MGMT6013: Managing Information System - Critique and Risk Report

This report provides a comprehensive risk assessment of Dyson Limited, a British technology organization, focusing on the impact of information systems. It analyzes the role of management information systems (MIS), examining their benefits for data management, business decision-making, and trend analysis within Dyson. The report explores the influence of information technology on business process re-engineering (BPR) and identifies potential risks, including data loss, system downtime, and legal consequences, proposing mitigation strategies for each. Furthermore, the report examines the elements that form Dyson Limited's information system vision and IT strategy, considering factors like asset identification, threat analysis, and vulnerability assessment. The analysis covers the impact of information systems on managerial roles, competitive advantages, and ethical and social considerations in the strategic solutions. The report emphasizes the importance of information security policies for protecting sensitive data and maintaining a competitive edge in the market.

Running head: MGMT6013 MANAGING INFORMATION SYSTEM
MGMT6013 MANAGING INFORMATION SYSTEM
(Critique and Risk Assessment Report)
Name of the Student
Name of the University
Author Note

1MGMT6013 MANAGING INFORMATION SYSTEM
Executive Summary
The following report is all about risk assessment of Dyson Limited, which is a British
Technology organization. The organization is involved in manufacturing different household
appliances like vacuum cleaners, hairdryers and heaters. In the report, an analysis has been
done with respect to the overall effect of information system on this organization. In addition,
it deals with managerial roles and competitive advantage. The next part deals with the effect
of information technology on business process re-engineering. The report highlights different
kind of risk and providing mitigation strategy for each of the identified risk. The last section
of the report deals with elements which combine to form information system vision and
information technology strategy for Dyson Limited.

2MGMT6013 MANAGING INFORMATION SYSTEM
Table of Contents
Introduction....................................................................................................................3
Discussion......................................................................................................................3
Impact of Information System on Dyson Limited.....................................................4
Analysis of management information system by using different methods................5
Identification of risk and proposing mitigation..........................................................6
Information Security Policies...................................................................................11
Conclusion....................................................................................................................14
References....................................................................................................................15

3MGMT6013 MANAGING INFORMATION SYSTEM
Introduction
Dyson Limited is a technological organization that has been established in the United
Kingdom. The organization was found by Sir James Dyson in the year 1991. Mostly, the
organization deals in the management of the production and manufacturing of household
appliances. These appliances include the likes of fans, heaters, air purifiers, vacuum cleaners
and other household appliances (Shedden et al., 2016). The company also paved the ways for
the involvement of the setting up of headquarters in Singapore in 2019 so that they can even
start their manufacturing of electric vehicles. This is to move their main focus to Asia. The
company is seen to be venturing into the different zones of manufacturing a varied range of
electronic and technological products and looking forward to expanding the business even
more. This organization started from being a household appliance building organization to an
organization focusing on the Research and Development team with the research, design and
development (Chockalingam et al., 2016). This is why, the Information Systems and the
Strategic advancements of the business has been taking into discussion for this report where
the development and the approaches for the creative thinking would be discussed in details,
comprising of the processes used for the analysis and the strategic issues, the developing
awareness of the ethical and social considerations for the strategic solutions and the
enhancement of the global perspectives for the strategies. The discussion would also include
the likes of the enhancement of the global perspectives with the strategies that have been
obtained and also by assessing Dyson’s strengths and weaknesses after the utilizations of the
Information Systems and the strategic use of the different ways of creative thinking.
Discussion
There are several ways by which Dyson used to operate its business operations, but it
has been changed since then for the inclusion of the technological advancements in recent

4MGMT6013 MANAGING INFORMATION SYSTEM
times. There has been a total influence of the different technological advancements in the
entire lookout of the approaches and the business operations by which the analysis of the
strategic advancements has been made (Mangla, Kumar & Barua, 2016). There are different
ways by which the involvement of the technological advancements has been made to use for
the handling of the issues. It has also been found that the organization also looks forward to
the involvement of the different ways of managing the generated information between the
organizations to make use of the benefits that the analytic strategies would put forward.
Impact of Information System on Dyson Limited
Management information system (MIS) aims to provide owner and decision-maker
which all the required details for decision making. MIS aims to provide background for
present data and trend analysis so that information can be collected on various areas of Dyson
Limited (Ganin et al., 2017). MIS is very much helpful in having all the detail information of
this organisation in both in the short and long interval. There are many benefits of
management information system like
Management of Business Data: Both the business owners and manager need to be
completely informed about the operation of Dyson Limited. It aims to analyse the main areas
of responsibilities (Singh, Yang & Mulvey, 2015). When the president of this organization
lookup for sales data of the last five months, then it is the duty of sales manager to provide all
the required information. Management information system provides easy access to the vital
data of the department.
Providing business decision: All the decision are validated if and only if the
provided information is validated. MIS aims to enhance the overall decision making as they
provide all the information which is accurate in nature (Zou, Kiviniemi & Jones, 2017).
There is need of self and cross checking of different features in management information

5MGMT6013 MANAGING INFORMATION SYSTEM
system. It will help in reducing overall errors and IT professional design the system for
providing a complete picture of the current scenario. Dyson Limited can make of MIS for
ensuring that all the managers work for same data set. All the decision is made on the
provided information.
Analysing of Current Business Trends: The main aspect of management
responsibilities is all about forecasting the strategic planning and along with proper budget.
This particular information system comprises of earlier data of the organization like revenue,
investment and breaking down of different components (Gadyatskaya et al., 2016). It comes
up with some special tool which is needed for evaluation of the relationship and analysing
future trends.
Analysing of Strategies: MIS is needed for evaluating various kind of possibilities
and examination of the current scenarios (Ajin et al., 2016). The system is needed for
evaluating what happens on the basis of collected data and how Dyson Limited has operated
in the earlier days.
Analysis of management information system by using different methods
Business Process reengineering comes into action from management theories which is
needed for making business to best condition. Business processing reengineering has
highlighted the power of information technology which is needed for decision-making (Iqbal
et al., 2016). The overall success of BPR is completely based on information technology.
Information system in an organization is required for making an effective strategy as per the
need of the business. Information is defined as the key measures of an organization which is
needed for analysing process and overall performance of an organization. BPR does not adopt
new system but also aims to create certain system which affects the whole organization
(Soomro, Shah & Ahmed, 2016). The first focus is on the business process and not on the

6MGMT6013 MANAGING INFORMATION SYSTEM
information by application of certain tools related to information technology. IS aims to play
a key role in the domain of business process reengineering.
The current relation in between information system in business processing re-
engineering (BPR) is all about making changes in the process for evaluation, identification
and adopting certain strategies (Kumar & Yadav, 2015). BPR aims to overcome certain
number of challenges by making use of information and information technology if and only if
the system is working bad then the business will go downwards. Now if the system is
working effective then the Dyson Limited will improve and reach a good position. The
current delivery system of Dyson Limited is completely based on an information system
where the organization aims to collect data about customer (Taylor, 2015). After this, the
organization will make a strategy as per the collected requirement. Dyson Limited does all
the given process by making use of information system where all the components of the
system are being used. The main focus of the current information system is all about
regeneration of the current business process followed by analysing needs. All the manager of
Dyson Limited can implement BPR under IT system for having competitive advantage. The
mere focus is all about proper service to most of their customers (Jatobá et al., 2016). In BPR,
both information system and information technology are considered to be as a critical
element.
Identification of risk and proposing mitigation
In the present world, protecting some of important data is vital for Dyson Limited.
Customer needs to ensure that all the provided information is completely secure with the
organization. Most of the rigid clients that have sensitive information look for proper data
security infrastructure for doing business (Laudon & Laudon, 2016). Cyber-security focus on
understanding, controlling, mitigating various risk on the information asset of the
organization. Risk can be defined as financial loss to the organization for the organization

7MGMT6013 MANAGING INFORMATION SYSTEM
which is found to be very much high. There are mainly three factors which comes into play
like threat, vulnerability and importance of the asset. Some of the common methods by which
the organization can encounter financial damage are
Loss of data: Any kind of theft of trade secret of Dyson Limited can easily result in
losing overall business to most of their competitors (Noe et al., 2017). Theft of customer
details of Dyson Limited can result in loss of trust and attrition of its customer.
Downtime of System: If anyhow the system fails to carry out some of its basic
function then the customer will not be able to place a certain number of orders (Fountas et al.,
2015). In addition, the employee will not be able to complete their jobs.
Legal Effect: If anyhow an individual deals data from any of the database of Dyson
Limited, then it can incur fines to that organization. It will incur fines even if the data is not
that much valuable (Al Shobaki & Naser, 2016). It can result in various kind of legal cost
when that individual fails to comply with data protection needs.
Information risk assessment
Identification and Prioritizing assets: The important asset of Dyson Limited are a
server, client details, sensitive documents and secrets for trading (Soomro, Shah & Ahmed,
2016). For each of the asset, a list of information is being collected like
 Data
 Information
 Interfaces
 Users
 IT security policies
 Network topology

8MGMT6013 MANAGING INFORMATION SYSTEM
 Flow of information
 Environment security.
Most of the organization like Dyson Limited come up with a limited budget for
overall risk assessment (Khanam, Siddiqui & Talib, 2016). Some of the important asset of the
organization are legal standing, importance of organization.
Identification of threats: A threat can be defined as anything which can result in
exploitation of overall vulnerability to breach of security. It can ultimately result in overall
damage to Dyson Limited (Smith, & Wong, 2016). Hackers and malware aim to leap the
mind for various kind of threat like
Human Interference: This threat is considered to have the highest probability
irrespective of the business in which Dyson Limited is. Any employee of the organization can
delete file accidentally. In addition, they can also click on the malware links and physical
damage to a piece of equipment (Schwalbe, 2015). Dyson Limited need to back their data on
regular interval which is inclusive of system setting and other details related to configuration.
They need to carefully keep track of various changes in the critical system.
Natural disasters: There are many natural disasters which can bring damage in-
comparison to hacker. Dyson Limited can not only lose data but also the server and
applications too (Theorin et al., 2017). Dyson Limited should put their server room on the
first floor of the building as this area has a maximum risk of flood.
System failure: The chance of system failure mainly depends on the overall quality of
system. If new system with high-equipment is employed then there is minimum chances of
system failure (Marchewka, 2016). On the contrary, if the system is old and purchased from
unknown vendor, then the chances of failure are found to be high.

9MGMT6013 MANAGING INFORMATION SYSTEM
Identification of vulnerability: Vulnerability can be stated as any kind of weakness
where a threat can be exploited as a result of security breach. It can ultimately damage the
whole organization. All the vulnerability of the system can be identified by using
vulnerability analysis, NIST framework, commercial data, and team for incident response
(Tatoglu et al., 2016). There is need of testing the information system as it help in analysing
some of the vulnerability of the system. The testing phase comprises of test for information
security and its evaluation, techniques for penetration testing and last tools for automated
vulnerability. Dyson Limited can reduce software based vulnerabilities by making use of
proper patch management. The organization need to move their server to the third floor of the
building that will minimizing the vulnerability to flooding.
Analysing Controls: There is a need of analysis of control which can take place in
the planning stage for reducing the chance of threat or even exploiting a vulnerability in the
system. There is need for implementing proper controls by using technical means like system
hardware or even software, identification and authentication subsystem (Chockalingam et al.,
2016). Some of the non-technical control of the system is merely inclusive of certain security
policies, proper action and physical environment. Technical and non-technical controls are
sub-divided as preventive or detective one.
Recommending Controls: By making use of level of risk as basis, there is need of
analysing the overall action where senior management is completely responsible for
individual. It is mainly done so that they can mitigate all the involved risk (Mangla, Kumar &
Barua, 2016). There are some kind of guidelines for each level of risk
High: The plan along with proper measures need to be developed fast.
Medium: There is need of right measures which is to be developed in the given time
period.

10MGMT6013 MANAGING INFORMATION SYSTEM
Low: The team member need to come up with decision for accepting risk and
implementing the right action.
In addition to above, the organization need to take into account the following points
like
 Policies of Dyson Limited
 Impact of operation
 Reliability and safety.
 Effectiveness of recommended controls.
Threat Vulnerabil
ity
Asset Impact Likeliho
od
Risk Recommendat
ion
Failure
of the
system
(High)
The current
AC in
Dyson
Limited is
ten years
old
(High)
Servers
(Critical)
Various
services
like
website
and
email
will be
unavaila
ble for
three
hours.
(Critical
)
The
present
room
temperat
ure in the
server
room is
around
42 C.
(High)
Loss to
organisati
on.
(High)
Need to buy
new AC
DDoS The Website All DDoS Medium Proper

11MGMT6013 MANAGING INFORMATION SYSTEM
attack
(High)
firewall of
this
organizatio
n needs to
be
configured
properly
(Low)
(Critical) resource
on
website
will not
be
available
(Critical
)
attack
took
place 1
years
ago.
(Medium
)
Loss due
to
downtime
of
organizati
on.
(Medium)
monitoring of
firewall
Natura
l
disaste
r
(High)
Server is
on the first
floor of the
building
(Low)
Server
(Critical)
All the
services
related to
server
will be
unavaila
ble
(Critical
)
Last
flood
took
place
around 5
years
ago.
(Low)
(Low) No action is
required
Huma
n
Interfa
ce by
mistak
e
(High)
There is a
need for
proper
configurati
on of
software’s
(Ganin et
al., 2017).
Shared
files(Mediu
m)
All the
vital data
can be
lost
(Medium
)
(Low) Monitoring on
regular interval
and arranging
backups.