defined as a system that records, processes and reports on transactions to provide financial and non-financial information to make decisions and have appropriate levels of internal controls(security measures to protect sensitive data) for those transactions