Information Systems - Quiz 5 Study Guide Flashcards

Comprehensive vocabulary flashcards covering key management information systems concepts, cloud models, security frameworks, analytics, and legal regulations from the Quiz 5 Study Guide.

Hardware

All the physical technology components of an information system that can be touched, such as the keyboard, mouse, display screen, and smartphone.

Software

The intangible programs and applications used to perform tasks and functions, including end-user apps (such as Microsoft Word or Safari) and operating systems (such as Windows, macOS, Android, or iOS).

Leavitt's Diamond

An organizational model stating that an information system operates within the interconnected context of four components: people, technology infrastructure, processes, and structure.

Supply Chain

The collection of processes required to deliver the right product or service into the right consumer's hands in the right quantity, at the right time, and at the right cost.

Five-Component Model

A framework that defines an information system as consisting of hardware, software, data, processes, and people, which moves work away from people and into technology.

Business Analyst

An Information Systems professional responsible for collecting, reviewing, and analyzing functional information to evaluate and solve business challenges.

Process

A set of related activities that takes input, adds value, and creates output for the customer.

Porter's Five Forces Model

A framework used to evaluate industry competition and long-term profitability by analyzing the bargaining power of buyers, bargaining power of suppliers, threat of new entrants, threat of substitute products, and existing industry rivalry.

Vision

A concise, inspiring statement of what an organization intends to achieve in the future, including how the organization, stakeholders, and community will benefit.

Diffusion of Innovation Theory

A theory establishing that the adoption of any innovation is a drawn-out process that does not occur all at once across all members of a targeted population, as some adopt earlier than others.

Digital Transformation

The process of significantly modifying existing services, products, and procedures through the application of information systems, especially via expanded connectivity.

Reengineering

A top-down change process driven by senior executives that involves the radical redesign of business processes, organizational structure, information systems, and organizational values to achieve breakthrough results.

Continuous Improvement (Kaizen)

A bottom-up change approach driven by workers that involves constantly seeking ways to improve business processes and add value to products and services.

Disruptive Innovation

An innovation that initially introduces a distinct set of attributes and fundamentally changes or overtakes an established market, such as the handheld cell phone introduced in 1973.

Sustaining Innovation

The ongoing, incremental improvement of an existing technology or product over time to maintain an organization's competitive position in the market.

SWOT Analysis

A strategic assessment tool that evaluates an organization's internal environment for Strengths and Weaknesses, and its external environment for Opportunities and Threats.

Central Processing Unit (CPU)

The primary component or 'brain' of a computer that receives instructions and carries out calculations and operational actions based on those instructions.

Utility Program

A system software program designed to perform maintenance tasks, such as scanning and analyzing a hard disk's boot sector, file allocation tables, and directories to ensure it is undamaged.

Grid Computing

The coordinated use of a collection of computers, often owned by different entities or organizations, working together to solve a common, complex computational problem.

Hard Disk Drive (HDD)

A direct access storage device that stores and retrieves data magnetically on rapidly rotating platters coated with magnetic material.

Solid-State Storage Device (SSD)

A secondary storage device that records data using memory chips, providing significantly faster data access speeds than magnetic storage media.

Secondary Storage

Nonvolatile data storage media not directly accessible by the CPU that offers greater capacity and lower cost-per-megabyte compared to primary memory.

Proprietary Software

Custom-developed software that provides an organization with a competitive advantage by delivering services or solving problems in ways competitors cannot easily match.

Supercomputer

The most powerful class of computer systems, possessing the fastest processing speeds and highest performance, used for complex simulations, AI, CAD, medical imaging, and video editing.

Backward Compatibility

The capability of newer hardware models or newer operating system versions to successfully run software created for earlier versions of that system.

Blade Server

A space-saving server architecture where individual modular server blades share a common chassis, power supply, and cooling system, requiring less physical space than a traditional server farm.

Enterprise Application

Software designed to support enterprise-wide operations across essential business functions, including logistics, manufacturing, human resources, sales, accounting, and customer relationship management.

Database as a Service (DaaS)

A cloud service model where clients store databases on a service provider's remote servers and access data over the internet while the provider manages database administration.

Primary Key

A field or column in a relational database table that uniquely identifies each individual record or row.

Data Definition Language (DDL)

A subset of SQL consisting of commands and statements used to define, describe, and modify data structures, schemas, and relationships within a database.

Data Control Language (DCL)

A subset of SQL commands utilized by database administrators to configure, manage, and grant or revoke user access privileges and security permissions.

Data Cleansing

The process of identifying and correcting, standardizing, or removing inaccurate, incomplete, or duplicate data entries from a database.

Decision Tree

A predictive modeling algorithm and visual representation used for both classification and regression tasks in machine learning.

Predictive Analytics

The application of statistical modeling techniques, data mining, and machine learning algorithms to examine historical and current data in order to make future forecasts.

Genetic Algorithm

An artificial intelligence search and optimization technique based on the evolutionary principles of natural selection used to discover approximate solutions to complex problems.

Search Engine Optimization (SEO)

The process of modifying and improving a website's content, technical structure, and relevancy to enhance its placement and organic visibility on search engine results pages.

Affiliate Marketing

A marketing strategy where an organization compensates third parties, such as content creators or influencers, with commissions for traffic or sales generated through provided referral links.

Gamification Marketing

A promotional technique that applies game-like elements (such as points, badges, progress bars, and challenges) to motivate and direct customer engagement and purchases.

Asset Management

A systematic method for acquiring, deploying, maintaining, upgrading, and retiring organizational hardware and software assets cost-effectively across their lifecycle.

Enterprise System

A centralized system designed to integrate and share data across all functional departments and management levels to support end-to-end business operations.

Transaction

An indivisible unit of business activity or operation that cannot be partially executed or subdivided.

Online Transaction Processing (OLTP)

A transaction processing mode where each transaction is processed immediately upon entry, rather than being collected and delayed for batch execution.

Source Data Automation

The direct capture of transaction data in digital format at its origin (e.g., via barcode scanners) with minimal manual human intervention.

Data Streaming

The continuous, real-time ingestion, processing, and analysis of data as it flows into the system, enabling high agility and quick response times.

Computer-Aided Design (CAD)

Software used by engineers and architects to draft, model, analyze, and refine detailed representations of components and physical products.

Computer-Aided Engineering (CAE)

Software used to simulate and test the physical performance, durability, stress limits, and structural robustness of engineering designs and assemblies.

Customer Relationship Management (CRM) System

An enterprise information system focused on managing customer data and interactions, featuring contact management, sales automation, customer service, and marketing automation.

Vendor Lock-In

A situation where a business becomes dependent on a specific cloud provider's proprietary services and infrastructure, making switching providers costly or technically prohibitive.

Cloud Repatriation

The process of migrating an organization's digital applications, workloads, and stored data away from public cloud environments back to on-premises servers.

Cloud Elasticity

The capability of cloud systems to rapidly scale available computing, storage, and networking resources up or down on demand to match changing workload requirements.

Natural Language Processing (NLP)

A subfield of artificial intelligence dedicated to enabling computer systems to analyze, understand, interpret, and generate human written and spoken communication.

Generative AI

Artificial intelligence models trained on deep learning algorithms to synthesize entirely new text, imagery, or audio artifacts resembling human-created content.

Co-pilots

Intelligent, AI-powered assistant systems designed to operate side-by-side with humans to increase productivity, improve accuracy, and aid in decision making.

Vulnerability

An inherent flaw or security gap within an information system that compromises one or more elements of the CIA triad if triggered.

Exploit

A defined technique, malicious software program, or sequence of commands designed to weaponize and take advantage of an existing system vulnerability.

CIA Triad

The foundational security architecture establishing Confidentiality (preventing unauthorized disclosure), Integrity (preventing unauthorized alteration), and Availability (ensuring accessible services).

Digital Forensics

The scientific discipline of identifying, gathering, safeguarding, and analyzing electronic data to establish admissible evidence for judicial investigations.

Business Impact Assessment (BIA)

A formal continuity planning evaluation used to identify and rank an organization's core operations and calculate the financial and operational damages caused by potential disruptions.

Annualized Loss Expectancy (ALE)

The estimated annual financial cost resulting from a specific identified threat, determined by the formula: $\text{ALE} = \text{Single Loss Expectancy (SLE)} \times \text{Annualized Rate of Occurrence (ARO)}$.

HITECH Act

A United States statute that expands privacy mandates under HIPAA, prohibiting the unauthorized sale of patient electronic health records and requiring patient notification of data breaches within 60 days.

Fake news

_______ is a false story presented as factually accurate and appears to be news.

Which of the following statements about corporate and private surveillance is false?

The US Fourth Amendment prevents private citizens from recording activities in public places.

Environmental, social, and governance (ESR)

______________ is a framework for evaluating a company's ethical business practices.

software defect

In 1999, NASA sent a $125 million orbiter to Mars. The spacecraft was lost because the teams who wrote the code used incompatible units of measurement (metric and imperial), which led to an incorrect trajectory. This is an example of a ______________

A parent emails a college professor demanding to see their daughter's grades for a course. The student is 18 years old. The parents are paying for it. What should the professor do?

The professor should provide the information only if the student has consented to it.

Corporate privacy policies should address each of the following except:

choice (how customer data is being used to generate revenue).

Which of the following statements about the General Data Protection Regulation (GDPR) is false?

GDPR does not apply to US companies even though they may process personal data of European Union (EU) citizens.

Morals are __________, whereas ethics is ____________

individual; for everyone

What type of attack sends tailored messages to a recipient, often with accurate information that helps lend credibility to the message?

spear phishing