Combining Decision Making Trial and Evaluation Laboratory with Analytic Network Process to Perform an Investigation of Information Technology Auditing and Risk Control in an Enterprise Resource Planning Environment

NCU Institutional Repository > 管理學院 > 企業管理學系 > 期刊論文 > Item 987654321/102869

請使用永久網址來引用或連結此文件: https://ir.lib.ncu.edu.tw/handle/987654321/102869

題名:	Combining Decision Making Trial and Evaluation Laboratory with Analytic Network Process to Perform an Investigation of Information Technology Auditing and Risk Control in an Enterprise Resource Planning Environment
作者:	蔡文賢;Tsai, Wen-Hsien;Chou, Yu-Wei;Lee, Kuen-Chang;Lin, Wan-Rung;Hwang, Elliott T.Y.
貢獻者:	管理學院企業管理學系
關鍵詞:	Access;Access control;analytic network process (ANP);Auditors;Consultants;Data;Data integrity;Decision making;decision making trial and evaluation laboratory (DEMATEL);Disaster management;Disaster recovery;enterprise resource planning (ERP);Experts;Information technology;information technology auditing;Input-output analysis;internal control;Laboratories;Network analysis;Resource management;Risk;risk control;Risk management;Risk reduction;Studies
日期:	2013-03-01
上傳時間:	2026-04-23 11:18:28 (UTC+8)
出版者:	John Wiley and Sons Ltd;Chichester: Blackwell Publishing Ltd
摘要:	摘要： The research examined different types of risk through interviews with experts. The risks studied include business interruption risk, process interdependency risk and system security risk. The decision making trial and evaluation laboratory is used to find the relationship among risks and combined with the analytic network process to select the optimal measures for reducing risks. The results indicate that information technology (IT) consultants prefer the Disaster Recovery Plan (DRP). They usually use the remote replication or High Availability (HA) to protect data. IT personnel believe that all of the IT risk controls are important. Auditors indicate that data access control is very important because users have to execute data access every day. Users of IT express a preference towards data input/output control as the most important control. The results achieved from all experts indicate that the most important controls overall are data input/output control, data access control and so on. Managers need to consider these risks to avoid any potential problems. Copyright © 2012 John Wiley & Sons, Ltd. 其他題名： Syst. Res 出版者： Chichester: Blackwell Publishing Ltd 出版日期： 2013-03 出處： Systems research and behavioral science, 2013-03, Vol.30 (2), p.176-193 資源來源： Wiley Online Library - AutoHoldings Journals 版權： Copyright © 2012 John Wiley & Sons, Ltd. 版權： Copyright Wiley Periodicals Inc. Mar/Apr 2013 識別號： ISSN: 1092-7026 識別號： EISSN: 1099-1743 識別號： DOI: 10.1002/sres.2129
顯示於類別:	[企業管理學系] 期刊論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	13	檢視/開啟

在NCUIR中所有的資料項目都受到原著作權保護.

社群 sharing

資料載入中.....