5.9.1 (HL)—MIS foundations

Data analytics examines data to identify patterns, explain performance or support predictions and decisions. A database is an organized electronic collection of related data that can be stored, updated and queried. Cybersecurity protects systems, networks and data; cybercrime is illegal activity using or targeting digital systems or information.

A management information system combines people, processes, databases and technology to collect, process and present timely information for planning, decisions and organizational control. Analytics is only as reliable as the database's accuracy, completeness and relevance, while cybersecurity protects confidentiality, integrity and availability from cybercrime and other threats.

Start with the management decision, identify the minimum relevant data and database fields, define access and quality controls, and decide which analysis can validly answer the question. Protect the system through proportionate technical, procedural and human controls.

A retailer queries its sales-and-stock database and analyses demand by store to plan replenishment. Access controls, backups and staff phishing awareness reduce the risk that cybercriminals steal or alter the data.

Raw data is not automatically useful information, analytics does not prove causation, and cybersecurity cannot eliminate all risk. A database is the organized data store, not the whole MIS.