235 research outputs found
Framework for Evaluation of the IT&C Audit Metrics Impact
The paper defines an assessment system for performance of IT&C audit process. The analytical models of performance indicators are provided together with the interpretation of their results. Performance levels catch the quality characteristics of the audit processes carried out for distributed informatics systems. Also, the paper presents a performance assessment framework for audit processes and a performance audit methodology. The impact of performance indicators is defined as the organizationâs income after performance audit recommendation implementing. Methods and techniques for performance assessment are provided for audit processes of the distributed informatics system. The impact levels of performance indicators are calculated before implementation of the performance recommendation and after that to establish whether the performance audit increases the quality of IT&C audit processes.Performance Metrics, Metric Impact, Audit Process
Audit Process during Projects for Development of New Mobile IT Application
This paper presents characteristics of the computer audit process during software development life cycle focused on specific aspects of the mobile IT applications. There are highlighted specific features of the distributed informatics systems implemented in wireless environments as hardware components, wireless technologies, classes of wireless systems, specialized software for mobile IT applications, quality characteristics of the mobile IT applications, software development models and their specific stages and issues aspects of the computer audit during software development life cycle of the distributed informatics systems customized on mobile IT applications. In the computer audit process, tasks of the computer auditors and what controls they must implement are also presented.Audit Process, Mobile It Applications, Software Development Life Cycle, Project Management
Detection of the Security Vulnerabilities in Web Applications
The contemporary organizations develop business processes in a very complex environment. The IT&C technologies are used by organizations to improve their competitive advantages. But, the IT&C technologies are not perfect. They are developed in an iterative process and their quality is the result of the lifecycle activities. The audit and evaluation processes are required by the increased complexity of the business processes supported by IT&C technologies. In order to organize and develop a high-quality audit process, the evaluation team must analyze the risks, threats and vulnerabilities of the information system. The paper highlights the security vulnerabilities in web applications and the processes of their detection. The web applications are used as IT&C tools to support the distributed information processes. They are a major component of the distributed information systems. The audit and evaluation processes are carried out in accordance with the international standards developed for information system security assurance.security, vulnerability, web application, audit
Requirements of a Better Secure Program Coding
Secure program coding refers to how manage the risks determined by the security breaches because of the program source code. The papers reviews the best practices must be doing during the software development life cycle for secure software assurance, the methods and techniques used for a secure coding assurance, the most known and common vulnerabilities determined by a bad coding process and how the security risks are managed and mitigated. As a tool of the better secure program coding, the code review process is presented, together with objective measures for code review assurance and estimation of the effort for the code improvement
Using Quantitative Methods as Support for Audit of the Distributed Informatics Systems
This paper highlights some issues regarding how an indicators system must be developed and used in an audit process. Distributed systems are presented from de points of view of their main properties, architectures, applications, software quality characteristics and the scope of audit process in such systems. The audit process is defined in accordance to standard ISO 19011 and the main characteristics of this process are highlighted. Before using quantitative methods in audit processes, the framework in which the indicators are built must be defined. There are presented types of indicators used in audit process and classes of measurement scale. An audit process is carried out on different levels and support indicators must be in accordance to audit object. The paper presents some requirements of the indicators depending on the level of audit.Quantitative Methods, Audit Process, Distributed Informatics System
Characteristics of the Audit Processes for Distributed Informatics Systems
The paper contains issues regarding: main characteristics and examples of the distributed informatics systems and main difference categories among them, concepts, principles, techniques and fields for auditing the distributed informatics systems, concepts and classes of the standard term, characteristics of this one, examples of standards, guidelines, procedures and controls for auditing the distributed informatics systems. The distributed informatics systems are characterized by the following issues: development process, resources, implemented functionalities, architectures, system classes, particularities. The audit framework has two sides: the audit process and auditors. The audit process must be led in accordance with the standard specifications in the IT&C field. The auditors must meet the ethical principles and they must have a high-level of professional skills and competence in IT&C field.informatics audit, characteristic, distributed informatics system, standard
Operation on text entities
There are defined level of orthogonality for text entities. There are built orthogonal entities. There are identified operations on orthogonal entities and for each operation there are speci-fied the proprieties and the signification from applicability point of view. There is described software use to implement operations with structured entities.Text entity, orthogonality, operation.
Characteristics for Software Optimization Projects
The increasing of the software systems complexity imposes the identification and implementation of some methods and techniques in order to manage it. The software optimization project is a way in which the software complexity is controlled. The software optimization project must face to the organization need to earn profit. The software optimization project is an integrated part of the application cycle because share same resources, depends on other stages and influences next phases. The optimization project has some particularities because it works on an finished product around its quality. The process is quality and performance oriented and it assumes that the product life cycle is almost finished.optimization, software, project management, quality, performance
The Informatics Audit
The demand for qualitative and reliable information in order to support decision-making is continuously increasing. On the other hand, the cost of software production and maintenance is raising dramatically as a consequence of the increasing complexity of software systems and the need for better designed and user friendly programs. The huge amount of data the organizations face needs human, financial, and material resources to collect, checks, analyze and use it. All these aspects impose to develop activities in order to obtain better outcomes with less resources. The Informatics Audit is one of such kind of activities. This paper presents some Informatics Audit basic concepts.it audit, software cost, maintenance, system complexity
- âŚ