Customer Reviews

Electronic Commerce: Security Risk Management and Control

5 star:		(1)
4 star:		(1)
3 star:		(0)
2 star:		(2)
1 star:		(0)

 

 

I'm using this course for a business class in ecommerce. It was the best book I could find at the time (May 2000). I like the coverage and the approach (not too technical) but, oh my gawd, it doesn't read well. Long convoluted sentences. Diagrams that don't always communicate much. On the plus side, if you're an accountant, this is the probably the best ecommerce book around.

Greenstein and Feinman's "Electronic Commerce Security, Risk Management and Control" presents a nice overview of the major security issues and ways to address them.

The book in particular focuses on security applications for the accounting industry so accountants in particular should find this text worthwhile. However, the book is still relevant to all fields and industries that are looking to get in on the e-business revolution.

Here are the topics Greenstein and Feinman address:

1. The Role of Third Parties

2. The Regulatory Environment: Cryptography and International Laws, Libel Laws, Domain Name Disputes

3. EDI, E-Commerce and the Internet

4. Risks of Insecure Systems: Data Interception, Social Engineering, Sabotage by Current/Former Employees, DoS attacks, Viruses

5. Risk Management: Managing Security Gaps, Culture Management, Disaster Recovery Plans

6. Internet Security Standards: Standards Organizations, Security Protocols

7. Cryptography and Authentication: Encryption Techniques, Public and Private Keys,

8. Firewalls

9. Payment Mechanisms: SET, SSL, Smart Cards

10. Intelligent Agents

11. Web-Marketing

Overall, Greenstein and Feinman do a fine job of covering the various technologies and issues that deal with security in e-business. This book was used as a text for an e-commerce security course I took during the summer of 2002. Whether you are studying this subject independently or whether you are an instructor looking to use this book for your course, Greenstein and Feinman's "E-Commerce Security, Risk Management and Control" is a decent choice.

Highly Recommended

This book is great if you are reading it to complete financial statements audit. The author is linking electronic commerce with financial risk. Some audit procedures are proposed to manage these risk. In general, the book is from a manager point of view and you always find an accountant/auditor point of view at the end of each chapter.

I'm using this course for a business class in ecommerce. It was the best book I could find at the time (May 2000). I like the coverage and the approach (not too technical) but, oh my gawd, it doesn't read well. Long convoluted sentences. Diagrams that don't always communicate much. On the plus side, if you're an accountant, this is the probably the best ecommerce book around.