Document Type Master's Dissertation Author Bezuidenhout, Pieter Stefan URN etd-08222005-120314 Document Title An audit approach of the information systems auditor in an electronic commerce environment with emphasis on internet payment security Degree MCom (Computer Auditing) Department Auditing Supervisor
Advisor Name Title Prof J D Gloeck Committee Chair Keywords
- electronic commerce security measures
- electronic commerce auditing
Date 2003-04-01 Availability unrestricted AbstractElectronic Commerce (EC) is a growing business option and due to the “openness” of the underlying technologies used for EC, introduces new risks and new technologies that require sophisticated and sometimes very technical controls to be implemented. The role of the IS auditors is to ensure that they are technically competent to understand the impact of new technologies on the control environment and at the same time IS auditors need to be able to communicate the audit results to non-technical management. In this study the following framework, supported by detailed information and procedures for each step, is provided to assist the IS auditor to formulate an appropriate audit approach for an EC payment security audit:
The study highlighted the fact that the IS auditors should understand that they can not be experts in all the different technologies related to EC payment security. They should, however, equip themselves with the knowledge to understand the risks involved with new technologies and they should have a sufficiently in depth background exposure to technology to understand the controls required to address the risks. Results of previous audit procedures also play a significant role in shaping the IS auditor’s approach when auditing in an EC payment security environment. This thesis provides the IS auditor with a holistic approach to an EC payment security audit. After considering and implementing the elements of the framework developed in this study in an EC payment security audit, the IS auditor has to perform the actual audit tests, evaluate the results, and report the finding. Detailed audit considerations have also been provided to assist the IS auditor in collecting information and in developing an audit program.
- -- Gathering of background information related to EC payment security.
- -- Highlighting the risks in this environment.
- -- Identifying possible controls that will minimise the risks.
- -- Attending to various audit considerations that should be addressed by the IS auditor (these considerations are based on the underlying technologies, general controls, and ED-specific issues e.g., PKI, digital certificates, etc.
Copyright 2002, University of Pretoria. All rights reserved. The copyright in this work vests in the University of Pretoria. No part of this work may be reproduced or transmitted in any form or by any means, without the prior written permission of the University of Pretoria.
Please cite as follows:
Bezuidenhout, PS 2002, An audit approach of the information systems auditor in an electronic commerce environment with emphasis on internet payment security, MCom dissertation, University of Pretoria, Pretoria, viewed yymmdd < http://upetd.up.ac.za/thesis/available/etd-08222005-120314/ >
Filename Size Approximate Download Time (Hours:Minutes:Seconds)
28.8 Modem 56K Modem ISDN (64 Kb) ISDN (128 Kb) Higher-speed Access 00front.pdf 2.10 Mb 00:09:43 00:04:59 00:04:22 00:02:11 00:00:11 01chapter1.pdf 2.70 Mb 00:12:29 00:06:25 00:05:37 00:02:48 00:00:14 02chapter2.pdf 2.96 Mb 00:13:43 00:07:03 00:06:10 00:03:05 00:00:15 03chapter3.pdf 2.23 Mb 00:10:20 00:05:19 00:04:39 00:02:19 00:00:11 04chapter4.pdf 2.00 Mb 00:09:16 00:04:46 00:04:10 00:02:05 00:00:10 05chapter5.pdf 6.69 Mb 00:30:58 00:15:55 00:13:56 00:06:58 00:00:35 06chapter6.pdf 3.41 Mb 00:15:47 00:08:07 00:07:06 00:03:33 00:00:18 07appendices.pdf 7.41 Mb 00:34:18 00:17:38 00:15:26 00:07:43 00:00:39 08back.pdf 2.11 Mb 00:09:46 00:05:01 00:04:23 00:02:11 00:00:11