Browse > Article
http://dx.doi.org/10.5392/JKCA.2011.11.2.088

Design on Fixed Quantity Analytical Model for Information System Audit  

Kim, Hee-Wan (삼육대학교 컴퓨터학부)
Lee, Hae-Man ((주) IBK시스템)
Kim, Dong-Soo ((주)키삭)
Publication Information
The Journal of the Korea Contents Association / v.11, no.2, 2011 , pp. 88-100 More about this Journal
Abstract
This thesis suggests fixed quantity model and detailed performance procedures of an information system audit. In addition, an identification of the check-items with high operating risk and factors that might lead to serious effects on the business are made. Then, this thesis proposes the information system audit model that can grant priorities. By using this model, the orderer can evaluate objectively with digitized mark. The model can improve the effectiveness, reliability, and objectivity of the audit by minimizing the discrepancies of different opinions about audit evaluation results between auditee and the orderer. The proposed model is adapted to an application system and audit projects of the database construction. As a result, the model has received an equal mark from the result of the general reviews, thus the propriety of the proposed model was verified.
Keywords
Information System Audit; Fixed Quantity Model; Detailed Performance Procedures; Digitized Mark;
Citations & Related Records
연도 인용수 순위
  • Reference
1 한국정보사회진흥원, 공공부문 정보보호 아키텍처 구성 방안 연구, 2004.
2 한국정보사회진흥원, 정보시스템 보안/통제 감리지침 연구, 1998.
3 ISO/IEC 12207, Information Technology : Software Life Cycle Processes, 1995(8).
4 정보사회진흥원, ITA법 시행에 따른 정보시스템감리, 2008.
5 정보통신부, 정보시스템의 효율적 도입 및 운영등에 관한 법률, 법률 제7816호, 2005.
6 최영진, 정보시스템 개발프로젝트에서 감리 효과성에 관한 실증적 연구, 2004.
7 한국정보사회진흥원, 정보시스템 감리 제도발전과 품질향상을 위한 핵심성공요인과 개선방안 연구, 2001.
8 한국정보사회진흥원, 정보시스템 감리 프레임워크 발전방안 연구, 2003.
9 ISO/IEC 27001, International standard - Information technology - Security techniques - Information security management systems - Requirements, 2005.
10 http://www.pairwise.org/
11 Project Management Institute, Guide to the Project Management Body of Knowledge, 4/e : (Pmbok Guide), Project Management Institute, 2008.
12 Ingrid B. Ottevanger, “A Risk-Based Test Strategy”, STEN, 2008.
13 ISACA Korea chapter, CoBIT 4.0 한글판, 2006.
14 정보통신부, 정보시스템 감리기준, 정보통신부 고시 제 2006-42호, 2006.
15 정보통신부, 정보시스템 감리기준, 정보통신부 고시 제1999-104호, 1999.