IT GRC-based IT internal control framework

Recently personal information leakage and computer hacking occur constantly. The majority of the incidents are caused by the negligence of IT internal control. It is practically impossible to prevent all the security incidents caused by the insider. However, an Automated IT internal control system - considered about administrative, technical and physical internal control reinforcement for precaution and rapid response against the incident in the early stage - can reduce the security threat considerably. The object of this paper to present an IT internal control framework with enterprise-wide perspective embraced administrative, technical and physical internal control reinforcement.