Integrity, internal control and security in information systems : connecting governance and technology : IFIP TC11/WG11.5 Fourth Working Conference on Integrity and Internal Control in Information Systems, November 15-16, 2001, Brussels, Belgium

IT Governance is finally getting the Board's and top management's attention. The value that IT needs to return and the associated risks that need to be managed, have become so important in many industries that enterprise survival depends on it. Information integrity is a significant part of the IT Governance challenge. Among other things, this conference will explore how Information Integrity contributes to the overall control and governance frameworks that enterprises need to put in place for IT to deliver business value and for corporate officers to be comfortable about the IT risks the enterprise faces. The goals for this international working conference are to find answers to the following questions: • what precisely do business managers need in order to have confidence in the integrity of their information systems and their data; • what is the status quo of research and development in this area; • where are the gaps between business needs on the one hand and research I development on the other; what needs to be done to bridge these gaps. The contributions have been divided in the following sections: • Refereed papers. These are papers that have been selected through a blind refereeing process by an international programme committee. • Invited papers. Well known experts present practice and research papers upon invitation by the programme committee. • Tutorial. Two papers describe the background, status quo and future development of CobiT as well as a case of an implementation of Co biT. Front Matter....Pages i-x Front Matter....Pages 1-1 A Cautionary Note Regarding the Data Integrity Capacity of Certain Secure Systems....Pages 3-25 Developing Secure Software....Pages 27-40 Establishing Accounting Principles as Invariants of Financial Systems....Pages 41-55 Integrity and Internal Control in Modern Banking Systems....Pages 57-76 Diversity as a Defense Strategy in Information Systems....Pages 77-93 Front Matter....Pages 95-95 Data Quality: Developments and Directions....Pages 97-102 Developments in Electronic Payment Systems Security....Pages 103-111 Front Matter....Pages 113-113 Governing Information Technology Through C obi T....Pages 115-159 Implementation of the COBIT-3 Maturity Model in Royal Philips Electronics....Pages 161-174 Front Matter....Pages 175-175 Business Process Security....Pages 177-186 The Information Integrity Imperative....Pages 187-193 Front Matter....Pages 195-195 The way forward....Pages 197-200 Back Matter....Pages 201-204 This fourth volume in the series "Integrity and Internal Control in Information Systems" is a state-of-the-art collection of papers in the area of integrity within information systems and the relationship between integrity in information systems and the overall internal control systems that are established in organizations to support corporate governance codes. This volume represents a continuation of the dialogue between information security specialists, internal control specialists and the business community