Unit 2 University of Sunderland CSEM04 ROSCO Unit 2: Systems Change (causes and cases) CSEM04: Risk and Opportunities of Systems Change in Organisations.

Slides:



Advertisements
Similar presentations
“High Performing Financial Institutions and the Keys to Success in an Uncertain Environment”
Advertisements

IOR Scottish Chapter Annual Conference Glasgow Caledonian University – 1 st November 2013 Relevance of Operational Risk to the FCA Jill Savager Manager,
Source: The World Bank World Development Indicators 90% of global demand is not fully satisfied by local supply Supply chains are driving.
COBIT - II.
1 Sarbanes-Oxley Section 404 June 29,  SOX 404 Background 3  SOX 404 Goals 4  SOX 404 Requirements 5  SOX 404 Assertions 6  SOX 404 Compliance.
Chapter © 2009 Pearson Education, Inc. Publishing as Prentice Hall.
From Compliance to Competitive Advantage Eric Karofsky AMR Research
Operational risk management Margaret Guerquin, FSA, FCIA Canadian Institute of Actuaries 2006 General Meeting Chicago Confidential © 2006 Swiss Re All.
University of Sunderland CSEM04 ROSCO Unit 13 Unit 13: Supplementary Slides for the SERUM Method CSEM04: Risk and Opportunities of Systems Change in Organisations.
University of Sunderland CSEM04 ROSCO Unit 13 Unit 13: Supplementary Slides for the Riskit Method CSEM04: Risk and Opportunities of Systems Change in Organisations.
CSE 4482, 2009 Session 21 Personal Information Protection and Electronic Documents Act Payment Card Industry standard Web Trust Sys Trust.
What is an Information System? Input of DataResourcesProcessing Data Data Control of System Performance Storage of Data Resources Output of InformationProducts.
University of Sunderland CSEM04 ROSCO Unit 13 Unit 13: Risk Methods CSEM04: Risk and Opportunities of Systems Change in Organisations Dr Lynne Humphries.
TEMPUS ME-TEMPUS-JPHES
Training.
Internal Control. COSO’s Framework Committee of Sponsoring Organizations 1992 issued a white paper on internal control Since this time, this framework.
Compliance Policy & Procedures An Overview for Staff Prepared by MSM Compliance Services Pty Ltd.
Euseden INTERNAL AUDIT & ASSURANCE SERVICES.
Click to add text © 2010 IBM Corporation OpenPages Solution Overview Mark Dinning Principal Solutions Consultant.
1 Business Continuity and Compliance Working Together Kristy Justice, AVP WaMu Card Services 08/19/2008.
Welcome ISO9001:2000 Foundation Workshop.
Vendor Risk: Effective Management is Essential
Chapter 4 Internal Controls McGraw-Hill/Irwin
Internal auditing for credit unions Nuala Comerford, Chair IIA Irish Region Committee Pamela McDonald Council Member IIA Credit Union Summer School Thursday,
WHERE WE ARE 22 member associations in 20 countries Over 4300 individual members who are responsible for risk management and/or insurance in their organisations.
 This presentation looks at: › What is risk management › How to identify risks › How to implement an effective risk management policy to increase your.
Overview of Systems Audit
McGraw-Hill/Irwin ©2008 The McGraw-Hill Companies, All Rights Reserved Chapter Fifteen The Management of Capital.
0 Kestutis Rekerta Strategic Planning Division, Government Office of Lithuania World Bank Workshop, Bratislava, September 6, 2006 STRATEGIC PLANNING IN.
Corporate Governance: Basel II and Beyond Corporate Governance Program for Bank Directors of Indian Banks Mumbai December 14, 2005.
Compliance in the Supply Chain – Implications of SOX on UK Businesses Dr. Jean-Anne Stewart.
Implementation Issues of Sarbanes-Oxley CASE Presentation September 23, 2004 By Denise Farnan.
Chapter 5 Internal Control over Financial Reporting
Page 1 Internal Audit Outsourcing The Moss Adams Approach to Internal Audit Outsourcing Proposed SOX 404 Changes.
Overview:  Different controls in an organization  Relationship between IT controls & financial controls  The Mega Process Leads  Application of COBIT.
ISO27001 Introduction to Information Security. Who has day-to-day responsibility? All of us! Why Information Security? Control risk, limit liability What.
1 © 2012 John Wiley & Sons, Ltd, Accounting for Managers, 4th edition, Chapter 2 Accounting and its Relationship to Shareholder Value and.
1 Meycor Solution for Basel II Operational Risk Management.
Private & Confidential1 (SIA) 13 Enterprise Risk Management The Standard should be read in the conjunction with the "Preface to the Standards on Internal.
UL UK – European Affiliates Briefing – 6 July July 2004  The High Performance Organisation Group Ltd Online Auditing European Affiliates Briefing.
Unit 4 University of Sunderland CSEM04 ROSCO Unit 4: Understanding the Problem (Concept of Ideality) CSEM04: Risk and Opportunities of Systems Change in.
University of Sunderland CSEM04 ROSCO Unit 13 Unit 13: Supplementary Slides for the RAMESES Method CSEM04: Risk and Opportunities of Systems Change in.
CIA Annual Meeting LOOKING BACK…focused on the future.
Fundamentals I: Accounting Information Systems McGraw-Hill/Irwin Copyright © 2012 by The McGraw-Hill Companies, Inc. All rights reserved.
Bank Audit. Internal Audit Internal audit is an independent, objective assurance activity and can give valuable insight in providing assurance that major.
© The McGraw-Hill Companies, Inc., 2008 McGraw-Hill/Irwin Principles of Accounting (Accounting 1 for BBA - Undergraduate) SBS Victor Yerris, PhD
1 Sarbanes-Oxley Overview. 2 Sarbanes-Oxley Act Summary The Sarbanes-Oxley Act of 2002 §201Prohibited Non-Audit Services §202Audit Committee Pre-Approval.
FACILITATOR Prof. Dr. Mohammad Majid Mahmood Art of Leadership & Motivation HRM – 760 Lecture - 25.
QUALITY MANAGEMENT STATEMENT
Information Systems within the Organization
ISO Registration Common Areas of Nonconformances.
Chapter 8 Auditing in an E-commerce Environment
MINE SAFETY MANAGEMENT PLAN. DIRECTORATE GENERAL OF MINES SAFETY DGMS n It is recommended that mines be required to put in place Mine Safety Management.
Accounting and Information Systems: a powerful combination.
Unit 2 University of Sunderland COMM80 Risk Assessment of Systems Change Overview and Introduction to Module COMM80 Risk Assessment of Systems Change osiris.sunderland.ac.uk/~cs0hed/comm80.html.
Chapter 5 Evaluating the Integrity and Effectiveness of the Client’s Control Systems.
Pertemuan 14 Matakuliah: A0214/Audit Sistem Informasi Tahun: 2007.
Current risk and compliance priorities for law firms PETER SCOTT CONSULTING.
Dolly Dhamodiwala CEO, Business Beacon Management Consultants
What is ISO Certification? Information is a valuable asset that can make or break your business. When properly managed it allows you to operate.
Strategic Information Systems Planning
ISO/IEC
Quality Management in Business and Manufacturing Sectors
How can an Enterprise Risk Management (ERM), programme enable organizations achieve strategic objectives more effectively? Dr P S Sahota  
Credit Evaluation.
Food Production Systems
به نام خداوند بخشنده و مهربان.
Governance, audit and digital preservation
Adding Value Across the Board
Operational Risk Management
Presentation transcript:

Unit 2 University of Sunderland CSEM04 ROSCO Unit 2: Systems Change (causes and cases) CSEM04: Risk and Opportunities of Systems Change in Organisations Prof. Helen M Edwards

Unit 2 University of Sunderland CSEM04 ROSCO Overview Systems Change Causes and Cases. –Causes: Standards compliance (SOX) –Causes: Standards compliance (Basel II) Case: Autoprocess Ltd Autoprocess Ltd: Discussion Student Activity. Systems Change

Unit 2 University of Sunderland CSEM04 ROSCO Systems Change Why do organisations change systems? –Student suggestions? –Tutor suggestions –Discussion. –Class experiences

Unit 2 University of Sunderland CSEM04 ROSCO Causes and Cases. Change can be prompted by many things, for example: –Getting/keeping competitive edge. E.g. Scott, M, Edwards, H.M. and Oliver, P (2005) Understanding the Role of Strategy: An Exploratory Study of Eliciting E-business Requirements for SMEs. UKAIS 10 th Annual Conference, Newcastle, April 2005 –Everyone else is doing it. E.g. Edwards, H.M. and Humphries, L.P (2005) People, Technology and Systems Failure: Who's to Blame? Findings from an SME's ERP Project. Journal of IT Cases, Oct-Dec, 2005 –Current System is no longer Maintainable. E.g. Edwards, H.M, Mallalieu, G.M. and Thompson, J.B. (1999) Some Insights into the Maintenance of Legacy Systems within Small Manufacturing and Distribution Organisations in the UK. 23rd IEEE conference on computer software and its applications (compsac99), Phoenix, Arizona, October, –Legislative/Governmental changes –Standards Compliance

Unit 2 University of Sunderland CSEM04 ROSCO Causes: Standards compliance (SOX) Sarbanes-Oxley (SOX) Act: from 2004 in USA affects all public companies: –Must submit annual assessments of the effectiveness of internal financial auditing controls to the Securities and Exchange Commission (SEC). –companies' external auditors must report on the internal control of management. Who needs to comply with Sarbanes-Oxley? –All publicly-traded companies in the United States, all wholly-owned subsidiaries, and –all publicly-traded non-US companies doing in business in the USA. What does Sarbanes-Oxley compliance require? –a financial accounting framework generating verifiable financial reports with traceable source data. –source data must remain intact and cannot undergo undocumented revisions. –any revisions to financial or accounting software must be fully documented: what was changed, why, by whom, and when. Penalties for noncompliance with Sarbanes-Oxley? –Lawsuits, negative publicity, fines up to $1 million and 10 years in prison for not complying (or submitting inaccurate/mistaken certification), fines up to $5 million and 20 years in prison for providing deliberately inaccurate certification. Based on From

Unit 2 University of Sunderland CSEM04 ROSCO Causes: Standards compliance (Basel II) Basel II (developed by the Basel Committee on Banking Supervision (BCBS)). Aim: uniformity in the way banks and banking regulators approach risk management across national borders. Basel II recommends "three pillars“ to bring stability to the financial system –risk appraisal and control, –supervision of the assets, and –monitoring of the financial market. Basel II implementation involves –identifying credit risk, market risk, operational risk, etc. –allocating adequate capital to cover potential loss. –Requires effective IT support to deliver audit trails required. From

Unit 2 University of Sunderland CSEM04 ROSCO Systems Change Drivers for change in organisations: –internal –external –examples. –Class experiences Perceived benefits/risks of change –strategic –operational. –Class experiences

Unit 2 University of Sunderland CSEM04 ROSCO “Autoprocess Ltd” –manufactures line-assembly products for one customer on a synchronous-delivery system. –has over 60 suppliers and currently has to manage the supplier relationship (with all 60+) manually and individually. –new general manager has suggested that what is required is “Supplier Self Sufficiency”. put the onus of maintaining the correct stock levels and replenishing them on the suppliers, penalties to be applied against suppliers where there is insufficient stock when required. –Vision: implemented through a web application suppliers to access the stock system to monitor the levels of their stock and determine when to replenish. Case: Autoprocess Ltd

Unit 2 University of Sunderland CSEM04 ROSCO Is this purely an e-commerce system requiring an IT solution? OR is it a business process change? –change to personnel roles –change to standard operating procedures, –strategic supply chain issue: change to supplier relationships –IS change and systems integration –Financial and other resource implications –Physical storage and logistics change … What are the risks? What are the opportunities? Consider under headings of –Business change –IS change –Personnel role change. Autoprocess Ltd: Discussion

Unit 2 University of Sunderland CSEM04 ROSCO Student Activity. Undertake some web/literature searches to find examples of systems change cases categorise them using the headings of : –who, –where, –what –impetus for change –type of change –impact/result of change –brief list of significant issues. N.B. –this is not an in-depth case analysis –Should take about one side of A4 to do. –cases can come from student experience (where relevant).