Jahziah.
العربية

STUDY GUIDE · GKU 5

Organisational ethics and IS management study guide (Information Systems)

This unit has two halves. The first is about doing the right thing with information: the ethical theories that justify a decision and the professional codes that turn them into duties, intellectual property, how to collect, store and use personal data responsibly under laws such as the Saudi PDPL, who the stakeholders of a system are, and how to run systems sustainably — with numbers for energy and carbon. The second half is about running the IS function well: organising it and measuring its service (availability, SLA downtime, service-desk efficiency), buying technology through sound procurement and contracts, aligning IS plans with business strategy, governing IT and proving compliance, managing risk with scores and expected losses, developing and keeping staff, and the frameworks the exam names — ITIL 4, CMMI, COBIT 2019 and TOGAF. Questions are mostly scenarios; the computational ones are short and are all taught here.

Continue in the app

Structured by the official ETEC subject standard for this topic: every listed topic and learning outcome, with formulas, figures and worked examples. The full sections are available to members in the app.

SKU 5.1 · Information systems ethics and societal impact

  1. Ethical principles, codes of practice and intellectual property

    The ethical philosophies used to justify IS decisions and how they differ in practice, a step-by-step method for ethical decisions, Mason's four issues of the information age, professional codes of practice and what they ask of IS staff, and the forms of intellectual property.

  2. Sustainable and responsible IS: energy, carbon and life cycle

    Green IT and green IS, the life cycle of hardware and data, power usage effectiveness and carbon accounting for data centres and storage, adaptive systems, and how to choose the sustainable option with numbers.

  3. Ethical data collection, storage and use

    What ethical behaviour looks like when data are collected (notice, consent, purpose, minimisation), the moral issues of storing and using data (secondary use, re-identification, profiling, breaches, retention), and how the Saudi Personal Data Protection Law frames them.

  4. Stakeholders of information systems and their claims

    Who the stakeholders of an information system are, how to categorise them (internal and external, primary and secondary, by power and interest), the data roles of owner, steward, custodian and data protection officer, and why each matters to ethical decisions.

SKU 5.2 · Information systems management and strategy

  1. Managing the IS organisation and its service: efficiency, availability and SLAs

    How an IS function is organised and led, the difference between efficiency and effectiveness, and the service measures an IS manager is held to: availability from MTBF and MTTR, downtime allowed by an SLA, first-contact resolution, cost per ticket, and where to cut effort with a Pareto view of demand.

  2. IT procurement and contracts

    An IT procurement policy from requirement to contract: make or buy, RFI, RFP and RFQ, mandatory and weighted evaluation, contract types, SLAs with service credits, exit terms, and the break-even between two pricing structures.

  3. Strategic IS planning and alignment with organisational goals

    How an IS strategy is derived from the business strategy, the steps of strategic IS planning from goals to a roadmap, how a steering committee prioritises a portfolio by alignment and value, and how plans are carried out with line management and measured.

  4. IT governance and compliance

    The difference between governance and management, how a board evaluates, directs and monitors IT, who holds which decision rights, the three lines of defence, and how compliance with policies, laws and regulations is evaluated and evidenced.

  5. Managing IS risk: assessment, scoring and mitigation plans

    The risk management process (identify, assess, treat, monitor), qualitative scoring with likelihood times impact and escalation rules, quantitative expected loss (SLE, ARO, ALE), choosing controls by their net value, chained compliance checks, and writing a mitigation plan.

  6. Workforce development, talent acquisition and retention

    How an IS function plans its workforce: skills inventory and gap analysis against a skills framework, training and certification, hiring, and keeping good people — with the simple numbers a plan needs (certification gaps, turnover and retention rates).

  7. Service management and governance frameworks: ITIL 4, CMMI, COBIT 2019, TOGAF

    What each framework the exam names is for — ITIL 4 for service management and its key practices, CMMI for process maturity, COBIT 2019 for governance and management objectives, TOGAF for enterprise architecture — and how to pick the one that fits a problem.

MORE INFORMATION SYSTEMS GUIDES

All study guides

Read the full guide beside your practice questions.

Open the app