Pertemuan 16 Matakuliah: A0214/Audit Sistem Informasi Tahun: 2007

Bina Nusantara SYSTEM IMPLEMENTATION

Bina Nusantara The System Implementation Process Implementation approach System testing User processes and procedures Management reports and controls Problem management/reporting User acceptance testing Help desk and production support training and readiness Data conversion and data correction processes Operational procedures and readiness Security

Bina Nusantara System Testing

Bina Nusantara User Processes and Procedures Should be reviewed an approved as part of acceptance testing. User reference materials should be designed for all levels of user expertise and should instruct them on the user of the application.

Bina Nusantara Management reports and controls The development of management reports and their associated controls needs to be included within the scope of the system implementation. The reports generated should be aligned with business requirements. The reports should be relevant to ensure effectiveness and efficiency of the report development effort.

Bina Nusantara Problem management/reporting A problem management system should consist of audit trails for problems and their solutions, timely resolution, prioritization escalation procedures, incident reports, accessibility to configuration, information coordination with change management, and a definition of any dependencies on outside services. The problem management process should ensure that all unexpected events (error, problems, etc.) are recorded, analyzed, and resolved in a timely manner.

Bina Nusantara User Acceptance Testing User acceptance testing is a key to application controls. It ensures that the application fulfills the agreed upon functional expectation of the users, meets established usability criteria, and satisfies performance guidelines prior to being implemented into production. Acceptance Team Agreed Upon Requirements Management Approval

Bina Nusantara Help desk and production support training and readiness Help desk an production support processes ensure that any problems experienced by the user are appropriately resolved in a timely manner It should provide the ability for customers to ask questions and receive effective answers. Help requests should be monitored to ensure that all problems are resolved in a timely manner. All problems should be recorded with the help desk to allow for their complete analysis and resolution.

Bina Nusantara Data conversion and data correction processes Conversion is the process whereby this information is either entered manually or transferred programmatically from the old system to the new system. A data conversion plan defines how the data is collected and verified for conversion. Test to be performed include comparing the original and converted files and checking the compatibility of the converted data with the new system, and ensuring transactions affecting both converted and not yet uncoverted data.

Bina Nusantara Data conversion and data correction processes The data conversion process often gets intermingled with data cleanup. Data cleanup is a process that companies embark upon to ensure that the most accurate and complete data gets transferred into the new system. Ideally, the data cleanup effort should happen prior to the planning for data conversion. This allows the conversion programmers to focus on converting the data as opposed to coding for data differences.

Bina Nusantara Operational procedures and readiness System documentation ensures maintainability of the system and its components and minimizes the likelihood of errors. – Source of the data- Program design – Data attributes- Interfaces to other application – Input screens- Control procedures – Data validations- Error handling – Data selection- Operating instructions – Security procedures- Archive, purge, & retrieval – Description of calculations- Backup, storage, & recovery

Bina Nusantara IT Disaster / Continuity Plan IT continuity plans should be reviewed to ensure that the company plans incorporate the resources necessary to recover the new application. Disaster recovery requirement area: – Processor requirements – Disk storage – Operating system versions Recovery procedures related to the new application should be tested as soon as possible after it is put into production.

Bina Nusantara Security When new systems are developed, appropriate security access controls need to be developed. The goal of application security is to safeguard information against unapproved disclosure or modification and damage or loss.