Proceedings

REFERENCES
Al Marcella (2006) IT Audit Practices, ISACA Training Week - Budapest, Training support
materials
Bill Bruck (2003) Taming the Information Tsunami – 2 nd edition, Microsoft Press
Charles Le Grand and Dan Sarel (2008) “Database Security, Compliance and Audit”,
Information Systems Control Journal, vol. 5: 27-31
Christopher Reed (2010) “Achieving Data Warehouse Nirvana – The Critical Role of
Information Control”, Information Systems Control Journal, vol. 4: 31-34
Information Systems Audit and Control Association (2006) CISA Review Manual, USA,
IT Governance Institute (2007) COBIT 4.1, USA
Information Systems Audit and Control Associations (2009) Security, Audit and Control
Features Oracle Database 3 rd Edition, USA,
Jeffrey T. Hare (2008) “Monitoring Privileged Application Users in Oracle Applications
Environment”, Information Systems Control Journal, vol. 6: 46-50
John H. White (2006) “Important, But Often Dismissed: Internal Control in a Microsoft
Access Database”, Information Systems Control Journal, vol. 6: 30-34
Mike Pinch (2009) “Database Activity Monitoring: An Emerging Technology for Audit and
Compliance”, Information Systems Control Journal, vol. 1: 44-47
Mukul Pareek (2006) “Living with Risk”, Information Systems Control Journal, vol. 6: 35-38
Nancy Bagranoff, Mark Simkin, Carolyn Norman (2008) Core Concepts of Accounting
Information Systems, John Wiley & Sons, INC, USA
Nastase Pavel, Lunceanu - Unchiasu Simona Felicia (2010) “IT Governance Maturity level
for the Romanian companies”, 11 th World Congress of Accounting Educators and
Researchers – Conference volume, Singapore
Nastase Pavel and etc. (2007) Auditul si Controlul Sistemelor Informationale, Editura
Economica
Paul J. Sobel (2007) Auditor’s Risk Management Guide: Integrating Auditing and ERM, CCH
Learning Center, USA
Ponemon Institute (2010) 2009 US Cost of a Data Breach Study, available on-line at
www.encryptionreports.com
Robert Dollinger, Luciana Andron (2005) Baze de date si gestiunea tranzactiilor”, Editura
Albastra
S. Anantha Sayana (2003) “Auditing OS and Database Controls”, Information Systems
Control Journal, Vol. 3, available on-line at www.isaca.org
Steve Rimell (2007) Advanced IT Audit School, IT Audit School training material, Athens
Verizon Risk Team (2010) 2010 Data Breach Investigation Report, available on-line at
www.verizonbusiness.com
~ 301 ~