Trading Partner Identification, Registration and Enrollment (e-Commerce Security)

Today, most organizations are either using, or planning to use, the Internet for commerce-identified transactions. With this explosive growth, both on the business-to-consumer and the business-to-business sides, there is an inherent risk of not knowing the identity of your business partners. This book is about the process of recognizing and establishing the authenticity of a new trading partner and deciding whether or not to do business. It focuses on the establishment of the relationship - "new account" time. The auditor will find it useful when deciding whether to audit an e-commerce application and when planning or conducting such an audit. It is also useful when examining or making judgments about any new account process, whether or to what extent such a process is automated. This publication, in addition to describing the infrastructure issues, also contains a self-assessment questionnaire, frequently asked questions and specific recommendations to assist the auditor. The Trading Partner Identification, Registration and Enrollment reference guide is one in a series e-commerce technical reference guides written by Deloitte & Touche for the Information Systems Audit and Control Foundation (ISACF). The ISACF e-commerce technical reference series is intended to provide Information Systems (IS) security and audit practitioners with concise guides of specific technologies, procedures, protocols and best practices relating to secure Internet-enabled e-commerce. The Information Systems Audit and Control Foundation (ISACF ™ ) was created in 1976 to undertake large-scale research efforts to expand the knowledge and value of the IT governance and control field. The role of the ISACF is to evaluate the latest guidelines for implementation of emerging technologies and their applications. The Foundation continuously searches for groundbreaking ways to capitalize on those advances to achieve competitive advantage. Information Systems Audit and Control Association ® The Information Systems Audit and Control Association is a leading global professional organisation representing individuals in more than 100 countries and comprising all levels of information technology - executive, senior management, middle management and practitioner. The Association is uniquely positioned to fulfill the role of a central, harmonising source of IT control practice standards for the world over. Its strategic alliances with other groups in the financial, accounting, auditing and IT professions are ensuring an unparalleled level of integration and commitment by business process owners. The vision of the Foundation and Association is to be the recognized global leader in IT governance, control and assurance.