PIC1-8 Flashcards
what is a system
- set of things that work together as part of a mechanism or an interconnected network
- an assembly of parts that or components existing together in an organised way
- set of principles or procedures
properties of a system
Inputs
Outputs
Boundaries
Process
types of system
Open/Closed
Deterministic/Stochastic
Tangible/Abstract
Evolved/Designed
Biological/Mechanical
data
A description of something that allows it to be recorded, analysed and reorganised
- the stuff of which information if made
information
Data that has been cleaned, processed, stored, organised, trasmitted
knowledge
Information that has been analysed and interpreted… refined by experience, education, familiarity
σσ - information as an instance of semantic content
- σσ consists of one or more data
- the data are well-formed
- are meaninfull
Claude Shannon
theory of communication of information, concerning efficient transmission of information
Information theory - basic model
- Information source
- message
- transmitter
- signal
- noise source
- received signal
- receiver
- message
- destination
Information system
Integrated set of components for collecting, storing, processing data and for providing information and knowledge
Socio-technical information system
considers
- people/human,
- social organisation and - technology
EIS
Enterprise information systems.
- Support work processes
COTS
Commercial off the shelf
- needs configuration to reflect company’s operation
- must integrate with existing operations
- must be populated with data
- incorporate industry best practices
- ready to use
bespoke system
- functionalities need to be identified, documented and built
- designed to meet exact requirements of the business
- may bring competitive advantage
EIS life cycle
- commissioned
- operated
- decommissioned
Factors in system failure
- miscommunication between system users and providers
- lack of agreement between user and project team
- failure to accommodate business requirements
- failure to adapt to change
National Information Infrastructure Act 1993
The network should
- directly benefit all Americans
- provide large economic and social benefits
- be designed to be accessible and usable by all
eCommerce transactions
- buying and selling goods and services
- transferring funds
- contracts
- marketing
- ticketing and reservations
- brokerage
what’s needed to make eCommerce work?
- technology (network, routers…)
- search
- payment (online payment system)
- platforms (storefronts, channels…)
- logistics
- productivity (tool that facilitate exchange of information)
- legal
- governance (rule, resource allocation, security, protocols)
eCommerce platform
- IT solution to allow retailers to build storefronts or channels to present products to customers online
EU aim for eCommerce
EU aims to break down online barriers so that people can enjoy full access to good and services offered online by businesses in EU
eCommerce Directive 2000 (EU)
- ensure legal certainty and consumer confidence
- sets out rules to be followed by service providers (contracts, formalities, disputes)
- limits liability of intermediaries
Consumer Rights Act, 2015 (UK)
- entitles consumers to repair or replacement of faulty digital products (films, music, games…)
Electronic contracts
- formed when an offer is accepted
- displaying prices and products equates to an offer
- if customer accepts the offer, then a legally-binding obligation is created
- must sell product at the same price shown on website
- supplier must provide goods within 30 days from payment
Jurisdiction (EU)
B2C
jurisdiction in country of the consumer (unless specified in contract)
Jurisdiction (EU)
B2C - Where to sue?
Consumer can sue supplier in own country
Supplier must go to consumer country to sue
Jurisdiction (EU)
B2B - which juridiction?
usually specified in contract
otherwise, contract is under law where the supplier is legally registered
Country of Origin Principle
ISPs have to comply with the law of the EU state in which they are legally registered
Taxation, which country?
Direct tax due only in country where business is legally registered
Indirect Tax (VAT) - digital products considered as services. Depend on buyer and type of service
Digital Single Market Strategy 2015 (EU)
- better access for digital goods across EU
- allow digital networks to flourish
- grow digital economy
Internet governance is concerned with
- Infrastructure
- Security
- Intellectual property
- development issues
European Charter of Rights of Citizens in the Knowledge Society
- promote internet access access for all
- fundamental right to education
- access to user-friendly public information
- transparent public administration
Cloud
collection of related technologies including:
- global connectivity
- virtualisation
- dynamic provision of CPU
- fully automated operations
- multi-tenancy
Surveillance in the workplace is allowed when
- avoid commercial liability
- related to business
- required to establish existence of facts
- detect crime
- comply with regulatory standards
- investigation of unauthorised use of system
- quality control and training
- protection from virus / backup
ICO recommendations for monitoring at work
- employees are entitled to some privacy at work
- monitoring only when there is a real business need
- non intrusive methods
- employee should be aware
- Covert monitoring for crime detection/prevention only
- monitoring done by HR, not direct manager
Surveillance by the State
- prevent crime
- provide better public service
- research
- protect citizens
Profession
- specify training for members
- controls entry
- provides accreditation
- specifies code of conduct
- advisor on related matters
- publicises good practice and new development
Regulation of Profession in UK
- Job title and/or job function can be reserved
IT organisational models
- Centralised
- Distributed
- Hybrid
Development Life Cycle
Plan
Analyse
Design
Deploy
Types of system development methodologies
- Structured (waterfall)
- Iterative (agile)
Scope of GDPR
- companies in EEA that process personal data
- non-EU companies who process EU citizens data
exceptions:
- Law enforcement
- national security
- personal/household activities
Personal Data
- information relating to natural persons who can be identified directly or indirectly from combination with other data
- special categories of personal data or criminal conviction and offences data
- pseudoanonymised data
Identifiers
- data that allow to distinguish a person from other individuals
- name, location data, IP address, cookie
examples of personal data
biographical (DOB, phone, email)
look and appearance
workplace data
religion, political views, geo-tracking
- mediacal history
Special Category Data
race, ethnicity, politics, religion, health, sexual orientation
Processing
obtaining, recording, holding data
organisation, adaptation, alteration of data
transmission, dissemination of data
alignment, combination, erasure of data
Lawful basis for processing
- consent to data controller
- contract between individual and controller
- legal obligation: processing is necessary for controller to comply with the law)
- vital interest, protect life
- public task
- legitimate interest
GDPR key principles
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality (security)
- Accountability
Individual rights under GDPR
- right to be informed
- right of access
- right to rectification
- right to erasure
- right to restrict processing
- right to data portability
- right to object
- rights in relation to automated decision making and profiling
how much time for organizations to report a data breach under GDPR
72 hrs
Freedom of Information Act 2000
- make public organisations more open and accountable
- introduces “right to know”
Absolute exemptions to FOI
- information accessible by other means
- security matters
- court records
- where it infringes parliamentary privileges
- house of commons and house of lords information affecting public affair
- information obtainable via GDPR/DPA
- if it breaches data protection
- information provided in confidence
- when prohibited by an enactment, incompatible with EU obligations, would commit a contempt of court
Qualified exemptions to FOI
Class based:
- intended for future publication
- related to Royal family
- related to conferring honours
Harm based:
- international relations
- economic interests of the UK
- law enforcement
