E-COMMERCE INFORMATION SYSTEMS: AUDITING AND CONTROL ISSUES

• Published in: Internal Auditing 2007-05, Vol.22 (3), p.31
• Main Authors: Pathak, Jagdish, Roberts, Timothy
• Format: Article
• Language: English
• Subjects: Computer networks; Computer viruses; Customers; Electronic commerce; Information systems; Internal auditors; Internal controls; Internet; Malware; Risk assessment
• ISSN: 0897-0378

E-commerce is quickly gaining ground as the rule, not the exception, when it comes to sales in the marketplace. There are downfalls, however, as businesses engaging in e-commerce are exposed to fraud and control risks that change and evolve as quickly as the technology being implemented does. As a result of this, internal auditors who are tasked with reviewing the information systems used to facilitate electronic commerce need to be very knowledgeable in this area. Internal auditors who primarily deal with information systems and auditing the controls related to computers can acquire certification in this particular field. The number of malicious programs out there is always growing, and the processes and techniques involved in creating them and infecting legitimate computers seem to evolve even faster than the safeguards and preventative measures used to stop them. Internal auditors must be aware of the malicious programs out there, their effects on computer information systems, and the associated control risks.