IS Audit Framework Development through e-Gov's RFID/USN Project in South Korea = 정보시스템 감리 프레임워크 개발 : 한국 전자정부의 RFID/USN 프로젝트 개발을 통해서

다국어 초록 (Multilingual Abstract)

We introduced a framework of information systems audit methodology and applied to IS projects based on RFID/USN in six public organizations in South Korea. An analysis of five IS implementation projects shows the iterative technical specific risks are disclosed. The key 14 risk factors categorized into 4 classifications (Project Management application, database, system architecture) which are based on the established IT audit framework in order to extend to the technology (RFID/USN) specific framework and apply to the other case as well. The implications of these findings for audit research and practice are discussed.

목차 (Table of Contents)

• Abstract
• 1. Introduction
• 2. Monitor and Control IT Projects
• 3. NIA IT Audit Framework
• 4. Research Methodology
• 5. Discussion
• 6. Conclusion
• References

참고문헌 (Reference)

1 Blackburn, "The nu gene acts cell-autonomously and is required for differentiation of thymic epithelial progenitors"

2 Wu, R. C., "The information systems auditor’s review of the systems development process and its impact on software maintenance efforts" 1-13, 1992

3 Benbast, I., "The case research strategy in studies of information systems" 11 (11): 365-386, 1987

4 Bacon, C. J., "The Use of Decision Criteria in Selecting Information Systems/Technology Investments" 335-353, 1992

5 Lee, C., "The Study on the effects of IT au dit in the national administration network project" NIA, National Computerization Agency 1992

6 Park, S., "The Study of the measure of IT audit efficacy" NIA, National Computerization Agency 1998

7 Rittenberg, "The Roles of Internal and External Auditors in Auditing EDP Systems" 51-58, 1977

8 Rittenberg, L., "The Internal Auditor’s Role in MIS Developments" 2 (2): 47-57, 1978

9 Seo, S., "The ISA PR Material" NIA, National Computerization Agency 2001

10 Kim, C., "The IS Auditor Basic Education and Professional Education Textbook" NIA, National Information Society Agency 2007

11 Nidumolu, S., "The Effect of Coordination and Uncertainty on Software Project Performance： Residual Performance Risk as an Intervening Variable" 6 (6): 191-219, 1995

12 Kim, C., "Research on actual status of IS Audit in the public sector, NIA, National Information society Agency"

13 Anon, "Research on Korean IT market"

14 Weber, R., "Information systems control and audit" Prentice Hall 1998

15 Ellis, D., "Information audits, communication audits and information mapping" 13 : 134-151, 1993

16 Bedard, J., "Information Systems Risk and Audit Planning" 9 (9): 147-163, 2005

17 Cho, I., "Information Systems Audit Legislation Passed in Korea" 1-6, 2008

18 Debreceny, R. S, "IT Governance and Process Maturity：A Multinational Field Study" 27 (27): 157-188, 0418

19 Harter, D., "Effects of process maturity on quality, cycle- time, and effort in software product development" 46 (46): 451-466, 2000

20 Faraj, "Coordination expertise in software development team" 46 (46): 1554-1568, 2000

21 Grabski, S., "Comparison of Judgment, Skills, and Prompting Effects between Auditors and Systems Analysts" 11 (11): 151-161, 1987

22 Lainhart, J. W., "Cobit：A Methodology for Managing and Controlling Information and Information Technology Risks and Vulnerabilities" 14 : 21-25, 2000

23 Yin, R. K., "Case Study Research：Design and Methods. 2nd Edition" Sage Publication 1994

24 Ridley, G., "COBIT and its Utilization：A Framework from the Literature" 2004

25 Gilhooley, I. A., "Auditing Computerized Systems" 9 (9): 1-8, 1982

26 Weiss, I. R., "Auditability of Software：A Survey of Techniques and Costs" 39-50, 1980

27 Sun, L., "An Information Systems Security Risk Assessment Model under the Dempster-Shafer Theory of Belief Functions" 22 (22): 109-142, 2006

28 Seo, S., "A study on the Effectiveness of Information Systems Audit" NIA, National Computerization Agency 2002

29 Seo, S., "A Study on the Enhancement of the IS Audit Framework" NIA, National Computerization Agency 2003

30 Nidumolu, S. R., "A Comparison of the Structural Contingency and Risk-Based Perspectives on Coordination in Software-Development Projects" 13 (13): 77-113, 1996