Erik Guldentops – författare

IT Governance is finally getting the Board''s and top management''s attention. The value that IT needs to return and the associated risks that need to be managed, have become so important in many industries that enterprise survival depends on it. Information integrity is a significant part of the IT Governance challenge. Among other things, this conference will explore how Information Integrity contributes to the overall control and governance frameworks that enterprises need to put in place for IT to deliver business value and for corporate officers to be comfortable about the IT risks the enterprise faces. The goals for this international working conference are to find answers to the following questions: • what precisely do business managers need in order to have confidence in the integrity of their information systems and their data; • what is the status quo of research and development in this area; • where are the gaps between business needs on the one hand and research I development on the other; what needs to be done to bridge these gaps. The contributions have been divided in the following sections: • Refereed papers. These are papers that have been selected through a blind refereeing process by an international programme committee. • Invited papers. Well known experts present practice and research papers upon invitation by the programme committee. • Tutorial. Two papers describe the background, status quo and future development of CobiT as well as a case of an implementation of Co biT.

This fourth volume in the series "Integrity and Internal Control in Information Systems" is a state-of-the-art collection of papers in the area of integrity within information systems and the relationship between this and the overall internal control systems that are established in organizations to support corporate governance codes. The volume represents a continuation ofthe dialogue between information security specialists, internal control specialists and the business community. The objectives of this dialogue are: to present methods and techniques that will help business achieve the desired level of integrity in information systems and data; to present the results of research that may in future be used to increase the level of integrity or help management maintain the desired level of integrity; to investigate the shortcomings in the technologies presently in use, shortcomings that require attention in order to protect the integrity of systems in general.The papers are from the Fourth International Working Conference on Integrity and Internal Control in Information Systems (IICIS), which was sponsored by the International Federation for Information Processing (IFIP) and held in Brussels, Belgium in November 2001.