Consists of interrelated components that captures raw data and organizes it to produce information
New cards
2
Business Model
A company's plan for making a profit
New cards
3
Types of Business Models
Franchise modelSubscription business modelPremium business modelPeer-to-peer business model
New cards
4
Types of Business Processes
Acquisition and payment processes
Conversion processes
Marketing, sales,
and collection processes
New cards
5
Business events
Create data that is captured by accounting IS
New cards
6
Transaction based systems
Used to record accounting information before more complex systems
New cards
7
Management Tasks
Planning
Implementing
Monitoring
Changing
and improving
New cards
8
Characteristics of Useful Information
Relevance and Faithful representation
New cards
9
Decision Context
Preferences, constraints, and other factors that affect how a decision is made
New cards
10
Reporting
Process of aggregating data into information on the activities and performance in a company
New cards
11
Data Analytics
Process of using technology to transform raw data into useful information
New cards
12
Online Transaction Processing System
System supports core business functions by handling sales, accounting, purchasing, and more
New cards
13
Online Analytical Processing System
Focus on leveraging the data for information
New cards
14
Executive Support Systems
Support strategic decision making and are a subset of decision support systems
New cards
15
Decision Support Systems
Assist in solving nonroutine problems and unstructured decision making
New cards
16
Management information Systems
Assist in routine management activities
New cards
17
Transaction Processing Systems
Process day-to-day business activities, provide a foundation for other systems, and capture day from higher levels systems
New cards
18
Batch Processing
Data is collected as it is generated and then is processed later
New cards
19
Real-time processing
Transaction is processed as it occurs and it requires the company to have high processing capabilities
New cards
20
Software
The interface between the components and the users
New cards
21
Systems Software
Specialized software that runs a computer's hardware and other software
New cards
22
Cloud Computing
Provides access to share resources over the internet, such as cloud computer processing, software applications, data storage, and other services
New cards
23
Types of Clouds
Private CloudPublic CloudHybrid Cloud
New cards
24
Software as a Service
Utilize the internet to provide customers with applications that are managed by the third-party provider
New cards
25
Platform as a Service
Provides customers a platform for software development that is delivered remotely. Developers have access to maintained operating systems, servers, storage, and networks
New cards
26
Infrastructure as a Service
Provides customers with fully self-service computers, networking, storage, and operating systems
New cards
27
Organic Growth
Occurs when a company uses its own resources and business process to increase sales, customers, and market share
New cards
28
Acquisition-based Growth
Occurs as a company purchases and integrates other companies into its infrastructure
New cards
29
Systems Integration
The process of joining different systems or subsytems into one larger system and ensuring that they function as one system
New cards
30
Lift and Shift
The company moves the acquired systems to the main data center so that users have access to all the systems simultaneously
New cards
31
Immediate Integration
Moving acquired data to be retired or migrated to the new systems immediately
New cards
32
Centralized System
Connects all users to one central location around a servers that all authorized users can access
New cards
33
Decentralized System
Utilizes multiple locations that each maintain a copy of the data needed for its connected systems
New cards
34
Distributed Systems
All the users and systems are directly connected to one another across the networks
New cards
35
Enterprise Resource Planning
A solution that integrates multiple systems into a single cohesive communication system in order to plan the use of company resources
New cards
36
Out-of-the box ERP
Preconfigured to work one way and will work that way immediately when implemented
New cards
37
Configurable ERP System
Has some add-ins and features that can be customized for customers' needs
New cards
38
Customizable ERP
Features are fully customized for an individual customer's needs
New cards
39
Unfavourable event
Anything that can possibly hinder the success of a business
New cards
40
Risk
The likelihood of an unfavourable event occurring
New cards
41
Portfolio View
Examines risk at the entity level
New cards
42
Profile view
Considers risk at the more granular level of a business function, process, or event
New cards
43
Enterprise Risk Management
The comprehensive process of identifying, categorizing, prioritizing, and responding to a company's risks
New cards
44
Risk Identification
Identify existing risks and their outcomes
New cards
45
Risk Statement
Contains the issue and the possible outcome
New cards
46
Risk Categorization
Categorizing risks based on their types
New cards
47
Internal Risks
Occur throughout the company's operations and arise during normal operations
New cards
48
External Risks
Risks that come from outside the company
New cards
49
Risk Prioritization
Selection which risks are most likely to occur or which will have the largest impact
New cards
50
Risk Inventory
ยท Listing of all the business's known risks
New cards
51
Risk Severity
The likelihood of risks occurring and their potential impact on the company
New cards
52
Risk Response
Decide how the company will address the prioritized risks
New cards
53
Risk Management
Requires critical thinking and decision-making skills to understand the entire situation and come up with the appropriate combination of risk responses
New cards
54
Risk appetite
The amount of risk a company is willing to take on at a particular time
New cards
55
Risk Acceptance
Occurs when an inherent risk is present but the organization chooses not to act
New cards
56
Risk Mitigation
When a company decides to accept the risk but to minimize its impact if it occurs
New cards
57
Risk Transfer
The shifting of a risk to a third part
New cards
58
Risk Avoidance
Eliminates the risk by completely avoiding the events causing the risk
New cards
59
Internal Control
A process that specifically mitigate risks to the company's financial information
New cards
60
Preventive Controls
Prevent problems from happening by limiting the risk from occurring
New cards
61
Detective Controls
Alert management to an issue once it has occurred
New cards
62
Corrective Controls
o Change undesirable outcomes and occur after a risk has occurred
New cards
63
Management override
When internal control activities don't work because management is not following policy or procedure
New cards
64
Collusion
When two employees work together to circumvent controls
New cards
65
Time-Based Model of Controls
Measures the residual risk for technology attacks by comparing the relations of the three control functions
New cards
66
Physical Controls
Governs human activities
New cards
67
IT General Controls
Apply to the entire operation of the full system and its environment
New cards
68
IT Application Controls
Controls that only application to a specific application
New cards
69
Manual Controls
Requires human judgement or physical interaction
New cards
70
Automated Controls
Use Technology to employment a control
New cards
71
Continuous Monitoring Technology
Use of detective controls that use rules-based programming to create detective controls that use rules-based programming to monitor the business' data for red flags of risk
New cards
72
Lines of Defense
o First Line of defense - Business Operationso Second Line of defense - Risk Management and Complianceo Third Line of defense - Internal Audit
New cards
73
Maturity Model
Show how far along a company is on its journey to reach the ideal state by comparing the current state to a predetermine set of best practices
New cards
74
Phase 1 - Limited
A company's business processes are poorly defined, which means employees may use multiple ways to achieve the same outcome
New cards
75
Phase 2 - Informal
Some processes and controls are defined, but documentation, inconsistencies, and reliance on key individuals still exist
New cards
76
Phase 3 - Defined
Policies, procedures, and controls are formally documented, which creates a consistent environment where key employees are no longer relied on
New cards
77
Phase 4 - Optimized
Gold Standard in the business process maturity
New cards
78
Internal Audit
Adds value to a business by providing assurance, insight, and objectivity to the company
New cards
79
Assurance
Ensures that the organization is operating with management's plan
New cards
80
Insight
Discovers improvements for policies, procedures, controls, and risk management
New cards
81
Objectivity
Assesses the company from an independent consulting point of view
New cards
82
Framework
A published set of specifications and criteria that defines a strategy to achieve certain objectives
New cards
83
Sarbanes-Oxley Act of 2002
Created to protect investors from fraud and other risks by improving the reliability and accuracy of financial statements
New cards
84
Internal Control - Integrated Framework
A controls-based approach to risk management that is widely accepted as the authoritative guidance on internal controls and SOX compliance
New cards
85
Control Objectives
Three areas where the internal control - integrated framework focuses on achieving results- Operations objectives- Reporting objectives- Compliance objectives
New cards
86
COSO ERM Framework
A set of five interrelated components that highlight the importance of risk in creating strategies and driving a company's performance
New cards
87
Data
Consists of facts and statistics about a person or object that are collected for reference or analysis
New cards
88
Data Elements
BitByteFieldRecordFileDatabase
New cards
89
Structured Data
Organized and fits nicely into tables
New cards
90
Unstructured Data
Doesn't fit into traditional table
New cards
91
Web 2.0
Refers to user-generated content and user participation on the internet
New cards
92
Static data
Doesn't change once it's created
New cards
93
Dynamic data
May change after it is recorded and must be updated
New cards
94
Database
A set of logically related files that contains an organization collection of data that is accessible for fast searching and retrieval
New cards
95
Relational databases
Organize structured data in interrelated tables which are connected by similarities between tables
New cards
96
Vertical Scaling
Increases the size of machine
New cards
97
Horizontal Scaling
Increases with the number of machines
New cards
98
Data lake
Vast pool of data as it is designed to contain all a company's data and acts as a central repository for data
New cards
99
Data Warehouse
Designed specifically for reporting and data analysis and contains relevant data that has already been transformed for reporting use
New cards
100
Big data
Refers to extremely large and complex data sets that can be analyzed using recent technological innovations to reveal patterns and associations