information security audit is one of the best ways to determine the security of an organization'Â’s information without incurring the cost and other associated damages of a security incident.

Keywords: Computer security audit; IT security; informational systemsÂ’ audit; information security management system; IS security policies; firewall (search for similar items in EconPapers)
Date: 2008
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
http://manager.faa.ro/download/496_714.pdf (application/pdf)
http://manager.faa.ro/en/article/Conducting-an-inf ... urity-audit~496.html (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:but:manage:v:7:y:2008:i:1:p:76-82

Access Statistics for this article

Manager Journal is currently edited by Paul Marinescu

More articles in Manager Journal from Faculty of Business and Administration, University of Bucharest Contact information at EDIRC.
Bibliographic data for series maintained by Cosmin Catalin Olteanu ().