2/17/26, 6:11 PM
OneNote
17 February 2026 14:34
1. Information System (IS)
An Information System (IS) is when different parts work together to
manage information properly.
These parts include:
Hardware → The physical equipment (like computers and servers)
• Software → The programs that run on the hardware
• Data → The raw facts (numbers, text, records)
• People → The users who operate and manage the system
• Procedures → The rules or steps followed to use the system correctly
•
When all these work together, they help an organization collect,
process, store, and share information efficiently.
Real Example:
A college result management system
Hardware → Computer servers
• Software → Result software
• Data → Student marks
• People → Teachers & students
• Procedures → Steps for entering marks
•
2. Components of Information System
1. Hardware
Physical devices used in information processing.
Examples:
•
Desktop
🌍 Example: ATM machine hardware.
2. Software
Programs that control hardware.
Two types:
System Software → Windows, Linux
• Application Software → Payroll system, Billing system
•
🌍 Example: MS Excel used to calculate marks.
3. People
Two types:
End Users → Students, customers
• IS Specialists → System analyst, developer, operator
•
🌍 Example: Developer builds banking app, customer uses it.
4. Data
Raw facts and figures.
Types:
https://onedrive.live.com/personal/d2867a469eba2310/_layouts/15/Doc.aspx?sourcedoc={e875d1f4-6dc0-4443-82b4-93ba3ebdac79}&action=edi…
1/5
2/17/26, 6:11 PM
OneNote
Text data
• Image data
• Audio data
• Numeric data
•
🌍 Example: Student roll number (data), Final grade report
(information).
5. Procedures
Step-by-step rules to operate system.
🌍 Example: Procedure for logging into company system using ID and
pass
3. Types of Information Systems
1.Transaction Processing System (TPS)
Handles daily routine transactions.
Examples:
Billing system
• Purchasing system
🌍 Real Example:
At a supermarket billing counter, when the cashier scans items, the
system calculates the total amount, prints the bill, and updates stock
automatically — this is a TPS.
•
2. Management Information System (MIS)
that collects data from daily operations and provides summarized
reports to help managers monitor and control business performance.
🌍 Real-World Example
A store manager receives a monthly sales report showing total sales,
expenses, and profit to understand how the store is performing — this
report is generated by MIS.
3️⃣ Decision Support System (DSS)
Helps management in complex decision-making.
🌍 Example:
Company using software to decide product pricing based on market
data.
4️⃣ Executive Information System (EIS)
📘 Easy Definition (Theory)
An Executive Information System (EIS) is a system designed for senior
executives that provides high-level summary information, trends, and
graphical reports for strategic decision-making.
🌍 Real-World Example
A CEO views a dashboard showing yearly profit trends, sales growth
charts, and performance graphs to plan future business strategy — this
is EIS.
5️⃣ Enterprise Resource Planning (ERP)
Integrated system for entire organization.
🌍 Example:
Companies like SAP provide ERP software.
https://onedrive.live.com/personal/d2867a469eba2310/_layouts/15/Doc.aspx?sourcedoc={e875d1f4-6dc0-4443-82b4-93ba3ebdac79}&action=edi…
2/5
2/17/26, 6:11 PM
OneNote
ERP manages:
HR
• Finance
• Inventory
• Sales
•
6️⃣ Expert System
Acts like a human expert.
It has:
Knowledge base
• Inference engine
•
🌍 Example:
Medical diagnosis system suggesting disease based on symptoms.
✅ 4️⃣ Development of Information System (SDLC)
System Development Life Cycle (SDLC)
1. System Survey
Identify problems.
2. System Identification
Find weaknesses in current system.
3. System Selection
Choose best solution.
4. System Planning
Create plan.
5. Analysis
Study user requirements.
6. Design
Create blueprint for developers.
7. Implementation
Install system + training.
8. Testing
Check errors.
9. Maintenance
Fix bugs & update system.
🌍 Example:
When a university creates a new online admission portal.
5️⃣ Information Security (InfoSec)
📘 Definition
Protection of information from:
•
•
•
•
Unauthorized access
Disclosure
Modification
Destruction
🔐 CIA Triad
1️⃣ Confidentiality
Only authorized users can access data.
Example: Password-protected Gmail.
2️⃣ Integrity
Data should not be changed incorrectly.
Example: Exam results must not be altered.
https://onedrive.live.com/personal/d2867a469eba2310/_layouts/15/Doc.aspx?sourcedoc={e875d1f4-6dc0-4443-82b4-93ba3ebdac79}&action=edi…
3/5
2/17/26, 6:11 PM
OneNote
3️⃣ Availability
Data must be available when needed.
Example: Hospital system must work 24/7.
6️⃣ Need for Information Security
•
•
•
•
•
Protect privacy
Prevent financial loss
Avoid reputation damage
Ensure business continuity
Legal compliance
🌍 Real Example:
If customer data leaks from Amazon, trust is lost.
✅ 7️⃣ Common Cyber Threats
1️⃣ Phishing
Fake email to steal login info.
🌍 Example:
Fake bank email asking for OTP.
2️⃣ SQL Injection
Malicious code inserted into database query.
3️⃣ IoT Attacks
Hacking smart devices like CCTV cameras.
4️⃣ DDoS Attack
Overloading website with traffic.
🌍 Example:
Online shopping site crashing on sale day.
5️⃣ Ransomware
Locks files and demands money.
🌍 Example:
The global attack WannaCry spread using tools leaked by The Shadow Brokers.
6️⃣ Cyber-Physical Attack
Attack on physical systems.
🌍 Example:
The Stuxnet worm damaged nuclear systems.
📘 Information Assurance (IA)
Information Assurance (IA) means protecting information systems and data to make sure they are safe,
accurate, available, and used properly.
👉 Simple meaning:
It ensures that information is confidential, correct, and accessible when needed.
🌍 Example:
A bank uses passwords, encryption, backups, and firewalls to protect customer account details — this is
Information Assurance.
📘 Cybersecurity
Cybersecurity is the practice of protecting computers, networks, and data from cyber attacks, hacking,
and unauthorized access.
👉 Simple meaning:
It keeps digital systems and information safe from online threats.
🌍 Example:
https://onedrive.live.com/personal/d2867a469eba2310/_layouts/15/Doc.aspx?sourcedoc={e875d1f4-6dc0-4443-82b4-93ba3ebdac79}&action=edi…
4/5
2/17/26, 6:11 PM
OneNote
A company installs antivirus software and firewalls to protect its computers from hackers and viruses —
this is cybersecurity.
📘 Cybersecurity Risk Analysis (Short Version)
✅ Reduced Steps:
1️⃣ Identify Assets – Find what needs protection (data, servers).
2️⃣ Identify Threats & Vulnerabilities – Find possible dangers and weaknesses.
3️⃣ Assess Impact & Likelihood – Check how serious and how likely the risk is.
4️⃣ Calculate & Prioritize Risk – Decide which risks are most important.
5️⃣ Mitigation & Monitoring – Take action to reduce risk and monitor regularly.
📌 Formula:
Risk = Likelihood × Impact
•
•
•
•
🌍 Example (Bank Server):
Asset → Customer data
Threat → Hacker
Vulnerability → Weak firewall
Impact → Financial loss
https://onedrive.live.com/personal/d2867a469eba2310/_layouts/15/Doc.aspx?sourcedoc={e875d1f4-6dc0-4443-82b4-93ba3ebdac79}&action=edi…
5/5