The theme of this paper is the occurrence of risks within information technology and information systems investments. A taxonomy of the published classification frameworks of IT related risk is presented and a new comprehensive classification framework for IT investments (the TOPModel) is presented within the TRIP model of the risk factors and critical factors affecting IT investments. Risk man...

Governance, Risk, and Compliance (GRC) is an emerging topic in the world of business and information technology. However to date there is a lack of research on an integrated approach to GRC has hardly been researched. In this paper we construct an integrated process model for high-level IT GRC management. First, we discuss existing process models for integrated GRC. Then we set the scope of our...

4 SUMMER/FALL 1999 T’S A RACE with no starting point, no fixed course, and really no rules at all: walk, run, ride, do anything you want. Form a team, as big as you like. Build any sort of machine you wish with whatever money you can get your hands on. Just get to the finish line first. That finish line isn’t a particular place but a new understanding of a symmetry (or rather, an almost symmetr...

This paper discusses the background and results of a research project which was conducted by ENISA (European Network and Information Security Agency) in cooperation with the BOC Information Technologies Consulting GmbH. The project was initiated with respect to the main task of ENISA: ensuring a high and effective level of network and information security within organisations in the European Un...

in this study, the effect of audit quality on agency costs and information asymmetry has been examined. among the accepted companies 99 ones in tehran stock exchange were selected for statistical samples from 1385 to 1392 in order to attain the research purposes. to measure the audit quality, it has been used the observable variables such as the percentage of institutional investors, the type o...

Open source software (OSS) has reshaped and remodeled various layers of the organizational ecosystem, becoming an important strategic asset for enterprises. Still, many enterprises are reluctant to adopt OSS. Knowledge about technological risks and their importance for IT executives is still under researched. We aim to identify the technological risks and their importance for OSS adoption durin...

iranian women's economic participation rate is similar to undeveloped countries, while their educational achievements can be compared with developed countries. the aim of this article is to discuss some of the factors related to the situation. according to the policies of third development plan, the rate of employment in government sector should decline and the opportunities for new employ...