Data security-can auditor involvement or use of auditing techniques help in building more secure systems?

Abstract

Advances in technology allow the building of ever more complex applications systems, typified by systems involving electronic data interchange (EDI). While management has become less concerned with the issue of security, systems are becoming more difficult to control, while computer fraud crimes, particularly those perpetrated by 'trusted' insiders continue to rise. It is vital that those involved in building systems ensure that they are auditable, controllable and secure, as well as usable and maintainable. Systems analysts and EDP auditors have roles to play, and methodologies and tools must be enhanced to meet these requirements.<>