What are the various categories of business information systems?
- Transaction processing systems
- Decision support systems
- Management information systems
- Executive information systems
Identify functions that should be segregated in an IT department
Duties of systems analysts, computer programmers, and computer operators should be segregated (although many companies combine systems analysts and computer programmers)
What are 3 types of programmed controls?
- Input controls
- Processing controls
- Output controls
What are the 6 steps of the system development life cycle (SDLC)?
- System analysis
- Conceptual and physical design
- Implementation and conversion
- Training
- Testing
- Operations and maintenance
What is the objective of executive information systems (EIS)?
Provide senior executives with immediate and easy access to internal and external information to assist executives in monitoring business conditions.
EIS assist in strategic, not daily, decision making
What is the decision support system (DSS)?
Computer-based information system that provides interactive support for managers during the decision-making process.
DSS is useful for developing information directed toward making particular decisions
What are transaction processing systems?
Systems that process and record the routine, daily transactions necessary to conduct business
What is the objective of management information system (MIS)?
Provide managerial and other end users with reports. These predefined management reports provide managers with the information they need to assist them in the business decision-making process
What are the 5 focus areas of the COBIT framework?
- Strategic alignment
- Value delivery
- Resource management
- Risk management
- Performance measurement
What are information criteria described by COBIT?(Remember the ICE RACE)
- (I)ntegrity
- (C)onfidentiality
- (E)fficiency
- (R)eliability
- (A)vailability
- (C)ompliance
- (E)ffectiveness
Identify the four domains and related process of the COBIT framework
- Plan and organize (direct)
- Acquire and implement (solution)
- Deliver and support (service)
- Monitor and evaluate (ensure direction followed)
Why is it important to have segregation of duties between computer operators and computer programmers?
Because a person performing both functions would have the opportunity to make unauthorized and undetected program changes
