Evaluating the security controls of CAIS in Saudi organizations: an empirical study

This paper examines the existence and adequacy of implemented Computerized Accounting Information Systems (CAIS) security controls to prevent, detect and correct security breaches in Saudi organizations. An empirical survey, using a self-administered questionnaire, was carried out to achieve this purpose. Five hundred questionnaires were distributed on a random sample of Saudi organizations. Two hundred and seventy five valid, usable questionnaires were collected and analyzed. The results of the study highlight a number of inadequately implemented CAIS security controls, and some suggestions and recommendations are introduced to strengthen the weak points and to close the loopholes in the present CAIS security controls in Saudi organizations. From a practical standpoint, managers, auditors, IT users and practitioners alike stand to gain from the findings of this study. The results could enable them to better understand and secure their CAIS and to champion IT development for the success of their businesses. Keywords: Security controls; CAIS; Empirical study; Developing countries; Kingdom of Saudi Arabia