Control and Assurance in E-Commerce: Privacy, Integrity and Security at eBay
AbstractGrowth of online auctions and other forms of e-commerce has been hampered by concerns about the privacy, integrity, and security of online transactions. To earn the trust of their participants, new e-commerce organizations, like traditional organizations, have to reach the state of expectations equilibrium or control - a state where the actual behavior of participants corresponds to what others expect them to do. Since e-commerce companies provide electronic platforms where buyers and sellers interact directly with each other (as well as with the platform operator), establishing control in e-commerce enterprises requires broadening of the traditional definition of "internal control" to encompass the activities of "outsiders" such as customers, and suppliers. This paper presents a framework for analyzing the control environment of online auctions and identifies privacy and denial of service attacks as two new classes of risks faced by e-commerce companies. Using the control policies and practices of a leading consumer online auction company (eBay) as an illustrative example, we suggest possible ways of controlling these risks. This analysis identifies the demand for new kinds of assurance services for e-commerce to support privacy, integrity and security of online transactions. E-commerce assurance services available at the end of year 2000 (e.g. WebTrust) fall short of what is needed to establish expectations equilibrium or control in online auction firms. The merits of developing proprietary (e.g., PWC privacy standards) versus industry standards (e.g. WebTrust) for e-commerce assurance services are also discussed.
Download InfoIf you experience problems downloading a file, check if you have the proper application to view it first. In case of further problems read the IDEAS help page. Note that these files are not on the IDEAS site. Please be patient as the files may be large.
Bibliographic InfoPaper provided by Yale School of Management in its series Yale School of Management Working Papers with number ysm170.
Date of creation: 09 Jan 2001
Date of revision:
E-commerce; Online auctions; Control; Assurance; Privacy; Integrity; Security;
Other versions of this item:
- Rong-Ruey Duh & Shyam Sunder & Karim Jamal, 2002. "Control and Assurance in E-Commerce: Privacy, Integrity, and Security at eBay," Yale School of Management Working Papers ysm316, Yale School of Management, revised 01 Jan 2003.
- M49 - Business Administration and Business Economics; Marketing; Accounting - - Accounting - - - Other
- M40 - Business Administration and Business Economics; Marketing; Accounting - - Accounting - - - General
Please report citation or reference errors to , or , if you are the registered author of the cited work, log in to your RePEc Author Service profile, click on "citations" and make appropriate adjustments.:
- David Lucking-Reiley, 1999.
"Using Field Experiments to Test Equivalence between Auction Formats: Magic on the Internet,"
American Economic Review,
American Economic Association, vol. 89(5), pages 1063-1080, December.
- David Lucking-Reiley, 1999. "Using field experiments to test equivalence between auction formats: Magic on the internet," Framed Field Experiments 00183, The Field Experiments Website.
- Gode, Dhananjay K & Sunder, Shyam, 1997. "What Makes Markets Allocationally Efficient?," The Quarterly Journal of Economics, MIT Press, vol. 112(2), pages 603-30, May.
- Shyam Sunder, 2001. "Standards for Corporate Financial Reporting: Regulatory Competition Within and Across International Boundaries," Yale School of Management Working Papers ysm245, Yale School of Management, revised 01 Apr 2002.
- Baron, David P., 2001. "Private Ordering on the Internet: The eBay Community of Traders," Research Papers 1709, Stanford University, Graduate School of Business.
For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: ().
If references are entirely missing, you can add them using this form.