ERPSEC - A Reference Framework For ERP Security

This book proposes a method of integrating the concept of information ownership in an Enterprise Resource Planning (ERP) system for enhanced security. In addition to providing enhanced security, the reference framework ERPSEC developed here provides better manageability and eases implementation of security within ERP software packages. The results of the reference framework indicate that central administration, control and management of security within the ERP systems under investigation for this study weaken security. It was concluded that central administration of security should be replaced by a model that distributes the responsibility for security to so-called information owners. Such individuals hold the responsibility for processes and profitability within an organization. Thus, they are best suited to decide who has access to their data and how their data may be used. Information ownership, coupled with tight controls can significantly enhance information security within an ERP system.

Autorentext

Dr. Manfred Hertenberger has been active as an ERP consultant for 14 years. He has assisted with the design, implementation and support of ERP systems both locally and abroad with a specific focus on security and technical integration. This book describes a security model that encompasses information ownership for ERP environments.