A structural study of internal control for ERP system environments: A perspective from the Sarbanes-Oxley Act

International Journal of Management and Enterprise Development

Volumn 5, Issue 1, 2008, Pages 102-121

  Huang, Shi Ming ^a   Hsieh, Pei Gin ^a   Tsao, Hsiu Hui ^a   Hsu, Pei Yu ^a,b  

^a NATIONAL CHUNG CHENG UNIVERSITY   (Taiwan)

^b Data Systems Consulting Co Ltd

Author keywords

AHP; Analytic hierarchy process; Delphi method; Enterprise resource planning; ERP; Internal control; Sarbanes oxley act; SOX

Indexed keywords

EID: 37849052430     PISSN: 14684330     EISSN: 17418127     Source Type: Journal    
DOI: 10.1504/IJMED.2008.015909     Document Type: Article

References (32)

1. Al-Mashari, M., Zairi, M. and Okazawa, K. (2006) 'Enterprise resource planning (ERP) implementation: a useful road map', International Journal of Management and Enterprise Development, Vol. 3, Nos. 1/2, pp. 169-180.
2. Arlington, C.E., Hillison, W. and Jensen, R.E. (1984) 'An application of analytic hierarchy process to model expert judgment in analytic review procedures', Journal of Accounting Research, Vol. 22, pp.298-312.
3. Bagranoff, N.A. (1989) 'Using an analytic hierarchy approach to design internal control systems', Journal of Accounting and EDP, Vol. 4, No. 4, pp.37-41.
4. Bailey Jr., A.D., Duke, G.L., Gerlach, J., Ko, C., Meservy, R. and Whinstion, A.B. (1985) 'TICOM and the analysis of internal controls', Accounting Review, Vol. 60, No. 2, pp.186-211.
5. Bradford, M. and Florin, J. (2003) 'Examining the role of innovation diffusion factors on the implementation success of enterprise resource planning systems', Information Journal of Accounting Information System, Vol. 4, pp.205-225.
6. Brown, C.E. and Phillips, M.E. (1991) 'Expert systems for internal auditing', International Auditor, Vol. 48, No. 8, pp.23-28.
7. Brown, W. and Nasuti, F. (2005) 'Sarbanes-Oxley and enterprise security: IT governance-what it takes to get the job done', Security Management Practices, pp.15-28.
8. Changchit, C., Holsapple, C.W. and Madden, D.L. (2001) 'Supporting managers' internal control evaluations: an expert system and experimental results', Decision Support Systems, Vol. 30, No. 4, pp.437-449.
9. Committee of Sponsoring Organizations of the Treadway Commission (1992) Internal Control-Integrated Framework, New York: American Institute of CPA.
10. Damianides, M. (2004) 'How does SOX Chang IT?' The Journal of Corporate Accounting and Finance, pp.35-41.
11. Damianides, M. (2005) 'Sarbanes-Oxley and IT governance: new guidance on IT control and compliance', Information Systems Management, Vol. 22, No. 1, pp.77-85.
12. Davenport, HT. (1998) 'Putting the enterprise into the enterprise system', Harvard Business Review, Vol. 76, No. 4, pp. 121-133.
13. DeLone, W.H. and McLean, E.R. (1992) 'Information systems success: the quest for the dependent variable', Information Systems Research, Vol. 3, No. 1, pp.60-95.
14. Gulledge, T.R. (2006) 'ERP gap-fit analysis from a business process orientation', International Journal of Services and Standards, Vol. 2, No. 4, pp.339-348.
15. Haworth, D.A. and Pietron, L.R. (2006) 'Sarbanes-Oxley: achieving compliance by starting with ISO 17799', Information Systems Management, Vol. 23, No. 1, pp.73-87.
16. Hong, K-K. and Kim, Y-G. (2002) 'The critical success factors for ERP implementation: an organizational fit perspective', Information and Management, Vol. 40, pp.25-40.
17. Hwang, S-S., Shin, T. and Han, I. (2004) 'CRAS-CBR: internal control risk assessment system using case-based reasoning', Expert Systems, Vol. 21, No. 1, pp.22-33.
18. IT Governance Institute (2004) 'IT control objectives for Sarbanes-Oxley', Available at: www.itgi.org.
19. Karlsen, J.T., Andersen, J., Birkely, L.S. and Ødegård, E. (2006) 'An empirical study of critical success factors in IT projects', International Journal of Management and Enterprise Development, Vol. 3, No. 4, pp.297-311.
20. Kopp, L.S. and O'Donnell, E. (2005) 'The influence of a business-process focus on category knowledge and internal control evaluation', Accounting, Organizations and Society, Vol. 30, pp.423-434.
21. Lee, T., Moon, Y.B. and Lee, H. (2006) 'Enterprise resource planning survey of Korean manufacturing firms', International Journal of Management and Enterprise Development, Vol. 3, No. 6, pp.521-533.
22. Mabert, V.A., Soni, A. and Venkataramanan, M.A. (2003) 'Enterprise resource planning: managing the implementation process', European Journal of Operational Research, Vol. 146, pp.302-314.
23. McKenna, H. (1994) 'The Delphi technique: a worthwhile research approach for nursing?' Journal of Advanced Nursing, Vol. 19, pp.1121-1225.
24. Polit, D. and Hungler, B. (1999) Nursing Research, Principles and Methods, Philadelphia, PA: J.B. Lippincott Co.
25. Saaty, T.L. (1980) The Analytic Hierarchy Process, New York: McGraw-Hill.
26. Sarkis, J. and Gunasekaran, A. (2003) 'Editorial: enterprise resources planning modeling and analysis', European Journal of Operational Research, Vol. 146, No. 2, pp.229-232.
27. Sharma, S.K., Chen, C. and Sundaram, S. (2006) 'Implementation problems with ERP systems in virtual enterprises/virtual organisations', International Journal of Management and Enterprise Development, Vol. 3, No. 5, pp.491-509.
28. Tsai, W-H., Hsu, P-Y., Cheng, J.M-S. and Chen, Y-W. (2006) 'An AHP approach to assessing the relative importance weights of ERP performance measures', International Journal of Management and Enterprise Development, Vol. 3, No. 4, pp.351-375.
29. Tucker, G.H. (2001) 'IT and the audit', Journal of Accountancy, Vol. 192, No. 3, pp.41-43.
30. Wei, C-C., Chien, C-F. and Wang, M-J.J. (2005) 'An AHP-based approach to ERP system selection', International Journal of Production Economics, Vol. 96, pp.47-62.
31. Yusuf, Y., Gunasekaran, A. and Abthorpe, M.S. (2004) 'Enterprise information systems project implementation: a case study of ERP in Rolls-Royce', Journal of Production Economics, Vol. 87, pp.251-266.
32. Zheng, S., Yen, D.C. and Tam, J.M. (2000) 'The new spectrum of the cross-enterprise solution: the integration of supply chain management and enterprise resources planning systems', Journal of Computer Information Systems, p.84-93.