• 디지털산업정보학회논문지
• /
• 제6권2호
• /
• pp.233-245
• /
• 2010

This paper proposes security architecture, security audit framework, and audit check item. These are based on the security requirement that has been researched in the information system audit. The proposed information security architecture is built in a way that it could defend a cyber attack. According to its life cycle, it considers a security service and security control that is required by the information system. It is mapped in a way that it can control the security technology and security environment. As a result, an audit framework of the information system is presented based on the security requirement and security architecture. The standard checkpoints of security audit are of the highest level. It was applied to the system introduction for the next generation of D stock and D life insurance company. Also, it was applied to the human resources information system of K institution and was verified. Before applying to institutions, system developers and administrators were educated about their awareness about security so that they can follow guidelines of a developer security. As a result, the systemic security problems were decreased by more than eighty percent.

• The Journal of Asian Finance, Economics and Business
• /
• 제8권7호
• /
• pp.457-468
• /
• 2021

This study seeks to examine the effects of fraud management accounting on organizational value creation of listed firms in Thailand through internal audit function and internal audit effectiveness as the mediators of the study. In addition, governance culture and digital capability are hypothesized to affect fraud management accounting, internal audit function, and internal audit effectiveness. The 297 listed firms in Thailand are the samples of the study. The structural equation model is applied to test the research relationships. The results of the study indicate that, firstly, fraud management accounting has an effect on internal audit function, internal audit effectiveness, and organizational value creation. Secondly, internal audit function affects both internal audit effectiveness and organizational value creation. It also mediates the fraud management accounting-organizational value creation relationships. Thirdly, internal audit effectiveness affects organizational value creation and it mediates the fraud management accounting-organizational value creation relationships. Finally, governance culture affects fraud management accounting, internal audit function and internal audit effectiveness. Accordingly, executives can support, promote and enhance the applications of fraud management accounting in an organization, and utilize its concepts as the valuable tools in order to create best organizational practices and achieve their business goals in the current and future operations.

• The Journal of Asian Finance, Economics and Business
• /
• 제7권5호
• /
• pp.41-50
• /
• 2020

The paper investigates the factors that affect the demand for a voluntary audit of small and medium-sized enterprises (SMEs) in Vietnam. A structured questionnaire survey of 284 SMEs was employed, preceded by in-depth interviews with auditors and SMEs' managers. The research used logistic regression estimator to address econometric issues and to improve the accuracy of the regression coefficients. The results show that the degree of director's view on voluntary audit, related stakeholder, degree of recommendation, and firm size have a statistically significant positive effect on audit decisions of SMEs while degree of audit fee has a statistically significant negative effect, and degree of subjective norm does not affect. This indicated that SMEs are more likely to have an external audit if they have some typical features: it is becoming larger in terms of size, and the directors consider that the audit has a relative benefit outweighing its cost. The research results suggested that Vietnam Government should make a statutory audit of SMEs' financial statements rather than make it an option for SMEs. The auditing firms were also recommended to actively take their audit services to SMEs rather than waiting for the SMEs' managers to contact them for their services.

• 정보처리학회논문지:소프트웨어 및 데이터공학
• /
• 제5권9호
• /
• pp.425-432
• /
• 2016

정보시스템 감리의 중요성이 커지면서 공공기관이나 기업에서 높은 품질의 시스템을 구축하기 위해 많은 비용을 투자하고 있으며 효율적인 감리 작업을 수행할 수 있는 도구에 관한 연구도 많이 진행되고 있다. 정보시스템의 핵심인 데이터베이스 관련 감리 작업에서 다양한 모니터링 도구를 활용해 많은 검사항목에 대해 감리할 수 있지만, 데이터베이스 성능에 많은 영향을 미칠 수 있는 SQL 감리에는 기능적으로 부족한 면이 존재한다. 대다수의 모니터링 도구들은 메타 정보 기반으로 검사하기 때문에 메타 정보가 없거나 정확하지 않으면 SQL 감리 작업을 수행하기가 어렵고 SQL 문장의 구체적인 문제점을 도출할 수도 없다. 따라서 본 연구에서는 ANTLR를 활용한 SQL 검사기를 설계하고 구현한다. 구현된 SQL 검사기를 통해 기존의 수작업으로 SQL을 검사하는 것보다 효율적으로 수행할 수 있다. 그리고 기능적인 측면에서 다른 모니터링 도구에 비해 더 많은 검사 규칙을 SQL 검사 작업에 적용할 수 있다. 본 연구에서 제시한 SQL 검사기는 개발 단계부터 운영단계까지 감리 작업을 수행하여 정보시스템의 안정성을 높일 수 있다고 기대한다.

• The Journal of Asian Finance, Economics and Business
• /
• 제7권8호
• /
• pp.61-67
• /
• 2020

This paper examines whether the combination of risk management and audit committee functions are associated with audit report lag. Audit report lag is considered an important aspect of the financial reporting. The financial reports are the main source of information for shareholders through which they make their decisions and it assists in reducing the information asymmetry. As the internal control mechanisms substitute the external ones, the internal board committees formed by the board of directors can reduce the audit work and, consequently, reduces the audit report lag. A key committee is the risk management committee. This paper examines whether the combination of risk management and audit committee functions are associated with audit report lag. We posit that a combination of such functions in one committee refereed as audit committee affects the audit report delay. Data were obtained from 198 manufacturing companies listed on the Saudi Stock Exchange (Tadawul) for the years 2016-2018. A pooled OLS regression analysis shows that a combination of risk management and audit committee functions in a stand-alone committee named "audit committee" is associated with longer audit report lag. The outcomes suggest companies should prioritize the establishment of standalone risk management committee with activities separated from those of audit committees.

• 아태비즈니스연구
• /
• 제10권4호
• /
• pp.31-47
• /
• 2019

The recently revised Act on External Audit has taken effect as of November 2018, where standard audit hour rule is included to enhance the audit quality requiring appropriate audit hour input. It has two issues, one is how much the standard audit hours should be and the other is how to control the auditor proficiency between positions when deciding standard audit hours. This paper focuses on the latter issue and studies if auditor proficiency measured with the KICPA position proficiency weight is economically meaningful and has audit quality implication. The KICPA proficiency weights of partner and junior CPA are 1.2, and 0.4 with senior CPA being 1. The results are as follows. First, we find that the audit proficiency decreases discretionary accruals, the proxy of audit quality. Second, the degree to which the audit proficiency decreases discretionary accruals is pronounced with non-big4 firm. The results imply that the KICPA position proficiency weight reflects auditor experiences which help to improve audit quality.

• The Journal of Asian Finance, Economics and Business
• /
• 제7권4호
• /
• pp.41-50
• /
• 2020

The paper aims to investigate auditors, auditing firms and other external factors that affect quality of information technology audit in Vietnam. We conducted 2 types of data collections including direct and on survey. For direct survey, we sent directly to auditors at the training classes organized by State Securities Exchanges Commission. An online survey was established and Google doc link was provided to the Big4 and non-Big4 auditors. We received 138 survey responses in that 90 auditors came from Big4 and 48 auditors from non-Big4 firms. The data are analyzed using a factor analysis and compare means approaches to illustrate the potential IT audit quality factors and identify differences between two groups of auditors. The results show that independence and accounting knowledge and audit skills are the most important factors. And since external auditors perform many assurance services, the independence is critical. The result also shows that the auditors need to have enough competent and professional skills when conducting an audit, especially within an IT environment that requires high quality. The findings suggest a similar pattern of two groups in the context of Vietnam and some factors of auditors and auditing firms appear to have a statistically significant impact on quality of IT audit.

• Management Science and Financial Engineering
• /
• 제3권2호
• /
• pp.45-70
• /
• 1997

The objectives of this study are to suggest and empirically prove the relationship model for investigating influence factors on the use of EDP audit techniques, and to identify moderating effects of the task types of EDP audit on the relationships between the influence factors and the use of EDP audit techniques. The results of the empirical test suggested that there are significant (positive or negative) correlations between the use of some EDP audit techniques and the influence factors, such as audit education, auditor's familiarity and age, and effectiveness of the technique, etc. The significant differences in the use of EDP audit techniques were empirically proved in the ratio of audit fees and the audit structure. It was also proved that the relationships between the use of techniques and the influence factors are different according to the task types of EDP audit. This study proposed the technique and the auditor related implications of these findings for the successful fulfilment of EDP audit.

• The Journal of Asian Finance, Economics and Business
• /
• 제7권12호
• /
• pp.831-843
• /
• 2020

The objective of this study is to examine the effects of audit socialization and professional commitment on professional success of tax auditors in Thailand through individual learning as the moderator. The specific research questions are: (1) How audit socialization affects professional commitment, (2) How professional commitment influences professional success, and (3) How individual learning moderates the audit socialization-professional commitment relationships, the audit socialization-professional success relationships, and the professional commitment-professional success relationships. This study collected data from 249 tax auditors in Thailand by using questionnaire. To investigate the research relationships, both structural equation model and multiple regression analysis are implemented. Within the research results, audit socialization has a significant positive effect on professional commitment and professional success while professional commitment has an important positive influence on professional success. Similarly, individual learning positively moderates the professional commitment-professional success relationships. In summary, audit socialization is important for auditing professions and it is a key determinant of professional success. Thus, auditors need to pay attention to audit socialization through learning and understanding it and applying its concepts to audit works to increase auditors' professional success, continuous survival and long-term sustainability.

• 디지털융복합연구
• /
• 제10권6호
• /
• pp.71-82
• /
• 2012

정보시스템의 급격한 발전으로 IT아웃소싱에 따른 서비스수준협약에 대한 관심이 높아지고 있다. 또한, 효율적인 IT운영서비스 관리가 절실한 상황에서 정보시스템에 대한 운영 감리의 필요성 및 인식도가 높아지고 있으며, IT를 어떻게 효율적으로 운영할 것인가에 대한 관심이 높아지고 있다. 그러나, 현행 정보시스템 운영감리 지침으로 한국정보화진흥원 시스템 운영 및 유지보수 지침이 존재하여 운영되고 있지만, 감리 현장에서는 감리원의 경험과 판단에 의해 결정되는 경우가 많다. 따라서 본 논문에서는 효율적인 운영감리를 위하여 한국정보사회진흥원의 운영지침의 정보시스템 감리 점검 프레임워크로 기반으로 서비스를 중심으로 한 운영감리 모형을 도출하였다. 서비스 계획, 서비스 제공, 서비스 지원, 서비스관리 영역에서 운영감리 점검항목을 도출하여 운영감리 모형을 제안하였으며, 전문가 설문 조사를 통하여 제안한 모형의 적합성을 검증하였다.