A Framework for Integrating Sarbanes-Oxley Compliance into the Systems Development Process Export

@article{A:Mishra:07:SOX_development, abstract = {The Sarbanes-Oxley Act introduces a new set of requirements into software development. Corporations need to assess their internal control effectiveness for business processes to show compliance with the act. This paper proposes a conceptual framework for integrating Sarbanes-Oxley compliance needs into software development by mapping the activities of an established framework for internal controls to the various workflows of the systems development process. Theoretical and practical contributions are discussed and future research directions are explored.}, author = {Mishra, Sushma and Weistroffer, Heinz R.}, citeulike-article-id = {2418091}, citeulike-linkout-0 = {http://cais.aisnet.org/articles/default.asp?vol=20&art=44}, journal = {Communications of the Association for Information Systems}, keywords = {compliance, development, security\_mgmt, sox}, pages = {712--727}, posted-at = {2008-02-23 10:08:04}, priority = {2}, title = {A Framework for Integrating Sarbanes-Oxley Compliance into the Systems Development Process}, url = {http://cais.aisnet.org/articles/default.asp?vol=20&art=44}, volume = {20}, year = {2007} }

TY - JOUR ID - A:Mishra:07:SOX_development L3 - citeulike-article-id:2418091 N2 - The Sarbanes-Oxley Act introduces a new set of requirements into software development. Corporations need to assess their internal control effectiveness for business processes to show compliance with the act. This paper proposes a conceptual framework for integrating Sarbanes-Oxley compliance needs into software development by mapping the activities of an established framework for internal controls to the various workflows of the systems development process. Theoretical and practical contributions are discussed and future research directions are explored. JF - Communications of the Association for Information Systems EP - 727 TI - A Framework for Integrating Sarbanes-Oxley Compliance into the Systems Development Process VL - 20 SP - 712 KW - compliance KW - development KW - security_mgmt KW - sox AU - Mishra, Sushma AU - Weistroffer, Heinz PY - 2007/// UR - http://cais.aisnet.org/articles/default.asp?vol=20&art=44 ER -