Abstract

GOMEZ BARYOLO, Oiner; ESTRADA SENTI, Vivian; BAUTA CAMEJO, René Rodrigo  and  GARCIA RODRIGUEZ, Isabel. Model log management for the audit information, to support decision making in the organizations. ACIMED [online]. 2012, vol.23, n.2, pp.187-200. ISSN 1024-9435.

In recent years, the information audit has increased in importance due to its impact on the prevention or detection of violations that affect the confidentiality, integrity, availability and traceability of the organization resources. The information audit is an important component of the informatics audit depends largely on the expressiveness of the event log to ensure the quality of results. The standard XES and Auditing framework are the most innovative solutions focused on managing the event log. The analysis of these and other solutions, showed there are limitations related to the structure of the event log formalization, which impact negatively on the quality of the analysis results. These deficiencies hinder decision making related to security, information systems operation and their impact on business processes of the organization. From the problematic existing, the main contribution of this work is the design of a model event log management for the audit information, to support decision making in organizations with different goals. It describes the needed concepts to integrate, in a consistently way, the business processes, actors, Information Systems and other aspects associated with the application environment. The model was applied in the development of different information systems, having good results.

Keywords : information system; audit information; informatic audit; event log; XES; Auditing.

        · abstract in Spanish     · text in Spanish     · Spanish ( pdf )