Journal of Organizational and End User Computing · 1994 · 29 citations · 0 references
BusinessInformation SystemsManagement Information SystemsIt GovernanceRisk AnalysisRisk AssessmentInformation Systems Risk ManagementIt Risk ManagementManagement Risk FactorsRisk ControlRisk-based AuditingApplication ControlsApplication Controls AuditApplication Risk AssessmentEnd-user ExperienceInformation Technology Risk ControlIt Application ControlsRisk Control AnalysisSoftware Risk Management
This study addresses the issue of risks and controls in end-user development. It analyzes two questions related to the design and construction of spreadsheet applications by end-users. The first question focuses on the types of controls and the levels of risk associated with the applications themselves. The second question pertains to the extent to which control mechanisms are used to minimize the risk factors in development and use of spreadsheet data. In other words, a basic auditing premise was tested: If managers are aware of the risk factors in the spreadsheets they develop, do they apply controls in design and implementation to assure that these risks are effectively controlled?Request access from your librarian to read this article's full text.