e-Government - ein Prüfungsleitfaden - EUROSAI IT Working Group

76
GLOSSAR
AUS DEM ENGLISCHEN ORIGINAL “E-GOVERNMENT IN AN AUDIT PERSPECTIVE”
DER EUROSAI IT WORKING GROUP
Accountability
Accuracy
Authenticity
Availability
Back office system (or
back end)
Certification authority
Controls in user systems
Completeness
Confidentiality
Digital certificate
– In information security, a principle whereby system users are uniquely
identifiable and are held responsible for their actions. Being able to identify
users uniquely enables security violations to be traced to individuals.
This objective is defeated with the sharing of passwords.
– Property assured by a system’s control sited immediately before the user
application to validate received transaction data concerning, for example,
product numbers, quantity, quality, prices, etc.
– In information security, the property that determines that the originator of
a message, a file, etc., actually is who he/she/it claims to be.
– The ability to access and use a system, resource or file, when and where
required.
– Computer infrastructure within an organisation, which supports core
business process applications but has no external interface with costumers
(unlike a Web site or portal)
– In cryptography, an authority trusted by all users to create and assign
digital certificates This role is usually performed by public institutions,
such as Post Office or clearing banks (e. g. Barclays).
– Internal pre-programmed controls supplemented to the necessary extent
with manual controls.
– Property assured by a system’s control sited immediately before the user
application, to ensure that there is no break during translation from external
to internal data format or that system failure does not cause loss of
data or that faults with the sender of the transaction does not lead to the
transaction not being received in its entirety.
– In information security, the property that information is not made available
or disclosed to unauthorised individuals, entities or processes.
– In cryptography, a message that guarantees the authenticity of the data
contained within it. In public key cryptography to guarantee authentication
a certificate should be issued by a Certification Authority trusted by all
users. A certificate generally contains the public key owner’s identity, the
public key itself and its expiry date.