The implementation and operation of efficient information security management systems (ISMS) according to the ISO/IEC 27001 standard involves a number of steps, among others implementation and operation of appropriate processes, policies and objectives. The crucial issue is the correct...

This paper analyses some specific issues about the auditing of electronic auction systems. Communication within the Internet online auction systems generally takes place without users being in physical contact or knowing anything about each other. Therefore, they have to rely upon that...

Audit information security management system (ISMS) is an important element of a well-functioning ISM. As part of an ISMS audit, it is also necessary to determine the audit risk. Various methods exist and are developed for risk assessment, both in practical and theoretical level. These methods...