（2001）A Framework for Proactive, Automated and Continuous E-commerce Control and Assruance.pdfVIP

A Framework for Proactive, Automated and Continuous E-commerce Control and Assurance Wenli Wang Andrew D. Bailey Zoltan´ Hidvegi´ Andrew B. Whinston Decision and Information Analysis, Goizueta Business School, Emory University, Atlanta, GA, 30322 Department of Accounting, University of Illinois at Urbana Champion, Champaign, IL 61820 Centerfor Research in Electronic Commerce, Department of MSIS, The University of Texas at Austin, Austin, TX 78712 Wenli Wang@
jabaila@
hzoli@
abw@ September 17, 2001 SUMMARY In electronic commerce, proper operations of e-processes are crucial to an e-business’ economic well-being. We suggest that due to the complexity and characteristics of e-operations, the only viable approach for rigorous control and assurance relies on mathematical and computational methods to represent and analyze e-systems. Traditional auditing methods, based on manual verification, piece- meal analysis and post-audits, are insufficient. An innovative set of methods is proposed: 1) Applying economic reasoning, e.g., mechanism design, to design correct e-commerce trading rules and poli- cies; 2) Applying the concept of atomic transactions to define e-system properties and specifications; 3) Applying formal verification, e.g., model checking, to ensure correct implementation; and 4) Apply- ing agent technology to monitor real-time execution. These four methods should be embedded within the System Development Life Cycle. They complement each other, and their proper applications can refine e-syste