No abstract

This paper illustrates an evaluation and selection methodology for CASE software or CASE tools. The methodology' incorporates three stages 1) CASE software acreenin~2) CASE tool evaluation; and, 3) assurance of final CASE software selection. Initially, developing a short list through screening of commercial CASE ptuducta determines whether appropriate tools exist and narrows the field of available CASE software products for detailed conaideralion. The second stage determines which of the remaining products (the finalists) beat meets the needs of the organization, from both functional and technical perspectives.Tle final stage compares user requitvmenta with the features of the selecied CASE software by defining how these requirements will be satisfied by building system application with the selected prrxluct. The methodology also conaidera the pmsaibility that, at any stage of the process, no single CASE product is suitable and that a combination of products must be utilized.

Security of data and information has always been a concern for business organizations. With recent trends towards down‐sizing and the implementation of Local Area Networks, the necessity for the development of carefully formulated policies and procedures for data security has taken on a new emphasis. Auditors are responsible for the verification of security measures, as well as recommending corrective actions or proper measures when risks and exposures are found. The authors provide an overview of the important security considerations, identify threats common to the data and information managed by the organization, and recommend procedures to effectively secure the Local Area Network.