Risk Assessment of Dyson Limited: MGMT6013 Managing Information System

This report provides a risk assessment of Dyson Limited, a British technology organization, and its information system. It includes an analysis of managerial roles, competitive advantage, and business process re-engineering. The report identifies different risks and provides mitigation strategies for each. It also discusses the elements that form the information system vision and information technology strategy for Dyson Limited.

Running head: MGMT6013 MANAGING INFORMATION SYSTEM
MGMT6013 MANAGING INFORMATION SYSTEM
(Critique and Risk Assessment Report)
Name of the Student
Name of the University
Author Note

1MGMT6013 MANAGING INFORMATION SYSTEM
Executive Summary
The following report is all about risk assessment of Dyson Limited, which is a British
Technology organization. The organization is involved in manufacturing different household
appliances like vacuum cleaners, hairdryers and heaters. In the report, an analysis has been
done with respect to the overall effect of information system on this organization. In addition,
it deals with managerial roles and competitive advantage. The next part deals with the effect
of information technology on business process re-engineering. The report highlights different
kind of risk and providing mitigation strategy for each of the identified risk. The last section
of the report deals with elements which combine to form information system vision and
information technology strategy for Dyson Limited.

2MGMT6013 MANAGING INFORMATION SYSTEM
Table of Contents
Introduction....................................................................................................................3
Discussion......................................................................................................................3
Impact of Information System on Dyson Limited.....................................................4
Analysis of management information system by using different methods................5
Identification of risk and proposing mitigation..........................................................6
Information Security Policies...................................................................................11
Conclusion....................................................................................................................14
References....................................................................................................................15

3MGMT6013 MANAGING INFORMATION SYSTEM
Introduction
Dyson Limited is a technological organization that has been established in the United
Kingdom. The organization was found by Sir James Dyson in the year 1991. Mostly, the
organization deals in the management of the production and manufacturing of household
appliances. These appliances include the likes of fans, heaters, air purifiers, vacuum cleaners
and other household appliances (Shedden et al., 2016). The company also paved the ways for
the involvement of the setting up of headquarters in Singapore in 2019 so that they can even
start their manufacturing of electric vehicles. This is to move their main focus to Asia. The
company is seen to be venturing into the different zones of manufacturing a varied range of
electronic and technological products and looking forward to expanding the business even
more. This organization started from being a household appliance building organization to an
organization focusing on the Research and Development team with the research, design and
development (Chockalingam et al., 2016). This is why, the Information Systems and the
Strategic advancements of the business has been taking into discussion for this report where
the development and the approaches for the creative thinking would be discussed in details,
comprising of the processes used for the analysis and the strategic issues, the developing
awareness of the ethical and social considerations for the strategic solutions and the
enhancement of the global perspectives for the strategies. The discussion would also include
the likes of the enhancement of the global perspectives with the strategies that have been
obtained and also by assessing Dyson’s strengths and weaknesses after the utilizations of the
Information Systems and the strategic use of the different ways of creative thinking.
Discussion
There are several ways by which Dyson used to operate its business operations, but it
has been changed since then for the inclusion of the technological advancements in recent

4MGMT6013 MANAGING INFORMATION SYSTEM
times. There has been a total influence of the different technological advancements in the
entire lookout of the approaches and the business operations by which the analysis of the
strategic advancements has been made (Mangla, Kumar & Barua, 2016). There are different
ways by which the involvement of the technological advancements has been made to use for
the handling of the issues. It has also been found that the organization also looks forward to
the involvement of the different ways of managing the generated information between the
organizations to make use of the benefits that the analytic strategies would put forward.
Impact of Information System on Dyson Limited
Management information system (MIS) aims to provide owner and decision-maker
which all the required details for decision making. MIS aims to provide background for
present data and trend analysis so that information can be collected on various areas of Dyson
Limited (Ganin et al., 2017). MIS is very much helpful in having all the detail information of
this organisation in both in the short and long interval. There are many benefits of
management information system like
Management of Business Data: Both the business owners and manager need to be
completely informed about the operation of Dyson Limited. It aims to analyse the main areas
of responsibilities (Singh, Yang & Mulvey, 2015). When the president of this organization
lookup for sales data of the last five months, then it is the duty of sales manager to provide all
the required information. Management information system provides easy access to the vital
data of the department.
Providing business decision: All the decision are validated if and only if the
provided information is validated. MIS aims to enhance the overall decision making as they
provide all the information which is accurate in nature (Zou, Kiviniemi & Jones, 2017).
There is need of self and cross checking of different features in management information

5MGMT6013 MANAGING INFORMATION SYSTEM
system. It will help in reducing overall errors and IT professional design the system for
providing a complete picture of the current scenario. Dyson Limited can make of MIS for
ensuring that all the managers work for same data set. All the decision is made on the
provided information.
Analysing of Current Business Trends: The main aspect of management
responsibilities is all about forecasting the strategic planning and along with proper budget.
This particular information system comprises of earlier data of the organization like revenue,
investment and breaking down of different components (Gadyatskaya et al., 2016). It comes
up with some special tool which is needed for evaluation of the relationship and analysing
future trends.
Analysing of Strategies: MIS is needed for evaluating various kind of possibilities
and examination of the current scenarios (Ajin et al., 2016). The system is needed for
evaluating what happens on the basis of collected data and how Dyson Limited has operated
in the earlier days.
Analysis of management information system by using different methods
Business Process reengineering comes into action from management theories which is
needed for making business to best condition. Business processing reengineering has
highlighted the power of information technology which is needed for decision-making (Iqbal
et al., 2016). The overall success of BPR is completely based on information technology.
Information system in an organization is required for making an effective strategy as per the
need of the business. Information is defined as the key measures of an organization which is
needed for analysing process and overall performance of an organization. BPR does not adopt
new system but also aims to create certain system which affects the whole organization
(Soomro, Shah & Ahmed, 2016). The first focus is on the business process and not on the

6MGMT6013 MANAGING INFORMATION SYSTEM
information by application of certain tools related to information technology. IS aims to play
a key role in the domain of business process reengineering.
The current relation in between information system in business processing re-
engineering (BPR) is all about making changes in the process for evaluation, identification
and adopting certain strategies (Kumar & Yadav, 2015). BPR aims to overcome certain
number of challenges by making use of information and information technology if and only if
the system is working bad then the business will go downwards. Now if the system is
working effective then the Dyson Limited will improve and reach a good position. The
current delivery system of Dyson Limited is completely based on an information system
where the organization aims to collect data about customer (Taylor, 2015). After this, the
organization will make a strategy as per the collected requirement. Dyson Limited does all
the given process by making use of information system where all the components of the
system are being used. The main focus of the current information system is all about
regeneration of the current business process followed by analysing needs. All the manager of
Dyson Limited can implement BPR under IT system for having competitive advantage. The
mere focus is all about proper service to most of their customers (Jatobá et al., 2016). In BPR,
both information system and information technology are considered to be as a critical
element.
Identification of risk and proposing mitigation
In the present world, protecting some of important data is vital for Dyson Limited.
Customer needs to ensure that all the provided information is completely secure with the
organization. Most of the rigid clients that have sensitive information look for proper data
security infrastructure for doing business (Laudon & Laudon, 2016). Cyber-security focus on
understanding, controlling, mitigating various risk on the information asset of the
organization. Risk can be defined as financial loss to the organization for the organization

7MGMT6013 MANAGING INFORMATION SYSTEM
which is found to be very much high. There are mainly three factors which comes into play
like threat, vulnerability and importance of the asset. Some of the common methods by which
the organization can encounter financial damage are
Loss of data: Any kind of theft of trade secret of Dyson Limited can easily result in
losing overall business to most of their competitors (Noe et al., 2017). Theft of customer
details of Dyson Limited can result in loss of trust and attrition of its customer.
Downtime of System: If anyhow the system fails to carry out some of its basic
function then the customer will not be able to place a certain number of orders (Fountas et al.,
2015). In addition, the employee will not be able to complete their jobs.
Legal Effect: If anyhow an individual deals data from any of the database of Dyson
Limited, then it can incur fines to that organization. It will incur fines even if the data is not
that much valuable (Al Shobaki & Naser, 2016). It can result in various kind of legal cost
when that individual fails to comply with data protection needs.
Information risk assessment
Identification and Prioritizing assets: The important asset of Dyson Limited are a
server, client details, sensitive documents and secrets for trading (Soomro, Shah & Ahmed,
2016). For each of the asset, a list of information is being collected like
 Data
 Information
 Interfaces
 Users
 IT security policies
 Network topology

8MGMT6013 MANAGING INFORMATION SYSTEM
 Flow of information
 Environment security.
Most of the organization like Dyson Limited come up with a limited budget for
overall risk assessment (Khanam, Siddiqui & Talib, 2016). Some of the important asset of the
organization are legal standing, importance of organization.
Identification of threats: A threat can be defined as anything which can result in
exploitation of overall vulnerability to breach of security. It can ultimately result in overall
damage to Dyson Limited (Smith, & Wong, 2016). Hackers and malware aim to leap the
mind for various kind of threat like
Human Interference: This threat is considered to have the highest probability
irrespective of the business in which Dyson Limited is. Any employee of the organization can
delete file accidentally. In addition, they can also click on the malware links and physical
damage to a piece of equipment (Schwalbe, 2015). Dyson Limited need to back their data on
regular interval which is inclusive of system setting and other details related to configuration.
They need to carefully keep track of various changes in the critical system.
Natural disasters: There are many natural disasters which can bring damage in-
comparison to hacker. Dyson Limited can not only lose data but also the server and
applications too (Theorin et al., 2017). Dyson Limited should put their server room on the
first floor of the building as this area has a maximum risk of flood.
System failure: The chance of system failure mainly depends on the overall quality of
system. If new system with high-equipment is employed then there is minimum chances of
system failure (Marchewka, 2016). On the contrary, if the system is old and purchased from
unknown vendor, then the chances of failure are found to be high.

9MGMT6013 MANAGING INFORMATION SYSTEM
Identification of vulnerability: Vulnerability can be stated as any kind of weakness
where a threat can be exploited as a result of security breach. It can ultimately damage the
whole organization. All the vulnerability of the system can be identified by using
vulnerability analysis, NIST framework, commercial data, and team for incident response
(Tatoglu et al., 2016). There is need of testing the information system as it help in analysing
some of the vulnerability of the system. The testing phase comprises of test for information
security and its evaluation, techniques for penetration testing and last tools for automated
vulnerability. Dyson Limited can reduce software based vulnerabilities by making use of
proper patch management. The organization need to move their server to the third floor of the
building that will minimizing the vulnerability to flooding.
Analysing Controls: There is a need of analysis of control which can take place in
the planning stage for reducing the chance of threat or even exploiting a vulnerability in the
system. There is need for implementing proper controls by using technical means like system
hardware or even software, identification and authentication subsystem (Chockalingam et al.,
2016). Some of the non-technical control of the system is merely inclusive of certain security
policies, proper action and physical environment. Technical and non-technical controls are
sub-divided as preventive or detective one.
Recommending Controls: By making use of level of risk as basis, there is need of
analysing the overall action where senior management is completely responsible for
individual. It is mainly done so that they can mitigate all the involved risk (Mangla, Kumar &
Barua, 2016). There are some kind of guidelines for each level of risk
High: The plan along with proper measures need to be developed fast.
Medium: There is need of right measures which is to be developed in the given time
period.

10MGMT6013 MANAGING INFORMATION SYSTEM
Low: The team member need to come up with decision for accepting risk and
implementing the right action.
In addition to above, the organization need to take into account the following points
like
 Policies of Dyson Limited
 Impact of operation
 Reliability and safety.
 Effectiveness of recommended controls.
Threat Vulnerabil
ity
Asset Impact Likeliho
od
Risk Recommendat
ion
Failure
of the
system
(High)
The current
AC in
Dyson
Limited is
ten years
old
(High)
Servers
(Critical)
Various
services
like
website
and
email
will be
unavaila
ble for
three
hours.
(Critical
)
The
present
room
temperat
ure in the
server
room is
around
42 C.
(High)
Loss to
organisati
on.
(High)
Need to buy
new AC
DDoS The Website All DDoS Medium Proper

11MGMT6013 MANAGING INFORMATION SYSTEM
attack
(High)
firewall of
this
organizatio
n needs to
be
configured
properly
(Low)
(Critical) resource
on
website
will not
be
available
(Critical
)
attack
took
place 1
years
ago.
(Medium
)
Loss due
to
downtime
of
organizati
on.
(Medium)
monitoring of
firewall
Natura
l
disaste
r
(High)
Server is
on the first
floor of the
building
(Low)
Server
(Critical)
All the
services
related to
server
will be
unavaila
ble
(Critical
)
Last
flood
took
place
around 5
years
ago.
(Low)
(Low) No action is
required
Huma
n
Interfa
ce by
mistak
e
(High)
There is a
need for
proper
configurati
on of
software’s
(Ganin et
al., 2017).
Shared
files(Mediu
m)
All the
vital data
can be
lost
(Medium
)
(Low) Monitoring on
regular interval
and arranging
backups.

12MGMT6013 MANAGING INFORMATION SYSTEM
(Low)
Information Security Policies
Information security policies can be as a collection of rules which is mainly followed
by Dyson Limited. It mainly ensures that all the user or network of the information
technology in the organization focus on protecting vital data of the origination (Singh, Yang
& Mulvey, 2015). Some of the elements of information security policy are discussed below
like
Purpose: Dyson Limited should create ISP for a variety of reason like
 Creating a general approach of information.
 For detecting any kind of compromising with information security like data misuse,
system application
 Protecting the overall reputation of the organization by providing an effective
mechanism.
Scope: ISP needs to address various data, programs, facilities and another kind of
infrastructure and third parties in Dyson Limited.
Objective of Information Security: An organization like Dyson Limited aims to
compose the overall working of ISP that has well-defined security and strategy. The
management has completely reached a level of agreement. There is need of simplifying the
policy language among most of the staff members (Zou, Kiviniemi & Jones, 2017). The
overall redundancy of policy needs to be avoided as it makes the document out of the sync. It
is the duty of security professional need to analyse that ISP comes up with equal with
institutional gravity for the enacted policies in Dyson Limited.

13MGMT6013 MANAGING INFORMATION SYSTEM
Authority and access policy: In general a security policy comes up in hierarchical
pattern which highlights that inferior staff is not allowed to share any kind of information.
The staff member can share information if and only if they are given authorization
(Gadyatskaya et al., 2016). A senior manager has enough of the authority for decision-
making where the data can be easily shared and stored. Policy refinement comes into picture
for defining the proper administrative control. Access to the network and server of Dyson
Limited require proper authentication in the form of password and ID tokens (Ajin et al.,
2016). Monitoring system needs to be implemented so user can record the login attempts and
exact time and date of log-in and sign-off.
Session of Security Awareness: Proper sharing of IT security policy with the staff
members is considered to be as one of the important step. There is need to read and sign it for
acknowledging document (Iqbal et al., 2016). This not mean that they are not familiar with
the new kind of policies. For the employees of Dyson Limited, there is need for engaging
training session that will engage its employee towards a positive mood. The session will
ensure that all procedure takes place for protecting data, confidence level and issues with
respect to data sensitivity.
Conclusion
From the above pages, it can be concluded that report highlights risk assessment for
Dyson Limited. An investigation has been done with respect to information technology and
information system in Dyson Limited. Identification has been done with respect to different
kind of risk and certain number of mitigating techniques. A proper definition of information
system and its role in Dyson Limited has been provided. In the report, an analysis has been
done with respect to the impact of information system on organization. It merely focus on
consequent changes in managerial roles and competitive advantage for information system.

14MGMT6013 MANAGING INFORMATION SYSTEM
An analysis has been carried out with respect to management information system by making
use of wide range of approaches. In the present era, data protection is considered to be an
important aspect for business. There is need of ensuring that the provided information is
completely secure. Clients of Dyson Limited need to ensure the fact that the provided
information is completely secured. If the organisation fails to protect the vital data then it will
lose the business. Most of clients of Dyson Limited look for rigid data security before doing
business. For strong handling of data security, it can affect the overall business so there is
need of analysing some components like a threat, vulnerability and different risk. In this
report, a risk assessment report for supporting assessment process has been provided. For
each of the identified threat, the report highlights a budget, procedure and policies. Each of
identified threat describes the vulnerabilities, risk and overall impact of likelihood of
occurrence. The last section of risk assessment discusses about list of recommendation.

15MGMT6013 MANAGING INFORMATION SYSTEM
References
Ajin, R. S., Loghin, A. M., Jacob, M. K., Vinod, P. G., & Krishnamurthy, R. R. (2016). The
risk assessment study of potential forest fire in Idukki Wildlife Sanctuary using RS
and GIS techniques. International Journal of Advanced Earth Science and
Engineering, 5(1), 308-318.
Al Shobaki, M. J., & Naser, S. S. A. (2016). Performance development and its relationship to
demographic variables among users of computerized management information
systems in Gaza electricity Distribution Company.
Chockalingam, S., Hadžiosmanović, D., Pieters, W., Teixeira, A., & van Gelder, P. (2016,
October). Integrated safety and security risk assessment methods: a survey of key
characteristics and applications. In International Conference on Critical Information
Infrastructures Security (pp. 50-62). Springer, Cham.
Fountas, S., Sorensen, C. G., Tsiropoulos, Z., Cavalaris, C., Liakos, V., & Gemtos, T. (2015).
Farm machinery management information system. Computers and Electronics in
Agriculture, 110, 131-138.
Gadyatskaya, O., Harpes, C., Mauw, S., Muller, C., & Muller, S. (2016, June). Bridging two
worlds: reconciling practical risk assessment methodologies with theory of attack
trees. In International Workshop on Graphical Models for Security (pp. 80-93).
Springer, Cham.
Ganin, A. A., Quach, P., Panwar, M., Collier, Z. A., Keisler, J. M., Marchese, D., & Linkov,
I. (2017). Multicriteria decision framework for cybersecurity risk assessment and
management. Risk Analysis.

16MGMT6013 MANAGING INFORMATION SYSTEM
Iqbal, H. H., Taseer, R., Anwar, S., Qadir, A., & Shahid, N. (2016). Human health risk
assessment: Heavy metal contamination of vegetables in Bahawalpur,
Pakistan. Bulletin of Environmental Studies, 1(1), 10-17.
Jatobá, A., Bellas, H. C., Bonfatti, R., Burns, C. M., Vidal, M. C. R., & de Carvalho, P. V. R.
(2016). Designing for patient risk assessment in primary health care: a case study for
ergonomic work analysis. Cognition, Technology & Work, 18(1), 215-231.
Khanam, S., Siddiqui, J., & Talib, F. (2016). Role of information technology in total quality
management: a literature review. Khanam, S, Siddiqui, J. and Talib, F.(2013),“Role
of Information Technology in Total Quality Management: A Literature Review”,
International Journal of Advanced Research in Computer Engineering and
Technology, 2(8), 2433-2445.
Kumar, C., & Yadav, D. K. (2015). A probabilistic software risk assessment and estimation
model for software projects. Procedia Computer Science, 54, 353-361.
Laudon, K. C., & Laudon, J. P. (2016). Management information system. Pearson Education
India.
Mangla, S. K., Kumar, P., & Barua, M. K. (2016). An integrated methodology of FTA and
fuzzy AHP for risk assessment in green supply chain. International Journal of
Operational Research, 25(1), 77-99.
Marchewka, J. T. (2016). Information technology project management: Providing
measurable organizational value. John Wiley & Sons.
Noe, R. A., Hollenbeck, J. R., Gerhart, B., & Wright, P. M. (2017). Human resource
management: Gaining a competitive advantage. New York, NY: McGraw-Hill
Education.

17MGMT6013 MANAGING INFORMATION SYSTEM
Schwalbe, K. (2015). Information technology project management. Cengage Learning.
Shedden, P., Ahmad, A., Smith, W., Tscherning, H., & Scheepers, R. (2016). Asset
identification in information security risk assessment: A business practice
approach. Communications of the Association for Information Systems, 39(1), 15.
Singh, J. P., Yang, S., & Mulvey, E. P. (2015). Reporting guidance for violence risk
assessment predictive validity studies: The RAGEE Statement. Law and Human
Behavior, 39(1), 15.
Smith, L. C., & Wong, M. A. (Eds.). (2016). Reference and Information Services: An
Introduction: An Introduction. ABC-CLIO.
Soomro, Z. A., Shah, M. H., & Ahmed, J. (2016). Information security management needs
more holistic approach: A literature review. International Journal of Information
Management, 36(2), 215-225.
Soomro, Z. A., Shah, M. H., & Ahmed, J. (2016). Information security management needs
more holistic approach: A literature review. International Journal of Information
Management, 36(2), 215-225.
Tatoglu, E., Bayraktar, E., Golgeci, I., Koh, S. L., Demirbag, M., & Zaim, S. (2016). How do
supply chain management and information systems practices influence operational
performance? Evidence from emerging country SMEs. International Journal of
Logistics Research and Applications, 19(3), 181-199.
Taylor, R. G. (2015). Potential problems with information security risk
assessments. Information Security Journal: A Global Perspective, 24(4-6), 177-184.
Theorin, A., Bengtsson, K., Provost, J., Lieder, M., Johnsson, C., Lundholm, T., &
Lennartson, B. (2017). An event-driven manufacturing information system

18MGMT6013 MANAGING INFORMATION SYSTEM
architecture for Industry 4.0. International Journal of Production Research, 55(5),
1297-1311.
Zou, Y., Kiviniemi, A., & Jones, S. W. (2017). A review of risk management through BIM
and BIM-related technologies. Safety science, 97, 88-98.