This is not the document you are looking for? Use the search form below to find more!

Report home > Others

Chapter14: Information systems security and control

0.00 (0 votes)
Document Description
14 INFORMATION SYSTEMS SECURITY AND CONTROL Chapter Why are information systems so vulnerable to destruction, error, abuse, and system quality problems? What types of controls are available for information systems?…
File Details
  • Added: May, 12th 2011
  • Reads: 423
  • Downloads: 1
  • File size: 302.06kb
  • Pages: 44
  • Tags: mis
  • content preview
Submitter
  • Name: giovanni
Chapter14: Information systems security and control screenshot
Embed Code:
DOWNLOAD

Add New Comment




Related Documents

Introduction to Information Systems: Enabling and Transforming Business, 3rd Edition, R. Kelly Rainer, Casey G. Cegielski, WILEY(June 2010, ©2011), TB

by: mysmandtb, 9 pages

Solution Manuals and Test Banks I have huge collection of solution manuals and test banks. I strive to provide you unbeatable prices with excellent support. So, I assure you that you won’t be ...

The Cultural Impact of Information Systems - Through the Eyes of ...

by: melissa, 13 pages

With the increasing levels of multiculturalism in today's business and the proliferation and essentiality of information systems, development and management of IS needs to be considered in light of ...

Global Information Risk Management (IRM) company Announces Partnership with Exafort to Offer Information Security and Risk Management Services

by: aujasnetworks, 0 pages

The solution and services includes Compliance & Risk Management, Data Protection, Identity Management Solution, Network-Based Security and User Education. This offering will help Cloud services ...

Healthcare information systems help benefit Illinois Valley Community Hospital

by: clinicalsolutions, 2 pages

Illinois Valley Community Hospital funds facility renovations and clinical IT through better hospital information systems

EVALUATION OF THE EFFECTIVENESS OF ACCOUNTING INFORMATION SYSTEMS

by: shinta, 11 pages

In this study the effectiveness of accounting information systems of finance managers of listed companies at Tehran Stock Exchange is evaluated. The results indicate that implementation ...

Accounting Information Systems Romney 11th Edition Solutions Manual

by: gordonbarbier, 51 pages

Accounting Information Systems Romney 11th Edition Solutions Manual

Accounting Information Systems Romney 11th Edition Test Bank

by: gordonbarbier, 51 pages

Accounting Information Systems Romney 11th Edition Test Bank

Management Information Systems Laudon 11th Edition Solutions Manual

by: gordonbarbier, 48 pages

Management Information Systems Laudon 11th Edition Solutions Manual

Management Information Systems Laudon 11th Edition Test Bank

by: gordonbarbier, 48 pages

Management Information Systems Laudon 11th Edition Test Bank

Accounting Information Systems Bodnar 10th Edition Solutions Manual

by: gordonbarbier, 48 pages

Accounting Information Systems Bodnar 10th Edition Solutions Manual

Content Preview
  1. 14 INFORMATION SYSTEMS SECURITY AND CONTROL Chapter
    • Why are information systems so vulnerable to destruction, error, abuse, and system quality problems?
    • What types of controls are available for information systems?
    • What special measures must be taken to ensure the reliability, availability and security of electronic commerce and digital business processes?
    Essentials of Management Information Systems Chapter 14 Information Systems Security and Control OBJECTIVES
    • What are the most important software quality assurance techniques?
    • Why are auditing information systems and safeguarding data quality so important?
    OBJECTIVES Essentials of Management Information Systems Chapter 14 Information Systems Security and Control
    • Designing systems that are neither over-controlled nor under-controlled
    • Applying quality assurance standards in large systems projects
    MANAGEMENT CHALLENGES Essentials of Management Information Systems Chapter 14 Information Systems Security and Control
    • Advances in telecommunications and computer software
    • Unauthorized access, abuse, or fraud
    • Hackers
    • Denial of service attack
    • Computer virus
    SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Why Systems are Vulnerable
  6. SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Telecommunication Network Vulnerabilities Figure 14-1
    • Disaster
    • Destroys computer hardware, programs, data files, and other equipment
    • Security
    • Prevents unauthorized access, alteration, theft, or physical damage
    SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Concerns for System Builders and Users
    • Errors
    • Cause computers to disrupt or destroy organization’s record-keeping and operations
    SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Concerns for System Builders and Users
    • Bugs
    • Program code defects or errors
    • Maintenance Nightmare
    • Maintenance costs high due to organizational change, software complexity, and faulty system analysis and design
    SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control System Quality Problems: Software and Data
  10. SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Points in the Processing Cycle where Errors can Occur Figure 14-2
    • Data Quality Problems
    • Caused due to errors during data input or faulty information system and database design
    SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control System Quality Problems: Software and Data
  12. SYSTEM VULNERABILITY AND ABUSE Essentials of Management Information Systems Chapter 14 Information Systems Security and Control The Cost of Errors over the Systems Development Cycle Figure 14-3
    • Controls
    • Methods, policies, and procedures
    • Ensures protection of organization’s assets
    • Ensures accuracy and reliability of records, and operational adherence to management standards
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Overview
    • General controls
    • Establish framework for controlling design, security, and use of computer programs
    • Include software, hardware, computer operations, data security, implementation, and administrative controls
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control General Controls and Application Controls
  15. Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Security Profiles for a Personnel System CREATING A CONTROL ENVIRONMENT Figure 14-4
    • Application controls
    • Unique to each computerized application
    • Include input, processing, and output controls
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control General Controls and Application Controls
    • On-line transaction processing: Transactions entered online are immediately processed by computer
    • Fault-tolerant computer systems: Contain extra hardware, software, and power supply components
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Protecting the Digital Firm
    • High-availability computing: Tools and technologies enabling system to recover from a crash
    • Disaster recovery plan: Runs business in event of computer outage
    • Load balancing: Distributes large number of requests for access among multiple servers
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Protecting the Digital Firm
    • Mirroring: Duplicating all processes and transactions of server on backup server to prevent any interruption
    • Clustering: Linking two computers together so that a second computer can act as a backup to the primary computer or speed up processing
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Protecting the Digital Firm
    • Firewalls
    • Prevent unauthorized users from accessing private networks
    • Two types: proxies and stateful inspection
    • Intrusion Detection System
    • Monitors vulnerable points in network to detect and deter unauthorized intruders
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Internet Security Challenges
  21. Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Figure 14-5 CREATING A CONTROL ENVIRONMENT Internet Security Challenges
    • Encryption: Coding and scrambling of messages to prevent their access without authorization
    • Authentication: Ability of each party in a transaction to ascertain identity of other party
    • Message integrity: Ability to ascertain that transmitted message has not been copied or altered
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Security and Electronic Commerce
    • Digital signature: Digital code attached to electronically transmitted message to uniquely identify contents and sender
    • Digital certificate: Attachment to electronic message to verify the sender and to provide receiver with means to encode reply
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Security and Electronic Commerce
    • Secure Electronic Transaction (SET): Standard for securing credit card transactions over Internet and other networks
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Security and Electronic Commerce
  25. Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Public Key Encryption CREATING A CONTROL ENVIRONMENT Figure 14-6
  26. Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Digital Certificates CREATING A CONTROL ENVIRONMENT Figure 14-7
    • Criteria for determining control
    • structure
    • Importance of data
    • Efficiency, complexity, and expense of each control technique
    • Level of risk if a specific activity or process is not properly controlled
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Developing a Control Structure: Costs and Benefits
    • MIS audit
    • Identifies all controls that govern individual information systems and assesses their effectiveness
    CREATING A CONTROL ENVIRONMENT Essentials of Management Information Systems Chapter 14 Information Systems Security and Control The Role of Auditing in the Control Process
  29. ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Sample Auditor’s List of Control Weaknesses Figure 14-8
    • Development methodology: Collection of methods, for every activity within every phase of development project
    • Structured: Refers to fact that techniques are carefully drawn up, step-by-step, with each step building on a previous one
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Software Quality Assurance Methodologies and Tools
    • Structured analysis: Method for defining system inputs, processes, and outputs, for partitioning systems into subsystems or modules
    • Data Flow Diagram (DFD): Graphically illustrates system’s component processes and flow of data
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Software Quality Assurance Methodologies and Tools
  32. ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Data Flow Diagram for Mail-in University Registration System Figure 14-9
    • Structured design: Encompasses set of design rules and techniques for designing systems
    • Structured programming: Organizing and coding programs that simplify control paths
    • System flowchart: Graphic design tool depicting physical media and sequence of processing steps
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Software Quality Assurance Methodologies and Tools
  34. ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control High-Level Structure Chart For a Payroll System Figure 14-10
  35. ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Basic Program Control Constructs Figure 14-11
  36. ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control System Flow-Chart for a Payroll System Figure 14-12
    • Inflexible
    • Time-consuming
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Limitation of Traditional Methods
    • Automation of step-by-step methodologies for software and systems development
    • Reduces repetitive work
    • Enforces standard development methodology and design discipline
    • Improves communication between users and technical specialists
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Computer-Aided Software Engineering (CASE)
    • Organizes and correlates design components
    • Automates tedious and error-prone portion of analysis and design, code generation, testing, and control rollout
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Computer-Aided Software Engineering (CASE)
    • Resource allocation
    • Determines how costs, time, and personnel are assigned to different phases of systems development project
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Resource Allocation During Systems Development
    • Objective assessment of software used in the system in form of quantified measurements
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Software Metrics
    • Walkthrough: Review of specification or design document by small group of people
    • Debugging: Process of discovering and eliminating errors and defects in program code
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Testing
    • Data quality audit
    • Survey and/or sample of files
    • Determines accuracy and completeness of data
    • Data cleansing
    • Correcting errors and inconsistencies in data to increase accuracy
    ENSURING SYSTEM QUALITY Essentials of Management Information Systems Chapter 14 Information Systems Security and Control Data Quality Audit and Data Cleansing
  44. 14 INFORMATION SYSTEMS SECURITY AND CONTROL Chapter

Download
Chapter14: Information systems security and control

 

 

Your download will begin in a moment.
If it doesn't, click here to try again.

Share Chapter14: Information systems security and control to:

Insert your wordpress URL:

example:

http://myblog.wordpress.com/
or
http://myblog.com/

Share Chapter14: Information systems security and control as:

From:

To:

Share Chapter14: Information systems security and control.

Enter two words as shown below. If you cannot read the words, click the refresh icon.

loading

Share Chapter14: Information systems security and control as:

Copy html code above and paste to your web page.

loading
PDFCast Tags | Browse | DMCA Guidelines | Terms of Use | Privacy Notice | Contact | Facebook | Valid XHTML | Sitemap | Book Sitemap
© Copyright 2011 PDFCast.org

0.1906 - 4.42MB