What are 3 risks determined from the analysis of information systems?

Answer 1

Answer: I will assume that your question pertains to corporate systems as opposed to home based PC systems. Internal Security: As most businesses currently rely on computerized systems in virtually all aspects of their operations, it is imperative to ensure that "down time" is kept to a minimum. While these systems have qualified technical staff to ensure that "down time" is kept to a minimum, US studies have shown that 68% of systems are not protected from natural or man-made disasters such as fire, floods, etc. Depending on a given business's requirement to maintain computer operations during the above described disasters, provisions should be made to have a remote mirror site which can be switched to if the primary site becomes inoperable. It's analogous to having a backup generator automatically kick in when there is a power failure. There are several third party companies that offer mirrored backup facilities. Information Security: While most companies take pride in believing that information that is stored on their computerized systems is well protected from all forms of unauthorized intrusion; such is not necessarily the case. While unauthorized access from the internet is fairly tight, studies have shown that 22% of companies are vulnerable to unauthorized information access from within. Growth Management: The are several companies that anticipate substantial growth in the number of their employees and the scope of their operations, resulting in increased responsibilities for management and added pressure on these companies' operating and financial systems. To manage growth effectively, such companies must continue to improve their operational, financial and management information systems and will need to hire, train, motivate, and manage a growing number of employees. Unfortunately, very few companies take a proactive approach in ensuring that their computerized systems keep pace with both actual growth as well as anticipated growth. More often than not, many companies, virtually overnight, find themselves confronted with computerized systems that are unable to handle increased company growth as well as new requirements (i.e.: company decides to introduce a new product line, etc.). Under these circumstances, panic sets in and companies usually address this unpleasant situation by what's effectively termed as "management by crises".