Search

Software and hardware resources of the organizations are dynamic and with this the associated risks. In this situation an audit active approach based on the changing risks analysis is required, and not only on existent controls verification. On the institutions that base big part of their activity in informatics technologies a relevant administration component is systems audit, play an important role to guarantee the availability, confidentiality and reliability of the information. This paper introduces an expert system (ESIA) that supports systems auditor in risks evaluation and the choice of controls that reasonably protect the organization. Knowledge base represents the facts given and the actions of the systems audit expert under the methodology of risks analysis. The Expert System is implemented with free software in an Web environment, searching for a better access of beneficiary community. From a technology point of view integrates server and web application with logic server Prolog.