Development of certification and audit processes of application service provider for IT outsourcing

Choon Seong Leem, Hong Joo Lee

Research output: Contribution to journalArticle

21 Citations (Scopus)

Abstract

ASP (Application Service Provider) refers to an exclusive outsourcing service in which the service provider is given access to the data located in an external data center. Therefore, the security of data and the reliability of the service provider are matters of great importance even when comparing with other information systems. Essential to securing the reliability and efficiency of the ASP service are certification and audit processes. In this paper, we discuss certification and audit processes of ASP services. Our research included: first, a survey of 35 Korean companies' awareness, advantages and concerns on ASP services. This formed the base of our research. Second, the ASP certification framework and processes required to verify the reliability of ASP services were summarized and case applications were also outlined. Finally, we proposed an audit process aimed at improving efficiency of ASP services. By reference to traditional definitions of information systems and the audit process, new definitions and frameworks for the ASP audit are suggested. The new information system audit processes were compared with traditional ones, and the detailed control items were verified through calculation of their relative importance with respect to ASP life-cycle activities.

Original languageEnglish
Pages (from-to)63-71
Number of pages9
JournalTechnovation
Volume24
Issue number1
DOIs
Publication statusPublished - 2004 Jan 1

Fingerprint

Outsourcing
Information systems
IT outsourcing
Audit process
Certification
Application service provider
Security of data
Life cycle

All Science Journal Classification (ASJC) codes

  • Engineering(all)
  • Management of Technology and Innovation

Cite this

@article{7f21b497d74147f3ae4c988d934db941,
title = "Development of certification and audit processes of application service provider for IT outsourcing",
abstract = "ASP (Application Service Provider) refers to an exclusive outsourcing service in which the service provider is given access to the data located in an external data center. Therefore, the security of data and the reliability of the service provider are matters of great importance even when comparing with other information systems. Essential to securing the reliability and efficiency of the ASP service are certification and audit processes. In this paper, we discuss certification and audit processes of ASP services. Our research included: first, a survey of 35 Korean companies' awareness, advantages and concerns on ASP services. This formed the base of our research. Second, the ASP certification framework and processes required to verify the reliability of ASP services were summarized and case applications were also outlined. Finally, we proposed an audit process aimed at improving efficiency of ASP services. By reference to traditional definitions of information systems and the audit process, new definitions and frameworks for the ASP audit are suggested. The new information system audit processes were compared with traditional ones, and the detailed control items were verified through calculation of their relative importance with respect to ASP life-cycle activities.",
author = "Leem, {Choon Seong} and Lee, {Hong Joo}",
year = "2004",
month = "1",
day = "1",
doi = "10.1016/S0166-4972(03)00145-7",
language = "English",
volume = "24",
pages = "63--71",
journal = "Technovation",
issn = "0166-4972",
publisher = "Elsevier Limited",
number = "1",

}

Development of certification and audit processes of application service provider for IT outsourcing. / Leem, Choon Seong; Lee, Hong Joo.

In: Technovation, Vol. 24, No. 1, 01.01.2004, p. 63-71.

Research output: Contribution to journalArticle

TY - JOUR

T1 - Development of certification and audit processes of application service provider for IT outsourcing

AU - Leem, Choon Seong

AU - Lee, Hong Joo

PY - 2004/1/1

Y1 - 2004/1/1

N2 - ASP (Application Service Provider) refers to an exclusive outsourcing service in which the service provider is given access to the data located in an external data center. Therefore, the security of data and the reliability of the service provider are matters of great importance even when comparing with other information systems. Essential to securing the reliability and efficiency of the ASP service are certification and audit processes. In this paper, we discuss certification and audit processes of ASP services. Our research included: first, a survey of 35 Korean companies' awareness, advantages and concerns on ASP services. This formed the base of our research. Second, the ASP certification framework and processes required to verify the reliability of ASP services were summarized and case applications were also outlined. Finally, we proposed an audit process aimed at improving efficiency of ASP services. By reference to traditional definitions of information systems and the audit process, new definitions and frameworks for the ASP audit are suggested. The new information system audit processes were compared with traditional ones, and the detailed control items were verified through calculation of their relative importance with respect to ASP life-cycle activities.

AB - ASP (Application Service Provider) refers to an exclusive outsourcing service in which the service provider is given access to the data located in an external data center. Therefore, the security of data and the reliability of the service provider are matters of great importance even when comparing with other information systems. Essential to securing the reliability and efficiency of the ASP service are certification and audit processes. In this paper, we discuss certification and audit processes of ASP services. Our research included: first, a survey of 35 Korean companies' awareness, advantages and concerns on ASP services. This formed the base of our research. Second, the ASP certification framework and processes required to verify the reliability of ASP services were summarized and case applications were also outlined. Finally, we proposed an audit process aimed at improving efficiency of ASP services. By reference to traditional definitions of information systems and the audit process, new definitions and frameworks for the ASP audit are suggested. The new information system audit processes were compared with traditional ones, and the detailed control items were verified through calculation of their relative importance with respect to ASP life-cycle activities.

UR - http://www.scopus.com/inward/record.url?scp=0346330115&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=0346330115&partnerID=8YFLogxK

U2 - 10.1016/S0166-4972(03)00145-7

DO - 10.1016/S0166-4972(03)00145-7

M3 - Article

AN - SCOPUS:0346330115

VL - 24

SP - 63

EP - 71

JO - Technovation

JF - Technovation

SN - 0166-4972

IS - 1

ER -