!!!!!!!!!!!

!!!!!!!!!!!!!!!!!

!

MIS$2113$

$

Study&Guide&$

Week,1:&Importance&of&MIS/Collaborative&Systems& & & 10&questions&$

Information&age&(1960’s)&&• Information&Worker:$will$continuously$be$challenged$to$learn$new$things$• Knowledge&Society:$result$of$rise$in$the$numbers$and$importance$of$knowledge$

workers$in$the$society.$New$economy$based$on$the$digital$economy.$$

• Peter$Drucker$(1959)$$

$

The&education&system&in&the&USA&was&the&leader&of&the&world&(12,15&years&ago):$• American$students$were$the$smartest$students$in$the$world,$but$not$anymore.$

People$have$recognized$the$economic$situation$in$the$world.$$

• Globally&competitive&world:$The$job$you$are$trying$to$get$is$the$same$job$as$many$others$are$trying$to$get.$$

$

Honesty&in&21st&Century&America&• Survey$completed$by$Hudson,$Inc.$–$31%$say$they$have$witnessed$coOworkers$

engage$in$ethical$misconduct,$where$only$52%$of$them$reported$it.$$

• Business$students$say$their$idealism$is$blunted$by$corporate$recruiters.$$

$

Why&is&MIS&one&of&the&most&important&classes?&&• Get$in$to$PCB,$develop$nonOroutine$cognitive$skills,$where$you$start$using$

technology$to$address$business$problems$

• Future$business$professionals$need$to$be$able$to$$

o Assess,$evaluate,$and$apply$emerging$IS$Technology$

o Learn$abstraction,$systems$thinking,$collaboration$and$experimentation.$$

o There$is$strong$growth$in$number$of$available$jobs$for$those$with$strong$

cognitive$skills.$$

• Abstract(reasoning$–$construct$a$model$or$representation$• Systems(thinking$–$model$system$components$and$show$how$component’s$inputs$

and$outputs$relate$to$one$another$

• Collaboration$–$develop$ideas$&$plans$with$others,$and$provide$&$receive$critical$feedback$

• Ability(to(experiment$–$create$and$test$promising$new$alternatives$$

Informational&Systems&(IS):&A$group$of$five$components$that$interact$to$produce$information$(Hardware,$Software,$Data,$Procedures,$People).$$

$

Management&Information&Systems&(MIS):$Development$and$use$of$IS$that$help$businesses$achieve$goals$and$objectives,$empowers$users$to$achieve$business$objectives.$

• Development$and$use$

• Information$systems$$

• Business$goals$and$objectives$

$

Information&Technology&(IT):&Information$tools$(Hardware,$Software,$Data$Components,$Communication$Networks).$$

$

MIS$2113$

$

IS&vs.&IT&• IT$alone$will$not$help$an$organization$achieve$goals,$because$you$need$people,$

procedures,$and$instructions.$IS$makes$IT$useful$

• IS$=$IT$+$People$+$Procedures$

$

Moore’s&Law:$Explains$why$IS$in$business$is$affordable$$

Virtual&Teams/&Collaboration&• Collaborative&Technologies:$Tech$that$support$collaborative$efforts,$often$used$

to$support$virtual$teams.$$

• Virtual&Team:$A$team$that$uses$computer$tech$to$tie$together$physically$or$temporally$dispersed$members$in$order$to$achieve$a$common$goal.$$

o Collocated$Asynchronous$(same$place,$different$time)$

o Dispersed$Synchronous$(different$place,$same$time)$

o Dispersed$Asynchronous$$(different$place,$different$time)$

• Challenges&with&Virtual&Teams:&&o Loss$of$faceOtoOface$interaction$

o Low$social$presence$&$Low$information$richness$

o Information$overload$&$Scheduling$

o Assessing$&$rewarding$performance$

• Implementation&issues:&o Training,$Type$of$task,$Security,$Cost$of$Collaboration$Technology$

$

We&have&teams&because&they:&&• Typically$outperform$individuals$$

• Use$employee$talents$better$

• Are$more$flexible$and$responsive$to$changes$in$the$environment$

• Facilitate$employee$involvement$

• Are$an$effective$way$to$democratize$an$organization$and$increase$motivation$

$

Individual&Collaboration&Characteristics&&• Essential&&

o Enthusiastic$

o Curious$and$openOminded$

o Says$what$they$think,$even$if$an$unpopular$perspective$

• Highly&appreciated&&o Responds$promptly$

o Can$engage$in$difficult$conversations$$

o Good$listener$$

o Good$with$critical$feedback$(giving$and$receiving)$

• Not&important&&o Well$organized$

o Similar$personality$

o Trust$based$on$past$experience$

o Experienced$with$collaboration$

$

$

$

$

MIS$2113$

$

Week,2/3:&Database&and&Data&modeling&(ERD’s)& & & 16&questions&$

Data&Analytics:&The$science$of$examining$raw$data$with$the$purpose$of$drawing$conclusions$about$that$information.$$

&Five&Component&Framework&of&IS&

$

$

Structured/Unstructured&data:$We$are$moving$more$into$unstructured$data$$

Data&Modeling:$Capturing$the$reality$of$data.$$Data&Model:$A$map$or$diagram$that$represent$entities$and$their$relationships.$$$

Entity&Relationship&Diagram&(ERD)&• Entity:$Something$of$interest$in$the$environment$(person,$place,$thing,$concept)$

o Instance:$A$particular$occurrence$of$an$entity$• Attributes:$A$discrete$data$element$that$describes$an$entity$$• Relationships:$An$association$between$the$instances$of$one$or$more$entities$$

o Degree:$Indicated$the$number$of$entities$involved$

o Cardinality:$Describes$the$number$of$instances$of$two$entities$

• Identifiers&(Keys):$Unique$for$every$record,$can$be$one$or$more$attributes$$

$

MIS$2113$

$

$

$

Database&Technology&• A$collection$of$related$data$organized$in$a$way$that$makes$it$valuable$and$useful.$$

• Allows$organizations$to$store,$retrieve,$and$analyze$information$easily.$$

• Is$vital$to$an$organization’s$success$in$running$operations$and$making$decisions.$$

$

Database:&Data$about$data$• A$collection$of$records$or$data$that$is$stored$in$a$computer$system$so$that$a$

computer$program$or$person$using$a$query$language$can$consult$it$to$answer$

queries.$The$computer$program$used$to$manage$and$query$a$database$is$DBMS.$$

• Relational&Database:&when$you$can$tie$relationships$between$worksheets$$• With$a$database$you$can$relate$one$entity$to$another$entity$(3DOview)$

• Hierarchy$of$data$elements$

o Characters$grouped$into$attributes/fields$

o Attributes$grouped$into$rows/records/occurrences/instances$

o Rows$grouped$into$entities/tables/files$

• Keys:$$

o Primary$

o Compound$Primary$

o Foreign$

o Secondary$$

$

The&purpose&of&a&database:&To$organize$and$keep$track$of$things,$keep$lists$that$involve$multiple$concepts.$$

$

Metadata:$Data$that$describe$data.$Make$databases$more$useful$and$easier$to$use.$$• Field$name&• Data$type&• Field$properties&

&Database&Management&System&(DBMS)&

• Program$that$creates,$processes,$and$administers$database$

• DBMS$used$to$create$tables$and$relationships$in$databases$

• Applications$use$DBMS$to$read,$insert,$modify,$and$delete$data$

• Examples:$Microsoft$Access,$Oracle,$MySQL,$DB2$

• Structured&Query&Language&(SQL):$International$standard$for$processing$database$

$

(Person)(!((The(computer(system(used(to(manage(data)(!((The(data)( ( ($

$

$

$

$

$

$

$

$

MIS$2113$

$

Database&Administration&Tasks&(DBA)&• Development$

• Operation$

• Backup$and$Recovery$$

• Adaption$

$

Information&Systems&Database&&• Operational&&

o Transaction$Databases:$used$by$departments$

• Informational&o Data$Warehouse:$used$for$business$analysis$

o Data$Mart:$used$for$highly$specific$business$analysis$

$

How&do&database&applications&make&databases&more&useful?&• Database&application:$Collection$of$forms,$reports,$queries$and$application$

programs$–$serves$as$intermediary$between$users$and$database$data.$

o OrderOentry$application$

o Purchasing$application$

o Warehouse$management$application$

• Application&programs:$Provide$security,$maintain$data$consistency,$and$handle$special$cases.$$

• Multiuser&Processing&Considerations&o LostOupdate$problem:$when$an$update$made$by$a$transaction$is$lost$due$to$

another$update$by$another$transaction.$$

o Locking:$used$to$ensure$that$a$transaction$does$not$interfere$with$any$

other$transaction.$It$prevents$the$problem$of$lost$update,$uncommitted$

data,$and$inconsistent$data.$

$

$

What&is&a&NoSQL&DBMS?&&• Supports$very$high$transaction$rates,$relatively$simple$data$structure,$and$

replicated$on$many$servers$in$the$cloud$

• Examples:$Amazon$(dynamo),$Google$(bigtable),$Facebook$(cassandra)$

• Impact$on$the$DBMS$Product$Market$

o Viable$new$entrants$$

o More$reliance$on$open$source$community$

• NoSQL$will$not$replace$relational$DBMS$products$because$they$are$very$

expensive$and$disruptive,$very$technical,$and$requires$years$of$training.$$

MIS$2113$

$

Week,4/5:&Business&Processes& & & & & & 13&questions&$

Business&Process:$A$network$of$activities,$resources,$facilities,$and$information$that$interact$to$achieve$a$business$function.$$

• Business&Processes&is&a&network&of:&&o Activities$(processes)$$

o Resources$(inputs)$

o Facilities$(inputs)$

o Information$(inputs$and$outputs)$

• Processes$interact$to$achieve$business$function$

• Examples&of&Business&Processes:&&o Inventory$management$processes$$

o Manufacturing$processes$

o Sales$and$support$processes$

o Accounting$systems$

o HRM$

• Business$Processes$requires$a$manager$to$consider$the$whole$rather$than$

focusing$only$on$their$piece$of$the$process$

$

Measurement&Inversion:$Sometimes$people$measure$what$is$easy$to$measure$$

3&Ways&to&enact&change&to&Business&Processes&1. Continuous&Improvement&&

o Continuously$search$for$ways$to$improve$existing$processes$

o Frequently$implemented$through$Total$Quality$Management$(TQM)$

o Often(more(palatable(to(employees(?(Doesn’t(fix(major(process(problems(2. Business&Process&Reengineering&

o Structured$improvement$approach$where$they$critically$examine,$rethink,$

and$redesign$business$processes$to$achieve$drastic$improvements$

o Can(address(major(process(problems(–(long(time,(alienate(employees(3. Restructuring&(outsourcing&&&downsizing)&

o Outsourcing$(“offOshoring”)$

• Contracting$a$business$task$to$a$thirdOparty$service$provider$

• $

o Downsizing$

• Often$the$result$of$enacting$change$in$an$organization$

$

Data&Flow&Diagrams&(DFD)&• Focus$on$the$movement$of$data$between$external$entities$and$processes$$

• A$graphical$tool,$useful$for:$$

o Communication$with$users,$managers,$and$other$IS$personnel$

o Analyzing$existing$as$well$as$proposed$systems$

• Used$to$perform$structured$analysis$to$determine$logical$requirements$

• Types&of&DFD’s:&&o Context$diagram:$contains$one$process$

o LevelO0$diagram$(system$diagram)$

o LevelOn$diagram$

o Primitive$diagram$

$

MIS$2113$

$

Sources/Sinks&(external&entities)&• Any$class$of$system$which$exist$outside$the$system$you$are$studying$

• They$form$the$boundaries$of$the$system$

• System$and$external$entities$exchange$data$in$the$form$of$data$flows$

• Must$be$named$–$use$a$noun$

$

Data&Flows&• Entities$are$either$sources$of$data$input$and$outputs$(originators$or$terminators$for$data$flows)$

o Entities$!$Processes$$

o Entities$"$Processes$$

o Processes$&$Data$Store$must$have$both$outputs$and$inputs$

o Data$Stores$"$Processes$$

o Data$Stores$!$Processes$

• Processes:$Transform$incoming$data$flows$into$outgoing$DF’s$(verb/object)$• Data&Stores:$Data$at$rest$(noun)$• Functional&Decomposition:$What$we$do$to$break$down$whatever$level$we’re$in$

$

Context:&&

$

Level,0:&&

$

$

$

$

$

$

$

MIS$2113$

$

Week,6:&Hardware,&Software,&and&Networking& & & 10&questions&$

Basic&hardware&categories&(IPOS)&• Input:&keyboard,$mouse,$scanner,$UPC$reader,$microphone$

o RFID$(Radio$Frequency$Identification$Device):$holds$a$small$about$of$

unique$data.$$

o Active$RFID$(continuous)$$

o Passive$RFID$(retail$security$applications)$

• Processing:&CPU,$main$memory,$special$function$cards$o Cache&Memory&$

• Output:&video$display,$printer,$speakers,$slide$projector,$plotter$• Storage:$magnetic$disc,$optical$disc,$magnetic$tape$

o Secondary&Storage$# Fragmentation:$when$file$A$must$expand$in$size,$it$must$fragment$

to$the$next$available$area$or$storage$space.$$

# Storage$Area$Network$(SAN):$most$storage$are$connected$to$a$

network,$e.g.$your$locker$on$d2l$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

MIS$2113$

$

Uninterrupted&Power&Supply&(UPS):$Charger,$battery,$and$inverter$$

Computer&Software:$Any$set$of$machineOreadable$instructions$that$directs$a$computer’s$processor$to$perform$specific$operations.$Computer$software$contrasts$with$computer$

hardware,$which$is$the$physical$component$of$computers.$$

$

Types&of&Computer&Software&• Application&software:$performs$information$processing$tasks$for$end$users$

o General&purpose&programs&# Software$suites,$web$browsers,$email,$word$processing,$database$

managers,$presentation$graphics,$personal$information$managers,$

groupware$

o Application&–specific&programs&# Business$–accounting,$transaction$processing,$customer$

relationship,$management,$resource$planning,$electronic$

commerce,$science$and$engineering,$education,$entertainment.$$

• System&software:$manages/supports$operations$of$computer$systems$&$networks$o System&management&programs&

# Operating$systems,$network$management$programs,$database$

management$systems,$application$servers,$system$utilities,$

performance$and$security$monitors$

o System&development&programs&# Programming$language$translators,$programming$editors$and$

tools,$computerOaided$software$engineering$(CASE)$packages$

$

$

$

Evolution&of&the&O/S&Software&• Single$Sequential$Scheduler$(SSS)$$

o Primary$Control$Program$(PCP)$

• Multiple$Sequential$Schedulers$(MSS$$

o Multiprogramming$with$a$Fixed$number$of$Tasks$(MFT)$

• Multiple$Priority$Schedulers$(MPS)$

o Multiprogramming$with$a$Variable$number$of$Tasks$(MVT)$

$

Server&Farms:$Collection$of$computer$chained$together$–$could$share$work$$$

MIS$2113$

$

Specific&Application&Software&&• Executive$Level$

o Executive$Information$Systems$$

o Decision$Support$Systems$$

• Managerial$Level$

o Decision$Support$Systems$$

o Management$Information$Systems$$

• Operational$Level$

o Transaction$Processing$Systems$

o Expert$Systems$$

$

$

$

ERP&(Enterprise&Resource&Planning)&Applications:&A$business$management$software$–$usually$a$suite$of$integrated$applications$–$that$a$company$can$use$to$collect,$store,$

manage,$and$interpret$data$from$many$business$activities,$including$

• Product$planning,$cost$

• Manufacturing$or$service$delivery$

• Marketing$and$sales$$

• Inventory$management$$

• Shipping$and$payment$$

$

$

MIS$2113$

$

Application&Software&Environment&&• Development$$

• Production$Source$Module$$

• Production$Load$Module$$

$

$

$

$

How&do&organizations&acquire&application&software?&&• Horizontal$&• Vertical$&• OneOofOaOkind&

$

$

Software&Sources&• No&Charge&Software&

o Freeware:$free$of$charge$

o Open$Source:$source$code$$

• For&Profit&Software&o Proprietary$$

o Firmware:$computer$software$installed$(printers,$comm.$devices)$

$

Is&open&source&software&viable?$Maybe,$it’s$free,$but$there$are$many$considerations.$$Future$will$involve$a$blend$of$both$proprietary$and$open$source$software.$$

MIS$2113$

$

Software&–&Legal&Protection&• Copyright$$

• Patent$$

• Trade$Secret$$

$

Networking&• Hubs,$switches,$and$routers$

• Firewall$

$

$

Internet&Protocol&$• IP:$handles$lowerOlevel$transmissions$from$computer$to$computer$• TCP:$operates$at$a$higher$level,$considered$only$with$the$two$end$systems$$

$

Types&of&Networks:&• LAN$–$WAN$–$MAN$–$PAN$–$VPN$$

• Internet$–$Intranet$–$Extranet$$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

$

MIS$2113$

$

From&the&Lab:& & 6&questions&(4&concept&questions/2&query&questions)&$

Relational&Database:&Data$grouped$into$tables$with$relationship$between$different$tables$formed$by$using$a$common$field$(keys).$$

• OneOtoOone$

• OneOtoOmany$

• ManyOtoOone$

• ManyOtoOmany$

$

Primary&Key:$Field$or$combination$of$fields$that$makes$each$record$in$a$table$unique.$$Foreign&Key:$A$field$in$one$table$that$is$also$stored$in$another$table$as$the$primary$key.$$$

Relationships&in&Access:&&• Relationships$between$tables$are$stored$in$a$relationship$diagram$!$Tables$are$

related$in$oneOtoOone,$or$more$commonly$oneOtoOmany$relationships$!$A$foreign$

key$is$required$to$establish$a$relationship.$One$table’s$foreign$key$is$another$

tables$primary$key.$$

$

Referential&Integrity:$Refers$to$the$set$of$rules$that$ensure$that$data$stored$in$related$tables$remain$consistent$as$the$data$are$updated.$$

$

Query:$Enables$you$to$ask$questions$about$the$data$stored$in$the$database.$$&Structured&Query&Language&(SQL):$Used$to$create$queries,$but$we$can$use$the$Access$query$interface.$Can$be$created$manually$or$by$using$QueryWizard.$$

$

$

$

Celina'Hagen'

1'

MIS$Study$Guide$Exam$2$$$

CHAPTER$10$9$INFORMATION$SYSTEMS$DEVELOPMENT$AND$ACQUISITION$'How$organizations$acquire$application$software:$$

• Horizontal:'Buy'on/the/shelf,'e.g.'email,'word'processes,'excel,'power'point$• Vertical:'Customize'for'specific'purposes,'hire'someone'to'make'changes$

o Internal'customizations:'go'into'and'change'source'code$o External'customizations'(bolt/on)'don’t'change'the'source'code,'develop'

modules'outside'that'application$

''Systems$development:$Creating'and'maintaining'IS$

• Involves'all'five'components'of'IS,'and'requires:''o Establishing'system'goals'o Setting'up'the'project''o Determining'requirements''o Business'knowledge'and'management'skill'

$Why$is$systems$development$difficult$and$risky?$$

• Many'projects'never'finish'• Often'200/300%'over'budget''• Some'finish'within'budget'and'schedule,'but'don’t'accomplish'goals''• High'risk'of'failure,'even'with'competent'people'following'an'appropriate'

methodology'$$Major$challenges$to$system$development$

• Difficulty$of$determining$requirements$o Estimating'is'hard,'and'what’s'causing'the'problem'is'the'unknown'

unknown.''o Before'system'can'be'finalized,'detailed'requirements'need'to'be'

specified,'and'they'can'be'hard'to'find.''• Changes$in$requirements$$

o System'development'aims'at'a'moving'target'o Bigger'the'system'or'longer'the'project'–'more'changes'

Celina'Hagen'

2'

o Develop'team'incorporate'changes,'build,'complete,'and'make'changes'in'maintenance'phase''

• Difficulties$involving$scheduling$and$budgeting$$o How'long'to'build'it,'create'data'model'and'database'application,'to'test,'

develop'and'document'procedures,'training?''o Rate'of'return'on'investment?''o This'goes'back'to'the'problem'with'estimating:'If'you'have'good'

estimates,'then'this'won’t'be'as'big'of'a'problem'• Changing$technology$

o Do'you'want'to'stop'your'development'to'switch'to'the'new'tech?''o The'management'is'the'ones'deciding'if'you'can'switch'to'new'tech'and'

go'over'budget,'or'to'stick'with'current'tech'and'finish'developing'according'to'existing'plan'

• Diseconomies$of$scale:$Brooks’$Law$o “Adding'more'people'to'a'late'project'makes'the'project'later”'o New'staff'must'be'trained'by'productive'members''o Once'a'project'is'late'and'over'budget,'no'good'choices'exist'''

'

'$Is$it$really$so$bleak?$$

• There'is'a'way,'and'it'is'through'a'structured'approach'called'Systems'development'life'cycle'(SDLC).'There'is'no'standard,'but'they'all'look'kind'of'similar.'This'is'successful'when'managed'properly.''

$Options$for$acquiring$System$Capabilities$$

• Option'1:'Build'IS'• Option'2:'Buy'prepackaged'system'• Option'3:'Outsource'development'to'3rd'party''

''

Celina'Hagen'

3'

5$phases$of$the$System$Development$Live$Cycle$(SDLC)$–'Walter'Kroenke$1. System$definition$ $

o What'are'the'objectives,'scope,'schedule,'and'budget'+'form'team'2. Requirement$analysis$$

o Determine'&'document'specific'feature'and'functions'of'new'system'o Coming'out'of'phase'2,'we'have'requirements,'ERD,'and'DFD.''

3. Component$design$o Design'each'component'of'IS'!'Ready'to'start'implementation''

4. Implementation$o Software'development''o Software'testing''o Procedures'training'o Conversion''

5. Maintenance$$o Corrective$o Adaptive$o Perfective$o Preventive$

'

'$System$Identification:'A'process'used'to'identify'opportunities'for'developing'systems'projects'to'solve'problems.'This'varies'from'organization'to'organization,'where'it'depends'on'the'business'processes'in'the'organization'etc.''$Selection:'The'process'of'applying'evaluation'criteria'to'possible'projects'to'select'those'that'is'critical'to'enabling'the'organization’s'mission,'goals,'and'objectives.'$Systems$Planning:'Developing'plans'for'creating'the'IS'project'selected.'Also'called'Information'Systems'Planning'(ISP).''

Celina'Hagen'

4'

Phase$1.$How$is$SYSTEM$DEFINITION$accomplished?$$

• What'are'the'objectives,'scope,'budget,'and'schedule?'+'Form'a'project'team'• This'usually'doesn’t'take'very'long'(weeks/few'months)'• User'involvement'is'critical'throughout'this'process''

$

'$System$Definition$$

• Define'the'new'system'goals'and'scope'• Assess'feasibility''

o Cost:'Depends'on'scope'of'project'o Schedule:'Difficult'to'determine'time'frame'o Technical:'Whether'existing'IT'can'meet'needs'of'new'o Organizational:'If'new'system'fits'organization’s'requirements''

• Form'project'team'(IS'professionals'and'user'representatives)''o System'analyst:'IT'professionals'who'understand'business'and'tech'o Business'analyst:'Specialize'in'understanding'business'needs,'

strategies,'goals,'and'helping'businesses'implement'systems'to'accomplish'competitive'strategies''

• Plan'the'project'/'analysis,'design,'goals,'and'scope'$Team$composition$changes$over$time$

• First'major'task'for'project'team'is'to'plan'the'project.'Team'members'specify'tasks'to'be'accomplished,'assign'personnel,'determine'task'dependencies,'and'set'schedules.''

• Requirements'definition'–business'and'systems'analysts''• Design'and'implementation'–'programmers,'testers,'and'database'designers'• Integrated'testing'and'conversion'–'testers'and'business'users''• Users'actively'involved'and'take'ownership'throughout'entire'project''

$

Celina'Hagen'

5'

Phase$2.$What$is$the$users’$role$in$the$REQUIREMENT$ANALYSIS$phase?$$

• Primary'purpose'is'to'determine'and'document'specific'features'and'functions'of'the'new'system,'e.g.'what'is'it'going'to'do,'what'are'the'requirements'

• Includes'many'interviews,'questionnaires,'document'analysis,'and'observation'• Most'expensive'and'difficult'phase'• Basically'3'things'will'come'out'of'this'phase'

o System'requirements'o Model'of'the'data'(ERD)'o Model'of'the'process'(DFD)'

'System$analysis$–$System$requirements$

• Collecting'system'requirements''o Interviews''o Questionnaires'''o Observations''o Document'Analysis''

• Deliverables'from'the'requirement'phase'o System'requirements''o Modeling'the'system'data'o Modeling'organizational'processes'

• Users'approve'requirement''o Requirements'for'all'IS'components'o Requirements'for'communications'and'network'hardware'o Requirements'for'procedures'&'personnel''o Requirements'restricting'activities'for'certain'categories'of'employees''

• Role'of'a'prototype''o Provides'direct'experience'for'users''o Provides'evidence'to'assess'technical'and'organizational'feasibility''o Used'to'estimate'developments'and'operational'costs''o Often're/used'in'operational'system''o Developers'face'a'dilemma'when'funding'prototypes;'cost'of'prototype'

occurs'early'in'process,'sometimes'before'project'funding'is'available''$

Celina'Hagen'

6'

Phase$3.$How$Are$the$5$COMPONENTS$DESIGNED?$$

• We'design'each'of'the'IS'components'by'developing'alternatives,'evaluating'each'alternative'against'requirements,'and'selecting'among'those'alternatives'

• Requirement'analysis'is'what'–'component'design'is'how'it’s'going'to'happen'• The'ERD'is'the'big'picture'of'what'we’re'going'to'do,'and'here'we'are'designing'

the'databases'• Here'we'figure'out'how'we’re'going'to'do'it'–'next'phase'we'do'it'

$Component$design$

• Software$design$$o Team'produces'design'documentation'for'writing'programming'code'o Depends'on'source'of'programs''

" Off/the'shelf:'Must'determine'candidate'products'and'evaluate'them'against'the'requirements''

" Off/the/shelf/with/alteration:'Team'identifies'products'to'be'acquired'of/the/shelf'and'then'determines'alterations'required'

" Custom/developed'programs'o Decide'where'application'processing'will'occur'

• Hardware$design$o Determine'specifications'and'source'of'hardware'o Purchase,'lease,'or'lease'time'from'a'hosting'service'in'the'cloud''o Hardware'design'decision'involves'interaction'with'software'design''

• Database$design$o Convert'data'model'to'database'design'

• Procedures$design$$o Designed'by'system'analysts'and'key'users$

" Normal'processing'" Backup'" Failure'recovery'

• Design$of$job$descriptions'o Teams'of'system'analysts'and'users'determine'job'descriptions'and'

functions''o Define'new'tasks'and'responsibilities'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

Celina'Hagen'

7'

'$Phase$4.$How$is$an$information$system$IMPLEMENTED?$$

• Programming,'testing,'integrating,'training,'and'conversion'• Software'development'/>'Software'testing'/>'Conversion'

'$System$documentation:'The'collection'of'materials'produced'with'and'IS'to'support'the'ongoing'operation'and'development''Documentation$types$

• User'and'reference'guides:'Step/by/step'instructions'for'using'the'system''• User'training'and'tutorials:'User'manuals'and'exercises'designed'to'educate'

users'and'build'competence'in'system'use$$Software$programming:'Creating'the'instructions'from'the'programming'logic'design'using'a'variety'of'programming'languages'assisted'many'times'by'language'editor'

Celina'Hagen'

8'

Software$testing:'A'series'of'tests'designed'to'identify'errors'and'validate'logic'in'parallel'with'programming.''

• Developmental$o Testing'the'correctness'of'individual'modules'and'the'integration'of'

multiple'modules'performed'by'programmer'(f'it'is'working'or'not)'• Alpha$$

o Testing'overall'system'to'see'whether'it'meets'design'requirements''o Integrates'all'components'together'o Performed'by'the'project'team'(software'tester)'

• Beta$$o Testing'the'capabilities'of'the'system'in'the'user'environment'with'

actual'data'–'becomes'a'beta'site'o Performed'by'users'(like'you)'o You'get'it'quicker'and'you'get'a'lot'of'attention'from'the'vender,'

because'they'are'interested'in'it'being'a'success'o Problems:'not'ready'for'beta'testing'&'bugs'that'were'not'discovered'

'Software$conversion$strategies:'The'process'of'taking'information'from'the'old'to'the'new'system.'This'is'accomplished'through'manual'and/or'automated'methods.''

• Parallel$o Old'and'new'system'are'used'at'same'time'–'preferred'if'possible'o Safety'net:'if'anything'goes'wrong,'we'still'have'the'old'system'o Slowest'and'most'expensive'

'• Direct/Plunge$

o Old'system'is'stopped'and'new'one'start.'No'overlap'o No'room'for'mistakes''

'• Phased$

o Parts'of'the'new'system'are'implemented'with'old'system'over'time''o We’re'phasing'in'the'functionality'

'• Pilot$(single$location)$

o Implement'the'whole'system,'but'in'only'one'location.''

'

Celina'Hagen'

9'

Design$and$implementation$for$the$5$components$of$IS$$

''Phase$5.$What$are$the$tasks$for$system$MAINTENANCE?$$

• The'system'is'in,'and'the'system'is'running,'and'now'we'have'to'maintenance'it$• Work'during'this'phase'is'either'to'fix'system'or'to'adapt'it'to'changes'in'

requirements'• Many'organizations'develop'a'failure/tracking'database'–'a'report'of'all'fixings''

'$System$maintenance:'The'process'by'which'a'system'is'kept'in'working'order'and'minor'enhancements'are'completed.'''

• Corrective''• Adaptive''

o When'our'business'requirements'change,'we'need'to'change'some'systems'to'fit'with'our'requirements'and'needs'

o Marketing'has'the'most'business'requirement'changes'• Perfective''

o Making'wanted,'not'required'enhancements'to'improve'system''• Preventive''

Celina'Hagen'

10'

$$What$are$some$problems$with$the$SDLC?$

• SDLC'Waterfall'method''o Like'a'series'of'waterfall,'the'SDLC'process'is'supposed'to'operate'in'a'

sequence'of'nonrepetitive'phases'(overlap'of'phases)'o Rarely'works'smoothly,'causing'development'team'to'go'back'and'forth,'

raising'costs'and'delaying'project'• Requirements'documentation'difficult''

o Business'requirements'change'o “Analysis'paralysis”'–'projects'spend'so'much'time'on'documentation'it'

hampers'progress''• Scheduling'and'budgeting'difficulties''

o Time'and'cost'estimates'for'large'project'way'off'o Know'little'about'how'long'it'will'take'or'cost'–'wrong'estimates'

'Needs$for$alternatives$to$internal$systems$building$

• Many'times'it'is'not'feasible'to'consider'building'an'IS'internally.'Here'are'4'situations'that'discourage'the'idea'of'developing'a'system'internally'

o Limited'IS'staff'o Limited'IS'skill'sets'o IS'staff'is'overworked'o Problem'IS'performance''

Alternatives$to$Internal$Development$

• External'acquisition'o The'purchasing'of'an'existing'IS'from'an'outside'vendor,'e.g.'IBM,'EDS,'

or'Accenture'• Outsourcing'

o Turning'over'some'or'all'responsibility'for'an'organization’s'IS'development'and'operations'to'an'outside'firm''

• End/user'development'o This'technique'allows'the'system'users'to'develop'their'system'

functions'using'a'variety'of'tools'''

Celina'Hagen'

11'

External$acquisition$–$Steps$to$proceed$$

• Business$planning$process$o System'identification,'selection,'and'planning'(same'as'internal'method)'

• Systems$definition$o Same'as'internal'method'

• Requirement$analysis$$o Same'as'internal'method'

• Development$of$a$request$for$proposal$(RFP)$o If'you'are'going'with'external'acquisition,'you'will'create'a'RFP'o A'report'used'to'tell'vendors'what'the'requirements'are,'and'how'they'

might'be'able'to'meet'them'(hardware'&'software)'o It'includes'1)'system'requirements,'2)'data'model,'3)'process'model,'4)'

system'performance'criteria,'5)'time'table,'and'6)'budget.''• Proposal$evaluation$

o Many'vendors'will'give'you'proposals,'and'you'have'to'evaluate'them'o GAP'analysis:'The'gap'between'my'requirements'and'what'the'vendor'

is'willing'to'do'o May'include'viewing'system'demonstrations,'evaluating'the'

performance'of'those'systems,'and'examining'criteria'important'to'the'organization'

• Vendor$selection$o Using'a'scoring'system'devised'to'evaluate'the'competing'proposal'and'

then'selecting'the'proposal'that'best'fits'the'organization’s'needs'''

'$Outsourcing$–$why$consider?$$

• Cost'and'quality'concerns'–'sometimes'it’s'cheaper'• Problems'in'IS'performance'–'sometimes'we’re'not'that'good'• Supplier'pressures'–'vendors'will'put'a'lot'of'pressure'on'your'department'• Simplifying,'downsizing,'and'reengineering''• Financial'factors''• Organizational'culture'• Internal'irritants'

Celina'Hagen'

12'

CHAPTER$6$–$THE$CLOUD$'Cloud$computing:$The'internet/based'computing'in'which'large'groups'of'remote'servers'are'networked'to'allow'the'centralized'data'storage,'and'online'access'to'computer'services'or'resources'$

• Classified$as$o Public'/'internet'o Private'/'your'organization'o Hybrid'/'own'private'cloud'with'use'of'the'public'cloud'

• $3$basic$service$models$o SaaS:'Hardware,'Software'&'Data'–'leasing'storage,'operational'

software,'and'application'programs''o PaaS:'Hardware'&'Software'–'a'platform'with'operational'software'–'

application'development:'you'are'leasing'a'platform'so'you'can'develop'the'application'yourself.''

o IaaS:'Hardware'–'vendors'provide'storage'space,'but'we'do'the'work'–'we'just'need'the'space,'but'not'anyone'to'provide'us'software''

• Platform:'A'piece'of'hardware'that'contains'an'operating'system,'ex.'Apple'products,'MacBook'Pro''

''

• By'incorporating'the'cloud,'IT'professionals'expect'to'save'31%'over'the'next'5'years'(IT'budget'for'OU'is'$34'million,'could'save'31%)'

• By'moving'86'million'workers'to'the'cloud'/>'use'up'to'87%'less'energy''5$ways$businesses$benefit$from$Cloud$computing$'

1. Scalability:'Add'or'remove'cloud/based'applications'based'on'your'business’'needs'–'elasticity'depends'on'demand'

2. Security:'Leading/edge'encryption'tech'keeps'business'data'safe'and'private'–'service'providers'are'held'to'a'higher'standard'that'the'individual'companies''

3. Flexibility:'Several'great'cloud'software'options'to'choose'for'your'company'4. Accessibility:'Anytime'&'anywhere'access'to'files'on'your'devices'&'internet''5. Affordability:'No'fixed'computer'servers'or'hardware'!'lower'costs''

Celina'Hagen'

13'

Why$is$the$Cloud$the$future$for$most$organizations?$$

• The$cloud:'Elastic'leasing'of'pooled'computer'resources'over'the'Internet''o Elastic:'Organizations'pay'for'resources'used'(stretches'as'you'need'

more,'shrinks'when'you'don’t)'o Pooled:'Many'different'organizations'share'same'physical'hardware'

through'virtualization''• Flexibility'to'meet'unpredictable'demand'while'limiting'financial'risks''• Benefit'from'economies'of'scale:'Average'cost'of'production'decrease'as'size'of'

operation'increase,'e.g.'more'people'in'the'class'(fill'up'the'available'seats)'and'it'wouldn’t'change'the'effect''

'Service$Oriented$Architecture$(SOA):$$

• A'set'of'standard'ways'of'requesting'and'receiving'services'over'the'Internet'–'specifies'how'you'process,'give,'and'receive'the'information''

• The'way'of'designing'computer'programs'and'web'services'standards''• Without'this,'the'cloud'wouldn’t'work'

'Why$is$the$Cloud$preferred$to$In9House$Hosting?$$

'

Celina'Hagen'

14'

Why$now?$$

• The'concept'of'the'cloud'is'not'new'(since'1960s'–'time/sharing'vendors'provided'slices'of'computer'time'on'a'use/fee'basis),'but'the'cloud'is.'Technology'has'made'it'cheaper'and'available.''

• Factors'that'made'cloud/based'hosting'advantageous''o Cheap'processors,'data'communication,'and'data'storage'are'nearly'free'o Virtualization'technology'enables'near'instantaneous'creation'of'a'new'

virtual'machine'o Internet/based'standards'enable'cloud/hosting'vendors'to'provide'

processing'capabilities'in'flexible'yet'''When$does$the$cloud$not$make$sense?$$

• When,'by'law'or'by'standard'industry'practice,'a'company'is'required'to'have'physical'control'over'its'data'(data'on'your'premises)'

'How$do$organizations$use$the$cloud?$$

' ''Content$delivery$networks$(CDN)$

• System'of'hardware'and'software'that'stores'user'data'in'many'different'geographical'locations,'and'makes'it'available'on'demand''

• Provides'a'specialized'type'of'PaaS,'but'usually'considered'its'own'category'• Ex.'people'watch'the'super'bowl'and'world'cup,'companies'want'to'run'their'

ads'• Minimize'latency'(minimize'time'it'takes'to'get'there,'ex.'TV'is'delayed,'radio'is'

faster)'• Often'used'to'store'and'deliver'content'that'seldom'changes'• Benefits$

o Decreased,'guaranteed'load'time'o Reduced'load'on'origin'server'o Increased'reliability''o Protection'from'DOS'attacks''o Reduced'delivery'costs'for'mobile'users'o Pay/as/you/go'

'Server$location$for$Amazon’s$CloudFont:$Located'throughout'the'world.'$'

Celina'Hagen'

15'

Web$services$internally$(private'internet'for'inventory'and'other'applications)'• This'is'not'a'cloud'• Needs'an'“Elastic'Load'Balancer”'to'be'a'private'cloud''

'

'$How$Can$a$Small/Medium$Company$Use$the$Cloud?$$

• SaaS'products'o Google'Mail'o Google'Drive'o Office'365'o Salesforce.com'o Microsoft'CRM'OnLine'+++''

• PaaS'services'o Vendors'will'pre/install'Linux,'Windows,'or'Apache'Server'on'cloud'

hardware'o Suppliers'can'license'a'DBMS,'say'SQL'Server'from'Microsoft,'and'place'

in'on'an'EC2'Windows'Server'instance'o Use'Windows'Servers'with'SQL'Server'already'installed'from'Microsoft'

Azure'cloud'offerings''o Use'a'CDN'to'distribute'content'worldwide'and'respond'to'leads'

generated'from'advertising''o Lease'hardware'&'operating'systems'from'cloud'vendor,'ex.'

Amazon.com'• IaaS'services'

o Provides'basic'hardware'in'the'cloud'o Some'companies'acquires'servers'this'way'and'then'load'operating'

systems'onto'them'" Requires'considerable'technical'expertise'and'management'/'not'

available'in'small'company'o Data'storage'services'elastically'available''

'

Celina'Hagen'

16'

The$standard:$SAS$70$&$SOC$

• SAS'70'is'history,'replaced'with'SOC1,2,3'• SOC1:'Written'documentation'of'the'internal'controls'that'are'likely'to'be'

relevant'to'an'audit'of'a'customer’s'financial'statements'(operator’s'financial),'e.g.'I'want'to'know'if'they'are'still'going'to'be'in'business'for'a'while''

• SOC2:'Account'statement'for'accessibility,'security'of'the'controls'in'place'for'your'data'–'very'detailed'report'(has'all'the'details'and'scores'on'them)'

• SOC3:'High/level'security'report;'we'perform'these'tests,'and'they'passed'these'control'tests'–'this'is'all'you'need'to'make'sure'everything'is'ok'(e.g.'a'diploma)'

'How$can$organizations$use$cloud$services$securely?$$

'• Here,'a'VPN'uses'the'public'Internet'to'create'the'appearance'of'a'private,'

secure'connections'on'a'secure'network.''• Tunnel:'The'secure'connection'between'VPN'client'and'VPN'server'• I'can'travel'the'world,'and'log'in'to'my'VPN'and'access'my'company'safely.''

'Private$cloud$

• Owned'&'operated'by'an'organization'for'its'own'benefit'• Creates'private'applications'using'Web'services'standards''• Elastic'load'balancing'balances'the'workload'for'each'layer''• Secure'within'organizational'infrastructure,'but'access'from'outside'

infrastructure'not'''Private$Cloud$internally$(private'cloud'for'inventory'and'other'applications)'

'

Celina'Hagen'

17'

Using$a$hybrid$cloud$$

''What$does$the$cloud$mean$for$your$future?$'

• Fewer'organizations'will'set'up'their'own'computing'infrastructure'• Readily'obtain'elastic'resources'at'very'low'cost''• More'small'tech/based'startup'businesses''• New'categories'of'work''

o Remote'action'systems,'telediagnosis,'telesurgery,'telelaw'enforcement''• Value'of'top/notch'performers'increases,'possibly'exponentially''

$$$$$$$$$$$$$$$$$$$$$$$$$

$

Celina'Hagen'

18'

CHAPTER$11$–$INFORMATION$SYSTEMS$MANAGEMENT$'5$primary$functions$of$the$IS$department$

1. Plan'use'of'IS'to'accomplish'organizational'goals'and'strategy'2. Manage'outsourcing'relationships''3. Protect'information'assets''4. Develop,'operate,'and'maintain'the'organization’s'computing'infrastructure'5. Develop,'implement,'and'maintain'applications''

'Organization$of$the$IS$department$$

• CIO:'Principal'manager'of'the'IS'department''• Technology$(CTO):'focuses'on'what’s'going'on'tech/wise'in'the'world;'what'

new'tech'are'we'hearing'about,'and'how'can'we'use'them?'Send'recommendations'to'the'CEO'

• Outsourcing$relations:'communicate'with'vendors'–'outsourcing'growth'by'using'the'cloud'

• Development:'build'and'maintain'the'system'–'the'ones'to'implement'anything'

• Operations:'keep'the'computer,'network,'and'firewall'running'and'up'to'date'(infrastructure)''

''IS9related$job$positions$$

• Business'analyst'o Work'with'business'leaders'and'planners'to'develop'processes'and'

systems'that'implement'business'strategy'and'goals'• System'analyst''

o Work'with'users'to'determine'system'requirements,'design'and'develop'job'descriptions'and'procedures,'help'determine'system'test'plans'

• Programmer''o Design'and'write'computer'programs.''

• Network'administrator'o Monitor,'maintain,'fix'and'tune'computer'networks''

• Database'administrator'o Manage'and'protect'database'

Celina'Hagen'

19'

How$do$organizations$plan$the$use$of$IS?$

• All'IS'must'be'aligned'with'organizational'competitive'strategy'o CIO'and'IS'department'must'constantly'be'alert'to'maintain'alignment'

between'IS'with'strategy'o Without'a'strong'CIO,'IS'may'be'perceived'as'drag'on'organization’s'

opportunities''• Communicate'IS/IT'issues'to'the'executive'group''

o The'CIO'is'the'representative'for'IS'and'IT'issues'within'the'executive'staff.'The'CIO'provides'the'IS'perspective'during'discussions'of'problem'solutions,'proposals,'and'new'initiatives'

• Develop/enforce'IS'priorities'within'the'IS'department''o The'CIO'must'ensure'that'priorities'consistent'with'the'overall'strategy'

are'developed'and'communicated'to'the'IS'department'• Sponsor'steering'committee''

o Steering$committee:'Group'of'senior'managers'from'the'major'business'functions'that'works'with'CIO'to'set'IS'priorities'and'decide'among'major'IS'projects'and'alternatives.''

'How$do$organizations$align$IS$with$their$strategy?$

• Industry$structure:$Competitive'and'bargaining'power'forces$o Competitive$forces:'From'vendors'who'manufacture'substitutes,'new'

competitors,'and'existing'rivals'o Bargaining$power$forces:'Bargaining'power'of'suppliers'&'customers''

• Competitive$strategy:$To'be'effective,'organization/'goals,'objectives,'culture,'and'activities'must'be'consistent'with'the'organization’s'strategy'$

$• Value$chains:$All'activities'that'take'place'within'an'organization.'We'take'

something'in,'we'do'activities'that'add'value'to'it

$• Business$processes:$What'business'processes'need'to'change?'$• Information$Systems$(IS):$Use'knowledge'of'organization’s'market'+'

observations'of'structure'&'content'of'Web'storefront,'to'infer'organization’s'strategy'&'make'inferences'about'its'value'chains'and'business'processes$

Celina'Hagen'

20'

Outsourcing$IS$Services:$Hiring'another'organization'to'perform'IS'services'$• Advantages:''

o Management'advantages'–'Cost'reduction'–'Risk'reduction'• Disadvantages:''

o Loss'of'control'–'Benefits'outweighed'by'long/term'costs'–'No'easy'exit'

''Outsourcing$Alternatives$9$Categories'of'alternatives'according'to'the'IS'components'and'outsourcing'of'hardware'to'the'cloud$

• If'we'outsource'a'system,'we'also'outsource'the'procedures'–'very'common'• If'we'outsource'a'business'function,'we'also'outsource'people,'e.g.'a'security'

department'at'a'hospital'

'Customer$rating$of$supplier$performance:$Overall,'suppliers'are'earning'a'good'report'card'from'customers,'but'there'are'many'opportunities'for'improvement.'$'What$are$your$options?$$

• Do'as'much'as'you'can'yourself''• Determine'how'many'SDLC'stages'you'can'do'yourself'• Design'user/interface'and'specify'ways'users'will'employ'it'• Develop'a'test'plan'skeleton,'perform'some'testing'tasks'yourself'• Outsource'programming''

Celina'Hagen'

1'

MIS$2113$study$guide$$

Chapter$12$–$Information$Security$Management$

'Threats$from$outsiders:$They'are'more'prevalent'than'they'used'to'be'''The$goal$of$IS$security:$To$find'an'appropriate'trade9off'between'the'risk'of'loss'and'the'cost'of'safeguards.'Management’s'job'is'not'to'fix'all'vulnerabilities,'but'to'know'the'costs.''$

'$

3$sources$of$security$threats''1. Natural'events'and'disaster'

o Disclosure'during'recovery''o Incorrect'data'recovery''o Service'improperly'restored''o Service'interruption''o Property'loss''

2. Human'error'and'mistakes''o Procedural'mistakes'o Incorrect'procedures'o Ineffective'accounting'controls''o Accidents''

3. Computer'crime''o Pretexting'o Phishing'o Spoofing'o Sniffing'o Hacking'o Usurpation'o Denial'of'service'attacks''o Theft''o Terrorist'activity''

$

$

Celina'Hagen'

2'

Types$of$security$loss$

• Unauthorized'data'disclosure'o Procedural'mistakes''o Pretexting,'phishing,'spoofing,'sniffing,'hacking'o Disclosure'during'recovery''

• Incorrect'data'modifications''o Procedural'mistakes,'incorrect'procedures,'system'errors''o Hacking'o Incorrect'data'recovery''

• Faulty'service'o Procedural'mistakes,'development'&'installation'errors''o Usurpation'o Service'improperly'restored''

• Denial'of'service''o Accident'o DOS'attacks''o Service'interruption''

• Loss'of'infrastructure'(advanced'persistent'threat'APT'or'cyber9warfare)''o Accident'o Theft,'terrorist'activity'o Property'loss''

'

'''

Celina'Hagen'

3'

Security$safeguards$

! Personal$safeguards$$

o Take'security'seriously$o Create'strong'&'multiple'passwords$o Send'no'valuable'data'via'email'$o Follow'organizational'security'directives'&'guidelines'$

• Organization$safeguards$$

o IT'risk'assessment:'Security'audit'identify'all'aspects"'Risk'analysis"'Reduction'(e.g.'firewall),'acceptance,'or'transference'(e.g.'buying'insurance)''

o IT'controls'framework:'Each'organization'should'use'the'most'applicable'components'of'the'IT'frameworks'to'categorize'or'assess'IT'controls''

o ISACA'–'GTAG'–'COSO'–'ISO'17799'• Technical$safeguards$

o Identification'&'authentication'o Encryption'o Firewalls''o Malware'protection''o Design'for'secure'application''

• Data$safeguards$$

o Define'data'policies'o Data'rights'and'responsibilities''o Rights'enforced'by'user'accounts'authenticated'by'passwords'o Data'encryption''o Backup'and'recovery'procedures''o Physical'security'

• Human$safeguards$

o Human'safeguards'for'employees''o Account'administration''o Systems'procedures''o Security'monitoring'

'$

$$

Celina'Hagen'

4'

Organization$security$safeguards$$

$

Technical$safeguards$–$Hardware$&$Software$

• Identification'&'authentication'• Encryption'• Firewalls''

o Companies'can'use'multiple'firewalls'to'protect'information'within'the'organization'as'well'as'the'outside'

• Malware'protection''o Install'antivirus'and'antispyware'programs'on'your'computer'o Set'up'your'antimalware'programs'to'scan'your'computer'frequently''o Install'software'updates''o Open'email'attachments'only'from'known'sources'o Promptly'install'software'updates'from'legitimate'sources''o Browse'only'in'reputable'Internet'neighborhoods''

• Design'for'secure'application''o SQL'injection'attack:'When'a'user'enters'a'SQL'statement'into'a'form'in'which'he'

or'she'is'supposed'to'enter'a'name'or'other'data.''o Risk:'Improper'data'disclosure,'data'damage'and'loss'possible'o Defense:'Well'designed'applications'make'injections'ineffective''

$

Data$safeguards$–$Data$$

• Define'data'policies'• Data'rights'and'responsibilities''• Rights'enforced'by'user'accounts'authenticated'by'passwords'• Data'encryption''• Backup'and'recovery'procedures''• Physical'security'

$

Human$safeguards$–$Procedures$&$People$

• Human'safeguards'for'employees''o Position'definition'o Hiring'and'screening''o Dissemination'&'enforcement''o Termination''

• Account'administration''o Account'management''o Password'management''o Help9desk'policies''

• Systems'procedures''o Normal'operation'o Backup'o Recovery''

• Security'monitoring'o Activity'logs'o Security'testing''o Investigate'security'incidents''

Celina'Hagen'

5'

Organization$response$to$security$incidents:$If'the'organization'has'a'security'incident,'people'have'to'know'what'to'do,'and'the'faster'the'shorter'recovery'time''

• Have'an'incident9response'plan''• Centralized'reporting''• Specific'responses'"'practice''

'Ethical$responsibility:'Business'professionals'have'a'responsibility'to'promote'ethical'uses'of'IT'in'the'workplace.'''Corporate$social$responsibility$theories$(CSR)$

• Stockholder'theory'o Managers'are'agents'of'the'stockholders,'and'their'only'ethical'responsibility'is'to'

increase'the'profits'of'the'business'without'violating'the'law'or'engaging'in'fraudulent'practices'

• Social'contract'theory'o Companies'have'ethical'responsibilities'to'all'members'of'society,'which'allow'

corporations'to'exist'based'on'a'social'contract''• Stakeholder'theory'

o Managers'have'an'ethical'responsibility'to'manage'a'firm'for'the'benefit'of'all'its'stakeholders,'which'are'all'individuals'and'groups'that'have'a'stake'in'or'claim'on'a'company''

'Hacking$&$computer$crime$$

• Common'hacking'tactics''o Denial'of'service'attack''

! Hammering'a'website’s'equipment'with'too'many'requests'for'information,'effectively'clogging'the'system,'slowing'performance'or'crashing'the'site.''

! Usually'more'than'one'attacker'involved'in'hacking'the'target.'o Piracy''

! Software'piracy:'Unauthorized'copying'of'computer'programs''! Piracy'of'intellectual$property:'Unauthorized'copying'of'copyrighted'

material,'e.g.'music,'videos,'images,'articles''• How'hackers'attack'

o They'look'for'a'vulnerability''o Attack'vectors:'A'means'by'which'a'hacker'can'gain'access'to'a'computer'or'

network'in'order'to'deliver'a'payload'or'malicious'outcome'(e.g.'viruses,'email,'attachments,'web'pages,'pop9ups,'instant'messages,'DNS'hacking,'and'deception)'

• Top'computer'crimes'in'OK'o Phishing'o SQL'injection'(port'80)'o Carding'(selling'stolen'cards)'o IPR'component'piracy'o BOTNETS/Other'malware'

$

$

$

Celina'Hagen'

6'

Chapter$7$–$Organizations$and$IS$

'4$types$of$IS$that$vary$according$to$the$scope$'

• Personal''o Single'user''o Not'documented''o Problems'isolated''o Easy'to'change''

• Workgroup'o 109100'users'o Procedures'understood'within'group'o Problem'solutions'within'group''o Somewhat'difficult'to'change'

• Enterprise'o 10091000'users'o Procedures'formalized'o Problem'solutions'affect'enterprise'o Difficult'to'change''

• Inter9enterprise'o 1000'users'o Procedures'formalized''o Problem'solutions'affect'multiple'organizations'o Difficult'to'change'

'System$categories$'

• Legacy$(silo)$systems:'Information'not'shared'between'operations''• Enterprise$systems:'Information'is'shared'across'operation'on'a'company9wide'bases''• Interorganizational$systems$(IOS):'Information'is'shared'across'organizational'

boundaries'with'goal'to'streamline'information'flow'from'one'company'to'another'''Enterprise$system$evolution$

'

Celina'Hagen'

7'

Problems$created$by$departmental$silos:'Too'many'steps'–'ERP'pulls'them'all'together''

''Enterprise$systems$solve$departmental$silosOproblems$$

• Problems'of'information'silos''o Data'duplication'&'data'inconsistency''o Limited'information'&'lack'of'integrated'information'o Isolated'decisions'lead'to'organizational'inefficiencies''o Increased'expense''

• 2'ways'enterprise'systems'solve'the'problems'o Integrate'the'data'into'a'single'database'and'revise'applications'and'business'

processes'to'use'that'database'o Allow'the'isolation,'and'manage'it'to'avoid'problems''

'

$$

''

Celina'Hagen'

8'

Business$process$reengineering$(BPR):'Examines,'rethink,'and'redesign'business'processes'in'order'to'achieve'dramatic'improvements.'''

• Altering'&'designing'business'processes'to'take'advantage'of'new'IS''• Difficult,'slow'&'exceedingly'expensive'• Requires'high9level'skills'&'considerable'time''• BPR'opened'the'door'for'4'new'applications''

o SCM'(supply'chain'management)'o ERP'(enterprise'resource'planning)'o CRM'(customer'relationship'management)'o EAI'(enterprise'application'integration)'

'SCM,$ERP,$CRM,$and$EAI$support$enterprise$systems$by:$

• Helping'organizations'rethink'how'they'do'work'• Inherent'processes:'Prebuilt'procedures'based'upon'“industry'best'practices”'–'save'

money'and'time'in'BPR'–'you'still'have'to'do'the'systems'definition'to'find'what'you'want'the'system'to'do'etc.''

• Eliminate'costs'of'developing'complex'applications'in9house''Porter’s$value$chain$model$between$suppliers$&$customers$'

• Primary'activities''o Inbound'logistics'o Operations'o Outbound'logistics'o Marketing'&'sales'o Service''

• Secondary'activities'(add'money)'o Firm'infrastructure'o Human'resources'o Technology'development'o Procurement''

'

Celina'Hagen'

9'

Supply$chain$management$(SCM):$This'is'the'upstream'supplier'side,'and'has'to'do'with'moving'inventory'and'getting'it'shipped'out'to'the'customer.'The'purpose'of'SCM'is'to'improve'trust'and'collaboration'among'supply'chain'partners,'thus'improving'inventory'visibility'and'the'velocity'of'inventory'movement.'''Customer$relationship$management$(CRM):$This'is'the'downstream'customer'side,'and'has'to'do'with'customer'interaction'–'we'have'to'create'awareness'&'demand'for'our'product,'sales,'and'treat'customers'well'so'you'don’t'loose'customer.'When'you'loose'customers'why'have'to'analyze'the'customer'loss.'2'primary'functions'are'sales'&'service.''

• Customer'life9cycle''o Marketing''o Customer'acquisition'o Relationship'management''o Loss/churn''

• 4'applications'of'CRM'o Solicitation'and'lead'management'o Sales'o Relationship'management''o Customer'support''

$

Enterprise$resource$planning$(ERP):'Has'to'do'with'consolidating'business'operations'into'a'single,'consistent'computing'platform.'It'support'the'internal'operations,'share'information'across'operations'within'organization'

• Implementation'failures''o Software'don’t'fit'(gap'analysis'not'good'enough)'o Unrealistic'implementation'expectations''o You'don’t'have'top'management'support,'and'it'will'fail''o Propensity'to'customize'software'rather'than'changing'the'procedures''o Lack'of'ERP'implantation'expertise'in9house'–'bring'in'outside'people'

• Challenges$when$implementing$enterprise$systems$$

o Collaborative'management'using'committees'&'steering'groups''o Identify'requirement'gaps'o Transition'problems'–'implement'ERP'system'while'continuing'to'run'the'

business''o Managing'employee'resistance'via'communication,'self9efficacy,'positive'

incentives'–'used'to'something'&'don’t'want'it'to'change'

'

Celina'Hagen'

10'

Enterprise$application$integration$(EAI):$This'is'the'supply'upstream'&'the'customer'downstream'–'highly'integrated'(no'more'silos)'that'share'common'databases'across'functions.'Importance'of'metadata'–'interorganizational'–'integrated''

• Functions'of'EAI''o Links'departmental'silos'together'o Enables'communicating'and'sharing'data'o Provides'integrated'information'o Provides'integrated'layer9over'top'of'existing'applications''o Enables'gradual'move'to'full'ERP'

'

'$

How$interOenterprise$IS$solve$the$problems$of$enterprise$silos$

• At'first'you'have'3'separate'information'silos,'and'they'all'have'access'to'limited'information.'They'all'want'access'to'the'other'information'silos.''

• They'can'create'a'database'with'all'of'the'information'so'all'parts'can'access'the'information'they'need'and'want'

'

''''''

Celina'Hagen'

11'

Chapter$9$–$Business$Intelligence$(BI)$Systems$

'Data$analytics:'The'science'of'examining'raw'data'with'the'purpose'of'drawing'conclusions'about'that'information.'The'goal'is'to'turn'data'into'information'and'information'into'insight.'''Business$Intelligence$(BI)$systems:'IS'that'process'operational'and'other'data'to'analyze'past'performance'&'to'make'predictions.'The'ultimate'function'is'to'get'the'right'information'to'the'right'people'at'the'right'time.'''BI:'The'patterns,'relationships,'trends'identified'by'BI'systems''Unstructured$data'is'growing'faster'than'structured$data'(10x'the'rate)'$

How$organizations$use$BI$systems$'• Find'information'about'customers,'analyze'&'predict'

o Identify'changes'in'purchasing'patterns'o BI'for'entertainment'o Predictive'policing''

• Push'&'pull'from'knowledge'workers''o Pull'data'is'static'–'the'numbers'may'change,'but'not'the'process'o Push'data'is'dynamic''

''

'''''

Celina'Hagen'

12'

3$primary$activities$in$the$BI$process$$

2. Acquire'data'(operational'DBs,'purchased'&'social'data)'3. Analysis'data''4. Publish'data''

''ACTIVITY$1:$Acquire$data$(by'using'data'warehouse'&'data'mart)$$

Data$Warehouse$–'put'data'in'warehouse'–'pushing'and'pulling'data'down''• Functions$of$DW$

o Extract'data'from'operational,'internal'&'external'databases'o Cleanse'data''o Organize'&'relate'data''o Catalog'using'metadata''

• Components$of$DW$

o Data'extraction/cleaning/preparation'programs'o Data'warehouse'DBMS''o BI'intelligence'tools''

''

Celina'Hagen'

13'

Data$Mart$–'we’re'pushing'the'data'out'to'the'data'mart'with'schedule'&'set'of'criteria'• Web'sales'data'mart'• Store'sales'data'mart''• Inventory'data'mart''

''Possible$problems$with$source$data$

• Dirty'data''• Missing'values''• Inconsistent'data'• Data'not'integrated''• Wrong'granularity'–'too'fine'or'not'fine'enough'• Too'much'data'–'too'many'attributes'or'too'many'data'points''

'ACTIVITY$2:$Analyzing$data$

$

'$

$

Celina'Hagen'

14'

3$techniques$for$processing$BI$data$

• Reporting''o Sorting,'filtering,'grouping,'calculating'and'formatting'

• Data'mining''o Unsupervised'

! Analysts'do'not'create'a'model'or'hypothesis'before'funning'an'analysis'! Do'not'know'what'relate'to'what'–'looking'at'clusters'and'patterns'! Cluster'analysis''

o Supervised''! Develop'a'model'prior'to'analysis'&'apply'statistical'techniques'to'data'to'

estimate'model'parameters''! Know'what'relates'to'what'–'analysis'after'creating'a'model''! Regression'analysis''

• Big'Data''o Unstructured'large'data'–'petabyte'and'larger''o Generated'quickly'–'large'velocity''o Large'variety'–'all'kinds'of'stuff'o Hadoop:'Application'for'processing'Big'Data'

! Open'source'program''! Manages'thousands'of'computers''! Deep'technical'skills'required'to'run'&'use''

'ACTIVITY$3:$Publishing$data$

'4$ways$to$publishing$BI$

1. Email'or'collaboration'tool'–'STATIC'2. Web'server'–'STATIC'&'DYNAMIC'3. SharePoint'–'STATIC'&'DYNAMIC'4. BI'server'–'DYNAMIC'

'

''Ethics$guide:$Unseen$Cyberazzi$$

! Data$broker$(buys)'or$Data$aggregator$(puts'data'together)$! Company'that'acquired'&'purchases'consumer'data'and'uses'it'to'create'BI'that'it'sells'

to'companies'and'the'government'''