MIS, or Management Information System, is a structured framework that uses technology,
- 1. Components of an organizational framework for security and control INFORMATION SYSTEMS CONTROL RISK ASSESSMENT SECURITY POLICY DISASTER RECOVERY PLANNING AND BUSINESS CONTINUITY PLANNING ROLE OF AUDITING
- 2. Introduction The organizational framework Provides a structure For: Integrated Financial Planning, Project Tracking, Reporting and monitoring of performance indicators.
- 3. Information System Controls General Controls Govern design, security, use of computer programs and security of data files. combinations of hardware, software and manual procedures. - Create an overall control environment.
- 4. Application Controls Specific controls unique to each computerized application Include both automated and manual procedures Ensure that only authorized data are completely and accurately processed by that application
- 5. Risk Assessment A risk assessment is a process to identify potential hazards and analyze what could happen if a hazard occurs.
- 6. Security Policy consists of statement ranking information risk, identifying acceptable security goals, identifying the mechanisms for achieving these goals.
- 7. Disaster Recovery Planning and Business Continuity Planning Disaster Recovery Planning: Plans for the restoration of disrupted computing and communications services. Business Continuity Planning: How the company can restore business operations after disaster occurs.
- 8. Role of Auditing Examine the firms overall security environment as well as controls governing individual information systems. Reviews technologies, procedures, documentation, training and personnel. Ranks all controls weaknesses and estimates the probability of the occurences.
- 9. Conclusion Firms need to establish a good set of general and application controls. risk assessment evaluates information assets, identifies controls points and control weakness and determines the most cost effective set of controls. It develops security policy and palns for continuing business operations Auditing helps organization to determine the effectiveness of security and control their information systems.