EIM Dr. Wurood Albayati Business process quality
Description: EIM Dr. Wurood Albayati Business process quality (ISO Certification) Many organizations now claim that they are using best practices when it comes to business processes. In order to set themselves apart and prove to their customers that
Related Topics
Download Presentation
"EIM Dr. Wurood Albayati Business process quality" is the property of its rightful owner. Permission is granted to download and print the materials on this website for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Presentation Transcript
slide1. EIM Dr. Wurood Albayati<br>
slide2. Business process quality (ISO Certification)
Many organizations now claim that they are using best practices when it comes to business processes. In order to set themselves apart and prove to their customers that they are indeed doing this, these organizations are seeking out an ISO 9000 certification.
ISO is an acronym for International Standards Organization. This body defines quality standards that organizations can implement to show that they are, indeed, managing business processes in an effective way. The ISO 9000 ( and 9001) certification is focused on quality management.
In order to receive ISO certification, an organization must be checked (audited) and found to meet specific criteria. Over the years, this certification has evolved and many branches of the certification now exist. ISO certification is one way to separate an organization from others.
In 2022 there were 24,000 standards in ISO SO 9001:2015, a standard for general organizational quality management systems (QMS),
ISO 27001:2013, a standard for Information Security Management Systems (ISMS)
ISO 14001:2015, a standard for Environmental Management Systems. ISO 27001 is one of the most widely recognized, internationally accepted independent security standards. Google has earned ISO 27001 certification for the systems, applications, people, technology, processes and data centers serving a number of Google products.<br>
slide3. Data warehouses Data Warehouse (DW): a large store of data accumulated from a wide range of sources within a company and used to guide management decisions.<br>
slide5. Types of Data Warehouse An enterprise data warehouse (EDW) is a centralized warehouse that provides decision support services across the enterprise. EDWs are usually a collection of databases that offer a unified approach for organizing data and classifying data according to subject. EDW is used for tactical and strategic decision support An operational data store (ODS) is a central database used for operational reporting as a data source for the enterprise data warehouse described above. An ODS is a complementary element to an EDW and is used for operational reporting, controls, and decision making.
An ODS is refreshed in real-time, making it preferable for routine activities such as storing employee records. is considered a subset of a data warehouse and is usually oriented to a specific team or business line, such as finance or sales. It is subject-oriented, making specific data available to a defined group of users more quickly, providing them with critical insights. The availability of specific data ensures that they do not need to waste time searching through an entire data warehouse.<br>
slide6. Example of data warehouses Facebook gathers all of your data – your friends, your likes, who you stalk & so on and then stores that data into one central repository. For many reasons, they want to make sure that you see the most relevant ads that you’re most likely to click on, they want to make sure that every friends that they suggest are the most relevant to you, keep in mind that this is the data mining phase in which meaningful data & patterns are extracted from the aggregated data.<br>
slide7. Information security<br>
slide8. • People
Hardware problems (breakdowns, configuration errors, damage from improper use or crime)
• Software
• Disasters (power failures, flood, fires, etc.)
• Internet vulnerabilities
• Wireless security challenges What are the vulnerabilities in Information System (IS)<br>
slide10. How to achieve CIA<br>
slide11. Authentication Three factors Multi-factor authentication code ( 4-bit) +<br>
slide12. Access Control Once a user has been authenticated, the next step is to ensure that they can only access the information resources that are appropriate.
Access control list (ACL)
Role-based access control (RBAC).<br>
slide13. Encryption<br>
slide14. Backups 1-Understands where to store the backed up data:
on the organization’s servers,
on users’ hard drives,
in the cloud,
and some on third-party sites
2- Regular backups of all data.
3- Offsite storage of backup data sets. In case of earthquake, fire, or tornado, It is essential that part of the backup plan is to store the data in an offsite location.
4- Test of data restoration What is best Backup Plan?<br>
slide15. Firewalls<br>
slide16. Intrusion Detection Systems An IDS does not add any additional security; instead, it provides the functionality to identify if the network is being attacked. An IDS can be configured to watch for specific types of activities and then alert security personnel if that activity occurs.<br>
slide17. When looking to secure information resources, organizations must balance the need for security with users’ need to effectively access and use these resources. Physical Security<br>
slide18. Information System code of conduct (Code of ethic): are a set of rules of right and wrong used to protect individuals and society by using information systems responsibly
ICT policy<br>
slide19. In the world called IT (Information Technology) but in UK Education it is referred to as ICT (Information and Communications Technology).<br>
slide2. Business process quality (ISO Certification)
Many organizations now claim that they are using best practices when it comes to business processes. In order to set themselves apart and prove to their customers that they are indeed doing this, these organizations are seeking out an ISO 9000 certification.
ISO is an acronym for International Standards Organization. This body defines quality standards that organizations can implement to show that they are, indeed, managing business processes in an effective way. The ISO 9000 ( and 9001) certification is focused on quality management.
In order to receive ISO certification, an organization must be checked (audited) and found to meet specific criteria. Over the years, this certification has evolved and many branches of the certification now exist. ISO certification is one way to separate an organization from others.
In 2022 there were 24,000 standards in ISO SO 9001:2015, a standard for general organizational quality management systems (QMS),
ISO 27001:2013, a standard for Information Security Management Systems (ISMS)
ISO 14001:2015, a standard for Environmental Management Systems. ISO 27001 is one of the most widely recognized, internationally accepted independent security standards. Google has earned ISO 27001 certification for the systems, applications, people, technology, processes and data centers serving a number of Google products.<br>
slide3. Data warehouses Data Warehouse (DW): a large store of data accumulated from a wide range of sources within a company and used to guide management decisions.<br>
slide5. Types of Data Warehouse An enterprise data warehouse (EDW) is a centralized warehouse that provides decision support services across the enterprise. EDWs are usually a collection of databases that offer a unified approach for organizing data and classifying data according to subject. EDW is used for tactical and strategic decision support An operational data store (ODS) is a central database used for operational reporting as a data source for the enterprise data warehouse described above. An ODS is a complementary element to an EDW and is used for operational reporting, controls, and decision making.
An ODS is refreshed in real-time, making it preferable for routine activities such as storing employee records. is considered a subset of a data warehouse and is usually oriented to a specific team or business line, such as finance or sales. It is subject-oriented, making specific data available to a defined group of users more quickly, providing them with critical insights. The availability of specific data ensures that they do not need to waste time searching through an entire data warehouse.<br>
slide6. Example of data warehouses Facebook gathers all of your data – your friends, your likes, who you stalk & so on and then stores that data into one central repository. For many reasons, they want to make sure that you see the most relevant ads that you’re most likely to click on, they want to make sure that every friends that they suggest are the most relevant to you, keep in mind that this is the data mining phase in which meaningful data & patterns are extracted from the aggregated data.<br>
slide7. Information security<br>
slide8. • People
Hardware problems (breakdowns, configuration errors, damage from improper use or crime)
• Software
• Disasters (power failures, flood, fires, etc.)
• Internet vulnerabilities
• Wireless security challenges What are the vulnerabilities in Information System (IS)<br>
slide10. How to achieve CIA<br>
slide11. Authentication Three factors Multi-factor authentication code ( 4-bit) +<br>
slide12. Access Control Once a user has been authenticated, the next step is to ensure that they can only access the information resources that are appropriate.
Access control list (ACL)
Role-based access control (RBAC).<br>
slide13. Encryption<br>
slide14. Backups 1-Understands where to store the backed up data:
on the organization’s servers,
on users’ hard drives,
in the cloud,
and some on third-party sites
2- Regular backups of all data.
3- Offsite storage of backup data sets. In case of earthquake, fire, or tornado, It is essential that part of the backup plan is to store the data in an offsite location.
4- Test of data restoration What is best Backup Plan?<br>
slide15. Firewalls<br>
slide16. Intrusion Detection Systems An IDS does not add any additional security; instead, it provides the functionality to identify if the network is being attacked. An IDS can be configured to watch for specific types of activities and then alert security personnel if that activity occurs.<br>
slide17. When looking to secure information resources, organizations must balance the need for security with users’ need to effectively access and use these resources. Physical Security<br>
slide18. Information System code of conduct (Code of ethic): are a set of rules of right and wrong used to protect individuals and society by using information systems responsibly
ICT policy<br>
slide19. In the world called IT (Information Technology) but in UK Education it is referred to as ICT (Information and Communications Technology).<br>