Assessing Security Control Framework Impact in the Retail Sector: What Value Can COBIT 5 Add to ITIL Adoption?
type: CreativeWork
description: Due to advancements in technology, retailers have gained the ability to reach out to a greater clientele base. Retailers have invested heavily in e-marketing in order to promote themselves to customers who would otherwise be out of reach of a physical retail shop. Online marketing allows retailers to advertise through AdWords, emails ad text messages and general web advertising. The consequence is that retailers have introduced many new IT processes to accommodate customer and business needs. While these developments allow retailers to maximize their earning potential, it also brings about risks such as those to information security, and increasing costs due to not implementing efficient IT processes. In order to maintain competitiveness in the market they need to implement best practices prescribed by industry standards and the use of control frameworks for risk management. Since a business works as a system, various processes tend to be dependent on each other and therefore, it becomes necessary for service level agreements to be in place so that processes are not delayed. Failure to perform one critical task inappropriately could potentially cause a domino like effect on other processes. Unfortunately, not all task performers adhere to procedures and thus negatively impact the overall performance of the business, meaning that the business doesn’t perform as efficiently as it would if processes were performed in accordance to the standards. To combat this issue, IT auditors use different audit tools to assess the efficiency of IT process and determine and recommend ways to improve these processes so that they perform at optimised levels. The purpose of this research is to perform a maturity assessment on three IT processes used in a retail business. These processes are the Security Access Requests, the End of Day Process, and the Campaign Loading Process. The assessment process involves observing research participants performing these processes and then interviewi…
abstract: Due to advancements in technology, retailers have gained the ability to reach out to a greater clientele base. Retailers have invested heavily in e-marketing in order to promote themselves to customers who would otherwise be out of reach of a physical retail shop. Online marketing allows retailers to advertise through AdWords, emails ad text messages and general web advertising. The consequence is that retailers have introduced many new IT processes to accommodate customer and business needs. While these developments allow retailers to maximize their earning potential, it also brings about risks such as those to information security, and increasing costs due to not implementing efficient IT processes. In order to maintain competitiveness in the market they need to implement best practices prescribed by industry standards and the use of control frameworks for risk management. Since a business works as a system, various processes tend to be dependent on each other and therefore, it becomes necessary for service level agreements to be in place so that processes are not delayed. Failure to perform one critical task inappropriately could potentially cause a domino like effect on other processes. Unfortunately, not all task performers adhere to procedures and thus negatively impact the overall performance of the business, meaning that the business doesn’t perform as efficiently as it would if processes were performed in accordance to the standards. To combat this issue, IT auditors use different audit tools to assess the efficiency of IT process and determine and recommend ways to improve these processes so that they perform at optimised levels. The purpose of this research is to perform a maturity assessment on three IT processes used in a retail business. These processes are the Security Access Requests, the End of Day Process, and the Campaign Loading Process. The assessment process involves observing research participants performing these processes and then interviewi…
author: Lal, Vishal
keywords: IT Audit, Security Audit, COBIT5, ITIL, Retail, Process Improvement
date published: 2018
date modified: 2026-07-27T18:46:03Z
provider: AUT University
publisher: Networked Digital Library of Theses and Dissertations
type: WebPage
source organization: AUT University