Formality and Informality
in Internal Control Systems: A Comparative Study of Control in Different
Social and Cultural Environments in a Global Bank
Abstract:
Untill relatively recently, information systems security was almost
uniquely studied within the realms of natural science or pure technology,
and relied most strongly on quantitative research. However, current
information systems security research is no longer limited to pure
computer or technology study, but includes the study of people, who
are also significant elements of the system. Therefore, this research
extends the focus of the study to include behavioural and organisational
considerations. Organisational environments will be considered as
constituted of formal, informal and technical components (Liebenau
and Backhouse: 1990).
The
theory of signs will be used to interpret and understand the actions
and interactions of people. What my research has been doing is to
analyse in depth the interplay and interdependence between the formal
and informal systems of security and control. This study aims to point
up the variance between these rules and practices. It assesses the
risks that are being run by organisations in failing to understand
fully this interaction. Understanding as much as possible about this
issue is critical for the new development and designs of the security
and control systems in global organisations. In addition, particular
focus is put on revealing the role of the informal system in delegating
responsibility in contrast to formal assignments.