ITC 429 Test 1

Agility

ability to respond quickly

Latent-sensitivity

data such as real-time voice and high-quality video

Intrusion Prevention Systems (IPSs)

designed to take immediate action—such as blocking specific IP addresses—whenever a traffic-flow anomaly is detected (active defense)

IT Project Managers

develop requirements, budgets, and schedules for their firm's information technology projects. They coordinate such projects from development through implementation

Formal Processes or Standard Operating Procedures (SOP)

documented and have well-established steps

Reduce stage

recombines partial results

Data Mining

software that enables users to analyze data from various dimension or angles, categorize them, and find correlative patterns among fields in the data warehouse

IT Managers

play a vital role in the implementation and administration of digital technology. They plan, coordinate, and direct research on the computer-related activities of firms

Permanent Denial-of-Service (PDoS)

prevents the target's system or device from working. Instead of collecting data or providing some on-going perverse function, its objective is to completely prevent the target's device(s) from functioning

Extranets

private, company-owned networks that can be logged into remotely via the Internet

OLTP

processes each transaction as it occurs (real-time) •Batch processing costs less than OLTP, but may be inaccurate from update delays

MapReduce

provides a reliable, fault-tolerant software framework to write applications easily that process vast amounts of data (multi-terabyte datasets) in-parallel on large clusters (thousands of nodes) of commodity software

Data warehouses

pull together data from disparate sources and databases across an entire enterprise •primary source of cleansed data for analysis, reporting, and Business Intelligence (BI)

Virtual Private Networks (VPNs)

used where security of transmissions is a concern, because they encrypt the packets before they are transferred over the network

Intranets

used within a company for data access, sharing, and collaboration

Spyware

tracking software that is not designed to intentionally damage or disable a system but to monitor or track activities

WiMax

transmits voice, data, and video over high-frequency radio signals designed as alternative to cable and DSL

Sentiment Analysis

trying to understand consumer intent

Ransomware

type of malware that is designed to block access to a computer system until a sum of money has been paid

Informal Processes

typically undocumented, undefined, or are knowledge-intensive

three types of hackers

white hat black hat gray hat

M2M and IoT

widely used to automate businesses ranging from transportation to healthcare

zombies

A group of infected computers that can be controlled and organized into a network on the command of a remote botmaster (also called a bot herder)

Cloud Service Agreements

A negotiated agreement between a company and service provider that can be a legally binding contract or an informal contract

Internal Controls (IC)

A process to ensure that sensitive data are protected and accurate designed to achieve: Reliability of financial reporting, to protect investors Operational efficiency Compliance with laws, regulations, and policies Safeguarding of assets

Near-Field Communication (NFC)

Enables two devices within close proximity to establish a communication channel and transfer data using radio waves •More secure than other wireless technologies

Software as a Service (SaaS)

End-user apps, like SalesForce

Public Cloud

Multiple-tenant virtualized services utilizing the same pool of servers across a public network (distributed)

Machine-to-machine (M2M) Technology

Enables sensor-embedded products to share reliable real time data via radio signals

Modulation and Coding

Techniques used by modem to adapt the signal to the media

Four V's of Data Analytics

Variety Volume Velocity Veracity

Signal Frequency Spectrum

All the frequency components of a signal

Distributed Database Architecture

Allow both local and remote access Use client/server architecture to process requests

Hadoop

Apache processing platform that places no conditions on the processed data structure

Principle of 90/90 Data Use

As high as 90 percent, is seldom accessed after 90 days (except for auditing purposes) oRoughly 90 percent of data lose most of their value after 3 months

Centralized Database Architecture

Better control of data quality Better IT security

Signal

Binary information we want to send

Mobile Networks

Bluetooth Wi-Fi Wimax

White Hat

Computer security specialist who breaks into protected systems and network to test and assess their security

The three objectives of data and information systems security

Confidentiality Integrity Availability

Business Process Management (BPM)

Consists of methods, tools, and technology to support and continuously improve business processes

Business Process Reengineering (BPR)

Continuous examination to determine whether processes are still necessary or operating at peak efficiency by eliminating wasted steps

Enterprise-wide Data Governance

Crosses boundaries and used by people through the enterprise. Reduces legal risks associated with unmanaged or inconsistently managed information.

Business Intelligence Challenges

Data selection and quality Alignment with business strategy and BI strategy

Hardware and software that power computing resources, like EC2 & S3 (Amazon Web Services)

Data shared among clouds, systems, apps, regardless the data source or storage location

•Online Transaction Processing (OLTP)

Designed to manage transaction data, which are volatile & break down complex information into simpler data tarbles and strike a balance between transaction-processing efficiency and query efficiency •Cannot be optimized for data mining

Business Records

Documentation of a business event, action, decision, or transaction

Management Information Systems (MIS)

General-purpose reporting systems that provide reports to managers for tracking operations, monitoring, and control

IT Architecture

Guides the process of planning, acquiring, building, modifying, interfacing and deploying IT resources in a single department within an organization

Infrastructure as a Service (IaaS)

Hardware and software that power computing resources, like EC2 & S3 (Amazon Web Services)

Social-Mobile-Analytics-Cloud (SMAC) Model

Huge data centers accessible via the Internet form the fore for the cloud by providing 24/7 access to storage, apps, and services. -Handheld and wearable devices and their users form the edge of the cloud. -Social channels connect the core and edge.

Responsiveness

IT capacity that can be easily scaled up or down as needed

Transaction Processing Systems (TPS)

Improve sales, customer satisfaction, and reduce many other types of data errors with financial impacts

Input-Processing-Output Model

Input-Processing-Output-Storage-Feedback

Data Warehouses

Integrate data from multiple databases and data silos, and organize them for complex analysis, knowledge discovery, and to support decision making

Decision Support Systems (DSS)

Interactive, knowledge-based applications that support decision making

IT Infrastructure

Inventory of the physical IT devices that an organization owns and operates

Media Bandwidth

Limit in range of frequency signals

Capacity Bandwidth

Maximum bits per second that can be transmitted

Circuit switching

Older technology that originated with telephone calls oInefficient for digital transmission

identity theft

One of the worst and most prevalent cyberthreats oMade worse by electronic sharing and databases oBusinesses reluctant to reveal incidents in which their customers' personal financial information may have been stolen, lost, or compromised

Black Hat

Person who attempts to find computer security vulnerabilities and exploit them for personal and/or financial gain, or other malicious reasons

Gray Hat

Person who may violate ethical standards or principles, but without the malicious intent ascribed to black hat hackers

Social-Mobile-Analytics-Cloud (SMAC)

Powerful social influences impact advertising and marketing. Consumer devices go digital and offer new services.

Active Data Warehouse (ADW)

Real-time data warehousing and analytics Transform by standardizing formats, cleaning the data, integration

Data tampering

Refers to an attack during which someone enters false or fraudulent data into a computer, or changes/deletes existing data

Enterprise architecture (EA)

Reviews all the information systems across all departments in an organization to develop a strategy to organize and integrate the organization's IT Infrastructures

Four Important Factors When Choosing a Mobile Network

Simple Connected Intelligent Trusted

Declarative language

Simplifies data access by requiring that users only specify what data they want to access without defining how they will be achieved

Private Cloud

Single-tenant environments with stronger security and control (retained) for regulated industries and critical data

Data Marts

Small-scale data warehouses that support a single function or one department •Enterprises that cannot afford to invest in data warehousing may start with one or more data marts

Executive Information Systems (EIS)

Strategic-level information systems that help executives and senior managers analyze the environment in which the organization exists

Master Data & Management (MDM)

Synchronizes critical data from disparate systems into one master file

Principle of data in context

The capability to capture, process, format, and distribute data in near real time or faster requires a huge investment in data architecture

Veracity

Validating data and extracting insight that manager and workers can trust are key factors successful analytics. Trust in analytics. Trust analytics has grown more difficult with the explosion of data sources

Principle of Diminishing Data Value

The value of data diminishes as they age Blind spots (lack of data availability) of 30 days or longer inhibit peak performance Global financial services institutions rely on near-real-time data for peak performance

Platform as a Service (PaaS)

Tools and services making coding and deployment faster and more efficient, like Google App Engine

•Electronic Records Management (EMR)

Workflow software, authoring tools, scanners, and databases that manage and archive electronic documents and image paper documents oIndex and store documents according to company policy or legal compliance

Modem

a device that modulates/demodulates signal for transportation

Attack Vector

a path or means by which a hacker can gain access to a computer or network server in order to deliver a malicious outcome

Cyberthreat

a threat posed by means of the Internet (a.k.a. cyberspace) and the potential source of malicious attempts to damage or disrupt a computer network, system, or application

Intellectual Property

a work or invention that is the result of creativity that has commercial value •Includes copyrighted property such as a blueprint, manuscript or a design, and is protected by law from unauthorized use by others. can represent more than 80% of a company's value.

Flexibility

ability to quickly integrate new business functions or to easily reconfigure software or applications

Biometric Control

an automated method of verifying the identity of a person, based on physical or behavioral characteristics The most common biometrics are a thumbprint or fingerprint, voice print, retinal scan, and signature

Cloud Services

any computing resource provided over the Internet on demand, rather than run applications from software stored on company-owned server or computer

Incident

attempted or successful unauthorized access to a network, system, or application; unwanted disruption or denial of service; unauthorized use of a system for processing or storage of data; changes to a system without the owner's knowledge, instruction, or consent

Internet Protocol (IP)

basic technology that makes global communication possible. Each devise attached to a network has a unique IP address that enables it to send and receive files made up of packets

Map stage

breaks up huge data into subsets

Text Mining

broad category involving interpreted words and concepts in context

Hacking

broadly defined as intentionally accessing a computer without authorization or exceeding authorized access. There are three types of hackers

Customer Experience (CX)

building the digital infrastructure that allows customers to do whatever they want to do, through whatever channel they choose to do it.

Batch Processing

collects all transactions for a time period, then processes the data and updates the data store

Globalization

companies can outsource most of their non-core functions, such as HR and finance, to offshore companies and use ICT to stay in contact with its global employees, customers and suppliers 24/7

Process

comprised of the activities that convert inputs into outputs by doing work

Application Program Interface (API)

consists of a set of functions, commands, and protocols used by programmers for OS-interactivity without having to write a program from scratch

Distributed Denial-of-Service (DDoS)

crashes a network or website by bombarding it with traffic (i.e., requests for service) and effectively denies service to all those legitimately using it, leaving it vulnerable to other threats

Targets for cyberattacks

critical infrastructure, theft of intellectual property, identity theft, BYOD, and social media

Prioritized Traffic

data and apps that are time-delay-sensitive or latency-sensitive apps

SDDC Goals

decrease costs and increase agility, policy compliance and security by deploying, operating, managing and maintaining applications.

Digital Business Model

defined by how a business makes money via digital technology

Master Data

describes the enterprises's busniess entities

Antivirus Software

designed to detect malicious codes and prevent users from downloading them

Bring Your Own Device (BYOD)

employees providing their own (mobile) devices for business purposes to reduce expenses through cut purchase and maintenance costs. •Roughly 74% of U.S. organizations are using or planning to use BYOD •Cuts business costs by not having to purchase and maintain employees' mobile devices

Chief Technology Officers (CTOs)

evaluate the newest and most innovative technologies and determine how they can be applied for competitive advantage

Big data

extremely large data set that is too large or complex to be analyzed using traditional data processing techniques

Software-Defined Data Center (SDDC)

facilitates the integration of the various infrastructure silos within organizations

Telephony Denial-of-Service (TDoS)

floods a network with phone calls and keeps the calls up for long durations to overwhelm an agent or circuit and prevent legitimate callers, such as customers, partners, and suppliers, from using network resources

Mega Trends

forces that shape or create the future of business, the economy, and society

"The Cloud"

general term for infrastructure that uses the Internet and private networks to access, share, and deliver computing resources

Exception

generated only when something is outside designated parameters

Throttle Traffic

gives latency-sensitive apps priority, other types of traffic need to be held back (throttled)

botnet

group of external attacking entities and is a totally different attack method/vector from malware, which is internal to the system

Data Scientists

manage and analyze massive sets of data for purposes such as target marketing, trend analysis, and the creation of individually tailored products and services

Key Performance Indicators (KPIs)

measures that demonstrate the effectiveness of a business process at achieving organizational goals. They present data in easy-to-comprehend and comparison-ready format .measures that demonstrate the effectiveness of a business process at achieving organizational goals. They present data in easy-to-comprehend and comparison-ready format Examples: current ration; accounts payable turnover; net profit margin; new followers per week; cost per lead; order status.

Security risk for BYOD

mobile devices rarely have strong authentication, access controls, and encryption even though they connect to mission-critical data and cloud services. Could also be lost or stolen

Unstructured data

no predictable format

Factors leading to an increased risk of cyberattack

oInterconnected, interdependent, wirelessly networked business environment oSmaller, faster, cheaper computers and storage devices oDecreasing skills necessary to be computer hacker oInternational organized crime taking over cybercrime oLack of management support

Advanced Persistent Threats (APT)

oLaunched by attacker through phishing to again access to enterprise's network oDesigned for long-term espionage oProfit-motivated cybercriminals often operate in stealth mode to continue long-term activities

Packet Switching

oTransfers data or voice oFiles are broken into packets, numbered sequentially, routed individually to their destinations oWhen received at the destination, the packets are reassembled into their proper sequences

Internal transactions

originate or occur within the organization (payroll, purchases, etc.)

External transactions

originate outside the organization (customers, suppliers, etc.)

Deliverables

outputs created through work toward a desired benefit or expected performance improvement

Adware

software that embeds advertisement in the application

Malware

refers to hostile or intrusive software, including computer viruses, rootkits, worms, Trojan horses, ransomware, and other malicious programs used to disrupt computer or mobile operations, gather sensitive information, gain access to private computer systems

Business continuity

refers to maintaining business functions or restoring them quickly when there is a major disruption

Periodic

reports created or run according to a pre-set schedule

Intrusion Detection Systems (IDSs)

scans for unusual or suspicious traffic (passive defense)

Business Process

series of steps by which an organization coordinates and organizes tasks to get work done

Hacktivist

short for hacker-activist, or someone who performs hacking to promote awareness, or otherwise support a social, political, economic, or other cause

virtual machine

software-created computer

Wi-Fi

standard way to wirelessly connect computing devices through routers commonly connected to the Internet

Transactional Data

supports the applications

Critical infrastructure

systems and assets so vital to the country that their incapacity or destruction would have a debilitating effect

Data Analytics

technique of qualitatively or quantitatively analyzing a data set to reveal pattersn, trends, and associations that often relate to human behavior and interaction, to enhance productivity and business gain

Traffic Shaping

the ability to prioritize and throttle network traffic prioritizes the flow of traffic by delaying the flow of less important network traffic

Data governance

the control of enterprise data through formal policies and procedures to help ensure data can be trusted and are accessible.

Occupational fraud

the deliberate misuse of the assets of one's employer for personal gain

On-demand Economy

the economic activity created by technology companies that fulfill consumer demand through the immediate provisioning of products and services.

IT Consumerization

the migration of consumer technology into enterprise IT environments. It's caused by personally owned IT becoming a capable and cost-effective solution for expensive enterprise equivalents

Internet of Things (IoT)

the network of physical objects or "things" embedded with electronics, software, sensors, and network connectivity, that enables these objects to collect and exchange data

Net neutrality

the principle that Internet Service Providers (ISPs) and their regulators treat all Internet traffic the same way

Risk

the probability of a threat successfully exploiting a vulnerability and the estimated cost of the loss or damage

Digitization

the process of transforming any kind of activity or information into a digital format that can be collected, stored, searched, and analyzed electronically—and efficiently

•Online Analytics Processing (OLAP)

•A means of organizing large business databases •Divided into one or more cubes that fit the way business is conducted

Business Intelligence

•Across industries in all size enterprises •Used in operational management, business process, and decision making •Provides moment of value to decision makers •Unites data, technology, analytics, & human knowledge to optimize decisions •BI "unites data, technology, analytics, and human knowledge to optimize business decision and ultimately drive an enterprise's success" (The Data Warehousing Institute)

Dirty Data

•Lacks integrity/validation and reduces user trust •Incomplete, out of context, outdated, inaccurate, inaccessible, or overwhelming

Enterprise Risk Management Framework (ERM)

•Risk-based approach to managing an enterprise •Developed by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) ERM •Integrates internal control, the Sarbanes-Oxley Act mandates, and strategic planning Consists of eight components

Spear Phishing

•select groups of people with something in common •Trick user into opening an infected email •Emails sent that look like the real thing •Confidential information extracted through seemingly legitimate website requests for passwords, user IDs, PINs, account numbers, and so on.