Identifying risks in e-commerce payment security for use by the IS auditor

Abstract

The emergence and growth of business conducted through the Internet has given rise to numerous concerns. Both business and customers alike are facing additional risks in this environment. The Information Systems Auditor (IS auditor) plays an important role in contributing towards managements' efforts to manage the electronic commerce (EC) environment and more specific Internet security and Internet payments. This article investigates the role of the IS auditor in the EC environment and seeks to contribute towards the development of knowledge on the topic by identifying, describing and discussing the major risks associated with EC payment security and Internet payment methods. This is the first of two articles on the IS auditor in the EC environment. The second article uses the risk model developed in this paper to develop a suitable audit approach for the IS auditor in the mentioned environment.