The Impact of Information Security Audit Policies in Reducing the Risks of Electronic Accounting Information Systems in the Independent Jordanian Governmental Institutions

Abstract

The study aims to identify the impact of information security auditing policies through the following dimensions (system validity, audit team duties, reports of the internal audit system, documentation and evidence, and the code of conduct for the information security auditing) in reducing the risks of electronic accounting information system through all dimensions (Input Risk, Operational Risk, Output Risk, Environmental Risk), in Independent Jordanian Governmental Institutions

The study uses the Descriptive Analytical methodology along with analytical statistics, such as multiple regression. The framework of this study consists of all staff of all the accounting, financial and supervisory departments in the (28) independent Jordanian governmental institutions, where intentional sample approach is conducted. A research questionnaire is designed and distributed to (350) staff members of the targeted related parties in (20) independent Jordanian governmental institutions that the researcher was able to access (Only (20) institutions corporate to participate in the study tool (questionnaire), where (8) institutions refrained for answering to questionnaire). A simple random sample technique is used to draw the sample, where 350 questionnaires was distributed, of which (297) were returned. Of those (11) questionnaires was dropped due to lack of conscientious responses; making the total number of questionnaires subject to the analysis of this research 286 questionnaires (81.7% of the total).

The study finds that there exist a statistically significant impact at the significance level (α ≤0.05) on adoption of information security auditing policies with their dimensions in reducing the risks of electronic accounting information systems in independent Jordanian governmental institutions. A number of recommendations are made, including: the necessity to subjecting users of the electronic accounting information systems to instructional and continuous lectures on how to use the system and maintain its validity. The study also recommends taking care of all financial transactions in the electronic accounting information systems within the institution to be reviewed and examined through the information security audit team.