Week 5 Project

Sandy4tx
Week5Notes19.pdf

/

Software and Data Quality Problems

Software presents some quality problems because it may be impossible to eliminate software bugs due to the high costs of correcting software errors. Data quality can also affect system performance and quality. Three principal areas that contribute to system quality problems are:

Defects and Bugs: Bugs are program code errors or defects. About 60% of errors discovered during testing are due to speci�cations that are ambiguous, in con�ict, in error, or missing in design documentation. Zero defects can’t be achieved in large programs. Even with rigorous testing you will never know for sure that a piece of software is dependable until the product proves itself as such after rigorous operational use. We can’t eliminate all bugs and we can’t accurately know the seriousness of existing bugs.

Data quality problems: Poor quality data is the most common source of IS failure. Data that is inaccurate, inconsistent, or untimely with other sources of information can create serious �nancial and operational problems for businesses. Poor data quality might stem from errors during faulty database and IS design or data input.

Maintenance nightmare: Maintenance is the most expensive phase of the systems development process. Nearly half of the time of IS staff is spent on maintaining existing systems in most businesses. The enterprise might experience large internal changes in leadership or structure or change may come from the surrounding environment. The organizational changes affect information requirements. Software complexity and faulty analysis of information requirements, systems analysis, and system design also contribute to long-term software maintenance problems.

Control Environment

Controls consist of all the methods, organizational procedures, and policies that ensure the safety of an organization’s assets, adherence to management standards, and reliability of accounting records. The two primary categories of controls are:

Application controls: Are unique to speci�c, computerized applications. They focus on the accuracy and completeness of input, maintenance, updating, and validity of the information contained in the system. Application controls include input controls, processing controls, and output controls.

General controls: Handle the overall design, security, and use of computers, �les, and programs for the organization’s IT infrastructure. General controls consist of administrative disciplines, computer operations controls, controls over the system implementation process, data �le security controls, physical hardware controls, and system software controls.

Risk assessment: Speci�es that users and designers of systems must identify all the control weaknesses and control points to perform risk assessment. They should also perform a cost-bene�t analysis of controls and design controls that can effectively safeguard systems without making them too cumbersome to use.