ACRONYM - Essentials of an effective team

Leadership
Adequate planning
Balance of skills

Communication
Agreed standards
Monitoring skills

LAB CAM

ACRONYM - Success and failure of MIS

Management involvement and design
Analysis
Reduced levels of concentration
Knowledge of management information
Excessive management demands
Teamwork
Standards

MARKETS

ACRONYM - Factors to consider when planning for change

Internal procedures
Attitude
Employment patterns
Re-skilling
Organisational structure

iAERO

ACRONYM - Corporate IT Security Policy

Prevent Data Misuse
Discipline Procedures
Prevent Unauthorised Access
Check/detect Misuse
Monitor/Investigate Misuse
Establish Protection procedures (Backup)

DM
DP
UA
CM
MM
BP

ACRONYM - User Support

FAQs
User manual
Newsletters
Help desks
On-screen help
Books
Bulletin board

FUN HOBB

ACRONYM - Risk Analysis

Business functions
Equipment
Data
Staff

BEDS

ACRONYM - Threats to Information Systems

Software
Hardware
Invalid data
Telecoms
Physical
Crime / misuse
System design failure

SHIT PCs

Disaster Recover Overview

Training overview

User Support overview

Legal aspects overview

Intermediate Questions

1) Managers at the highest, or strategic levels of an organisation have particular requirements from an information system.

a) Give 1 example of an information system that would be useful to managers at this level, and explain how they would use it. (3)

b) State the 2 other levels of task and/or personnel within an organisation (2)


2) The introduction or development of an information system will result in change that must be managed.

Describe 3 areas that will need effective management. (6)


3) Any personal data that an organisation holds on a computer about its employees, or it customers, is covered under the Data Protection legislation.

Describe 3 methods by which a company can ensure that the requirements of Data Protection legislation are followed. (6)


4) Management's understanding and involvment can play an important part in the introduction of a MIS.

Give 3 actions that managers could take to increase the chances of a MIS begin successful. For each action state how it would help ensure success (6)


5) There are a number of social, moral and ethical issues associated with the introduction and use of ICT systems. Some of these issues may possibly be covered in an organisations ICT code of practice.

Describe 4 issues that could affect an ICT professional (8)


6) Project Management and effective ICT teams

a) Explain why ICT projects are often sub-divided into tasks and allocated to teams (3)

b)Within ICT projects, describe the need for:
i) clear timescales (2)
ii) approval to proceed (2)

Information and the Professional Overview

Project Management Overview

Managing Change Overview

ICT4 Overview (BA)

User Support

Traditionaly software products were supported in the following ways:

• user manual
• telephone support
• on-site training

Products were often sold with support packages as extra, and these support packages were often as expensive as the product!

Nowadays there are more varied types of user support options:

• robotic support (Ikeas' Anna)
• chat/messenger based support
• animated user manuals
• FAQ/troubleshooting guides
• user forums

When considering what support you will provide for your users, you must deicded upon 3 things:

• effectiveness (how effective it is to help the users)
• the user experience (bad user experience may turn users off)
• cost

For example; Ikeas' robotic Anna is

• is fairly effective in answering simple questions about specific things, but not as good as a real person
• provides a good user experience because people are comfortable speaking to someone, but as good as a real person
• and less expensive than having rooms full of telephone support personel

Animated user manuals are better than text based manuals as users are more likely to use and understand them and therefore less likely to ring up telephone support (expensive!).

Corporate IT security policy

A corporate IT security policy aims to:

• Prevent misuse
• Detect misuse through regular checking
• Investigate misuse through the use of monitoring software and audit trails
• Prevent unauthorised access
• Establish procedures for keeping data, for example, backup up data and maintaining passwords to limit access to files
• Lay down disciplinary procedures for breaches of security

Data is vital to organisations and companies. Any loss, theft or accidental disclosure could have catastrophic results. For example, a greenhouse salesman travelling around the country selling greenhouses would not want his list of customers or sales figures to be lost. The data would contain information about identifiable people and therefore contravene the DPA. Also, rival companies could steal his customers!

The Corporate IT security policy aims to:

• Make employees aware of their responsabilities with regards to data security
• Define an audit trail to record transactions
• To define how a company should comply with the current IT legislation

Legal Aspects

Chapter 8 (old book)

Adequate security is crutial to the success of an organisation. But threats can come from outside and from within. Remember Wibble that went mad and wanted to destroy all our databases using a virus? It happens a lot.

Check out the links:

• Scottish gaff
• Idiotic or clever marketing?

An organisation needs to have a corporate IT security policy. Its aim would be:

• to prevent misuse from occurring
• to enable any misuse that did occur to be detected and investigated
• to lay down procedures that should prevent misuse
• to establish disciplinary procedures to be used when an employee has been found committing an act of misuse.

An organisation has a responsability to ensure that all its employees are aware of laws relating to IT and their responsabilities under these laws, in particular:

• Data Protection Acts 1984 and 1998
• Computer Misuse Act 1990
• Copyright Designs and Patent Act 1988
• Health and Safety at Work Act 1974
• EU Health and Safety Directive 87/391

Ethical Issues in IT

Ethics is about making the morally correct decision.

An unethical decision is not necessarily illegal. But in business, people justify unethical decisions by saying it is a 'dog-eat-dog' world.

A second-hand car salesman with a ropey old banger might make the decision to tell a nieve young lady interested in it:


He made the decision to tell an un-truth in order to sell the banger. Not illegal, but unethical.

Unethical parts of Tom's day:

• Choice of password - easy to guess
• Reading personal email (for a long time!)
• Downloading photos
• Opening SPAM emails from unknown source - opening company network to attack
• Fails to log off - computer vulnerable to use by unathorised users
• Installing a game on company computers
• Disclosing password
• Downloading and storing pornographic images

Some of Tom's activities are illegal, others simply show poor conduct which are unethical when a company is paying Tom to work.

In order to be a doctor, you must sign the 'Hypocratic oath' which states that thay must not divulge personal information. If they do, they will be struck off.

IT professionals can join the British Computer Society (BCS).

Being a member of the BCS means that employers know that you will follow the code of practice.

Contractor UK is the professional body for IT contractors - not that they managed to stop IR35!

Employers may write 'codes of conduct' for their employees. This will outline:

• Responsabilities
• Authorisation
• Security
• Penalties