BEC 4 System design and other elements Flashcards
Categories of Business Information Systems
- Transaction Processing Systems
- Management Information Systems
- Decision Support System
- Executive Information Systems
Transaction Processing Systems
- process and record the routine daily transactions necessary to conduct business
- speed and efficiency important
Management Information Systems
- provides managers and other end users with reports
- provide managers with the information they need to make daily business decisions
Decision Support System
- an information system that provides interactive support for mangers during the decision making process
- does not automate decisions, but provides interactive tools that guide decision making
- expert systems
- assists managers in making daily business decisions
Executive Information system
- only used by top managers
- provides senior executives with immediate and easy access to internal and external information assist the executives in strategic, not daily, decision making
System Development Life Cycle
- provides a framework for planning and controlling the detailed activities associated with systems development
- “big design up front” approach - the plan is viewed as unchanging
- the waterfall approach - sequential steps of analysis, planning, design and implementation flow only in a single “downward” direction like a waterfall
System Analysis and Planning
- Define the nature and scope of the project and identify its strengths and weaknesses
- Conduct an in depth study of the proposed system to determine its feasibility
- Identify the information needs of system users and managers
- Document the info needs of system users
- A report is prepared to summarize the work done during a systems analysis and submitted to appropriate levels of management.
Conceptual Design
The company decides how to meet users needs during the conceptual design phase:
- identify and evaluate appropriate design alternatives (buying software, developing software, outsourcing systems development)
- develop detailed specifications outlining what the system is to accomplish and how it is to be controlled
Physical Design
- Design input and output documents
- Write computer programs
- Create fules and databases
- Develop procedures
- Develop controls
Implementation and Conversion
- Installation of new hardware and software
- Hiring or relocation of employees to operate the system
- Testing or modifying new processing procedures
- Establishing and documenting standards and controls for the new system
- Converting to the new system and dismantling the old one
- Fine tuning the system after it is up and running
Training
- hardware and software skills training
- orientation to new policies and operations
- a variety of training options etc
Testing
- tests of the effectiveness of documents and reports, user input, operating and control procedures, processing procedures and computer programs
- Tests of capacity limits and backup and recovery procedures
Operations and Maintenance
- system is periodically reviewed
Participants in Business Process Design
- Management
- Accountants
- Information Systems Steering Committee
- Project Development Team
- External Parties
Information Technology Control Objectives
provides managers, auditors and information technology users with a set of measures, indicators, process and best practices to maximize the benefit of information technology
Information Technology Control Objectives outlined
- Business objectives
- Governance objectives
- Information criteria
- IT Resources
- Domains and Processes of COBIT
Business objectives
- anticipate the global requirements that are associated with business owners or process managers
- effective decision support
- efficient transaction processing
- compliance with reporting requirements or information security requirements
Governance Objectives
- Strategic alignment
- defining, maintaining and validating the IT value proposition
- Aligning IT and enterprise operations - Value delivery
- IT delivers promised benefits to advance overall business strategy and satisfy its customers
- Value is provided at optimized costs - Resource Management
- application
- information
- infrastructure
- people - Risk Management
- Performance Measurement
- performance measurement translates strategy into action
- performance measurement is essential for IT governance
Information Criteria
- Integrity
- Confidentiality
- Efficiency
- Reliability
- Availability
- Compliance
- Effectiveness
IT Resources
- Applications
- Information
- Infrastructure
- People
Domains and Processes of COBIT
- Plan and Organize
- Acquire and Implement
- Deliver and Support
- Monitor and Evaluate
Role of technology systems in control monitoring
- General and Application Controls
- Input Controls
- Processing Controls
- Output Controls
- Managing Control Activities
General and Application Controls
- General Controls - designed to ensure that an organization’s control environment is stable and well managed
- Application Controls - prevent, detect, and correct transaction error and fraud and are application specific, providing reasonable assurance as to system
Input Controls
If the data entered into a system is inaccurate or incomplete, the output will be too.
- Prenumbering forms improves controls by making it possible to verify that all input is accounted for
- A turnaround document is a record of company data sent to an internal party and then returned by the external party to the system as input. A turnaround document ensures that all input is accounted for.
Processing Controls
- Data Matching
- File Labels
- Recalculation of batch totals
- Cross-footing and zero balance test
- Write protection mechanisms
- Database processing integrity procedures