Semester One Examinations, 2023 BISM7202
Page 1 of 6
This exam paper must not be removed from the venue
Venue ____________________
Seat Number __________
Student Number |__|__|__|__|__|__|__|__|
Family Name ____________________
First Name ____________________
School of Business
Semester One Examinations, 2023
BISM7202 Information Systems for Management
This paper is for St Lucia Campus students.
Examination Duration: 120 minutes
Planning Time: 10 minutes
Exam Conditions:
•This is a Closed Book examination - no written materials permitted
•No calculators permitted
•During Planning Time - Students are encouraged to review and plan
responses to the exam questions
•This examination paper will be released to the Library
Materials Permitted in the Exam Venue:
(No electronic aids are permitted e.g. laptops, phones)
None
Materials to be supplied to Students:
Additional exam materials (e.g. answer booklets, rough paper) will
be provided upon request.
1 x 14-Page Answer Booklet
Instructions to Students:
If you believe there is missing or incorrect information impacting
your ability to answer any question, please state this when writing
your answer.
Answer all questions in the Answer booklet provided.
For Examiner Use Only
Question
Mark
Total _________
Semester One Examinations, 2023 BISM7202
Page 2 of 6
Question 1 of 5.
The Business Process Modelling Notation (BPMN) diagram below represents the student
enrolment process at Elite University. Once the application has been submitted, it undergoes
a series of stages for evaluation. The academic credentials of the student are checked,
including their past academic degrees. Simultaneously, an English proficiency assessment
is conducted. If the student meets the academic credential requirements and satisfies the
English proficiency assessment, they proceed in the admission process. However, if the
student does not meet the English proficiency requirement, if their score is close to the
passing threshold, the student is told to retake the English proficiency test. Otherwise, the
application is rejected. If academic credentials meet the requirement, and the English
proficiency assessment is successfully completed, an admission letter is issued. In any other
case, a rejection letter is issued.
(a) Please suggest appropriate labels or symbols (A-H) for each element in the BPMN
diagram. (6 marks)
(b) There are a few missing labels (not included in A-H). Include any missing label
necessary to complete the representation. Don’t draw them. Explain using text where
they must be placed. (4 marks)
Semester One Examinations, 2023 BISM7202
Page 3 of 6
Question 2 of 5.
Imagine you are working as a project manager in a software development company that
specializes in developing solutions for higher education institutions. Your team is following
an agile approach, and you are using user stories as a means to capture requirements in
this context.
(a) Provide two examples of user stories for a student Learning Management System (such
as Blackboard or Learn.UQ) in a university setting. Make sure to follow the template for a
user story description. There is no need to specify the acceptance criteria. (2 marks)
(b) Suppose that you are a system analyst at an elite Australian university. Here are the
client descriptions of a few activities that students can perform in the “University Enterprise
System”:
Students can register for their desired courses, but first, they have to find their desired
courses from the courses offered by the university. Students can submit their assignments
electronically. They have the option to request an extension for their assignments if they
encounter valid circumstances that hinder their ability to submit on time.
In your Answer Booklet, explain how to complete the following diagram to reflect the client
descriptions. Do NOT add new use cases. Specify the texts to replace A, B, C and D. If
there are missing elements, specify them and specify their location in the diagram. (8 marks)
Semester One Examinations, 2023 BISM7202
Page 4 of 6
Question 3 of 5.
Read the following problem-solving mini-case for the pharmaceutical logistics company,
PharmaTrans, and answer the questions at the end.
PharmaTrans is a small pharmaceutical transport and logistics company that specialises in
providing fast and safe transport for delicate and fragile medicines worldwide. Clearly, their
services are in demand worldwide with the distribution of the new COVID-19 vaccine.
Emily Wang is the PharmaTrans Chief Operating Officer, while Anika Patel and Zhang Wei
are software development engineers.
Over a coffee on Tuesday morning, Anika and Zhang suggested to Emily that they should
gather a team of experienced programmers and use the traditional Software Development
Lifecycle approach to develop a new medical logistics transport system for PharmaTrans to
use in transporting the new vaccine around Australia. This is a specialised need as the new
vaccine must be stored at -70 degrees or below. That is… very cold.
This capability is critical to the success of PharmaTrans and uses brand new specialist
sensors in the transportation palettes to monitor temperature and alert the logistic
technicians when the palette is likely to warm to a temperature above the threshold. The
software would also integrate with Supply Chain Management systems to ensure rapid and
safe transport to clinics set up across the country.
Emily immediately agreed to this suggestion, and she wants Anika and Zhang to start
developing and implementing the software immediately. Because of the fast timeframes
required, Emily wants the project to start delivering working software within one month from
now, and this software would build into a brand-new system over the course of the next
year. Anika and Zhang are horrified. “That’s not how this kind of software development
works! This is a mission-critical system and there is a critical needed for safety. You are
suggesting we use an agile software development method like Extreme Programming,
SCRUM, or a rapid application development method. We shouldn’t build this type of
software in the way you suggest.”
Answer all of the following questions:
(a) Draft a short note to Emily explaining the traditional Systems Development Lifecycle.
(2 points)
(b) Explain whether an agile software development method would work as Emily wishes.
In your view, should this type of software be developed using an Agile development
method? Justify your view (2 points).
(c) In general, what other factors affect the decision to choose a more traditional
Software Development Lifecycle (or Waterfall approach) versus an Agile software
development approach? List and explain three factors. (6 marks)
Semester One Examinations, 2023 BISM7202
Page 5 of 6
Question 4 of 5.
Here is a list of a few variables of interest in the higher education context along with their
brief definitions:
1. Student Enrolment: The number of students who are currently enrolled in a specific
course, program, or institution.
2. Course Popularity: The level of demand and interest among students for specific
courses or programs offered by an educational institution.
3. Academic Performance: The measure of a student's achievements and progress in
their academic studies, often assessed through grades, GPA, and academic
milestones.
4. Student Demographics: The characteristics of the student body, including age,
gender, nationality, ethnicity, and other relevant demographic factors.
5. Retention Rates: The percentage of students who continue their studies and remain
enrolled in a particular course or program for a given period, indicating the
effectiveness of student retention strategies.
6. Student Satisfaction: The level of contentment and fulfilment experienced by
students in terms of their overall educational experience, often measured through
surveys, feedback, or other evaluation methods.
7. Graduation Rates: The percentage of students who successfully complete their
academic program and receive their degree within the expected timeframe, indicating
the institution's effectiveness in supporting student progression and completion.
Sarah was recently recruited as a data analyst at an elite Australian university. She is
determined to leverage the power of business analytics to drive improvements in the higher
education sector.
(a) Sarah begins by examining historical data on student enrolment, course popularity, and
academic performance. Explain with one example how descriptive analytics can help her
analysis. Start by defining descriptive analytics. (2.5 marks)
(b) To take her analysis further, Sarah suggests the application of predictive analytics.
Explain with one example how predictive analytics can be applied in this context. Start by
defining predictive analytics. (2.5 marks)
(c) Sarah realizes that analytics can go beyond predictions. She introduces the concept of
prescriptive analytics. Explain with one example how prescriptive analytics can be
incorporated into the university's strategies. Start by defining prescriptive analytics. (2.5
marks)
(d) From a data privacy perspective, are there any legal considerations that Sarah needs to
take into account? Suggest two steps that Sarah can take to maintain student privacy. (2.5
marks)
Semester One Examinations, 2023 BISM7202
Page 6 of 6
Question 5 of 5.
Under the Notifiable Data Breach (NDB) scheme, an eligible data breach occurs when:
1- there is unauthorised access to or unauthorised disclosure of personal information,
or a loss of personal information, that an organisation or agency holds,
2- this is likely to result in serious harm to one or more individuals, and,
3- the organisation or agency hasn’t been able to prevent the likely risk of serious harm
with remedial action.
Suppose that you are an information security analyst for a healthcare organization,
HealthFirst Medical Services. A security incident has occurred, and you are tasked with
analysing the scenario to determine whether an eligible data breach, as defined under
Australian Privacy Act, has occurred.
The Incident:
HealthFirst Medical Services, a leading provider of healthcare services, recently detected a
security breach that potentially exposes sensitive patient information. Upon further
investigation, it was discovered that a cybercriminal gained unauthorized access to the
organization's patient database, which stores comprehensive electronic health records
(EHRs) of thousands of individuals.
The compromised data includes personally identifiable information (PII) such as patient
names, addresses, medical histories, Medicare numbers, and insurance details. The
cybercriminal was able to access this data for an extended period, estimated to be
approximately two months, without detection by HealthFirst's security systems.
HealthFirst Medical Services takes patient privacy seriously and promptly initiated their
incident response plan upon discovering the breach. They engaged a team of forensic
experts to assess the extent of the unauthorized access and determine the potential impact
on affected individuals. The forensic analysis confirmed that the cybercriminal had accessed
and potentially exfiltrated (extracted or removed) a significant amount of patient data.
(a) Based on the given scenario, analyse whether an eligible data breach has occurred
according to the criteria outlined under Australian law. Provide a justification for your
decision. (8 marks)
(b) Will you inform anyone or any other organisation about this incident? (2 marks)
END OF EXAMINATION