Analyzing Managerial Decisions - Essay Example

Exam Questions Name Course Instructor Date QUESTION ONE You have just been appointed as manager to a small software house, which has expanded considerably over the last two years and now employs 30 staff. The majority of the work is to develop dedicated systems for SMEs. Currently, the testing does not involve automated tools. You have decided to consider the introduction of an automated testing tool. (a) Discuss, with justification the potential problems and disadvantages of introducing such a tool, considering its effect on your staff, management and clients. (10 marks) Automated testing involves the automation of the manual testing process that is being used currently. This means that there has to be a manual testing process that is present within the firm or company. Automation mostly will involve the use of certain tools and strategies that are aimed at reducing the need for manual human involvement within the unskilled tasks that are in most cases repetitive and redundant. Automated testing unfortunately has a few disadvantages to the staff, the management and even the clients, despite its many advantages and benefits. The first problem is that the writing of the automation test scripts requires much proficiency and this is one major problem that the management will have to face and thus it is a disadvantage. The debugging of the test script may be a potential problem. If an error presents itself in the test script, it might lead to consequences that may be deadly. The maintenance of the test may prove to be costly mostly in the case of playback methods. Even if there is a minor change that may occur in the GUI, there needs to rerecording of the test script or even the replacement of the test script by a new one. This may present a disadvantage to the staff who will have to do extra work of redoing this task of rerecording the test scripts. Test data files maintenance may be difficult especially in the case that test scripts are used in the testing of more screens. It is finally important to note that the human touch can never be duplicated and this will mean that the clients will not receive the service that they were used to that was personalized with that human touch. (b) Using the four steps of the Deming Plan-Do-Check-Act cycle as a framework, discuss, with justification, how you would undertake each of the four steps to identify a suitable automated testing tool. i) The Plan step (16 marks) The plan step involves finding out what is wrong first so as to improve the operations. This means that any potential problems to be faced have to be identified and ideas found with the relevant solutions to be formulated. Thus I would start by planning for changes that are aimed at bringing improvement. I would also perform a customer mapping as well as a supplier mapping. I would also put flow charting into use to aid in the identification. I would also conduct a Pareto analysis. Brainstorming with the rest of the staff and management would also be very important in the identification process. I would also make use of the nominal group technique. The use of a solution or fault tree could also prove to be useful in the identification of a suitable automated testing tool. I would also make use of the evaluation matrix. Finally, cause and effect diagrams could really come in handy in the identification process. ii) the Do, Check, Act steps (7 marks) The stage looks at the changes that have been designed to solve the problems that are small or that are found during the experimental stages. Thus, I would initiate small group leadership skills programs as well as the designing of the experiments. Conflict resolution will also be important and I would include it. Finally, on job training will be included to get the staff accustomed to the new automated testing tools. The check stage involves the investigation of whether the experiment is achieving the desired results or if it is failing. Thus, I would investigate the select process by the use of data sheets, by the use of graphical analysis, use control charts and finally check for the key performance indicators. The act stage involves the implementation of the changes that is the introduction of the automated testing tools if the experiments are successful. Thus I will strive to ensure that the changes are a routine part of the activities that take place within the firm. This will be done by the aid of process mapping, controlled reference information, standardizing of processes and an initiation of a formal training of the staff for the standard processes. QUESTION TWO You are a project manager of a company which develops computer games for young children for stand-alone systems. The managing director has recently attended a seminar which discussed the need to improve quality for software processes and products. The company has not previously considered any particular quality standard or model. The managing director has asked you to prepare a brief report, explaining the relevance of some of the models and standards to the company. (a) Explain the potential benefits and disadvantages to the business of implementing TickIT and CMMI. (9 marks) CMMI is a process of improvement that is aimed at improving the performance of firms such as this. The benefits of CMMI include the adherence to the process that has been initiated, the sort of the improvement plan which could prove to be effective to the firm, the schedule which is conducive to the one the firm has put in place, the productivity of the firm is set to improve, the quality of the end product is also set to increase and finally the customer is set to be satisfied. CMMI however also has its disadvantages which include, the fact that it can appear to be daunting thus increasing the scope, there are areas that might still improvement even after the implementation of it, many hours can tend to be wasted if it is not used appropriately and finally, appraisal of the CMMI can rely in the most part on the ability to interpret correctly on the part of the team. TickIT is mostly involved with the improvement of the software and its application in terms of quality. The advantages of using this quality management system include; eh opportunities that it presents for the continual of improvement, thus quality improves, the efficiency of processes also improves, failure costs will reduce, the satisfaction of employees will improve and staff turnover will thus reduce. TickIT also has one major disadvantage which is the training that is required to be able to run and implement the process effectively, which might prove to be a cost to the management and the firm. (b) Propose, with justification (i) The six sub-characteristics of ISO 9126 which are most relevant to the development and marketing of computer games for young children to be used on a stand-alone computer. (12 marks) The ISO 9126 is a standard that is regarded as international for the evaluation of software. There are four sub characteristics under the characteristic of functionality which includes; suitability which means is the software is appropriate according to specifications of the functions that the software is supposed to undertake in the games for young children in the stand alone computer system, accurateness which refers to the correctness of the functions of the computer games with regards to children which means is the difficulty level correct?, interoperability meaning does the component have the ability to interact with all the components of the system making it easier to use by the children in their games, compliance meaning if its compliant with the regulations set forth by the government or even the firm for example with regards to the age limit of a given game and security meaning is the software secure from unauthorized access for instance by underage children for rated games. There are two sub characteristics that fall under the characteristic of efficiency which include; time behavior meaning that does the game respond to the thru puts that is the transaction rate and finally the resource behavior meaning the resources that are used in the game such as the memory, the CPU and the disk have to be up to the required standards for maximum game experience for the children. (ii) How you would collect metrics for each of the six sub-characteristics that you have identified in (i) (12 marks) Metrics for the suitability can be collected by checking if the software operates as it should in terms of functionality. As for the accurateness, metrics can be collected by checking if the software accurately performs the functions that it is supposed to. For the interoperability, metrics can be collected by ensuring that the software does not work in typically in isolation. Metrics for compliance can be collected by checking on the capability of compliance of the software to the regulations. Security metrics can be collected by checking on the security level of the software. Time behavior metrics can be collected by testing the transaction rates of the software while the resource behavior can be tested by ensuring that the resources used are up to the required standards of the systems and not more such as the memory and the CPU. QUESTION THREE The management of your organization has become very concerned about the publicity resulting from the loss of personal data, such as the 25 million UK Child Benefit records, the loss in the USA of a laptop containing health and financial information on 26.5 million veterans which was stolen from an employee's home. The management has decided that they need a policy about the use of laptops and the security of data. Explain, with justification, the security issues that you think should be in this management policy, including: (a) The handling and use of laptops and other portable devices during journeys and outside the office environment (16 marks) One should aim at recording the model, the make and the serial number of the device and keep it in a safe place, thus in case it gets lost and found, it is easier to prove ownership. The devices should not be left locked in vehicles and if one has to leave it, keep it locked in the trunk of the car, thus preventing preying eyes and even temptation to steal it. Laptops should be kept in carry-on bags while flying so as to avoid loss or even damage to the device. When one is going through security checks or screening, one should ensure to keep an eye on the device so as to avoid its loss even by error. When staying in hotels one should lock the devices in a safe place if need be to leave it in the room. Shared laptops that are positioned centrally should be secured whenever they are not in use to avoid opportunists. Laptops and other devices should not be left unattended to in conference rooms that are not locked to avoid theft. Software that tracks the devices in case they get lost should be installed in these devices to track them. Confidential information should be backed just in case the device gets lost or even in case the data is stolen on a thumb drive. All data should also be stored on a server and not on the laptops while the laptops can be used as a dummy terminal. Finally the installation of encryption software is important to protect information that is confidential. (b) Procedures to maximize the protection of the organization’s data, to minimize the risk of data or a laptop being stolen or lost. (17 marks) One of the methods I would advise corporate executives to use to prevent fraud, is by use of internal controls. My plan of action with this method would be to ensure that there is a separation of duties allocated to different staff. A good example of implementation of this, especially in the case of embezzlement, which is also a form of fraud, is if a certain individual is supposed to be collection cash, and a receipt or voucher is to be received for entry or access into a certain service, the task should be divided into two separate individuals, such that one receives the cash, and one receives the receipt given for entry or access to a service. The only way that an individual with an intention of embezzling money in such a way could succeed is by colluding with the other party. This will not completely eliminate fraudulent activities within the organization, but it will ultimately reduced it, considering that such a collusion is difficult to arrange, and even if done, the final pay-off that each individual would receive will be split and hence not worth the trouble. Another way in which I would protect the corporate executives is to ensure that funds that are entrusted to an individual, is constantly in rotation, to a different individual entrusted the same funds after an unspecified period of time. This will deter such individuals from embezzling the funds over fear of detection. Implementation of this principle can be done by ensuring that when the organizations require funds, the accountant is not notifies of the need for money before hand, but rather, they funds are just requested for impromptu. Some of the evaluation methods that I would use to evaluate the outcomes of the methods implemented would include, setting up of a control environment, assessing the risks involved, setting up control activities, setting up of an efficient information and communication setup and finally monitoring the progress made by the corporate in their involvement of implementation. If I was given the responsibility of creating a loss prevention workshop, I would ensure that I set it in a manner that it falls on a day that all the executives will be present, and also ensure that each and everyone attends the workshop. I would also arrange for certificates to be awarded to the participants to ensure that they are motivated to attend, and be participative and serious. I would educate the executives on the importance of fraud deterrence, as opposed to fraud prevention. With fraud deterrence, you choke out the opportunities for fraudulent activities, while with preventions, you simply try to avoid, but still it can occur. One of the methods I can use to evaluate the success of the program is to ensure that there is a test at the end of the workshop, and this is where the certificates of merit will be awarded. I will also place a scenario, unknowingly to the executives of course, that will evaluate their level of preparedness to fraud attempts QUESTION FOUR You have recently joined, as IT manager, a company that provides insurance via the Internet. You are horrified on taking up your appointment, to find that there is not a current Business Continuity Plan. You are required to draft a report for management, concerning the introduction of a Business Continuity Plan. This should include discussions of: (a) The risks associated with the online trading and possible counter measures (12 marks) The Business Continuity Plan involves the creation of a logistical plan of how the organization can recover or even restore critical functions that have been disrupted. Some of the risks associated with online trading include, the risk of hackers who only need the username and the password. Thus the hacker will be able to manipulate the data and thus could cost the company huge losses. There is also the risk of privacy, especially when it comes to the matter of insurance. The privacy of some of the clients might be compromised and thus might cause mistrust between the company and the clients. The signing of an online insurance form may become problematic as the individual that has the claim may not be seen in person and thus someone else might under take the task for them. Some of the countermeasures that can be put in place to avoid this include the setting up of a security system that is more updated by following the principles of Business Continuity Plan. The Business Continuity Plan if put in place can also aid in the setting up of counter measures such as the backing up of data in a different server that is only known to the company’s management. (b) The membership of the Business Continuity Planning team (8 marks) The membership of the Business Continuity Plan team should strictly involve the management and the team that I will select as the IT manager so as to increase the level of security, considering that even some of the employees may be tempted to liaise with hackers and provide information regarding the Business Continuity Plan. Also membership of the Business Continuity Plan team will be provided on the basis of rigorous tests and ensuring that the team is competent enough to deal with the requirements of the implementation and maintenance of the Business Continuity Plan. (c) The content of the Business Continuity Plan (13 marks) The content of the Business Continuity Plan will include; analysis of the plan and ensuring that it is up to the standards of the company in terms of reliability and compatibility, the design of a solution which will cater for the event of a disaster such for instance if the integrity of the company and the clients is compromised, the implementation will also be in the contents of the Business Continuity Plan and it will include ensuring that it is implemented as scheduled and in the manner that is appropriate, testing and acceptance of the Business Continuity Plan will also be important to ensure that it is safe from any setbacks that it may encounter in its final implementation and finally the maintenance of the Business Continuity Plan to ensure that it is ever ready if need be for its use in the case of data compromise. QUESTION FIVE Your organization is considering introducing teleworking for the development of its information systems functions. The organization specializes in developing, running and maintaining web-based systems for organizations in the South of England. The organization is based in Southampton. You are asked to prepare a report for the senior management on this issue. Critically discuss: (a) The implications of teleworking from the perspective of the management of the organization ( 10 marks) Teleworking involves the use of information and telecommunications technologies in enabling employees to be able to work way from the office environment, or when the office is a long distance away from the workers. To the management, this could prove to be a more affordable alternative technology and thus the company will cut on technological costs. Teleworking may also be a way to entice new recruits and thus the management will cut on the logistics costs. The cost of leasing office space will also be cut and thus the management will get to improve productivity without incurring that extra cost. The high rate of turnover from IT staff is also another reason why management might view teleworking as a better alternative. (b) The implications of teleworking from the perspective of the potential teleworkers for the organization (10 marks) Teleworking to the potential employees of the organization presents an opportunity for them to be more flexible. This means that the employees will be able to enjoy more freedom so as to enable them to deal with the pressures of life such as family matters and other personal problems, while at the same time work and earn a living legitimately. The environmentally aware employees will also feel that they are playing a major role in the conservation of the environment, as the gases that are emitted when commuting to work will be reduced, so is the gases emitted from the air conditioning systems in the office spaces. The cost of commuting will also be cut for the potential employee and thus this is an advantage to the potential employee. (c) The actions that management could take, and the features available, to minimize problems associated with teleworking for this organization. (13 marks) To ensure that the management reduces their fear of loss of control, they should ensure that strict rules are set for the working hours and conditions, while at the same time offering incentives to the employees that are committed to their work. The issue of distrust between the management and employees could be minimized by ensuring that connectedness is enhanced by constant communication. The issue of security has to be addressed by the management by ensuring that appropriate measures are put in place to avoid data loss. Considering that the employees may drop in performance during the first few months, the management should be patient and allow the employees time to adopt and improve in their productivity. The management should also aim at checking on the local legal issues and the zoning laws so as to mitigate the effects of liability and employee compensation issues. Finally, the management should also aim at promoting the workers who show potential therefore reducing the risk of affecting the career of the teleworkers negatively. Read More