Research On Security Audit Of E-government Information System

With the development and wide application of Internet technology,E-government has emerged and flourished.The development of e-government not only makes government affairs more streamlined and effective,but also improves the openness and transparency of government affairs,and at the same time better serves the people.After more than 30 years of development,E-government in China has basically covered all government departments and played an important role in improving the efficiency of government affairs.But at the same time,with the occurrence of related security issues,including information system security management,information system security technology and other risks,this not only affects the effective development of government departments,but also is closely related to the national economy and people’s livelihood.。 The development of information system security audit can effectively prevent the emergence of information system security problems,timely discovery of potential security risks in information system,standardize information system security management,and achieve the goal of information system security,reliability,legitimacy and effectiveness.In the first chapter,the related research at home and abroad is summarized.In the second chapter,the theory and method of information system audit are studied.The concept of information system audit and the goal,content,method and related theoretical basis of information system security audit are introduced.Chapter 3 discusses the characteristics of E-government information system and the sources of security risks of E-government information system,and gives examples of representative security risks.Finally,it analyses the necessity of information system security audit to maintain the security of E-government information system and the current situation of information system security audit in China.Chapter IV introduces in detail the security audit project of livelihood information system of department A in L city from five aspects: audit background,audit objectives,audit objects,audit process and audit results.Chapter V introduces the case of information system security audit of Department of Health and Public Services of the United States Audit Office.Chapter 6 analyses the differences of security auditing of E-government information systems between China and the United States from four aspects: laws and regulations,guidelines,auditing effect and auditors.According to the results of comparison,the paper puts forward some measures to improve the deficiencies of security auditing of information systems in China.Through case comparison,this paper finds that when the US Audit Office carries out the security audit of E-government information system,the laws and regulations are sound and fully utilized in the audit process.The audit guideline with hierarchical and operational nature guides auditors to carry out their work,and the audit rectification work is in place.In addition,there are clear skills requirements for auditors.