Preparing for the Final Exam
CIS 2010 – Spring 2007
(Last updated 4/23/07)

The exam has 100 multiple choice questions. You will be given 120 minutes (2 hours) to complete it. The textbook and slides will act as the authority on any disputed questions. The following shows approximately how many questions will come from each chapter, extended learning module, or slideshow:

Chapters 1, 2, 4, 5, 6, 7 of the Haag book:  7 questions each 
Extended Learning Module C: 2 questions
Chapter 3 of the Haag book:  7 questions
Chapter 8 of the Haag book: 13 questions
Extended Learning Module H: 2 questions
Chapter 9 of the Haag book:  8 questions 
Chapters 1 – 3 of the Database book:  24 questions total, many on QBE, SQL, or both 
Normalization – 2 questions

A Scantron will be provided.  Be sure to bring a number 2 lead pencil.

Plan to arrive on time for the exam.  Read each question carefully.  If you misread the question and answer the question you THINK is being asked, it will be very difficult for you to realize that you misread the question.

Objectives 

Chapter 1 The Information Age in Which You Live

•	You are able to define the terms MIS and IT and explain their relationship.

•	You are explain what is meant by a disruptive technology and discuss how video-on-demand and being able to rent DVDs from Netflix have disrupted Blockbuster’s way of doing business.

•	You are able to explain who is and who is not a knowledge worker.

•	You are able to list and discuss the three resources associated with MIS (people, information, and information technology).

•	You are able to explain the difference between data and information.

•	You are able to list and discuss the three dimensions of personal information (time, location, and form) and what is involved with each dimension.

•	You are able to list and discuss the various possible information flows in an organization (up/down, in/out, horizontal flow) and information granularity.

•	You are able to list and discuss the organizational dimensions of information (internal, external, objective, subjective).  Note that it is NOT true that objective information is information that is known and subjective information is information that is unknown.  That is an error in your textbook.  (Most textbooks have a few.)  Objective information is information that is more easily determined to be true or false.  For example, a customer either purchased a car or a hamburger or did not.  After money has changed hands and ownership has been transferred, there will be no question about whether that transaction occurred.  In contrast, subjective information is information based on the observer’s perception of reality.  For example, a sales representative for Lockheed Martin may report in an Executive Information System that he thinks the Brazilian Air Force will be ready to sign a contract for 5 fighter planes within the next two weeks.  If it turns out that the contract is not signed in two weeks, or the number of planes purchased is different from what the sales representative projected, that does not mean that the sales representative lied.  Circumstances may have changed, or the information available to the sales representative may have been incomplete.

•	You are able to explain who in an organization typically uses detailed information and who uses summary information.

•	You are able to list and discuss the possible combinations of ethical or unethical and legal or illegal conduct and give an example associated with information systems for each.

Examples:  
legal and ethical:  normal use of systems to support operations such as sales at a fast-food restaurant and registering students for classes at a university; no personally identifiable information (such as a student social security number) is made available to anyone who does not have a need to know it

legal but not ethical:  forwarding an e-mail message without getting the sender’s permission, using Find and Replace to edit documents with the result that web 
pages make claims that are not true, installing spyware on a user’s computer without the user’s knowledge because text stating that the user agrees to have such software installed is buried in the license agreement; storing confidential information longer than is necessary (in most of these cases, no laws were ever written, although there may be contracts between parties; one merchant was caught saving the confidential code from customer credit cards after the transaction had gone through; unethical employees used the saved information to commit fraud, when the policies of the credit card company were designed to prevent fraud), releasing software that is buggy and waiting until the next release to fix those errors

ethical but not legal:  breaking into systems to track and identify hackers (a federal employee at a research lab was encouraged to do this on his own time by the FBI; he was fired by his supervisor because he had not been given permission by his employer, and the federal agency did not want to be associated with illegal conduct, even if it was helping protect national security—the employee had been tracking hacking of U.S. Department of Defense computers back to official Chinese government computers; the fired employee found an IT security job with a federal agency a few months later) or committing espionage using computers (whether this is ethical depends on one’s perspective)

illegal and unethical:  software piracy (most organizations in the U.S. would consider it embarrassing to be caught using pirated software because using pirated software is the exception rather than the rule; people who read about the use of pirated software will wonder what other corners the organization is cutting), hacking to commit fraud, writing and intentionally distributing a virus, identity theft 

•	You are able to explain what is meant by 
o	Decentralized computing
o	A shared database
o	Mobile computing
o	Ubiquitous computing

•	You are able to list and discuss four ways in which you can protect yourself from viruses, spyware, and identity theft.

•	You can explain what a transaction processing system (TPS) is and give five examples of transaction processing systems.  You can determine whether a system is or is not a TPS.  (Look at the beginning of the updated slideshow for Haag Chapter 3 for examples of TPS.)

•	You are able to explain how an Executive Information System (EIS) supports decision making.  [Summary:  Managers can view summary data in graphical form to monitor operations.  They can “drill down” to various levels of detail, even individual transactions, when they want to understand what time period, region, product line was more or less successful than others and why.] 

Chapter 2 Major Business Initiatives

•	You can define and give an example of each of the following forces in Porter’s Five Force Model:
o	Buyer power
o	Supplier power
o	Threat of substitute products and services
o	Threat of new entrants
o	Rivalry among existing competitors

•	You can define, give an example, and identify which of the five forces are increased or decreased for the supplier or buyer by each of the following:
o	Loyalty program
o	Switching cost
o	Entry barrier

•	You can describe the supply chain of a company such as Dell and contrast it with the supply chain of a company such as Circuit City, which also sells computers.

•	You are able to compare and contrast
o	Supply Chain Management (SCM) systems
o	Customer Relationship Management (CRM) systems
o	Business Intelligence (BI) systems

•	You are able to describe (a) how a car manufacturer such as GM and a company such as Dell use the following systems, (b) how these systems give the organizations a competitive advantage, and (c) what challenges are presented by the use of these systems:
o	Supply Chain Management (SCM) systems
o	Customer Relationship Management (CRM) systems
o	Business Intelligence (BI) systems

•	You are able to define the term Business Intelligence.

•	You can explain what is meant by the terms 
o	Sales Force Automation (SFA)
o	Digital dashboard
o	Virtual team
o	Alliance partner
o	Workflow (a process defined by steps that are performed in a fixed order, for example the process for applying for financial aid, being granted aid, and being notified of the decisions made)
o	Workflow system (a system that enforces the rules associated with a workflow process; the system often informs the next person that an approval is needed and reminds people if they have not taken action when they were supposed to)
o	Knowledge management system 
o	Social network system
o	Presence awareness [think of Elluminate Live’s participant list]
o	Yield Management System

Extended Learning Module C, Haag book, beginning of Chapter 3 and database textbook, Introduction, Chapter 1 and Chapter 2

•	You can compare and contrast storing data in a spreadsheet and a database.  (You are able to explain the advantages and disadvantages of storing an organization’s data in a spreadsheet and a database.)

•	You can define each of the following and explain why it is important:
o	Entity-Relationahip (E-R) diagram
o	Entity class (entity)
o	Attribute
o	Instance
o	Primary key
o	Foreign key
o	Database
o	Relational database

•	You are able to define each of the following terms and explain how they relate to one another:
o	database management system (DBMS)
o	database
o	logical ties within the information in a database
o	integrity constraints
o	field type (Text, Memo, Number, Currency, Date/Time, AutoNumber, Yes/No)
o	creating table relationships
o	enforcing referential integrity
o	data integrity
o	relationship
o	table
o	query
o	form
o	report
o	record
o	field
o	row
o	column
o	one-to-many relationship
o	one-to-one relationship

•	You are able to identify vendors of popular DBMS software [Microsoft, Oracle, etc.].

Normalization

•	You can define the term ‘repeating group’ and identify repeating groups in database design.  [Data associated with a person, place or thing that may have more than one instancefor example, a patient may visit a doctor more than once, a customer at Target may purchase more than one item, a contractor may place more than one order at Home Depot (and each order may consist of more than one item), a waiter may wait on more than one table, each table may have more than one patron, and each patron may order more than one item.]

•	You can list and discuss problems that an organization is likely to encounter if it maintains its operational data in spreadsheets.

[Update anomaly, deletion anomaly, and addition anomaly can occur when a database is not normalized.  All examples below apply to moving from a database that is not normalized to one that is in First Normal Form.  (These anomalies can also occur if tables are in First Normal Form but not in Second Normal Form or if they are in Second Normal Form but not in Third Normal Form.)  All of these anomalies are associated with updating a table in some way, but ‘Update anomaly’ refers to making changes in a record.]

•	Update anomaly [If you have redundancy in a database, a value in one record may be updated while the same value in other records is not updated.  A user will not know which value is correct.]

•	Deletion anomaly [If a record contains information that is outdated (for example, a tour operator has gone out of business), deleting the only record containing the information no longer needed may also result in deleting information that is still useful (deleting the only record dealing with a specific tour operator who has gone out of business may result in deleting the only record dealing with the dive site served by that operator)]

•	Addition anomaly [You can’t add a record to a relational table if you don’t know what the value of the primary key field is (because you can never leave the primary key field empty in a new record.  This means that you can’t store other information that you already know in other fields of that record.]

•	Redundancy [Redundancy is extreme in a database that is not normalized.  Redundancy is reduced but not eliminated in a database that is normalized and in Third Normal Form.  The redundancy that remains allows tables to be joined.]

•	You can determine whether a database is

o	Not normalized
o	In First Normal form

•	You can explain why databases are normalized.

Database Textbook, Chapter 3

•	You are able to identify logical operators and which ones are used to create compound criteria or conditions.

•	You are able to list aggregate functions and explain their purpose.

•	Given a representation of a table, you are able to identify its primary key.

Example:  Patient(Patient Number, First Name, Last Name, Street 1, Street 2, City, State, Zip, Home Phone, Work Phone)

In the 4Corners database, whose relationships are shown above, most tables have a primary key consisting of only one field.  However, tblRefill has a primary key consisting of two fields, and tblEmployeeTraining has a primary key that consists of three fields.

•	You can define the terms primary sort key and secondary sort key and explain their purpose.

•	You can explain how fields that occur in two different tables are identified, to avoid a syntax error and to prevent ambiguity when two or more tables are used in a query. [TableName.FieldName]

•	You can define each of the following and how they are associated with one another:
o	QBE (Query By Example)
o	Structured Query Language (SQL)
o	Query
o	Calculated column [also called calculated field, computed field, or computed column]
o	Sorting [displaying records in a specified order; the records stored remain in the order in which they were entered]
o	Primary sort key
o	Secondary sort key
o	Sorting in Ascending and Descending order [use Order By clause; ASC is the default; you must specify DESC; in QBE the leftmost field is the primary sort key]
o	Joining [running a query that accesses data from two or more tables that share at least one field  (Note:  While you can join any two pairs of tables that do not share a field with a SQL statement such as ‘Select * From Road, Beverage,’ (assuming the tables exist in the same or separate databases), pairings of records in the first table with those in the second table will not allow the user to look up information that is useful but not available in the first table, because there probably is no relationship between roads and beverages; as a result, you wouldn’t be able to construct a clause to remove nonsense pairings (for example, ‘Where Road.BeverageID = Beverage.BeverageID’ because the primary key fields in the two tables probably do not appear as foreign keys in the other table.)
o	Aggregate functions [Sum, Count, Avg, Min, Max]	
o	Parameter query

Queries

Note:  Some test questions will involve QBE while others will involve simple SQL.

•	Given requirements in English, you can identify which QBE or SQL query will satisfy those requirements.  
•	Given a QBE or SQL query, you can identify which statement accurately describes the query result.
•	You can specify the order of clauses in a SQL query.
•	You can explain the purpose of each type of SQL clause.
•	You can determine whether a query’s syntax is legal.  (For example, you can determine whether square brackets are required in a specific situation.]
•	Given a screen print in QBE, you can identify which statement accurately describes the query result.
•	Given a screen print in QBE, you can identify the corresponding SQL query.

•	You can predict the result of queries (either in QBE or SQL) that contain any of the following, individually or in combination with one another:
o	Display all fields in a single table [Select * …]
o	Display selected fields in a table [Select Field1, Field3 …]
o	Display a calculated column [Select Field7-Field8 …]
o	Sort records on a single key [… Order By Field7 ]
o	Sort records on multiple keys [… Order By Field3, Field4 ]
o	Sort records in ascending order […Order By Field3 Asc ]
o	Sort records in descending order  [Order By Field3 Desc ]
o	Join two or more tables [Select * From Table 1, Table2 Where Table1.Field7 = Table2.Field1 ]
o	Display records that satisfy a simple condition  […Where Field3 > Field 4 ]
o	Display records that satisfy a compound condition [ …Where Field 3 > Field 4 AND Field7 <= 10 ]
o	Use an aggregate function  [Select Count(*)… ]
o	Group records  [… Group By ]
o	Use an alias  [Select Field3 As [Column Heading With Spaces] …] 

•	You can construct a SQL query that includes a condition, when you are given a question in English.

•	You can predict what the query result will be when one or more of the following occur in a query:
o	AND
o	OR
o	NOT
o	=, <>, >=, <=, <, >
o	BETWEEN
o	LIKE
o	*
o	?
o	COUNT
o	SUM
o	An alias [used to either replace the default column heading created by Access for a calculated field or to replace a column heading that is not very informative or looks unattractive 
Example:  Select CommissionEarned As [Commission Earned]
o	CREATE
o	UPDATE
o	INSERT
o	DELETE

•	You can determine whether a compound condition is true, if either AND or OR are used.

Haag, Chapter 3 - Databases and Data Warehouses

•	You can define each of the following terms and how they relate to one another (if there is a relationship):
o	Operational database
o	Data warehouse
o	Data mart
o	DBMS
o	OLTP
o	OLAP

•	You can list and discuss how each of the following data mining tools is used: 
o	Query-and-reporting tools 
o	Intelligent agents 
o	Multidimensional analysis tools
o	Statistical tools

•	You can explain what is meant by the term ‘business intelligence.’

•	You can explain whom business intelligence describes [customers, competitors, partners, and the organization itself]

•	You can explain why data warehouses are created.

•	You can explain when a data warehouse is appropriate and when a data mart is better.

•	You can give examples of questions that various businesses can answer as a result of using data mining.

Chapter 7 -  Enterprise Infrastructure and Integration 

•	You can define each of the following and list and discuss its characteristics:
o	Enterprise system
o	ERP system
o	Legacy Information System [often abbreviated as legacy system]
o	Core ERP functions

•	You can discuss the advantages and disadvantages of ERP systems.

•	You can define each of the following, explain why it is important, and discuss how each can be successfully achieved:
o	Availability
o	Accessibility
o	Reliability
o	Scalability
o	Flexibility
o	Performance [You can explain how benchmarks and benchmarking are used in evaluating performance.]
o	Capacity planning
o	IT architecture [design that specifies hardware, software, the telecommunications network, and information]
o	Infrastructure [implementation of the IT architecture]

•	You can define each of the following and explain the advantages and disadvantages of each:
o	A decentralized infrastructure
o	A centralized infrastructure
o	A distributed infrastructure
o	A client/server infrastructure

•	You can define each of the following and explain why it is important:
o	Backup 
o	Recovery
o	Disaster recovery
o	Disaster Recovery Plan
o	Collocation facility
o	Disaster recovery cost curve
o	Integration
o	Integration obstacles [people, process, technology]
o	Business Process Reengineering (BPR)
o	Workflow

Chapter 4 - Decision Support and Artificial Intelligence (DSS and GIS, expert systems, and intelligent agents)

•	You can define a decision support system, list its components, and identify the type of applications for which decision support systems are appropriate. 
•	You can define geographical information systems and explain how they differ from other decision support tools. 
•	You can define artificial intelligence and list the different types that are used in business. 

Expect to find one or two questions about expert systems (how they differ from decision support systems, as well as what they can and cannot do).  There will be no questions about neural networks. 
 
•	You can compare and contrast decision support systems and artificial intelligence (specifically expert systems) and explain whether
o	The system’s output represents a diagnosis or recommendation [expert system]
o	The system’s output helps the user compare alternatives [decision support system, if no map is involved; GIS if a map is involved]
o	The system’s output provides an optimal solution (mix of dog food ingredients, how to cut a specific log, how to price seats on a flight—all to optimize profit) based on a quantitative model [a decision support system that solves a fairly structured problem]

•	You can define, discuss, and recognize examples of each of the following:
o	Decision Support System
o	Geographic Information System
o	Expert System
o	Intelligence
o	Design
o	Choice 
o	Implementation
o	Structured decision [if you plug in data values into a formula or algorithm, you can be confident that you will get an optimal solution]
o	Unstructured or nonstructured (your book’s term) decision [a decision for which you are not entirely sure you know all the variables that are involved and how they relate to one another; for example, deciding which of several job offers to accept involves hoping you have all the information you need to make a decision—that you understand the implications of working at each organization; you can look up publicly-held companies’ financial data, but it is harder to assess whether your direct supervisor at each organization will help or hurt your career or have no impact]
o	Semi-structured decision [some parts of the problem (such as the relationships between variables) are structured while others are not; for example, you can use a DSS to calculate the mortgage payment for different interest rates, amounts borrowed, and loan terms, but the system cannot help you determine whether you can afford the higher monthly payment on a 15-year mortgage or whether it would be safer for you to get a 30-year mortgage so you can keep up the payments, even if you are temporarily laid off]
o	Recurring decision [a decision that is made regularly in an organization; for example, McDonald’s headquarters regularly selects sites for new restaurants; the company has learned from its earlier mistakes]
o	Nonrecurring or ad hoc decision [a decision that is made extremely infrequently in an organization; for example, the decision to move headquarters to a new city might be made one every few decades, with the result that people who participated in making the decision the last time it was made are no longer with the company; also, criteria to be considered in making the same decision four decades later will probably be different]
o	Model management component [the part of a DSS that allows the user to pick which of several available models to run]
At this Bankrate.com web page, the user can choose among multiple models (called ‘calculators’ here, including those to compare fixed versus adjustable rate mortgages, comparing the financial consequences of renting or buying a home, and determining what the monthly mortgage payment will be for each combination of principal amount, interest rate, and loan term)

The model management system allows the user to select the Renting vs. buying, Mortgage amortization schedule, or 15-year vs. 30-year mortgage models.  (In contrast, the Personal mortgage adviser incorporates artificial intelligence to advise the user on the best type of mortgage.  See the output of one interaction below.)

o	Data management component [the part of a DSS that allows the user to enter data or select stored data that will be used to run a model]

The data management component allows the user to supply data that will be used to run the model selected earlier.  The following two screen prints show interaction with the data management component of a decision support system.

o	User interface management component [enables the user of a DSS is able to access the model management and data management components of a DSS; the interface may make the DSS easy or hard to use]
o	Diagnostic problems [for example, expert systems help users of medical expert systems and equipment diagnosis systems to diagnose problems and determine treatment or repairs]

The following knowledge-based system or expert system is available to anyone via the Web.  After the user answers all questions and clicks on the Evaluate button, a tentative diagnosis is made.

More sophisticated expert systems designed to assist doctors use intelligent questioning.  That is, answers to previous questions determine which follow-up questions are asked.

o	Prescriptive problems [expert systems make recommendations for solving a problem based on the user’s answers to questions]

•	You can discuss possible sequences in which decision makers move through the four phases of decision making and why these sequences might be required. [If all phases can be completed, only one iteration may be needed.  However, if one or more phases was not completed correctly, the user may have to cycle through phases again.  For example, if the the option selected did not solve the problem, the user may revisit the Intelligence phase and determine whether the problem was correctly identified.]

•	You can categorize each of the following (Is it a decision support system, a geographical information system, an expert system, or an intelligent agent?  If it is a DSS, is it structured, semi-structured, or unstructured, and does it involve a recurring or nonrecurring decision?):
o	A yield management system for an airline, hotel, or car rental company [DSS; semi-structured because historical data don’t tell the whole story (only a person can determine that last year’s heavy bookings because of a major sports event or political convention in a city are unlikely to be repeated in a year when the city is not hosting the event)]
o	A system used to assist in determining whether to move corporate headquarters and to what location among possible locations.  The system allows the user to crunch the numbers for construction costs, costs of operation, and costs of travel that are likely to be associated with each location. [DSS, semi-structured; people have to decide whether they have identified all incentives available that would change the costs of construction and operation; they also have to decide how reliable the data that are being analyzed are]
o	A system that allows top management to study different proposed sites for corporate headquarters on a map that shows roads, airports, bodies of water, hospitals, schools, businesses, and neighborhoods in the area of each proposed site [GIS]
o	A system used to assist in determining the costs of construction, operation, and distribution associated with several potential sites for a new auto assembly plant [DSS, semi-structured because someone has to evaluate how reliable the data are and whether all relevant data are being considered]
o	A system that shows locations from which people can travel to a central point within a specified driving time.  Locations are shown on a map. [GIS]
o	A system to help the user compare the costs of buying versus leasing a car (the user supplies the numbers associated with the specific purchase and lease being considered) [DSS, semi-structured because not all aspects of a user’s situation are considered in the number crunching; while it may make economic sense for a teacher to buy a car and keep it for 10 years, a business person may find it more convenient to be able to deduct lease payments every year and get a new, reliable car every four years]
o	A system to help the user select a mortgage that calculates and displays the consequences of each mortgage being considered (the user supplies the principal amount, loan term, rate, and possibly the amount of principal to be prepaid each month) [DSS, semi-structured]
o	A system to help the user compare the costs of buying versus renting housing (the user supplies the numbers associated with the specific purchase and rental being considered) [DSS, semi-structured]
o	A system that helps the user determine which type of IRA is best, based on the user’s current income and tax bracket as well as the user’s expected tax bracket when funds will be withdrawn [DSS, semi-structured; the user will have to predict what his/her future tax bracket will be, and that cannot be known with certainty]
o	A system that allows the user to compare the costs of similar investment options such as Exchange Traded Funds (ETFs) versus index funds [DSS, semi-structured; costs may not be the only aspect to consider; some fund managers may engage in self-dealing that hurts the performance of the a fund; other criteria to consider are how much money the fund’s manager has invested in the fund, to determine whether the manager’s and shareholders’ interests are aligned]
o	A system to help the user compare diamonds currently in stock at BlueNile.com and select one that optimizes the criteria that are most important [DSS, semi-structured; in this case, there is no quantitative algorithm—no number crunching being done—only querying of a database; however, the user interface simplifies very complex multi-criteria decision making and the user will understand what criteria were optimized and which ones were relaxed when a diamond was selected]
o	A system that allows the user to see all the McDonald’s restaurants on a map that also shows highways, geological features such as rivers and lakes, and schools (locations without any restaurants can be studied to determine their suitability for a new restaurant by having the user identify desirable features of a community, run a query, and have all potential locations displayed on the same map, using a different symbol; the user can then study the highways the run through those communities) [GIS]
o	A system that allows a bank to determine the value of mortgages originated in each zip code or neighborhood and display them on a map (areas that are underserved can then be identified and their demographics studied) [GIS]
o	A system that allows an insurance company to determine the number of policyholders in each zip code or neighborhood, and totals can be displayed on a map [GIS]
o	A system that allows a bank to look up an address (of a building on which a mortgage will be originated) and determine whether it is located in a flood plain (areas in flood plains are displayed on a map in a different color)  [GIS]
o	A system to identify communities that meet a desired profile (number of residents, average income per household, average age of population, etc.) to determine where to locate a new store or fast-food outlet [GIS—spatial data are being analyzed; a database containing spatial information is queried]
o	A systems that helps a doctor on duty in a hospital emergency room determine whether a patient has meningitis or bacteremia and which antibiotic(s) to prescribe, given incomplete information [expert system that makes a diagnosis and recommends treatment, based on incomplete information; the patient might die if treatment isn’t started before the results of all lab tests are available]
o	A system that helps an insurance company nurse determine whether the insured caller should be sent to a hospital emergency room, told to make an appointment with his/her regular physician, or asked to wait for 24 hours to see if the symptoms go away [expert system used for diagnosis and recommendation]
o	The capability of tax preparation software that allows the user to ask for an audit; this feature of the system identifies missing data as well as unusually high or low amounts that are likely to attract the attention of the IRS [expert system that identifies (diagnoses) problems and how to address them]
o	The intelligent questioning capability of tax preparation software that allows it to ask the same questions that a human expert would, based on the user’s previous answers [expert system; the knowledge of how human experts decide what questions to ask based on previous answers has been captured]
o	A system that allows someone operating oil drilling equipment to describe the details of how the drill bit has become stuck and receive a recommendation of how to address the problem so that drilling can resume quickly, without having to wait for a human expert to fly in [expert system for problem diagnosis and recommendation of how to proceed; knowledge from human experts was captured]
o	A system that allows an American Express employee to quickly assess whether a specific charge is fraudulent; the system recommends questions to ask the customer if the information available is inconclusive (some American Express credit cards have no credit limit, and the company’s policy is that no transaction will be refused by a computer alone) [expert system; diagnosis and recommendation]
o	A system that allows a computer Help Desk employee to ask questions that an expert would ask; the customer’s answers determine which follow-up questions are asked; the system recommends fixes based on the customer’s answers, which the employee entered into the system [expert system for problem diagnosis with recommendations for how to solve the problem]
o	A system available at an online job site that the user configures to send an e-mail message whenever a job is posted that satisfies criteria specified by the user (for example, all jobs located within X miles of a specified city that include certain keywords in the posting) [intelligent agent]
o	A system that broadcasts a message over an organization’s or department’s network, when available disk space drops below a specified level  [intelligent agent]

•	You can explain what is meant by the term “intelligent agent” and identify examples of intelligent agents.

•	You can identify examples of spatial information.  [anything that can be laid out on a map is spatial information; examples are roads, sewer lines, power lines, telephone lines, cable lines, gas lines, rivers, schools, hospitals, fast-food outlets, bank branches, as well as locations of traffic accidents and crimes committed]

Chapter 5 - Electronic Commerce 
•	You can define and describe the two major e-commerce business models (Business to Business and Business to Consumer).  

•	You can identify businesses that are primarily involved in  B2B or B2C.

•	You can list and discuss the various ways of moving money in the world of e-commerce and how security concerns can be addressed. 

•	You can define, give an example of each of the following categories of e-commerce, identify which involves the highest dollar volume of sales, and identify marketing requirements for each:
o	B2B
o	B2C

•	You can define each of the following and identify examples of each:
o	Mass customization
o	Demand aggregation
o	Reverse auction
o	Online ads
o	Affiliate programs
o	Clickthrough
o	Conversion rate

•	You can explain requirements for B2B e-commerce [Slide 59]

•	You can define, give an example, and identify which category of e-commerce uses each of the following:
o	Financial cybermediaries
o	Electronic checks 
o	Electronic Bill Presentment and Payment
o	Smart cards
o	Financial electronic data interchange (EDI) 
o	Encryption 
o	Secure Sockets Layer [details on Slide 78]

Chapter 6 - Systems Development 
•	You can list the seven steps in the systems development life cycle, as well as activities associated with each step. 

•	You can define and list the tasks associated with of each of the following phases of the Systems Development Life Cycle (SDLC) methodology for systems development:
o	Planning
o	Analysis
o	Design
o	Development
o	Testing
o	Implementation
o	Maintenance

•	You can define each of the following terms association with systems development:
o	Critical Success Factor (CSF) [something you must do right for the organization to be successful]
o	Project scope
o	Project plan
o	Project manager
o	Project milestone
o	Scope creep
o	Feature creep
o	Business requirements
o	Requirements definition document
o	Modeling
o	Sign-off
o	Graphical user interface (GUI) 
o	GUI screen design
o	Unit testing 
o	System testing 
o	Integration testing
o	User acceptance testing
o	Parallel implementation
o	Plunge implementation 
o	Pilot implementation 
o	Phased implementation
o	Request for Proposal (RFP)
o	Waterfall methodology
o	Rapid application development (RAD)
o	Prototype

•	You can explain at what stage in systems development errors are least and most expensive to correct and why.

•	You can explain why different frames of reference can lead to miscommunication between the systems analyst and the user(s).  You can define backtracking and explain why its use on the part of a systems analyst can minimize miscommunication. [Slide 63 of modified slideshow for Haag Chapter 6]

•	You can define and discuss the consequences of the three different ways in which you can staff a systems development project (insourcing, end-user development, and outsourcing). 

•	You can define, discuss, and explain when each of the following approaches to systems development is appropriate:
o	Insourcing
o	End-user development
o	Outsourcing

•	You can list and discuss the three different forms of outsourcing [Slide 91 of modified version of Haag Chapter 6 slideshow] 

•	You can list and discuss the four outsourcing options [Slides 89 and 90 of modified version of Haag Chapter 6 slideshow]

•	You can list and discuss the advantages and disadvantages of outsourcing.

•	You can list and discuss concerns associated with offshore outsourcing [Slide 98 of modified slideshow for Haag Chapter 6].

•	You can discuss the categories of costs associated with outsourcing and especially offshore outsourcing.

•	You can describe prototyping and lists the steps involved [Slide 105 and 106 of the modified slideshow for Haag Chapter 6]. 

•	You can identify the advantages and disadvantages associated with prototyping.

•	You can define end-user development.

•	You can list and discuss the advantages and potential pitfalls associated with end-user development.

Collaborative Technology

•	You are able to define and give two categories of collaborative technology that represent of each of the following:
o	Synchronous collaboration
o	Asynchronous collaboration

•	You are able to explain how each of the following features of a web conferencing system such as Elluminate Live! is used:
o	VoIP [enables audio and video]
o	Icons to agree, disagree, clap, raise your hand, etc.
o	The whiteboard
o	Application sharing
o	Desktop sharing
o	Taking participants to a website
o	Recording and playback of classes
o	Voting

•	You can identify and discuss challenges associated with the use of collaborative technology.  [Security vulnerabilities are introduced through the use of tools such as IM.  Excessive use of collaborative technology can lead some people to feel lonely and isolated.]

Haag Chapter 8 – Protecting People & Information

•	You can define and discuss the following, which affect whether someone will behave ethically:
o	Consequences
o	Relatedness
o	Time to consequences
o	Society’s opinion
o	Likelihood of effect
o	Reach of result

•	You can define the following terms associated with intellectual property:
o	Copyright
o	Pirated software (software piracy)

•	You can explain how each of the following can threaten someone’s privacy and what steps someone can take to minimize threats to his/her privacy:
o	Key logger software
o	E-mail
o	Identify theft
o	Phishing
o	Monitoring technology
o	Cookies
o	Spyware

•	You can explain why each of the following can hinder someone’s effective use of the Internet and how that person can protect him/herself:
o	Targeting technology
o	Spam
o	Adware
o	Malware
o	Virus
o	Worm
o	Trojan Horse
o	Denial-of-service (DOS) attack

•	You can discuss how privacy is affected by storage of personally identifiable information by
o	Government agencies such as law enforcement
o	Health care providers

•	You can explain what each of the following requires:
o	The Health Insurance Portability and Accountability Act (HIPAA) 
o	The Financial Services Modernization Act 

•	You can define each of the following terms associated with safeguarding data stored in a database and explain the extent of protection of data offered by each:
o	Setting a database password (password-protecting a database)
o	Encrypting a database
o	User-level security [Setting permissions by specifying the level of access for each user and group of users]
o	Strong password [No names of people or pets that can easily be associated with a user, no words that appear in a dictionary, at least 7 characters including upper and lower case letters, numbers, and symbols]

•	You can define and discuss what is involved in each of the following:
o	Risk management  [identification of risks or threats, implementation of security measures, monitoring of measures for effectiveness]
o	Risk assessment [determining what can go wrong, how likely is it to go wrong, and what the consequences will be, if something goes wrong]

•	You can define and discuss each of the following:
o	Backup
o	Anti-virus software [You must keep your anti-virus software updated for it to be useful, and even then you cannot be certain that your computer will not become infected before anti-virus software vendors have updated their products to identify and quarantine newly released malware.]
o	A firewall
o	Biometrics
o	Encryption
o	Intrusion detection software
o	Security-auditing software

•	You can define the term “social engineering,” give examples of social engineering that has resulted in security breaches, and identify measures that individuals and organizations can take to protect themselves against security breaches resulting from social engineering. [slides 142-145 in chap008modified.ppt]

Extended Learning Module H – Computer Crime and Forensics

•	You can identify ways in which computers can be involved in crime.

•	You can identify and discuss each of the following:
o	Virus hoax
o	Malware bot
o	Web defacing
o	The two phases of computer forensics
o	Places where a computer forensics specialist can look for information
o	Collection of information
o	Authentication
o	Analysis of digital information discovered
o	Ways of hiding information
o	Steganography
o	Who employs computer forensics investigators?

Haag Chapter 9 – Emerging Trends and Technologies

•	You can identify and discuss each of the following:
o	Security threats when using wireless networks
o	Biochips
o	Biometrics
o	Facial recognition software
o	Wearable computers
o	Automatic speech recognition
o	VoIP
o	Implant chips
o	Virtual reality
o	Applications of virtual reality
o	Software-as-a-service
o	Push technologies
o	Voice recognition
o	Repetitive stress (or strain) injury (to thumbs and forefingers from texting, for example)
o	Biometric security
o	RFID
o	RFID applications
o	The “Digital Divide”
o	How people are bridging the “digital divide”