信息供应链中电子表格的监管与完整性
Regulation and the Integrity of Spreadsheets in the Information Supply Chain
AI总结:
本文研究SOX法案合规背景下电子表格在信息供应链中的完整性风险,提出通过监控变更与用户活动的商业解决方案(如ClusterSeven)来降低操作风险并挖掘商业智能。
摘要:
电子表格提供了信息系统之间的许多关键连接,弥合了业务需求与中央系统能力之间的差距。近期出台的法规使信息供应链中这些脆弱环节成为关注焦点。电子表格给组织带来的风险取决于其所承担的角色,作为建模工具与作为操作性应用之间存在普遍差异。《萨班斯-奥克斯利法案》(SOX)中有四个条款与电子表格的使用尤其相关。对这四个条款中每一个的合规性,都依赖于维持那些作为操作性应用运行的电子表格的完整性。这可以通过人工方式实现,但成本高昂。目前有一系列市售的现成解决方案可以降低这一成本。这些方案可分为两类:一类是辅助逻辑调试的工具,另一类是较新出现的、用于监控业务关键型电子表格中所发生的变更和用户活动的解决方案。ClusterSeven 提供了其中一种监控解决方案,在突出显示操作风险领域的同时,还建立了一个信息数据库,以提供新的商业智能。
英文摘要:
Spreadsheets provide many of the key links between information systems, closing the gap between business needs and the capability of central systems. Recent regulations have brought these vulnerable parts of information supply chains into focus. The risk they present to the organisation depends on the role that they fulfil, with generic differences between their use as modeling tools and as operational applications. Four sections of the Sarbanes-Oxley Act (SOX) are particularly relevant to the use of spreadsheets. Compliance with each of these sections is dependent on maintaining the integrity of those spreadsheets acting as operational applications. This can be achieved manually but at high cost. There are a range of commercially available off-the-shelf solutions that can reduce this cost. These may be divided into those that assist in the debugging of logic and more recently the arrival of solutions that monitor the change and user activity taking place in business-critical spreadsheets. ClusterSeven provides one of these monitoring solutions, highlighting areas of operational risk whilst also establishing a database of information to deliver new business intelligence.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。