Securing Information Systems wps.prenhall（确保信息系统wps.prenhall）.pdf

1 C h a p t e r 7 S e c u r i n g I n f o r m a t i o n S y s t e m s LEARNING TRACK 4: GENERAL AND APPLICATION CONTROLS FOR INFORMATION SYSTEMS To minimize errors, disaster, computer crime, and breaches of security, special policies and procedures must be incorporated into the design and implementation of information sys- tems. The combination of manual and automated measures that safeguard information sys- tems and ensure that they perform according to management standards is termed controls. Controls consist of all the methods, policies, and organizational procedures that ensure the controls All the methods, safety of the organizations assets, the accuracy and reliability of its accounting records, policies, and procedures that and operational adherence to management standards. ensure protection of the In the past, the control of information systems was treated as an afterthought, organizations assets, accuracy addressed only toward the end of implementation, just before the system was installed. and reliability of its records, Today, however, organizations are so critically dependent on information systems that vul- and operational adherence to nerabilities and control issues must he identified as early as possible. The control of an management standards information system must be an integral part of its design. Users and builders of systems must pay close attention to controls throughout the systems life span. Computer systems are controlled by a combination of general controls and applica- tion controls. general controls Overall General controls are those that control the design, sec