Ais Midterm

Front 1

Data

Back 1

facts collected, recorded, stored, and processed by an information system

Front 2

Information

Back 2

data that has been organized and processed to provide meaning to a user

Front 3

information overload

Back 3

when limits to the amt of info the human mind can absorb and process are passed

Front 4

6 components of an AIS

Back 4

1. people
2. procedures and instructions
3. data
4. software
5. information technology infrastructure
6. internal controls/security measures

Front 5

value chain: primary activities

Back 5

1. inbound logistics
2. operations
3. outbound logistics
4. marketing and sales
5. service

Front 6

value chain: support activities

Back 6

1. firm infrastructure
2. human resources
3. technology
4. purchasing

Front 7

supply chain

Back 7

value chain is a part of this. raw materials > manufacturer > distributor > retailer > consumer

Front 8

product differentiation strategy

Back 8

adding features or services not provided by competitors to a product so you can charge customers a premium price

Front 9

low-cost strategy

Back 9

striving to be the most efficient producer of a product or service

Front 10

relational data model

Back 10

everything in the database is represented as being stored in the form of tables called relations

Front 11

organizing data: logical view

Back 11

how the user or programmer conceptually organizes and understands the data

Front 12

organizing data: physical view

Back 12

how and where the data are physically arranged and stored in the computer system

Front 13

data definition language

Back 13

used to build the data dictionary, internalize/create the database, describe the logical views for each user/programmer, and specify any limitations or constraints on security

Front 14

data manipulation language

Back 14

used for data maintenance, which includes operations such as updating, inserting, and deleting portions of the database

Front 15

data query language

Back 15

used to interrogate the database; retrieves, sorts, orders, and presents subsets of the database in response to user queries

Front 16

fraud

Back 16

gaining an unfair advantage over another person, legally must be a false statement, representation, or disclosure of a material fact, also intent to deceive, a justifiable reliance, and an injury or loss suffered

Front 17

bit switching (data diddling)

Back 17

changing data before, during, or after they are entered into the system

Front 18

denial-of-service attacks

Back 18

sending email bombs (hundreds of messages per second) from randomly generated false addresses to overload recipient's ISP causing it to shut down

Front 19

spoofing

Back 19

making an email message look as if someone else sent it, usually from someone the recipient trusts

Front 20

hijacking

Back 20

gaining control of someone else's computer to carry out illicit activities without the owner's knowledge

Front 21

identity theft

Back 21

assuming someone's identity, usually for economic gain, by illegally obtaining confidential information such as a SSN

Front 22

logic time bombs

Back 22

software that sits idle until a specified circumstance or time triggers it, destroying programs, data, or both

Front 23

packet sniffing

Back 23

using a computer to find confidential information as it travels the Internet and other networks

Front 24

password cracking

Back 24

penetrating system defenses, stealing valid passwords, and decrypting them so they can be used to access system programs, files, and data

Front 25

phishing

Back 25

sending emails requesting recipients to visit a Web page and verify data or fill in missing data, usually sites/emails will look legitimate

Front 26

round-down technique

Back 26

truncating interest calculations at two decimal places. the truncated fraction of a cent is placed in an account controlled by the perpetrator

Front 27

spyware

Back 27

using software to monitor computing habits and send that data to someone else, often without the computer user's permission

Front 28

keystroke loggers

Back 28

spyware that is used to record a user's keystrokes

Front 29

trap doors

Back 29

entering a system using a back door that bypasses normal system controls

Front 30

Trojan horse

Back 30

set of malicious and unauthorized computer instructions/code in an authorized and properly functioning program

Front 31

CObIT

Back 31

control objectives for information and related technology

Front 32

4 domains/phases of CObIT

Back 32

1. plan and organize (PO)
2. acquire and implement (AI)
3. deliver and support (DS)
4. monitor and evaluate (ME)

Front 33

preventive controls

Back 33

objective is to prevent security incidents from happening in the first place: authentication, authorization, training, access controls, encryption, etc

Front 34

detective controls

Back 34

enhance security by monitoring the effectiveness of preventive controls and detecting incidents in which preventive controls could have been successfully circumvented

Front 35

corrective controls

Back 35

procedures to react to incidents and to take corrective action on a timely basis

Front 36

authentication

Back 36

focuses on verifying the identity of the person or device attempting to access the system-ensures only legit users can access

Front 37

authorization

Back 37

restricts access of authenticated users to specific portions of the system and specifies what actions they are permitted to perform

Front 38

confidentiality vs privacy

Back 38

privacy focuses on protecting personal information about customers, confidentiality protects organizational data

Front 39

processing controls examples

Back 39

ensure data is processed correctly: data matching, file labels, recalculation of batch totals, cross-footing, zero-balance tests

Front 40

Gartner 5 eras of IT business value add

Back 40

1. automation (inside-out)
2. augmentation (inside-out)
3. e-commerce/web 1.0 (inside-out)
4. externalizing the enterprise (outside-in)
5. business patterns (outside-in)