Information Systems Chapter 11 Quiz

Outsourcing information systems can present challenges like hidden coordination costs and a deceptive underestimation of its importance.

Acquiring information systems can use custom design, selecting existing systems, or end-user development.

The implementation phase of the system development life cycle (SDLC) includes installation, operations, and maintenance.

During the system development life cycle (SDLC), managers are most involved in the definition and implementation phases.

System selection and the system development life cycle (SDLC) differ most noticeably during the definition and build phases.

The relationship between the steering committee and the total cost of ownership (TCO) of an IS project is significant.

Methods for funding information systems include various approaches with varying advantages and disadvantages.

The general phases of a system life-cycle process include definition, build, and implementation.

Software that dramatically reduces the time to obtain and implement software.

Software vendors incorporating best practices into their applications.

Purchasing pre-built applications to benefit from vendor's economies of scale.

Software from large companies, tested extensively, likely with many users.

Parallel, Direct, Phased, Pilot are different ways to replace old systems with new ones.

Using prototypes to gather user feedback and design user interfaces during the SDLC.

A selection process similar to the SDLC, with an additional vendor selection phase after definition and before build.

Evaluates the likelihood of users accepting and using a new system. It assesses the impact on employees, work processes, and overall acceptance.

A strategic approach to managing customer interactions, using data to understand customer needs and behaviors. It aims to improve customer satisfaction and loyalty.

Offer flexibility, cost savings, community support, and security due to open code review and contributions.

Potential for compatibility issues, unpredictable costs, and varying levels of support due to community-driven development.

A systematic assessment of potential threats and vulnerabilities to identify risks and prioritize areas for improvement.

Managers must prioritize security due to its potential impact on the organization's operations, reputation, and finances.

Integrated software applications that support various business functions, such as finance, supply chain, and human resources.

Software with publicly accessible source code, allowing users to modify and distribute it freely.

A program disguised as useful, but secretly contains harmful code that activates after installation.

Malicious code that spreads through network vulnerabilities to infect multiple computers, causing network overload.

Software that secretly tracks computer activity, collects data, and sends it to others, often slowing down the computer.

An attack that floods a network with traffic, overwhelming it and making it unusable, often as a distraction for other attacks.

The right to be informed when personal data is collected and how it will be used.

The ability to be informed about and consent to data usage across different organizations.

The right to access and correct personal information held by organizations.

Organizations must protect personal information from unauthorized access and keep it safe.

End-user development empowers users to build their desired functionalities, leading to higher satisfaction with the result as they can customize features according to their needs.

End-user development can limit the number of requests received by IT departments, allowing them to focus on projects that require their expertise.

Make and Buy refers to the modern approach of using readily available software and customizing it before implementation. It contrasts with the traditional 'make or buy' decision between building software in-house or purchasing a ready-made solution.

End-user development can lead to unreliable quality standards due to the lack of structured development processes, testing, and documentation that experienced developers follow.

End-user development is often focused on rapid implementation, which can increase the chances of errors due to the lack of rigorous testing and attention to detail.

Lack of standardized documentation and development practices in end-user development can make it challenging to update, repair, or use the software for anyone other than the original developer.

Even though end-user development aims to reduce IS burden, it can sometimes increase it as users may require assistance throughout the development process and for managing the software after release.

Feasibility analysis evaluates the viability of an IT investment. Technical feasibility assesses the technical aspects, Economic feasibility analyzes cost-benefit, and Behavioral feasibility considers the user's acceptance and adoption of the proposed system.

A security system that acts as a barrier between your computer network and the external world. It controls the flow of data in and out of your network, blocking unauthorized access.

Firewalls are typically placed at the edge of an organization's network, where it connects to the internet, to protect against external threats. They can also be installed on individual computers.

The process of converting data into an unreadable format (ciphertext) that can only be accessed with a key. This helps protect sensitive information from unauthorized access.

Encryption is used in many ways, such as:

• Secure communication: Encrypting emails, messages, and online transactions.
• Data storage: Protecting sensitive databases and files at rest.
• Online banking: Ensuring secure access to accounts and transactions.

The moral principles and guidelines that govern the use and development of information systems. It addresses issues like privacy, security, intellectual property, and accountability.

Examples of challenges include:

• Privacy: Protecting personal data from unauthorized access and misuse.
• Security: Ensuring systems are protected from hacking and data breaches.
• Intellectual property: Protecting software, patents, and copyrights.

A minor change in how a task is performed, with minimal impact on the underlying process or system. It is often easier to manage and implement.

A significant change that affects the process or system itself. It requires a deeper understanding and more extensive effort to implement.