Professional Documents
Culture Documents
Auditing-Conducting an Information
System Audit – Overview and Steps in an
Audit.
What is IS?
production
sales/marketing
finance/accounting
human resources
Business functions
Business processes
A series of interrelated activities through which work
is organized and focused to produce a product or
service
Business levels
Strategic (long range planning)
Tactical (co-ordinate & supervise)
Operational (produce product & service)
The order generation and fulfillment process (Fig. 2.2)
Role of IS in Business
Competitive advantage
Low-cost (value chain)
Market niche
Product differentiation
Customer loyalty
Globalization
People (language)
Organization (culture)
Technology (telecommunication)
The value chain views the firm as a series of basic activities
that add value to a firm's products or services (Fig. 3-2)
Primary activities
•inbound logistics,
•operations,
•outbound logistics,
•sales and marketing
•service
Support activities
•administration and management
•human resources
•technology and procurement.
Quality
Process simplification
Benchmarking
Customer focus
Cycle time reduction
Improve design & production
Error reduction
Reengineering
Business processes redesign
Ethical & social responsibility
Information rights & privacy
Intellectual property
Accountability & liability
Quality of life
IS Approach to Problem Solving
Systems Analysis
Systems Design
Systems Analysis & Design
Systems Analysis
Problem analysis (what)
Information gathering (where & why)
Decision making (how)
Establish objectives
Determine feasibility
Choose best solution
Systems Design (Input, Process, Output,
Procedures, Control)
Logical design
Systems Analysis & Design
Systems Design
Logical design (what will the system do?)
Input: content, format, source, volume, frequency, timing
Process: rule, model, formula, timing
Output: content, format, organization, volume, freq., timing
Storage: data, format, organization, relationship, volume
Procedure: manual activities, rule, sequence, timing, location
Control: security, accuracy, validity, supervision
Physical design (how the system will work?)
Input: keyboard, voice, scanner
Process: PC, operating system, software
Output: print-outs, files, audio
Storage: tape, CD
Procedure: batching, backup, auditing, data entry
Control: batch control, password, audit logs
Implementation (coding, testing, training)
Technology perspective
to problem solving
Organizational perspective to
problem solving
People
perspective to
problem solving