Paper Info
Title
A Case For Information Ownership in ERP Systems.
Abstract
This study investigates the lack of information ownership in current Enterprise Resource Planning (ERP) software systems. The purpose is to show how difficult, time consuming and costly the implementation of security within such systems is. The focus is on the investigation of security implementations within well-known ERP software packages such as SAP R/3 and Oracle E-Business Suite. The results of the study indicate that central administration, control and management of security within the ERP systems under investigation weaken security. It was concluded that central administration of security should be replaced by a model that distributes the responsibility for security to so-called information owners. Such individuals hold the responsibility for processes and profitability within an organization. Thus, they are best suited to decide who has access to their data and how their data may be used. Information ownership, coupled with tight controls can significantly enhance information security within an ERP system.
Year
Venue
Keywords
2004
INTERNATIONAL FEDERATION FOR INFORMATION PROCESSING
database security,security policy,misuse detection,authentication,information flow
DocType
Volume
ISSN
Conference
147
1571-5736
Citations 
PageRank 
References 
1
0.35
2
Authors
2
Name
Order
Citations
PageRank
Sebastiaan H. Von Solms111653.32
M. P. Hertenberger210.69