论文部分内容阅读
CIO在一些安全方面的细微失误如果积聚在一起,则很有可能爆发成大问题,这些恰恰会成为企业在信息安全方面的短板。继企业会计准则、审计准则体系建成并有效实施之后,企业内控体系已然成为企业发展的一次重大系统工程。作为企业信息主管的CIO,在面临企业内控的信息安全时,一方面要利用IT这个监管工具,而另一方面,IT本身也成为企业进行内部控制的监管对象之一。如何在这样一个庞大的话题中,找到有共性和典型性的切入点,将理论联系实际,发现背后隐藏的
CIO in some security subtle mistakes if brought together, it is likely to erupt into a big problem, these just become the enterprise in the information security shortcomings. Following the establishment of enterprise accounting standards and auditing standards system and its effective implementation, the internal control system of the enterprise has become a major systematic project for the development of the enterprise. As the chief information officer of CIO, when faced with the information security of enterprise internal control, on the one hand to use IT as a regulatory tool, on the other hand, IT itself has become one of the corporate supervision of internal control. How to find a common and typical entry point in such a huge topic, to connect the theory with the reality and discover the hidden behind