The role of internal auditors in ERP-based organizations

Journal of Accounting & Organizational Change

Volumn 5, Issue 4, 2009, Pages 514-526

  Madani, Haider H ^a  

^a KING FAHD UNIVERSITY OF PETROLEUM AND MINERALS   (Saudi Arabia)

Author keywords

Accounting; Central government; Public sector accounting; Public sector reform; Russia

Indexed keywords

EID: 84993047715     PISSN: 18325912     EISSN: None     Source Type: Journal    
DOI: 10.1108/18325910910994702     Document Type: Article

References (49)

1. Akkermans, H. and van Helden, K. (2002), “Vicious and virtuous cycles in ERP implementation: a case study of interrelations between critical success factors”, European Journal of Information System, Vol. 11 No. 1, pp. 35-46.
2. Al-Mashari, M. and Zairi, M. (2000), “The effective application of SAP R-3: a proposed model of best practice”, Logistics Information Management, Vol. 13 No. 3, pp. 156-66.
3. Al-Mashari, M., Al-Mudimigh, A. and Zairi, M. (2003), “Enterprise resource planning: a taxonomy of critical factors”, European Journal of Operational Research, Vol. 146 No. 2, pp. 352-64.
4. Arens, A.A. and Loebbecke, J.K. (2000), Auditing: An Integrated Approach, 8th ed., Prentice-Hall, Upper Saddle River, NJ.
5. Bancroft, N., Seip, H. and Sprengel, A. (1998), Implementing SAP R-3: How to Introduce a Large System into a Large Organization, Manning, Greenwich, CT.
6. Best, P., Mohay, G. and Anderson, A. (1997), “MIATA: a machine independent audit trail analyser”, Australian Computer Journal, Vol. 29 No. 2, pp. 57-63.
7. Boudreau, M.C. and Robey, D. (1999), “Critical issues affecting an ERP implementation”, Information Systems Management, Vol. 16 No. 3, pp. 7-14.
8. Brown, W. and Nasuti, F. (2005), “What ERP systems can tell us about Sarbanes-Oxley”, Information Management & Computer Security, Vol. 13 No. 4, pp. 311-23.
9. Carroll, J.M. (1987), Computer Security, 2nd ed., Butterworths, Stoneham, MA.
10. Chapman, C. (1998a), “Just do it: an interview with Michael Hammer”, Internal Auditor, Vol. 55 No. 3, pp. 38-41.
11. Chapman, C. (1998b), “Update”, Internal Auditor, Vol. 55 No. 1, pp. 11-12.
12. Clark, D. and Wilson, D. (1987), “A comparison of commercial and military computer security policies”, paper presented at the IEEE Symposium on Security and Privacy, IEEE Computer Society Press, Oakland, CA.
13. Davenport, T. (1998), “Putting the enterprise into the enterprise system”, Harvard Business Review, Vol. 76 No. 4, pp. 121-31.
14. Davies, D.W. and Price, W.L. (1989), Security for Computer Network, 2nd ed., Wiley, New York, NY.
15. Dittenhofer, M. (2001), “Reegineering the internal auditing organization”, Managerial Auditing Journal, Vol. 16 No. 8, pp. 458-68.
16. Esteves, J. and Pastor, J. (2001), “Enterprise resource planning systems research: an annotated bibliography”, Communications of the AIS, Vol. 7 No. 8, pp. 1-52.
17. Ferraiolo, D.F., Gilbert, M.D. and Lynch, N. (1992), Assessing Federal and Commercial Information Security Needs (USA), National Institute of Standards and Technology, Gaithersburg, MD.
18. Gibbs, J. (1998), “Going live with SAP”, Internal Auditor, Vol. 55 No. 3, pp. 70-5.
19. Gibson, J., Holland, C. and Light, B. (1999), “Enterprise resource planning: a business approach to systems development”, Proceedings of the 32nd Hawaii International Conference on System Sciences, Vol. 7, pp. 163-8.
20. Glover, S.M., Prawitt, D.F. and Romney, M.B. (1999), “Implementing ERP”, Internal Auditor, Vol. 56 No. 4, pp. 47-53.
21. Hespenheide, E., Pundmann, S. and Corcoran, M. (2007), “Risk intelligence: internal auditing in a world of risk”, Internal Auditing, Vol. 22 No. 4, pp. 3-10.
22. Hong, K.K. and Kim, Y.G. (2002), “The critical success factors for ERP implementation: an organizational fit perspective”, Information & Management, Vol. 40 No. 1, pp. 25-40.
23. Koh, C., Soh, C. and Markus, L. (2000), “A process theory approach to analyzing ERP implementation and impacts: the case of Revel Asia”, Journal of Information Technology Cases and Applications, Vol. 2 No. 1, pp. 4-23.
24. Lightle, S. and Vallario, C. (2003), “Segregation of duties in ERP”, Internal Auditor, Vol. 60 No. 5, pp. 27-31.
25. Little, A. and Best, P.J. (2003), “A framework for separation of duties in an SAP R-3 environment”, Managerial Auditing Journal, Vol. 18 No. 5, pp. 419-30.
26. Lunt, T.F. (1993), “A survey of intrusion detection techniques”, Computers & Security, Vol. 12 No. 4, pp. 405-18.
27. Maurizio, A., Girolami, L. and Jones, P. (2007), “EAI and SOA: factors and methods influencing the integration of multiple ERP systems (in an SAP environment) to comply with the Sarbanes-Oxley Act”, Journal of Enterprise Information Management, Vol. 20 No. 1, pp. 14-31.
28. Nah, F.F.H., Lau, J.L.S. and Kuang, J. (2001), “Critical success factors for successful implementation of enterprise systems”, Business Process Management Journal, Vol. 7 No. 3, pp. 285-96.
29. Pfleeger, C.P. (1989), Security in Computing, Prentice-Hall, Englewood Cliffs, NJ.
30. Pierce, T. (2007), “Taming program risk: five critical success factors”, Internal Auditing, Vol. 22 No. 5, pp. 3-8.
31. Ramamoorthi, S. and Weidenmier, M.L. (2006), “ERM under construction: is IT next for ERM?”, The Internal Auditor, Vol. 63 No. 2, pp. 45-50.
32. Reid, B. (1987), “Reflections on some recent widespread computer break-ins”, Communications of the ACM, Vol. 30 No. 2, pp. 103-5.
33. Romei, L. (1996), “New technology strengthens new commitment”, Managing Office Technology, Vol. 41 No. 7, pp. 18-20.
34. Scott, J.E. and Vessey, I. (2000), “Implementing enterprise resource planning systems: the role of learning from failure”, Information Systems Frontiers, Vol. 2 No. 2, pp. 213-32.
35. Seeley, D. (1989), “Password cracking a game of wits”, Communications of the ACM, Vol. 32 No. 6, pp. 700-4.
36. Smaha, S.E. (1988), “Haystack: an intrusion detection system”, 4th Aerospace Computer Security Applications Conference, Orlando, FL, December, pp. 37-44.
37. Soliman, F., Clegg, S. and Tantoush, T. (2001), “Critical success factors for integration of CAD-CAM systems with ERP systems”, International Journal of Operations & Production Management, Vol. 21 Nos 5-6, pp. 609-29.
38. Spafford, E.H. (1989), “The internet worm: crisis and aftermath”, Communications of the ACM, Vol. 32 No. 6, pp. 678-87.
39. Srinidhi, B. (1994), “The influence of segregation of duties on internal control judgements”, Journal of Accounting, Auditing & Finance, Vol. 9 No. 3, pp. 423-44.
40. Stevens, T. (1997), “Kodak focuses on ERP”, Industry Week, Vol. 246 No. 15, pp. 130-5.
41. Stoll, C. (1988), “Stalking the Wiley Hacker”, Communications of the ACM, Vol. 31 No. 5, pp. 484-97.
42. Verville, J. (2000), “An empirical study of organizational buying behavior: a critical investigation of the acquisition of ERP software”, dissertation, Universite Lavel, Quebec City.
43. Verville, J. and Halingten, A. (2002), “A qualitative study of influencing factors on the decision process for acquiring ERP software”, Qualitative Market Research: An International Journal, Vol. 5 No. 3, pp. 188-98.
44. Verville, J. and Halingten, A. (2003), “A six-stage model of the buying process for ERP software”, Industrial Marketing Management, Vol. 32 No. 7, pp. 585-94.
45. Verville, J., Bernadas, C. and Halingten, A. (2005), “So you're thinking of buying an ERP? Ten critical factors for successful acquisitions”, Journal of Enterprise Information Management, Vol. 18 No. 6, pp. 665-77.
46. Xu, H.J., Nord, J.H., Brown, N. and Nord, G.D. (2002), “Data quality issues in implementing an ERP”, Industrial Management & Data System, Vol. 102 No. 1, pp. 47-58.
47. Zairi, M. and Sinclair, D. (1995), “Business process re-engineering and process management: a survey of current practice and future trends in integrated management”, Management Decisions, Vol. 33 No. 3, pp. 3-16.
48. Zhao, N., Yen, D.C. and Chang, I.C. (2004), “Auditing in the e-commerce era”, Information Management & Computer Security, Vol. 12 No. 5, pp. 389-400.
49. Gupta, A. (2000), “Enterprise resource planning: the emerging organizational value systems”, Industrial Management & Data Systems, Vol. 100 No. 3, pp. 114-8.