Enterprise information security policy assessment : an extended framework for metrics development utilising the goal-question-metric approach

Effective enterprise information security policy management requires review and assessment activities to ensure information security policies are aligned with business goals and objectives. As security policy management involves the elements of policy development process and the security policy as output, the context for security policy assessment requires goal-based metrics for these two elements. However, the current security management assessment methods only provide checklist types of assessment that are predefined by industry best practices and do not allow for developing specific goal-based metrics. Utilizing theories drawn from literature, this paper proposes the Enterprise Information Security Policy Assessment approach that expands on the Goal-Question-Metric (GQM) approach. The proposed assessment approach is then applied in a case scenario example to illustrate a practical application. It is shown that the proposed framework addresses the requirement for developing assessment metrics and allows for the concurrent undertaking of process-based and product-based assessment. Recommendations for further research activities include the conduct of empirical research to validate the propositions and the practical application of the proposed assessment approach in case studies to provide opportunities to introduce further enhancements to the approach.

Public relations management in organisations

Chapter aims By the end of your study of this chapter, you should be able to: - See public relations as a link between organisations and their environments - Use systems theory to guide your understanding and practical application of public relations - Understand the make up of a public relations management team within an organisation - Identify and understand how a range of internal forces including culture, and power affect the practice of public relations - Identify and understand how a range of external forces including conflict, activism and corporate social responsibility affect the practice of public relations.

Antecedents of sustainable management support for IT related initiatives

Having IT-related capabilities is not enough to secure value from IT resources and survive in today’s competitive environment. IT resources evolve dynamically and firms must sustain their existing capabilities to continue to leverage value from their IT resources. Firm’s human resources are an important IT-related capability, and an important source of their competitive advantage. Using a field survey, this study demonstrates that a dynamic end-user environment, a result of a coordinated change in complementary factors can help sustain firms’ IT-related management capabilities. These factors include an appropriate organizational design to decision rights and work environment and a congruent reward system. This study adds an important dimension in understanding why some firms continue to perform better with their IT resources than others. For practice, this study suggests that a comprehensive approach to what constitutes valuable organizational resources is necessary.

Is your organizational culture fit for business process management?

All processes are modeled, all process metrics defined, all process support systems are set up; yet still, processes are not running smoothly and departmental silos are more present than ever. Both practitioners and academics tell the same story. A successful business process management (BPM) implementation goes beyond using the right methods and putting the right systems in place. In fact, an important success factor for BPM is establishing the right organizational culture, that is, a culture that supports the achievement and maintenance of efficient and effective business processes.

Users adoption of web 2.0 for knowledge management : position paper

Web 2.0 is a new generation of online applications on the web that permit people to collaborate and share information online. The use of such applications by employees in organisations enhances knowledge management (KM) in organisations. Employee involvement is a critical success factor as the concept is based on openness, engagement and collaboration between people where organizational knowledge is derived from employees experience, skills and best practices. Consequently, the employee's perception is recognized as being an important factor in web 2.0 adoption for KM and worthy of investigation. There are few studies that define and explore employee's enterprise 2.0 acceptance for KM. This paper provides a systematic review of the literature prior to demonstrating the findings as part of a preliminary conceptual model that represents the first stage of an ongoing research project that will end up with an empirical study. Reviewing available studies in technology acceptance, knowledge management and enterprise 2.0 literatures aids obtaining all potential user acceptance factors of enterprise 2.0. The preliminary conceptual model is a refinement of the theory of planed behaviour (TPB) as the user acceptance factors has been mapped into the TPB main components including behaviour attitude, subjective norms and behaviour control which are the determinant of individual's intention to a particular behaviour.

Challenges in the context-aware management of business processes : a multiple case study

Current conceptualizations of organizational processes consider them as internally optimized yet static systems. Still, turbulences in the contextual environment of a firm often lead to adaptation requirements that these processes are unable to fulfil. Based on a multiple case study of the core processes of two large organizations, we offer an extended conceptualisation of business processes as complex adaptive systems. This conceptualization can enable firms to optimise business processes by analysing operations in different contexts and by examining the complex interaction between external, contextual elements and internal agent schemata. From this analysis, we discuss how information technology can play a vital goal in achieving this goal by providing discovery, analysis, and automation support. We detail implications for research and practice.

Creating successful cultural Brokers : the pros and cons of a community of practice approach in arts management education

Arts managers play a critical role in creating a strong, sustainable arts and cultural sector. They operate as brokers, creating programs, and, more critically, coordinating the relationships between artists, audiences, communities, governments and sponsors required to make these programs a success. Based on study of model developed for a subject in the Master of Creative Industries (Creative Production & Arts Management) at Queensland University of Technology (QUT), this paper examines the pros and cons of a “community of practice” approach in training arts management students to act as cultural brokers. It provides data on the effectiveness of a range of activities – including Position Papers, Case Studies, Masterclasses, and offline and online conversations – that can be used facilitate the peer-to-peer engagement by which students work together to build their cultural brokering skills in a community of practice. The data demonstrates that, whilst students appreciate this approach, educators must provide enough access to voices of authority – that is, to arts professionals – to establish a well-functioning community of practice, and ensure that more expert students do not become frustrated when they are unwittingly and unwillingly thrust into this role by less expert classmates. This is especially important in arts management, where classes are always diverse, due to the fact that most dedicated programs in Australia, as in the US, UK and Europe, are taught via small-scale programs at graduate level which accept applicants from a wide variety of arts and non-arts backgrounds.

Current research in risk-aware business process management : overview, comparison, and gap analysis

The management of risks in business processes has been a subject of active research in the past few years. Many benefits can potentially be obtained by integrating the two traditionally-separated fields of risk management and business process management, including the ability to minimize risks in business processes (by design) and to mitigate risks at run time. In the past few years, an increasing amount of research aimed at delivering such an integrated system has been proposed. However, these research efforts vary in terms of their scope, goals, and functionality. Through systematic collection and evaluation of relevant literature, this paper compares and classifies current approaches in the area of risk-aware business process management in order to identify and explain relevant research gaps. The process through which relevant literature is collected, filtered, and evaluated is also detailed.

Measuring the realization of benefits from enterprise architecture management

Enterprise architecture management (EAM) has become an intensively discussed approach to manage enterprise transformations. While many organizations employ EAM, a notable insecurity about the value of EAM remains. In this paper, we propose a model to measure the realization of benefits from EAM. We identify EAM success factors and EAM benefits through a comprehensive literature review and eleven explorative expert interviews. Based on our findings, we integrate the EAM success factors and benefits with the established DeLone & McLean IS success model resulting in a model that explains the realization of EAM benefits. This model aids organizations as a benchmark and framework for identifying and assessing the setup of their EAM initiatives and whether and how EAM benefits are materialized. We see our model also as a first step to gain insights in and start a discussion on the theory of EAM benefit realization.

Developing tools to support complex infrastructure decision-making

Purpose – The rapidly changing role of capital city airports has placed demands on surrounding infrastructure. The need for infrastructure management and coordination is increasing as airports and cities grow and share common infrastructure frameworks. The purpose of this paper is to document the changing context in Australia, where the privatisation of airports has stimulated considerable land development with resulting pressures on surrounding infrastructure provision. It aims to describe a tool that is being developed to support decision-making between various stakeholders in the airport region. The use of planning support systems improves both communication and data transfer between stakeholders and provides a foundation for complex decisions on infrastructure. Design/methodology/approach – The research uses a case study approach and focuses on Brisbane International Airport and Brisbane City Council. The research is primarily descriptive and provides an empirical assessment of the challenges of developing and implementing planning support systems as a tool for governance and decision-making. Findings – The research assesses the challenges in implementing a common data platform for stakeholders. Agency data platforms and models, traditional roles in infrastructure planning, and integrating similar data platforms all provide barriers to sharing a common language. The use of a decision support system has to be shared by all stakeholders with a common platform that can be versatile enough to support scenarios and changing conditions. The use of iPadss for scenario modelling provides stakeholders the opportunity to interact, compare scenarios and views, and react with the modellers to explore other options. Originality/value – The research confirms that planning support systems have to be accessible and interactive by their users. The Airport City concept is a new and evolving focus for airport development and will place continuing pressure on infrastructure servicing. A coordinated and efficient approach to infrastructure decision-making is critical, and an interactive planning support system that can model infrastructure scenarios provides a sound tool for governance.

Corporate profit and impression management in developing markets

In this study, we examine how organisations in Fiji communicate or legitimise their profit. We base the need for understanding this phenomenon on the following premise. Organisations are part of a wider society, and in competition for scarce resources. Organisations obtain the rights to consume resources upon conception, but must continually legitimise their rights of existence and the need to access the resources. Legitimacy is the ability to continue to justify one’s authority to exist in a society. Organisations rights to resources are contractual, and have a moral obligation to act in a responsible manner and justify their outcomes, actions, and activities to external stakeholders. Such justifications would be an attempt at legitimizing their existence by some form of impression management. Impression management refers to the process by which individuals attempt to influence the impression of others (Melo et al. 2009). In corporate reporting, impression management occurs when management selects, display, and presents that information in a manner that distorts readers’ perceptions of corporate achievements (Neu 1991; Patten 2002), and is managed best through disclosures (O’Donovan 2002). In developing economies, there is significant Government protection that creates near-monopoly sectors and industries. The rendered protection permits organisations to provide essential services to the community at reasonable costs. Organisations in these sectors and industries have an ominous need to legitimise their position and actions. The bond between the organisations and the society is much stronger, making organisations devote more effort in communicating their activities. Protection permits organisations to make reasonable profits to sustain their operations. Society may not accept abnormal profits from operational efficiencies. Profit is fundamental to the society’s perception of an organisation, amplifying the need for the firm to justify a level of profit. Abnormal profit for organisations construes bad news, and organisations would make relevant disclosures to manage stakeholder impressions on profit (Patten 2002). Organisations can manage impressions by disclosing information in a particular way. That is, organisations would want to put the impression that the abnormal profit is justified and the society will obtain its benefits in future. Such form of impression management requires unambiguous disclosure of information. The readability of corporate disclosures is an important indicator of organisational abnormal profit-related legitimacy efforts in developing economies.

Professional identity of management accountants : leadership in changing environments

The professional identity of management accountants (MAs) is evolving. According to 8,727 descriptors expressed by 1,158 participants, a range of characteristics of MAs are competing in shaping the identity of future MAs. Respondents strongly valued qualities such as professional principles, hard work, intelligence, analytical and forward thinking in MAs. Further, more innovative, dynamic and people-oriented qualities were strongly suggested for future MAs, with roles relating to multi-skilled business integrator, business partner/advisor, leader, change agent, and decision enabler/maker. Cultivating leadership qualities in the management accounting profession is critical according to participants. Projecting a positive image of the profession and CIMA, and innovative training in management and leadership skills can further support MAs to meet future challenges. Most of all, understanding business and continued personal development by individual MAs is highly valued in shaping the future leadership identity of MAs. Our quantitative data show positive relationships between the professional identification, image and reputation, and leadership qualities of MAs. This suggests that the more one identifies with the profession, the more one is likely to report higher levels of leadership qualities that support members to internalise the desired meaning of their profession and to create a positive image and reputation. After the financial crisis of 2008–2009, the image of financial professions has been tarnished and unpredictable markets and unstable employment opportunities have challenged the profession across all sectors. Many respondents, especially CIMA members, suggested that the turmoil of the financial crisis did not impact negatively but rather elevated the pivotal role of MAs in contributing to cost efficiency and value creation.

From product innovation to organizational innovation – and what that has to do with Business Process Management

One of the key trends that we currently witness not only in academic circles but also in industry - all throughout Australia at least – is that “Innovation” is becoming an important driver for business projects, for change agendas – and in turn, for Business Process Management initiatives.

Ontology-based knowledge management for enterprise systems

Companies face the challenges of expanding their markets, improving products, services and processes, and exploiting intellectual capital in a dynamic network. Therefore, more companies are turning to an Enterprise System (ES). Knowledge management (KM) has also received considerable attention and is continuously gaining the interest of industry, enterprises, and academia. For ES, KM can provide support across the entire lifecycle, from selection and implementation to use. In addition, it is also recognised that an ontology is an appropriate methodology to accomplish a common consensus of communication, as well as to support a diversity of KM activities, such as knowledge repository, retrieval, sharing, and dissemination. This paper examines the role of ontology-based KM for ES (OKES) and investigates the possible integration of ontology-based KM and ES. The authors develop a taxonomy as a framework for understanding OKES research. In order to achieve the objective of this study, a systematic review of existing research was conducted. Based on a theoretical framework of the ES lifecycle, KM, KM for ES, ontology, and ontology-based KM, guided by the framework of study, a taxonomy for OKES is established.