February 17, 2013 12:02 AM
Posted by: Robert Davis
Adaptive Systems,
Assurance Services,
Attestation,
Control Evaluation,
Control System,
Due Care,
Educational Institutions,
Internal Control System,
Logical Security,
Non-profit,
Open Source,
Operating Style,
Quality Assurance Program,
Security Risks,
Trust ManagementTo provide an appropriate answer to this foundational question regarding Wikipedia an assessor must take into consideration the primary traits of reliability. Therefore, as previously stated in Wikipedia: An assessment from a user's perspective - part 1 as well as documented in
February 14, 2013 1:45 PM
Posted by: Robert Davis
Adaptive Systems,
Assurance Services,
Attestation,
Control Evaluation,
Control System,
Due Care,
Educational Institutions,
Internal Control System,
Logical Security,
Non-profit,
Open Source,
Operating Style,
Quality Assurance Program,
Security Risks,
Trust ManagementWikipedia is often been presented as a great research resource; however it is also a public forum, where any authorized user can make a declaration or an assertion. “If you find an article that provides relevant information for your research topic, you should take care to investigate the source...
February 9, 2013 5:48 PM
Posted by: Robert Davis
Adaptive Systems,
Assurance Services,
Attestation,
Control Evaluation,
Control System,
Due Care,
Educational Institutions,
Internal Control System,
Logical Security,
Non-profit,
Open Source,
Operating Style,
Quality Assurance Program,
Security Risks,
Trust ManagementAs conveyed by TechTarget.com, “Identity management (ID management) is a broad administrative area that deals with identifying individuals in a system (such as a country, a network, or an enterprise) and controlling their access to resources within that system by associating user rights and...
February 7, 2013 2:55 AM
Posted by: Robert Davis
Adaptive Systems,
Assurance Services,
Attestation,
Control Evaluation,
Control System,
Due Care,
Educational Institutions,
Internal Control System,
Logical Security,
Non-profit,
Open Source,
Operating Style,
Quality Assurance Program,
Security Risks,
Trust ManagementFollowing the framework outlined in IT Auditing: An Adaptive System, a critical aspect of an IT assessment is the identification of related risks. Though Wikipedia Project Administrators commonly disavow their Internet endeavors are based on a Social Networking System (SNS), their...
February 1, 2013 11:31 PM
Posted by: Robert Davis
Adaptive Systems,
Assurance Services,
Attestation,
Control Evaluation,
Control System,
Due Care,
Educational Institutions,
Internal Control System,
Logical Security,
Non-profit,
Open Source,
Operating Style,
Quality Assurance Program,
Trust Management
May 3, 2011 9:33 PM
Posted by: Robert Davis
Control Environment,
Control Evaluation,
Control Processes,
Control System,
Governance Tree,
Internal Control Systems,
IT Controls,
IT Governanace,
IT Management,
Risk Management,
Roles and ResponsibilitiesDeploying key IT governance practices enhance an entity’s ability to meet control objectives for cost, functionality, and quality. Yet, regardless of the IT control techniques and automated tools available, the...
April 29, 2011 8:28 PM
Posted by: Robert Davis
Control Environment,
Control Evaluation,
Control Processes,
Control System,
Governance Tree,
Internal Control Systems,
IT Controls,
IT Governanace,
IT Management,
Risk Management,
Roles and ResponsibilitiesAn entity’s controlling and monitoring activities should reflect management’s strategy for ensuring an adequate IT control system. Consequently, IT policies, directives, standards, procedures, and rules should have a one-to-one or one-to-many correspondence with the assessed...
October 18, 2010 12:48 PM
Posted by: Robert Davis
Compliance Management,
Compliance Verification Systems,
Continuous Monitoring,
Control System,
Data Provisioning,
Decision Techniques,
Enterprise Resource Planning,
ERP,
Exception Reporting Systems,
Expert Systems,
Inference Engine,
Knowledge Acquisition,
Knowledge Engineer,
Knowledge-base,
Management Information Systems,
MISSince management is responsible for the entity’s controls, they should have the means to determine, on an ongoing basis, whether selected controls are operating as designed. Continuous monitoring typically addresses management’s responsibility to assess the adequacy and effectiveness of...
October 14, 2010 3:21 PM
Posted by: Robert Davis
Compliance Management,
Compliance Verification Systems,
Continuous Monitoring,
Control System,
Data Provisioning,
Decision Techniques,
Enterprise Resource Planning,
ERP,
Exception Reporting Systems,
Expert Systems,
Inference Engine,
Knowledge Acquisition,
Knowledge Engineer,
Knowledge-base,
Management Information Systems,
MISContinuous monitoring allows management to have greater insight into the entity’s current state of compliance. Typically, for IT, continuous monitoring involves...