TOP, an Example of Complex Application Controls
M. Korver · 1998
Security and control measures can be implemented as user controls, application controls or general controls. To safeguard the integrity of a database, general controls may be relied on. Or is it, for instance for highly critical applications, necessary to take additional measures in the form of application controls in the application itself ? Based on a risk analysis, in which risks were identified and measures taken to cover these risks, the Dutch Central Bank decided that additional application controls in the form of control totals were necessary. To realize these control totals a separate Control subsystem was designed and implemented. This document describes the control subsystem which is implemented in the payment system of the Bank.This paper will first give a overview of the payment system of the Dutch central bank. In the second section will be described how is dealt with quality assurance on security and control during application development. In the sections 3 to 9 the control subsystem is specified in detail.