Riftvalley Institute of Science and Technology Department of Information Communication Technology
Riftvalley Institute of Science and Technology Department of Information Communication Technology
Riftvalley Institute of Science and Technology Department of Information Communication Technology
PATRICIA MUTISYA
pg. 1
TOPIC 1: INTRODUCTION TO MANAGEMENT INFORMATION SYSTEM
DEFINITION OF TERMS
a. Management
The process of getting activities completed efficiently with and through other people, through the execution
of basic management functions which include: planning, organizing, directing, controlling, and
coordinating.
In addition, the function of decision-making takes place within each of the above categories.
Management in organizations mainly has three levels: top, middle and operational.
Different types of decisions are made at each level and each level therefore has different information
requirements
b. Information
This is data that has been interpreted and understood and given meaning within a given context.
Information performs several functions in organizations, including:
Reduction of uncertainty especially in planning and decision making
Helps in monitoring and control
As a means of communication
Aids in simplification so that problems and situations are better understood and become more
manageable.
A group of independent and interrelated elements/components/ parts comprising a unified whole and
working together toward a common goal by accepting inputs and producing outputs in an organized
transformation process.
This definition emphasizes the fact that a system is an assembly of parts/ components where;
pg. 4
TYPES OF SYSTEMS
DETERMINISTIC SYSTEMS
These are systems that function according to some predetermined procedures and hence their future
behavior can be predicted accurately depending on the situation. For the future to be predicted, the
current affairs and operation behavior must be known e.g. solar system, computer program
PROBABILISTIC SYSTEM
They operate on probability i.e. they operate on chance and hence their future behavior cannot be
predicted. E.g. social systems.
*** an information is both deterministic and probabilistic system. Its deterministic on the assumption
that definite info or input data that is worked upon (processed) according to some predetermined
procedures in form of input instructions or programs. Its expected to give a definite/predetermined
output. Its probabilistic because of unexpected output may not be forgotten because of unexpected
circumstances that may influence the system e.g. human interference, viruses.
CYBERNETIC SYSTEMS
These are systems that have to adapt to their environment for their survival. They are also described
as adoptive or self-organizing/self-monitoring and self-regulating systems. E.g. organizations,
human beings, plants.
CLOSED SYSTEMS
These don’t interact with the environment or events. They don’t communicate from (do not get any
input ) or to (do not give any output) to the environment. These types of systems are rare in social
system i.e. they are usually scientific systems.
OPEN SYSTEMS
They communicate with its events or environment e.g. they get input from the environment and give
output to the environment. E.g. business info systems.
Open systems get disorganized because they interact with many events and therefore they need to be
regulated.
The process where a system is regulated is known as negative feedback. Feedback is the data about a
system.
Control is a system that monitors and evaluates the feedback to determine whether the system is
moving towards the achievements of the goals set. A system that is performing properly, generates
positive feedback. This signals the control function to maintain the system current course towards its
pg. 5
goal. A system whose performance is deteriorating and deviating from attainment of its goals
generates a negative feedback.
Entropy – this is a characteristic where performance of the system tends to deteriorate overtime. Its
also known as a system losing homostasis.
Subsystem – these are smaller systems that when they are linked together. They make up the system.
They are the building blocks of any system. Sub-system are interfaced or linked to make a system by
communication links.
pg. 6
- Because data is the foundation for all other decisions. TPS must maintain data intergrity and
minimize the threats to the data.
- It supports different tasks by imposing a set of rules and guidelines that specify record,
process and store a given transaction.
- TPS exist for the various functional areas in an organization, such as finance, human
resources and research and development. Companies are trying to build cross-functional TPS
to promote the free exchange of information among business units. This is a desirable goal,
but still very difficult to achieve exchange of information among business units. This
desirable goal, but is still very difficult to achieve.
Components of DSS
- The user interface
- The database
- The models and analytical tools eg mathematical and analytical models are the component
of a model-Driven DSS whereas a knowledge-Driven DSS use special models for processing
rules or identifying relationships in data
- The DSS architecture and network. This refers to how hardware is organized, how software
and data are distributed in the system, and how components of the system are integrated and
connected
Types of DSS
(i) Data-Driven DSS
- It takes massive amounts of data available through the company’s TPS and MIS systems and
selects from it useful information which managers can use to make more informed decisions
- It emphasizes access to and manipulation of large database of structured data
- Mostly utilizes simple file systems which are accessed by query and retrieval tools provide
the most elementary level of functionality.
(ii) Model –Driven DSS
- It includes systems that use accounting and financial models, representational models, and
optimization models i.e. it emphasizes access to and manipulation of a model.
- Simple statistical and analytical tools provide the most elementary level of functionality,
mode-Driven DSS use data and parameters provided by decision-makers to aid them in
analyzing a situation, but they are not usually intensive.
- It is primarily used for the typical “what-if” analysis eg “What if we increase production of
our products and decrease the shipment time?”
- It relies heavily on models to help executives understand the impact of their decisions on the
organization, its suppliers and its customers.
(iii) Knowledge-Driven DSS
- A third generation type of DSS and still evolving. It can suggest or recommend actions to
managers.
pg. 8
- It is a person-computer system with specialized problem-solving expertise. The “expertise”
consists of knowledge about a particular domain, understanding of problems within that
domain “skill” at solving some of these problems.
(iv) Document-Driven DSS
- New type of DSS intended to help managers retrieve and manage unstructured documents
and Web pages
- Document DSS integrates a variety of storage and processing technologies to provide
complete document retrieval and analysis.
- Examples of documents that would be accessed by a document by a Document-Based DSS
are policies and procedures, product specifications, and catalogues.
- A search engine is a powerful decision-aiding tool associated with a Document-Driven DSS.
Characteristics of ESS
- Must be conceptually easy to use i.e. they are almost graphical
- Have easy-to-use interface. Pointing devices (light pens, mice etc) and touch screens are often
used so that executives will require minimal skills to use.
- Provide broad, highly aggregated information
- Can also provide detailed data i.e. can be optionally to detail level
- Provide context information-look at the larger picture
- Integrate many sources of data
- Timeliness and accuracy are crucial
Benefits of ESS
- Simple for high-level executives to sue; not require extensive computer experience
- Provides timely delivery of company summary information
- Provides better understanding of information
- Filters data for better time management
- Provides system for improvement tracking
Disadvantages
- Computer skills required to obtain results
- Requires preparation and analysis time to get desired information
- Detail oriented provides detailed analysis of a situation
- Difficult to quantify of DSS how do you quantify a better decision?
- Difficult to maintain database intergrity
- Provides only moderate support of external data and graphics capabilities
Examples of ESS Applications
- Trends in the marketplace
- Manage company assets and inventories. The information is used for analysis of the efficient, or
inefficient, use of assets.
pg. 10
CONTEMPORARY APPROACHES TO INFORMATION SYSTEMS
Information systems has many perspectives and this shows that information system is a multi-
disciplinary field. There are many disciplines that contribute to problems, issues and solutions in the
study of info systems. These fields can be divided into two major categories.
1. Technical approach
2. Behavioral approach
3. Socio-Technical approach
Information systems are socio-technical systems. Though they are composed of machines,
devices, and “hard” physical technology, they require substantial socio, organizational, and
intellectual investments to make them work properly.
Technical
Operations
Approaches Computer Research
Science
Sociology
Management
MIS
science
Behavioral
Approaches
Psychology
Economics
pg. 11
TECHNICAL APPROACH
It emphasizes on mathematically based models to study of information systems. It also looks at the
physical technology and formal capability of these systems. It emphasizes at identifying solutions
that can be represented by a formula or models that can be converted into a program.
Every problem can be transformed into models and technical power. Disciplines that contribute to
technical approach are;
BEHAVIORAL APPROACH
It’s a field of information systems that deals with behavioral issues arising from development and
long time maintenance of information systems. It deals with issues that cannot be explored with
models used in technical approach. These issues include strategic business integration, design,
implementation and utilization. The other behavioral disciplines contributing to IS include:
Sociology
This concerns how society reacts to changes brought about by info systems. The study of info
systems and how groups and organizations shape the development of systems and how info
systems affect individual groups and organizations.
Psychologists
These study info systems with an interest in how human decision makers perceive and use formal
information
Economists
Study info systems with an interest in what impact systems have on control and cost structures
within the firm and within markets.
N/B
Behavioral approach does not ignore technology, in fact information system technology is the
stimuli of behavioral problems or issues but the focus of this approach generally is not in
pg. 12
technical solutions. It instead concentrates on changes in attitude, management and
organizational policy, and behavior.
Political science
It focuses on investigation of political behavior of society. Behavioral approach emphasizes info
systems should be based on needs of human beings as well as their reaction/responses i.e. human
beings should be incorporated to whatever system that have been developed. How to transform
behavior of human beings to accepted modern technology.
SOCIO-TECHNICAL APPROACH
This is the mixture of technology and people. Socio-technical approach helps to avoid purely
technological approach to information systems. It emphasizes that IS approach is an
integral/integrated part of both the technology as well as organization people. It emphasizes that all
system performance should be optimized to attain high profitability as well as satisfy people working
in the organization that technology must be changed and designed in a way that it fits organizational
and individual needs. Sometimes technology must be deoptimised in order to satisfy individual
needs.
Organizations and people must be changed through traming learning and planned organizational
change in order to facilitate the operation and prosperity of technology. People and organization
change must take place to take advantage of new IT.
In socio technical perspective the performance of the system is optimized when both technical and
organization mutually adjust to one another until satisfactory fit is obtained.
5. ADV/Impacts of MIS(Positive)
It creates an information- based work culture in the organization.
pg. 13
Relieves the human mind for better work
It improves the decision making process considerably.
Leads to managerial efficiency.
Leads to systemization of the business operation for an effective system design.
Information security
Leads to easy tracking and monitoring of the functional targets
creates a structured data and a knowledge base for all the people in the
organization.
It improves performance and productivity.
Ability to store and retrieve information at any instance and for future reference
Help in forecasting and long term planning
Increased boundary spanning i.e information is accessed anywhere in the world
Eliminated repetition of information and thus promote non-redundancy.
Promote communication /link in the organization
6. DISADVANTAGES of MIS
Expensive to acquire
Require experts develop and run
Leads to employee over-dependence on the system whereby incase of failure
organizations operations are crippled.
Problems with MIS
Lack of Management Direction
Lack of management knowledge of computers
Lack of top management support
Lack of management participation in MIS design
7. Types of organizational information system
Type of system Function
Transaction processing systems Process transaction data from business events
Office automation supports daily work activities of individuals and
groups
Enterprise resource planning systems integrates all functional areas of the
organization
Management information system produce reports summarized from
transactional data
Decision support system provides access to data and analysis tools
Experts system make decisions through knowledge provided by
expert
pg. 14
Executive information system provides structured, summarized inf4mn about
aspects of business important to executives
Supply chain management system manage flow of products, services and
information
Electronic commerce system enables transactions among organizations and
btwn customers
pg. 15
consistent input, which is needed for a consistent program to provide consistent
output.
3. Reliability: TPS system is designed to ensure that all transactions are entered in
sequential and systematic manner.
4. Standardization: Transactions must be processed in the same way each time to
maximize efficiency and effectiveness.
5. Controlled Access: Since TPS also contains confidential matters or data; it acts as
powerful tool for the organization. Hence access must be restricted.
EXAMPLES OF TPS
Order Entry – records customers’ orders
Inventory – manages the physical goods
Distribution - ensures goods are sent to the customer
Sales Invoice – prepares sales invoices and sends to customer
Accounts Receivable – manages customer’s outstanding payments.
Purchasing – identifies vendors and prepares purchase orders
Receiving – receives deliveries from vendors
Accounts Payable – manages payments to vendors
Payroll – pays salaries to employees.
TOPIC2: USE OF INFORMATION SYSTEM IN MANAGEMENT
3. Explain the meaning and importance of IS in management
Meaning of IS
A system that transforms raw facts into information which is used for decision
making
pg. 16
Set of devices , procedures and operations with the aid a user to produce
information and communicate it to the user for planning , control and
performance.
It refers to a set of procedures and technologies and other resources that collects,
transforms and disseminates information in the system.
Importance of IS in management {planning and controlling}
- It brings a competitive advantage to the organization.
- It provides a basement for regulatory actions and control function in the
organization.
- It helps to make better decisions by delivering all the information needed for
decision making and also speed up decision making process
- They help improve customer service.
- Increase organizational control.
- Speed up problem solving.
- Help automate managerial functions.
- Improve personal efficiency.
- It provides records/ history/database of information that can be referred in
future actions, forecasts and cost estimates.
- It facilitates communication by gathering and distributing information to all
associated departments.
- It enhances company operations by offering more recent information allowing it
to operate efficiently.
4. Describe the use of IS in management decision making
Use of IS in management decision making {DSS, GDS, EIS etc}
Decision Support System:
1. Is a computer system at the management level of an organization that combines
data, analytical tools and models to support semi structured and unstructured
decision making.
2. DSS is an interactive, flexible computer based information system. It uses rules and
models for processing data, to support various managerial levels, ranging from top
executives to managers, in their decision-making.
Attributes of DSS
- Adaptability and flexibility.
- High level of interactivity.
- Ease of use.
- Efficiency and effectiveness.
- Complete control by decision maker.
- Extendibility.
pg. 17
- Support for modeling and analysis.
- Support for data access.
- Standalone, integrated and web based.
Types of Decision-Support Systems
Model – driven DSS: primarily stand - alone system that uses some type of
model to perform “what-if” and other kinds of analyses.
Data driven DSS: These systems support decision making by allowing users to
extract and analyze useful information that was previously buried in large
database.
Communication-driven DSS: supports more than one person working on a
shared task; examples include integrated tools like Microsoft's NetMeeting or
Groove.
Document-driven DSS manages, retrieves, and manipulates unstructured
information in a variety of electronic formats.
Knowledge-driven DSS provides specialized problem-solving expertise stored as
facts, rules, procedures, or in similar structures.
Components of DSS
DSS database – a collection of current or historical data from a number of
applications or groups. Can be a small PC database or a massive data
warehouse.
DSS software system – collection of software tools that are used for data
analysis, such as OLAP or data-mining tools, or a collection of mathematical and
analytical models.
User interface – permits easy interaction between users of the system and the
DSS software tools
Data mining
Benefits of DSS
Improve efficiency and speed of decision making.
Improves personal efficiency.
Expedites problem solving (speed up the progress of problems solving in an
organization).
Facilitates interpersonal communication.
Promotes learning or training.
Increases organizational control.
Creates a competitive advantage over competition.
Helps automate the managerial processes.
pg. 18
Fast Response to Unexpected Situations
Cost Savings
Improves interpersonal communication.
Helps automate managerial processes.
Differences between DSS and ES
A DSS helps manager to take a decision where as an ES acts as a decision maker
or an advisor to the manager.
A DSS is meant only for decision making whereas an ES provides expertise to the
manager.
The spectrum of complexity is high in DSS and low in ES since ES addresses
issues related to specific areas only.
DSS doesn’t ‘ve capability to reason whereas an ES has.
A DSS cannot provide detailed explanation about the results whereas an ES can.
pg. 19
How it works
An electronic meeting system (EMS) is a type of collaborative GDSS that uses information technology
to make group meetings more productive by facilitating communication as well as decision making.
It supports meetings at the same place and time or different places and times. The workstations are
networked and are connected to the facilitator’s console, which serves as both the facilitator’s
workstation and control panel and the meeting’s file server. All data that the attendees forward
from their workstations to the group are collected and saved on the file server. The facilitator is able
to project computer images onto projection screen at the front center of the room. The facilitator
controls the use of tools during the meeting, often selecting from a large tool box that is part of the
organization’s GDSS. Attendees have full control over their own desktop computers and able to view
the agenda, use desktop PC ordinary tools, tap into production data that have been made available
or work on the screen associated with the current meeting step and tool. However, no one can view
anyone else’s screens so participant’s work is confidential until they release it to the file server for
integration with the work of others.
The typical GDSS session includes four phases
i. Idea generation
ii. Idea consolidation
iii. Idea evaluation
iv. Implementation
v. planning
How does it help in decision making?
It enhances management decision making by providing group with the
technology to collaboratively generate ideas, organize ideas, set priorities,
resolve conflicts and arrive at solution.
They provide for group brainstorming, classification, prioritization, assessment,
documentation and resolution.
They provide an electronic infrastructure, processing, meeting space (may be
online face to face) and communication to improve org. decision making.
The benefits of GDSS
More information in less time.
Greater participation.
Cost effective.
No one voce is dominant during the session.
pg. 20
Executive information system
Is a type of management information system that facilitates and supports senior
executive information and decision making needs.
ESS components
Hardware
Software
User interface
telecommunication
How it helps in decision making
It offer strong reporting and drill down capabilities that assists executives in
decision making.
Provide extensive analyzing tools including trend analysis, exception reporting
and is able to access broad range internal and external data.
Advantages of ESS
Easy for upper level executives to use.
Provide timely delivery of company summery information.
Information provided is better understood.
Improves tracking information.
Offers efficiency to decision makers.
DISADVANTAGES of ESS
System dependent
Limited functionality
Benefits are a hard to quantify.
High implementation costs.
System may become slow, large and hard to manage.
Need good internal processes for data management.
May lead to less reliable and less secure data.
COMPUTER-BASED INFORMATION SYSTEMS
An information system that uses computer technology to perform some or all of
its intended tasks.
Major Capabilities of Computer-Based Information Systems
Perform high-speed, high-volume, numerical computations.
Provide fast, accurate communication and collaboration within and among
organizations.
Store huge amounts of information in an easy - to -access, yet small, space.
Allow quick and inexpensive access to vast amounts of information, worldwide.
pg. 21
Facilitate the interpretation of vast amounts of data.
Increase the effectiveness and efficiency of people working in groups in one
place or in several locations, anywhere.
Automate both semi - automatic business processes and manual tasks.
5. Explain the types of decisions making
Strategic decision.
Management control.
Knowledge - level decision.
Operational control.
Unstructured decisions.
Structured decisions.
Semi structured decisions.
Describing types of decisions {structured, semi-structured, un-structured}
Structured decisions: The decisions follow a set of rules and have a definite
procedure for handling them.
Unstructured decisions: are normally subjective and do not follow any definite
set of rules.
Semi-structured: decisions lie between structured and unstructured decisions.
Analytical decisions: An analytical decision is one that is based on an analysis of
information that has been systematically acquired and evaluated.
Heuristic decisions: These solutions will usually depend on trial and error.
Common sense, past experience and general guidelines may be used to help,
but the decision maker is not applying any techniques that will guarantee the
correct answer first time.
Programmed decisions: are decisions that occur frequently enough that we
develop an automated response to them.
Non-programmed decisions: They are unique and important decisions that
require conscious thinking, information gathering, and careful consideration of
alternatives.
6. Describe the decision making cycles
Decision making cycle
1. Intelligence: The first of Simon’s four stages of decision making. Individual
collect information to identify and understand problems occurring in the
organization.
2. Design: Simon’s second stage of decision making. Individual conceives of
possible alternative solutions.
pg. 22
3. Choice: Simon’s third stage of decision making. Individual selects among the
various solution alternatives.
4. Implementation: Simon’s final stage of decision making. Individual puts the
decision into effect and reports on the progress of the solution
Barriers to decision making
Insufficient knowledge
Not enough time rationalization
The environment may not cooperate
misjudging the motives and values of people,
poor communications
Misappraisal of uncertainties and risks.
Inability to handle the available knowledge and human behavior
pg. 25
a) It produces an enormous amount of data that is expensive to collect and difficult to analyze.
This is because of the large survey of managers) it consists of aggregates of subunits,
functions, processes and data matrices.
b) Most interviews are conducted with senior / middle managers, with little effort to collect
information from clerical and supervisory managers.
STAGE 2: Find the software that will satisfy your information requirements
STAGE3: Find the hardware that will run the software that you found
pg. 32
ii. Leasing the information system- the use of an information system for a fixed period of time
at an agreed amount of money for the lease.
iii. Developing the applications in-house/Build your own/ End user development:
Individual users and departments build their own custom systems to support
their individuals.
pg. 33
iv. Outsourcing the applications/ Outsource development to a 3rd party: outside
organization custom build a system to an organization’s specifications. Good
option when an organization does not have adequate resources or expertise.
Meaning:
- is a strategic use of outside resources to perform activities traditionally handled
by internal staff and resources
- The practice of turning over responsibility of some to all of an organization’s
information systems development and operations to an outside firm
- The process of turning over an organization computer center,
telecommunication network or application development to external vendors
Types of outsourcing relationships
- partnership
- service provider
- Vendor.
- Basic relationship
- Preferred relationship
- Strategic relationship
Why Outsource?
- Cost and quality concerns
- Problems in IS performance
- Supplier pressures.
- Simplifying, downsizing, and reengineering.
- Financial factors.
- Organizational culture
- Internal irritants
Advantages and Disadvantages of Outsourcing
ADVANTAGES DISADVANTAGES
Cost Reduction Loss of organizational
competencies
Access to world class Reduction in quality of
specialist providers services
Improved focus on core Cost escalation from
business unforeseen expenses
Subcontracting of
workload
Better risk management
Maintenance Process
Maintenance Process Alternative
- Classification and - Obtain maintenance
Identification request
- Analysis - Transform requests
into changes
- Design - Design changes
- Implementation - Implement changes
- System Test
- Acceptance Test
- Delivery
Categories of Maintenance/ technique of maintaining
- Corrective Maintenance- fixing bugs. Changes made to a system to repair flaws
in its design, coding, or implementation
- Adaptive Maintenance - No change to functionality, but now works under new
conditions. Changes made to a system to evolve its functionality to changing
business needs or technologies.
- Perfective Maintenance- adds something new; makes the system “better”.
Changes made to a system to add new features or to improve performance.
Preventive Maintenance- enhances internal structure of system without
affecting external behavior. Changes made to a system to avoid possible future
problems.
Importance of preventive maintenance
- Ensure the quality of your results extends the life of your system
- Enables traceability via records
- Ensure implementation of the latest factory developments
Factors that influence system maintainability
- Latent defects
- Number of customers for a given system
- Quality of system documentation
- Maintenance personnel
pg. 36
- Tools
- Well-structured programs
Maintenance Terms
- Configuration Control Board (CCB) - organizational unit that makes decisions
about what proposed maintenance changes will actually be made.
- Regression testing - testing a modified system with some of the test cases with
which it was originally tested to make sure that only those functions that were
meant to change actually behave differently.
- Releases - planned collections of maintenance changes that are applied to a
system before it is delivered to customers.
- Patches - emergency fixes to a system that are delivered to customers between
scheduled releases.
- Configuration management - the process of keeping track of different versions
of a system that have been supplied to different customers and that must be
maintained separately.
- Ripple effect - The (usually unintended) effects that a change in one part of a
system has on other parts of the system
- Impact analysis - analysis of a planned modification to a system in an effort to
determine all of the components of the system that will be affected by the
modification, including ripple effects
- System decay - a degradation of system structure and quality over time due to
poorly planned and executed changes.
- Program comprehension - the human process of understanding a piece of
software code.
- Porting - a type of adaptive maintenance in which a system is translated from
one operating system, language, or platform to another.
Topic 7: ROLE OF INFORMATION SYSTEM (IS) IN ORGANIZATION CHANGE
Meaning of organizational change
- is an approach to shifting/transitioning individuals, teams, and organizations
from a current state to a desired future state
1. Mission changes,
2. Strategic changes,
3. Operational changes (including Structural changes),
4. Technological changes,
5. Changing the attitudes and behaviors of personnel
pg. 37
Importance of organizational change
pg. 38
2. Communicate to employees that change is inevitable and rally them to support
the changes by educating them on the benefits of change in the organization.
3. Identify the conditions that are necessary to implement and sustain positive
change. Identify the people who will spearhead the implementation of the
intended change. Employees will embrace change if they are involved in the
management of change.
4. Embrace change quickly and implement necessary requirements to achieve
desired goals. This is achieved by monitoring and adapting to change
immediately as it happens. For change to succeed, there must be commitment
especially from the senior management of the organization.
pg. 39
Cybersquatting: registering a domain name and then trying to sell the name for
big bucks to a person, company. Domain names are a scarce resource –one of
the few scarce resources in cyberspace
10.Computer crime: the act of using a computer to commit an illegal act.
Examples:
- Stealing time on company computers
- Breaking into government Web sites
- Stealing credit card information
- Stealing or compromising data
- Gaining unauthorized computer access
- Violating data belonging to banks
- Intercepting communications
- Threatening to damage computer systems
- Disseminating viruses
- Hacking: one who gains unauthorized access, but without doing damage
- Cracking: one who breaks into computer systems for the purpose of doing
damage.
TYPES OF COMPUTER CRIME
- Data diddling: modifying data
- Salami slicing: skimming small amounts of money
- Phreaking: making free long distance calls
- Cloning: cellular phone fraud using scanners
- Carding: stealing credit card numbers online
- Piggybacking: stealing credit card numbers by spying
- Social engineering: tricking employees to gain access
- Dumpster diving: finding private info in garbage cans
- Spoofing: stealing passwords through a false login page
- Computer viruses and destructive code
- Virus – A destructive program that disrupts the normal functioning of computer
systems
Types viruses:
Worm: usually does not destroy files; copies itself
Trojan horses: Activates without being detected; does not copy itself
Logic or time bombs: A type of Trojan horse that stays dormant for a period of
time before activating
COMPUTER SECURITY
Precautions taken to keep computers and the information they contain safe
from unauthorized access
Recommended Safeguards
- Implement a security plan to prevent break-ins
pg. 40
- Have a plan if break-ins do occur
- Make backups!
- Only allow access to key employees
- Change passwords frequently
- Keep stored information secure
- Use antivirus software
- Use biometrics for access to computing resources
- Hire trustworthy employees
- Encryption –the process of encoding messages before they enter the network or
airwaves, then decoding them at the receiving end of the transfer
-
pg. 41