Wiley Control and Security of E–Commerce

Review -For ensuring that file servers and other elements of the e-commerce infrastructure are protected, this book is an excellent choice- (Security Management, July 2004) -If you are employed anywhere near the sharp end of e-commerce, this is a book you should defiantly read.- (Supply Management, 18 March 2004) "For ensuring that file servers and other elements of the e-commerce infrastructure are protected, this book is an excellent choice" (Security Management, July 2004) "If you are employed anywhere near the sharp end of e-commerce, this is a book you should defiantly read." (Supply Management, 18 March 2004) Product Description * Explores the components of e-commerce (including EDI).* Shows the risks involved when using an e-commerce system.* Provides controls for protecting an e-commerce site (e.g., securing financial transactions and confidential transactions).* Provides COSO compliant audit approach.* Provides risk/control tables and checklists.* Technical topics are discussed in simple user-friendly language. From the Inside Flap Once scoffed at during the dot.com years, the formerly staid, old, "bricks and mortar" companies have now fully recognized and implemented the value of the Internet. Their new online infrastructure allows them to reach customers in new ways, open new markets, and reap new rewards. "Brick and mortar" is now "brick and click," with e-tailing and e-commerce standard operating procedures for global business. But for all its new benefits, e-commerce also unleashes a host of new risks and issues on the business world. While hackers, data theft, espionage, and cyberterrorism threaten a company's e-business infrastructure from without, online payment and information systems present auditing challenges from within. Control and Security of E-Commerce provides expert guidance on how to protect and monitor electronic commerce. Using nontechnical, user-friendly language, this book lays out the components and risks of an e-commerce system. It also details security solutions and auditing techniques for an e-commerce environment. Topics covered include: Legal issues related to e-commerce Information security Symmetric and asymmetric cryptosystems Digital signatures and other authentication techniques Protection against viruses, Denial of Service attacks, back doors, and Trojan programs Securing UNIX and Windows server environments Auditing an e-commerce application It is the job of the auditor to ensure that strong controls are built into electronic applications, and to mitigate the inherent risks involved. Control and Security of E-Commerce offers a structured approach for accomplishing these essential goals. Tools include controls for securing financial and other confidential transactions, a COSO-compliant audit approach, and risk/control tables and checklists. These tools, along with the clearly organized presentation of the material, will maximize the efficiency and effectiveness of audits and security reviews. As business reliance on e-commerce increases, so does the intricacy of the problems confronting e-business professionals. Internal and external auditors, information security professionals, network administrators, controllers, and CFOs will all appreciate the practical, results-oriented approach of Control and Security of E-Commerce, as both they and their companies benefit from this timely, useful resource. From the Back Cover Praise for Control and Security of E-Commerce "The essence of information security is all about people, processes, and controls. The heart of successful security is not pure technology. The key is a team of well-trained employees who are prepared to use technology as a tool to implement and manage effective IT controls. Gordon Smith's important book is a quality follow-up to his first book dealing with a control assessment approach to network auditing. It is an outstanding presentation of what is important in implementing and managing IT controls. It simply belong