{"id":"https://openalex.org/W2901992940","doi":"https://doi.org/10.1145/3229345.3229393","title":"Database Internal Security Controls for SOX Law Certification","display_name":"Database Internal Security Controls for SOX Law Certification","publication_year":2018,"publication_date":"2018-06-04","ids":{"openalex":"https://openalex.org/W2901992940","doi":"https://doi.org/10.1145/3229345.3229393","mag":"2901992940"},"language":"en","primary_location":{"id":"doi:10.1145/3229345.3229393","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3229345.3229393","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the XIV Brazilian Symposium on Information Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063419211","display_name":"Kamilla D\u00f3ria da Silveira","orcid":"https://orcid.org/0000-0001-6944-8901"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kamilla D\u00f3ria da Silveira","raw_affiliation_strings":[""],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030552866","display_name":"Robson Fidalgo","orcid":"https://orcid.org/0000-0002-4714-2933"},"institutions":[{"id":"https://openalex.org/I25112270","display_name":"Universidade Federal de Pernambuco","ror":"https://ror.org/047908t24","country_code":"BR","type":"education","lineage":["https://openalex.org/I25112270"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Robson do Nascimento Fidalgo","raw_affiliation_strings":["Centro de Inform\u00e1tica, Universidade Federal de Pernambuco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centro de Inform\u00e1tica, Universidade Federal de Pernambuco","institution_ids":["https://openalex.org/I25112270"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9847999811172485,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11891","display_name":"Big Data and Business Intelligence","score":0.9675999879837036,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.7898173332214355},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6555925011634827},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.6470301747322083},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.5854449272155762},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.5285593271255493},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5170841217041016},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.48298707604408264},{"id":"https://openalex.org/keywords/multinational-corporation","display_name":"Multinational corporation","score":0.46810269355773926},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4429132044315338},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4411190152168274},{"id":"https://openalex.org/keywords/neglect","display_name":"Neglect","score":0.43243902921676636},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4070475101470947},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4043935239315033},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.3433692753314972},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.1919764280319214},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.17849716544151306},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14196017384529114},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.07755261659622192}],"concepts":[{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.7898173332214355},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6555925011634827},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.6470301747322083},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.5854449272155762},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.5285593271255493},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5170841217041016},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.48298707604408264},{"id":"https://openalex.org/C158016649","wikidata":"https://www.wikidata.org/wiki/Q161726","display_name":"Multinational corporation","level":2,"score":0.46810269355773926},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4429132044315338},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4411190152168274},{"id":"https://openalex.org/C2776289891","wikidata":"https://www.wikidata.org/wiki/Q1931511","display_name":"Neglect","level":2,"score":0.43243902921676636},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4070475101470947},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4043935239315033},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3433692753314972},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.1919764280319214},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.17849716544151306},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14196017384529114},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.07755261659622192},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C159110408","wikidata":"https://www.wikidata.org/wiki/Q121176","display_name":"Nursing","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3229345.3229393","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3229345.3229393","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the XIV Brazilian Symposium on Information Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W12580802","https://openalex.org/W1975324172","https://openalex.org/W2051692814","https://openalex.org/W2067092684","https://openalex.org/W2798212571","https://openalex.org/W4248145435","https://openalex.org/W7027434016"],"related_works":["https://openalex.org/W2085929198","https://openalex.org/W560905060","https://openalex.org/W3146347817","https://openalex.org/W4248941464","https://openalex.org/W2348308266","https://openalex.org/W2150379823","https://openalex.org/W2478765238","https://openalex.org/W2361676595","https://openalex.org/W603542689","https://openalex.org/W2118831152"],"abstract_inverted_index":{"Section":[0],"404":[1],"of":[2,13,27,44,68,77,95,109],"the":[3,11,25,35,41,45,75,78,82,88,93,96,110],"SOX":[4,83],"Act":[5],"requires":[6],"companies":[7],"to":[8,10,56,60,73,81,92],"certify":[9],"effectiveness":[12],"their":[14,50],"internal":[15,46],"control":[16],"over":[17],"financial":[18],"reporting.":[19],"After":[20],"investigating":[21],"this":[22,61,63],"context":[23],"considering":[24],"scope":[26],"Database":[28],"Security":[29],"(DB),":[30],"it":[31],"was":[32,100],"verified":[33],"that":[34],"related":[36],"works":[37],"explore":[38],"in":[39,102],"detail":[40],"strategic":[42],"vision":[43],"controls,":[47],"but":[48],"neglect":[49],"operational":[51,69],"and":[52,70],"practical":[53],"aspects.":[54],"Aiming":[55],"give":[57],"a":[58,66,86,103,106],"contribution":[59],"problem,":[62],"work":[64],"proposes":[65],"guide":[67,89],"technical":[71],"controls":[72],"evaluate":[74],"security":[76],"DB":[79],"according":[80],"Act.":[84],"As":[85],"proof-of-concept,":[87],"is":[90],"used":[91,101],"development":[94],"tool":[97],"SOXSecurity4DB,":[98],"which":[99],"case":[104],"involving":[105],"multinational":[107],"company":[108],"retail":[111],"industry.":[112]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}