AMCIS 2007 Mini-track Call for Papers

Business Process Control, Security and Risk Assessment
Security & Privacy

Chair(s): Deepak Khazanchi (khazanchi@unomaha.edu)
University Affiliation: University of Nebraska at Omaha
Phone: (402) 554-2029
SIG URL: http://www.sigasys.org/

Description:

To remain competitive in the digital economy, companies are networking internal accounting and related business information systems with external networks from suppliers, customers, competitors and other external sources. Information system distribution and complexity continues to increase through vertical expansion as companies invest in newer technologies such as RFID to tag individual inventory items, automatically capturing and transmitting transaction information to organizational accounting systems. Research has further demonstrated that inter- and intra-organizational information sharing provides tremendous competitive benefits, including significantly reducing administrative costs, increasing customer value, enhancing revenue streams and ultimately increasing stock value.

Potential improvements in organizational efficiency and effectiveness are enticing, but information security risks associated with electronic sharing of strategic accounting and business information through complex extended-enterprise systems must be addressed as a part of overall enterprise risk management. Failure of companies such as Enron and WorldCom has shown that risks to vital transactional information increase with the complexity of business processes. Legislative responses such as Sarbanes Oxley are designed to increase the quality and reliability of corporate governance, yet little research has been done to analyze how increasingly complex information systems impact enterprise risk.

Because IS scholars have a chance to observe and participate in the adoption and development of distributed accounting and business information systems, a broad range of research-oriented papers will be sought. Existing streams of IS research that are quite diverse will be relevant to this topic area. For example, scholars writing in areas such as information assurance, information security, enterprise application integration, ERP implementation and management, B2B e-commerce, data warehousing, IT governance, information & data quality, and IT infrastructure may be interested in submitting papers.

Contributed papers to this mini-track may deal with but are not limited to the following topics:

• Developing strategies for assessing security risks in inter-organizational applications
• Comparison of risks associated with national vs. international inter-organizational systems
• Methods for business process risk assessment and management
• Strategic implications of corporate fraud and computer crime on corporate information security
• New risks and their management in the context of service-oriented IT architectures
• Relationships among national and international security policies and corporate security
• Strategies for developing/sustaining an inter-organizational culture of transactional information security
• Analysis of the economic value of information security
• Social, legal and ethical aspects of transactional information security
• Relationships among organizational audit practices and information security policies
• Role of information security in corporate governance
• Effectiveness of legislation for information security

AMCIS 2007 Colorado: http://www.biz.colostate.edu/amcis07/

Key Dates:

Paper Abstracts Due (optional) : Monday, February 5, 2007
Papers Due: Monday, March 5, 2007
Notification of Acceptance:
Monday, April 16, 2007
Camera Ready Copy Due: Monday, April 30, 2007