A Method to Evaluate Information Systems Control Alignment

은행업에 있어서 정보시스템의 중요성은 다른 산업에 비해서 매우 높다. 본 논문에서는 한 은행의 사례를 토대로 은행에서 실시하고 있는 정보시스템 감사 제도의 전반적인 현황을 분석하여 문제점 및 발전 방향을 제시한다. 주요한 문제점은 다음과 같다. 전반적으로 정보시스템 프로세스의 수행 정도가 미흡하고, 감사 실시 정도는 전반적으로 중요한 프로세스에는 적절히 대응하고 있으나 금융 및 전산사고 예방에만 초점을 맞추어 전략적인 측면의 대응이 미흡한 것으로 나타났다. 또한 감사 활동이 프로세스 수행에 긍정적인 영향을 미치지 못하고 있어서 감사 사후 관리를 개선할 필요성이 제기되었다. 감사 인력/조직적인 측면에서는 인력의 충원이 필요하고, 전략 기획 분야와 연구·개발 활동이 미흡하고, 감사인의 적격성 및 독립성 분야에서 기준 대비 미흡한 면이 있는 것으로 분석되었다. 여기에 대한 발전 방향으로는 내부 감사 부서들간의 적절한 감사 분담, 외부 감사의 활용, 감사 자동화 도구 도입, 자가통제평가 제도 도입, 감사인력에 대한 경력개발 제도 실시, 위험 기반 감사 제도 도입 등이 있다. 본 연구의 결과는 은행업, 더 나아가서 다른 산업의 기업들이 참고할 수 있는 사시점을 제공하고, 본 연구에서 활용한 분석 프레임워크는 향후 정보시스템 감사 분야의 학술적인 연구에서 활용될 수 있을 것이다. Importance of Information Systems in banking industry is higher than that of other industries. This study, based on a case study of a bank, analyzes the current status of information systems (IS) audit and proposes future directions in the area of IS control and audit. Major problems identified in the study include deficiency of IS and audit process, and inability of audit function to improve IS process. In addition, deficiency of staffing level and investment in R&D, and lack of competency and independence of audit staff are identified. In order to solve the problems, the following directions were proposed proper division of functions among audit related departments, utilization of outside audit function, and adoption of CSA, CAAT, career path program, risk-based audit approach. The results of the studs will provide valuable implications to banks and companies in other industries. Also the research framework employed in the study can be utilized in the future research in IS control and audit.

PurposeThe purpose of this paper is to identify the factors that managers have to take into consideration when they implement the strategic information systems planning (SISP) process to develop information systems (IS) in the logistics sector.Design/methodology/approachData were collected using questionnaires to IS executives in Greek small- and medium-sized enterprises (SMEs) of the logistics sector. Factor analysis is performed on the detailed items of the SISP process constructs.FindingsThe results of this paper indicate that IS executives do not focus on defining goals, which will be used to improve the operations of the supply chain for the IS development. Both IS executives and managers from the logistics department of each organization should participate in the process of information technology (IT) strategy formulation and implementation. Executives from the logistics department of each organization should be aware of implementing environmental and organizational analysis with greater meticulousness, to identify IT opportunities and apply IT strategy with greater agility rather than now.Practical implicationsA strategic planning process for IS development in the logistics sector is required to achieve the consistently IS planning objectives. This is an important challenge for executives in SMEs who do not concentrate on implementing a strategic planning process for IS development.Originality/valueThis paper examines the factors that influence the strategic development of IS in the logistics sector and improve the effectiveness of decision-making regarding the supply chain’s operation.

The study targets an important gap in information systems (IS) literature, by advancing the research to develop a creativity metric for IS proposal evaluation. Recently, IS researchers have been exploring characteristics of the creative IS person, the creative IS process, the creative IS product and the creative IS environment. The authors examine the concept of a creative IS product, following on the work of J.D. Couger and G. Dengate (1992). Preliminary results of an exploratory study are reported. The study was undertaken to determine the principal factors that contribute to the perception of creativity in new systems. The authors describe in detail the IS product proposals investigated in the study, the judges, the procedures used and the instrument developed to measure creativity of IS project proposals. >

The problem which companies want to face is the integration of the applications in an information system (IS) and the interconnection of the system itself with other information systems. The interoperability of IS constitutes, their ability to communicate and to inter-operate following a given model using a common language favoring the sharing of information for better performance and profitability. [1] In this article we reminder of the model that we have proposed for the interoperability of IS, it is a model of interconnection having for objective the synchronization of the business process of IS interconnected. This synchronization is based mainly on the transformation of business processes BPMN (Business Process Model Notation) of the different IS in Executable Languages Business Process Execution Language (BPEL) thanks to a language ATL (ATLAS Transformation Language) then bring together all the BPEL in a single global BPEL to basis of the rules of adaptation and an ontological database. Then and using the reverse engineering, to make an update, well adapted, Process BPMN trades of different IS. The key point of this architecture is the use of the ontological database. We present in this article a new hybrid model of ontological database based on two approaches of schema of ontological storage different that we were able to create from the result of analysis of a comparative study of database systems to ontological basis (BDBO). This analysis has helped us to adopt a hybrid model of BDBO who owns his own architecture and its storage model. This hybrid model that we are going to adopt for the implementation of the interoperability model of several information systems.

The next three chapters will discuss information requirements and information systems for software engineering control. This chapter describes the search for reference information systems and the assessment of the reference systems with respect to software engineering control in the software factory. The description of control in the software factory given in section 5.7 will be used as a starting point. The reference systems that will be explored first are information systems for software engineering control as they are proposed in the literature. Three systems will be described in section 7.2. They are the Project Management Data Base (Penedo 1985), The TAME system (Basili 1988, Jeffrey 1987) and the experience base as described by Noth (1987). They have been selected because we consider them to be important information systems for software engineering control which have been described in the literature. The three systems will be compared with one another and will be assessed with respect to control in the software factory in section 7.3. An information system for engineer-to-order production control, as described in (Bertrand 1990), will also be considered as a reference system. This system will be described in section 7.4. It will be compared to the reference systems already discussed and will be assessed with respect to control in the software factory in section 7.5. Section 7.6 contains the summary and conclusions of the seventh chapter.

An assessment of perceptual differences between informants in information systems research

At present, basketball training needs more scientific training methods and techniques. In order to obtain these training methods, it needs to acquisition training information in the process of basketball training. Therefore, in view of basketball training to establish information control system, research on basketball players training characteristics and the law of motion in the process of basketball training, using control theory method to carry out information processing and analysis, and then the use of scoring methods carry out the authority score evaluation on basketball trainings influencing factors, according to the weight values, these are obtained on the basis of the score, then to carry out add sum, finally to obtain the evaluation scores of basketball training information control system. And then according to the weight value, to undertake an analysis of the basketball training control process, the basketball training information control method is put forward. The analysis results show that information control system is mainly manifested in the basketball training information collection and transmission, training scheme decision of coaches decision system as well as the feedback of decision information, which will complete the whole system construction of basketball training information control.

The use of a GIS-based malaria information system for malaria research and control in South Africa

The Common Operational Picture (COP) capability can be defined as the ability to display on a single screen integrated views of the Recognized Maritime, Air and Ground Pictures, enriched by other tactical data, such as theater plans, assets, intelligence and logistics information. The purpose of the COP capability is to provide military forces a comprehensive view of the battle space, thereby enhancing situational awareness and the decision-making process across the military command and control spectrum. The availability of a COP capability throughout the command structure is a high priority operational requirement in NATO. A COP capability for NATO is being procured and implemented in an incremental way within the NATO Automated Information System (Bi-SC AIS) Functional Services programme under the coordination of the NATO Consultation, Command and Control Agency (NC3A) Integrated Programme Team 5 (IPT5). The NATO Initial COP (iCOP) capability project, first step of this evolutionary procurement, will provide an initial COP capability to NATO in a highly pragmatic and low-risk fashion, by using existing operational communications infrastructure and NATO systems, i.e. the NATO-Wide Integrated Command and Control Software for Air Operations (ICC), the Maritime Command and Control Information System (MCCIS), and the Joint Operations and Intelligence Information System (JOIIS), which will provide respectively the Recognized Air, Maritime and Ground Pictures. This paper gives an overview of the NATO Initial COP capability project, including its evolutionary implementation approach, and describes the technical solution selected to satisfy the urgent operational requirement in a timely and cost effective manner.

The paper analyzes the operation flows and functional requirements of city fire control and rescue system. According to the integrated characteristic of fire alarming, alarm responding, controlling, fire extinguishing, data archiving and other rescue processes, it establishes the fire control and rescue information system model based on network environment and puts forward the corresponding computer network model. The model shows the consistency and integration of city fire control and rescue process, which can improve the speediness, accuracy and scientificity of fire control and rescue.

The Principles of Life Tibor Ganti. (2003, Oxford University Press.) £70.00, $168.00, 220 pages. To review this book is in some ways analogous to reviewing Gregor Mendel’s Experiments in Plant Hybridization (1865) shortly after it had been rediscovered by Hugo de Vries in 1889. Both works contained dormant insights of fundamental importance. In 1971 Tibor Ganti, a chemical engineer living in Communist Hungary, wrote a book called Az elet principiuma (The Principles of Life). It passed largely unnoticed in the West. Now in translation with essays from his other books, The Principles of Life is an original, logical, and parsimonious framework for thinking about life. Moreover, it has inspired a research program to synthesize minimal life from scratch. His theories foreshadow and anticipate the cores of systems biology, evo-devo, and developmental systems theory by several decades. The book is the work of a genius, according to the late John Maynard Smith. As Ross Ashby applied cybernetics to the study of the brain, Ganti has applied cybernetic ideas with extreme clarity to the study of the fundamental organization of life. The book is beautifully written for the layman. It is philosophically rigorous and introduces chemical models of minimal cells that are easily understood by non-chemists. The OUP edition is critically commentated by Eors Szathmary, a theoretical biologist who studied under Ganti, and James Greisemer, an eminent philosopher of biology. I present an outline of Ganti’s theory below. Ganti characterizes a unit of life as a unit that cannot be decomposed without losing any of the following properties: A unit of life performs metabolism, it is inherently stable, it contains an informational subsystem, and it is regulated and controlled. The simplest extant units of life are cells. Viruses are excluded because they have no metabolism. A biosphere of viruses lacking cells for their replication would face disaster. Neither are clouds or candle flames units of life, for they lack a subset of components that self-referentially constrain the properties of other parts of themselves, that is, an informational subsystem. Everyone would agree that a mule is alive; therefore, reproduction and hereditary are unnecessary features of units of life, but are clearly necessary for the continuing existence of a biosphere composed of units of life. Units of life can be hierarchically organized. For example, a human is composed of cells that are themselves units of life. But the human itself is also an indivisible bounded unit of life, possessing a higher-order metabolic organization with specialized organs such as a gut and a brain that is a specialized informational control system. Nation states consisting of human units of life could also be considered to share the characteristics of life, since they arguably have a metabolism consisting of primary production, import and export, an informational control system consisting of government at its various levels, and a boundary that makes the country (to some extent) an indivisible unit. They are controlled and regulated dissipative structures. Contrast this with John Maynard Smith’s definition of units of evolution as units that multiply and have hereditary variation [8]. He goes on to define natural selection as an algorithmic process that occurs where there are units of evolution that have differential fitness. One can immediately see that units of life and units of evolution are only partially overlapping sets. Not all units of evolution are alive; for example, entities in a genetic algorithm, viruses, and RNA molecules replicating using a Q-beta replicase are all units of evolution but not units of life. And not all units of life are units of evolution; for example, mules are not. All existing units of evolution depend on units of life for their maintenance. Now we have the conceptual machinery to ask ourselves whether this has always been the case. But let us continue with Ganti’s argument for now.

To investigate the epidemiological characteristics and impact factors on hospitalization of Plasmodium vivax (P.vivax) since initiation of national malaria elimination program, so as to facilitate the adjustment of technical guideline in response to the epidemic changing of malaria in China. The data of individual P. vivax case (probable and confirmed) and population during 2011-2014 were collated from China National Notifiable Infectious Disease Reporting Information System, and the data of epidemiological investigation for individual P. vivax case (imported and indigenous) during 2011-2014 were collected from China Parasite Disease Prevention and Control Information System. All of the data didn't include China's Hongkong, Macao, Taiwan and foreign cases. The risk factors on hospitalization were explored by multiple factors variable binary classification unconditioned logistic regression model. During study period of four years, a total of 5 656 Plasmodium vivax cases were detected. Among them, 69.9% (3 951 cases) were imported cases and 30.1% (1 705 cases) were autochthonous cases. The male cases accounted for 82.7% of all cases. Among the autochthonous cases, 535 cases (31.4%) occurred in the cross-bordering areas, and 577 cases (33.8%) were reported in the junction of difference provinces. The amount of autochthonous cases decreased from 1 363 cases in 2011 to 53 cases in 2014, and the county affected by autochthonous cases was shrunk from 185 counties to 10 counties. The proportion of autochthonous cases introduced by domestic migrants increased constantly, which reached 41.5% in 2014. The imported cases were detected from 614 counties of 30 provinces, who were originated from 57 overseas countries of 4 continents, with Southeast Asia being the leading origins (2 772 cases, 70.2%). There were 1 494 cases hospitalized for treatment, with the male (OR=1.41, 95%CI: 1.16-1.71), 14 years old and younger (OR=2.26, 95%CI: 1.44-3.56), and oversea imported cases (OR=2.73, 95%CI: 2.30-3.25) were the high risk group for hospitalization. The scale and scope of P. vivax occurrence decreased dramatically since initiation of malaria elimination grogram in 2010. However, the risk of P. vivax introduction by the overseas imported cases and domestic migrants should be highlighted.

Objective To analyze the epidemiological characteristic of public health emergencies in Nanjing City so as to provide evidences for outlining prevention and control measures. Methods The information of public health emergencies was selected from Public Health Emergency Reporting System (the subsystem of Chinese Disease Prevention and Control Information System) reported from January 1, 2004 to December 31, 2014. Descriptive epidemiology method was used to analyze the three-dimensional distribution (population, time, district) and the epidemiological characteristics of public health emergencies in Nanjing from 2004 to 2014. Results A total of 105 public health emergencies were reported in Nanjing from 2004 to 2014, including 3 162 cases of illness and 9 deaths. Of all the events, there was 1 case at grade Ⅱ (0.95%), 1 at grade Ⅲ (0.95%), 52 at grade Ⅳ (49.52%), with 51 non-graded (48.57%) and no case at grade Ⅰ. The mayor type of events was infectious diseases (91.43%), which mainly included chickenpox (28.13%), mumps (25.00%), influenza A (H1N1) (15.63%)and influenza (13.54%). Peak months of public health emergencies appeared in March, June and December. As high as 63.81% (67/105) of the public health events took place in school. Conclusions Contagion events are the major type of public health emergencies in Nanjing from 2004 to 2014. Prevention and control of school infectious diseases during peak periods need to be particularly strengthened. Key words: Public health emergency; Epidemiology analysis; Descriptive study

A brief description of information system for nuclear material accounting developed for the national regulator in the field of nuclear and radiation safety - the Department for Nuclear and Radiation Safety of the Ministry of Emergency Situations of the Republic of Belarus (Gosatomnadzor) is given. The information system is a part of the Intellectual information system of a Gosatomnadzor employee to ensure control (supervision) in the field of nuclear and radiation safety. It is developed on the basis of free software. The system has been implemented in Gosatomnadzor and at present in the Republic of Belarus all nuclear material accounting with reporting to the IAEA is carried out with its help. The system, in full compliance with the IAEA requirements, provides automatic generation with all the necessary calculations based on the input data of the following reporting documents: physical inventory listing, inventory change report, material balance report, textual report, General Ledger. All reports are fully consistent each with other. An efficient mechanism has been developed for importing and exporting data from / to the system according to formats of fixed and labelled Code 10 required by the IAEA. All logs of the system describing reports contain a field “IAEA approved” (yes / no). If it set to “yes”, they are closed for editing and correction. A special tool has been developed for making adjustments to these documents in accordance with the IAEA rules. The system contains fully completed reference books (small journals referenced by all major journals in the database) with the necessary reference data in accordance with Code 10. The information system meets all the IAEA requirements for such systems of national regulators in the field of accounting, control and supervision of nuclear material. It can be easily translated into other languages and adapted for the needs of accounting and control of nuclear material in operating organizations.

Based on the requirements of the educational standards, groups of parameters were revealed, according to which educational achievements should be monitored. It includes assimilation of theoretical material, the performance of tasks and exercises, the performance of laboratory and practical work, the intersubject skills, personal development, health. Information systems (IS) used in educational practice have a problem of insufficient quality in terms of functional completeness, namely, they provide control only for half of the required groups of parameters. Increase in functional completeness of IS can lead to significant increase in size of the data which are stored in system. Consequently, the processing time of monitoring results also increases, which reduces the productivity of IS. The article considers the problem of improving the quality of the functioning of the information system of multiparametric control of schoolchildren’s educational achievements. Within the framework of the subject domain modeling, using the principles of such general scientific methods of research as structural and morphological analysis, a model of the object structure of schoolchildren’s educational achievements has been created. It has the form of a morphological hierarchical tree and includes more than 80 educational results to be collected, stored and processed. The analysis of the time of formation of a report with a multiparametrical mark of the schoolchildren was carried out. The conclusion is drawn that in scales of the subject of the state temporal time delays will have unacceptable value. The method of increase in system performance is applied, namely - the denormalization used for optimization of the diagram of data storage. Results of an experiment according to productivity of the developed information system showed efficiency of the applied method.