E-Commerce: A Control and Security Guide (Hardcover)

~ (Author)

Editorial Reviews

Review

If you are employed anywhere near the sharp end of e-commerce, this is a book you should defiantly read. -- Supply Management, 18 March 2004

"For ensuring that file servers and other elements of the e-commerce infrastructure are protected, this book is an excellent choice" (Security Management, July 2004)

“If you are employed anywhere near the sharp end of e-commerce, this is a book you should defiantly read.” (Supply Management, 18 March 2004)

"For ensuring that file servers and other elements of the e-commerce infrastructure are protected, this book is an excellent choice" -- Security Management, July 2004

Product Description

Praise for Control and Security of E-Commerce

"The essence of information security is all about people, processes, and controls. The heart of successful security is not pure technology. The key is a team of well-trained employees who are prepared to use technology as a tool to implement and manage effective IT controls. Gordon Smith’s important book is a quality follow-up to his first book dealing with a control assessment approach to network auditing. It is an outstanding presentation of what is important in implementing and managing IT controls. It simply belongs in the library of every IT manager, internal auditor, and security specialist."
–Dr. James B. Hansen
Vice President of Security Services
DynTek, Inc.

"Gordon Smith’s latest book leads the field again. Based upon understandable theory and loads of real-world audit experience, Control and Security of E-Commerce will help you identify, isolate, and inoculate your company from today’s ever-present e-commerce perils. Don’t just ‘trust’ that your security is OK–use this book to make sure!"
–Professor Michael Davis
Graziadio School of Business and Management
Pepperdine University

"Control and Security of E-Commerce is an invaluable book for practicing information systems professionals. Its unique informal and conversational style of writing is a pleasure to read. The war stories make the reading exciting for an area that is technical and often considered rather dry. The end-of-chapter guidelines for action are a treasure-trove of information. I highly recommend this book for anyone interested in e-commerce security."
–Dr. Jagdish S. Gangolly
Associate Professor and Director of the Graduate Accounting Programs
University at Albany, State University of New York

See all Editorial Reviews

Product Details

• Hardcover: 240 pages
• Publisher: Wiley; 1st edition (December 19, 2003)
• Language: English
• ISBN-10: 0471180904
• ISBN-13: 978-0471180906
• Product Dimensions: 8.9 x 7 x 0.8 inches
• Shipping Weight: 1.2 pounds (View shipping rates and policies)
• Average Customer Review: 4.5 out of 5 stars  See all reviews (2 customer reviews)
• Amazon.com Sales Rank: #2,158,889 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

17 of 17 people found the following review helpful:

5.0 out of 5 stars An Invaluable E-Commerce Audit Guide, March 12, 2004

By A Customer

While many approach the subject of e-commerce control and security from a purely pedagogical, 'those who can't do, teach' perspective, Gordon Smith draws upon his considerable experience in the trenches to pen this logical step-by-step, risk-based approach to the subject. Moreover, the book is written in an easy, conversational style that is easily comprehended by even neophyte auditors, and its packed with audit work programs and checklists that permit practitioners to roll up their sleeves and get down to work immediately. One feature of this book I found particularly enlightening was Mr. Smith's sensible inclusion of supporting operating system and data base-related risks and controls as they relate to the overall e-commerce control environement. Too often these extremely important controls are deleted from scope or not considered at all in favor of engagement cost and time constraints. Experience proves that a partially secured environement is no better than one that is totally unsecured. Having contracted and worked with Mr. Smith and his CanAudit associates in the past, and having personally witnessed his team breaking into systems heretofore considered inpenetrable, I place a great deal of credence in his opinions on the subject of system security, e-commerce-related or otherwise. This book is a must read for anyone interested in the subject of e-commerce security and an invaluable reference tool for the professional IT Auditing practitioner.

2 of 2 people found the following review helpful:

4.0 out of 5 stars Very good book on security controls, July 1, 2004

By	Ben Rothke "Author of 'Computer Security: 20 ... (USA) - See all my reviews (TOP 1000 REVIEWER)    (REAL NAME)

Checklists, though mundane, are a key component of many jobs. They help ensure that key issues aren't overlooked, and they serve as guideposts for anyone auditing the work. This book provides technology managers with a very good preparatory set of details and checklists for their e-commerce infrastructure. The book can also show a corporate auditor what to look for to ensure that appropriate controls are in place.

Throughout its 6 chapters and 225 pages, the book offers a detailed, progressive, and structured approach for performing such audits. The book addresses technology-related issues but doesn't require the auditor to be expert in them. Among topics discussed are physical security, authentication, and passwords; checklists ensure that these features are deployed or configured correctly.

For ensuring that file servers and other elements of the e-commerce infrastructure are protected, this book is an excellent choice.