Integrating information security policy management with corporate risk management for strategic alignment

Information security policy defines the governance and implementation strategy for information security in alignment with the corporate risk policy objectives and strategies. Research has established that alignment between corporate concerns may be enhanced when strategies are developed concurrently using the same development process as an integrative relationship is established. Utilizing the corporate risk management framework for security policy management establishes such an integrative relationship between information security and corporate risk management objectives and strategies. There is however limitation in the current literature on presenting a definitive approach that fully integrates security policy management with the corporate risk management framework. This paper presents an approach that adopts a conventional corporate risk management framework for security policy development and management to achieve alignment with the corporate risk policy. A case example is examined to illustrate the alignment achieved in each process step with a security policy structure being consequently derived in the process. It is shown that information security policy management outcomes become both integral drivers and major elements of the corporate-level risk management considerations. Further study should involve assessing the impact of the use of the proposed framework in enhancing alignment as perceived in this paper.

Time-dependent analysis of length of stay and mortality due urinary tract infections in ten developing countries : INICC findings

Catheter associated urinary tract infections (CAUTI) are a worldwide problem that may lead to increased patient morbidity, cost and mortality.1e3 The literature is divided on whether there are real effects from CAUTI on length of stay or mortality. Platt4 found the costs and mortality risks to be largeyetGraves et al found the opposite.5 A reviewof the published estimates of the extra length of stay showed results between zero and 30 days.6 The differences in estimates may have been caused by the different epidemiological methods applied. Accurately estimating the effects of CAUTI is difficult because it is a time-dependent exposure. This means that standard statistical techniques, such asmatched case-control studies, tend to overestimate the increased hospital stay and mortality risk due to infection. The aim of the study was to estimate excess length of stay andmortality in an intensive care unit (ICU) due to a CAUTI, using a statistical model that accounts for the timing of infection. Data collected from ICU units in lower and middle income countries were used for this analysis.7,8 There has been little research for these settings, hence the need for this paper.

Improving information security management in nonprofit organisations

All organisations, irrespective of size and type, need effective information security management (ISM) practices to protect vital organisational in- formation assets. However, little is known about the information security management practices of nonprofit organisations. Australian nonprofit organisations (NPOs) employed 889,900 people, managed 4.6 million volunteers and contributed $40,959 million to the economy during 2006-2007 (Australian Bureau of Statistics, 2009). This thesis describes the perceptions of information security management in two Australian NPOs and examines the appropriateness of the ISO 27002 information security management standard in an NPO context. The overall approach to the research is interpretive. A collective case study has been performed, consisting of two instrumental case studies with the researcher being embedded within two NPOs for extended periods of time. Data gathering and analysis was informed by grounded theory and action research, and the Technology Acceptance Model was utilised as a lens to explore the findings and provide limited generalisability to other contexts. The major findings include a distinct lack of information security management best practice in both organisations. ISM Governance and risk management was lacking and ISM policy was either outdated or non- existent. While some user focused ISM practices were evident, reference to standards, such as ISO 27002, were absent. The main factor that negatively impacted on ISM practices was the lack of resources available for ISM in the NPOs studied. Two novel aspects of information security dis- covered in this research were the importance of accuracy and consistency of information. The contribution of this research is a preliminary understanding of ISM practices and perceptions in NPOs. Recommendations for a new approach to managing information security management in nonprofit organisations have been proposed.

Understanding IT business value creation and evaluation in least developed economies

Information Technology (IT) is an important resource that can facilitate growth and development in both the developed and developing economies. The forces of globalisation increase the digital divide between the developed and developing economies is increasing. The least developed economies (LDEs) are the most vulnerable within this environment. Intense competition for IT resources means that LDEs need a deeper understanding of how to source and evaluate their IT-related efforts. This effort puts LDEs in a better position to source funding from various stakeholders and promote localized investment in IT. This study presents a complementary approach to securing better IT-related business value in organizations in the LDEs. It further evaluates how IT and the complementaries need to managed within the LDEs. Analysis of data collected from five LDEs show that organizations that invest in IT and related complementaries are able to better their business processes. The data also suggest that improved business processes lead to overall business processes improvements. The above is only possible if organizations adopt IT and make related changes in the complementary resources within the established culture and localizing the required changes.

An empirical investigation of health information system failure in regional Sri Lanka

Public health decision making is critically dependant on accurate, timely and reliable information. There is a widespread belief that most of the national and sub-national health information systems fail in providing much needed information support for evidence based health planning and interventions. This situation is more acute in developing nations where resources are either stagnant or decreasing, coupled with the situations of demographic transition and double burden of diseases. Literature abounds with publications, which provide information on misguided health interventions in developing nations, leading to failure and waste of resources. Health information system failure is widely blamed for this situation. Nevertheless, there is a dearth of comprehensive evaluations of existing national or sub-national health information systems, especially in the region of South-East Asia. This study makes an attempt to bridge this knowledge gap by evaluating a regional health information system in Sri Lanka. It explores the strengths and weaknesses of the current health information system and related causative factors in a decentralised health system and then proposes strategic recommendations for reform measures. A mix methodological and phased approach was adopted to reach the objectives. An initial self administered questionnaire survey was conducted among health managers to study their perceptions in relation to the regional health information system and its management support. The survey findings were used to establish the presence of health information system failure in the region and also as a precursor to the more in-depth case study which was followed. The sources of data for the case study were literature review, document analysis and key stake holder interviews. Health information system resources, health indicators, data sources, data management, data quality, and information dissemination were the six major components investigated. The study findings reveal that accurate, timely and reliable health information is unavailable and therefore evidence based health planning is lacking in the studied health region. Strengths and weaknesses of the current health information system were identified and strategic recommendations were formulated accordingly. It is anticipated that this research will make a significant and multi-fold contribution for health information management in developing countries. First, it will attempt to bridge an existing knowledge gap by presenting the findings of a comprehensive case study to reveal the strengths and weaknesses of a decentralised health information system in a developing country. Second, it will enrich the literature by providing an assessment tool and a research method for the evaluation of regional health information systems. Third, it will make a rewarding practical contribution by presenting valuable guidelines for improving health information systems in regional Sri Lanka.

Job satisfaction and intention to leave among critical care nurses in Saudi Arabia

Aim The purpose of this study was to examine the relationship between registered nurses’ (RN) job satisfaction and their intention to leave critical care nursing in Saudi Arabia. Background Many studies have identified critical care areas as stressful work environments for nurses and have identified factors contributing to job satisfaction and staff retention. However, very little research has examined these relationships in the Saudi context. Design and Methods This study utilised an exploratory, cross-sectional survey design to examine the relationship between RN job satisfaction and intention to leave at King Abdul-Aziz University Hospital, Saudi Arabia. Respondents completed a self-administered survey including demographic items and validated measures of job satisfaction and intention to leave. A convenience sample of 182 RNs working in critical care areas during the data collection period were included. Results Regression analysis predicting RN intention to leave found that demographic variables including age, parental status and length of ICU experience, and three of the job satisfaction subscales including perceived workload, professional support and pay and prospects for promotion, were significantly associated with the outcome variable. Conclusion This study adds to the existing literature on the relationship between job satisfaction and intention to leave critical care areas among RNs working in Saudi Arabia. These findings point to the need for management and policy interventions targeting nurses’ workloads, professional support and pay and promotion in order to improve nurse retention.

Antibiotics overuse in children with upper respiratory tract infections in Saudi Arabia : risk factors and potential interventions

Background: Antibiotics misuse is currently one of the major public health issues worldwide. This misuse can lead to the development of bacterial resistance, increasing the burden of chronic diseases, rising costs of health services, and the development of side effects. Several factors may influence this pattern of overuse. Objectives:This article will review the pertinent factors contributing to the overuse of antibiotics worldwide, and to assess the intervention strategies to limit this overuse. Methods: studies about antibiotics use in children were reviewed from several electronic databases, such as MEDLINE and Pubmed. Results: Factors contributing to the overuse of antibiotics could include psychosocial factors, such as behaviors and attitudes (e.g. self-medication, over-the-counter medication, or patients/parents pressure), and demographic factors, such as socio-economic status and education level. Several intervention strategies were reported to be effective in reducing the overuse of antibiotics, such as health education, doctor-patient communication, and policies change. Multifaceted interventions were found to be the most effective in reducing the antibiotics overuse.

Learning processes in creative industries initiatives in developing countries : an examination of policy and practice

What does a dance group in Benin that mixes contemporary and ethnic dancing have in common with Mongolian felt producers that want to enter the design market in Europe? These are both examples of learning processes in Creative Industries initiatives in developing countries. Following the concept of sustainable development, I argue that the challenge for developing countries in contemporary society is to meet the very real need of people for economic development and opportunities for income generation, while at the same time avoiding unintended and unwanted consequences of economic development and globalisation. The concept of the Creative Industries may be a way to promote a development that is sustainable and avoids social exclusion of groups-at-risk. In line with this, I argue that the Creative Industries sector could, in fact, link economic development and the continuation and evolution of local traditions and cultural heritage. A pressing question then is: how can education and learning contribute to creating a context in which talent can flourish? This study aims to provide a comprehensive analysis of the research problem of this thesis: what elements are conducive for individual learning processes in creative development initiatives? In this, I argue that it is crucial to determine what ingredients and characteristics contribute to making these initiatives successful, that is, to meet their specific goals, in a developing context. This is explored through a staged analysis: an overview of quantitative data, an inventory and comparative case studies and, finally, the description and analysis of two in-depth case studies – felt design in Mongolia (Asia) and dance in Benin (Africa), in which I was an observer of the action phase of the local interventions. The analysis culminates in practice-related outcomes related to the operation of creative development initiatives, as well as the contribution to the academic debate on issues like the cultural gap between developed and developing countries, transformative learning and the connection of learning spaces.

Nurses’ willingness to report medication administration errors in Saudi Arabia

Reporting of medication administration errors (MAEs) is one means by which health care facilities monitor their practice in an attempt to maintain the safest patient environment. This study examined the likelihood of registered nurses (RNs) reporting MAEs when working in Saudi Arabia. It also attempted to identify potential barriers in the reporting of MAE. This study found that 63% of RNs raised concerns about reporting of MAEs in Saudi Arabia—nursing administration was the largest impediment affecting nurses' willingness to report MAEs. Changing attitude to a non-blame system and implementation of anonymous reporting systems may encourage a greater reporting of MAEs.

Social and environmental accounting research : major contributions and future directions for developing countries

A review is provided of major contributions in social and environmental accounting literature focusing on the issues of developing countries. The review of prior research shows that the major contributions have been related to the motivations for social and environmental disclosure. However, other important research areas such as ethical/accountability issues and how to cost externalities which have already been considered within the developing country context. Contemporary social and environmental issues such as climate change and greenhouse gas emissions affecting the global community also appear to be key issues of research to scholars in both developed and developing countries. Finally, some future research directions are identified.

Assessing the overuse of antibiotics in children with URTIs in Saudi Arabia : development of the parental perception on antibiotics scale (PAPA scale)

Background: Antibiotic overuse is influenced by several factors that can only be measured using a valid and reliable psychosocial measurement instrument. This study aims to establish translation and early stage validation of an instrument recently developed by this research team to measure factors influencing the overuse of antibiotics in children with upper respiratory tract infections in Saudi Arabia. Method: The content evaluation panel was composed of area experts approached using the Delphi Technique. Experts were provided with the questionnaires iteratively, on a three-round basis until consensus on the relevance of items was reached independently. Translation was achieved by adapting Brislin’s model of translation. Results: After going through the iterative process with the experts, consensus was reached to 58 items (including demographics). Experts also pointed out some issues related to ambiguity and redundancy in some items. A final Arabic version was produced from the translation process. Conclusion: This study produced preliminary validation of the developed instrument from the experts’ contributions. Then, the instrument was translated from English to Arabic. The instrument will undergo further validation steps in the future, such as construct validity.

Implementation of the MARPOL Convention in developing countries

Over the years a large set of international conventions have been adopted under the auspices of the International Maritime Organization for prevention of vessel-source marine pollution. However, most of developing countries failed to effectively implement these conventions. Against this backdrop, this article aims to assess the inherent suitability of the MARPOL Convention for implementation in developing countries. It also examines the role of global community for effective implementation of the MARPOL Convention and identifies the legal and institutional bottlenecks in the current implementation regime.

CSR in Private Enterprises in Developing Countries : Evidences from the Ready-Made Garments Industry in Bangladesh

"This book examines the growing trend of recognition and practices of CSR in private enterprises in developing countries. It identifies the challenges and deficiencies in these practices and proposes means for improvement. Based on a sound theoretical foundation, this book focusses on the case of Bangladesh and the ready-made garment industry to exemplify the described developments. After a brief introduction the book outlines the standards of Corporate Social Responsibility. It compares the trends in CSR practices both in developed and developing countries and then embarks on CSR practices in the private sector in Bangladesh to finally present a detailed analysis of CSR and its practices in the ready-made garment industry. The book not only compares developing countries with developed, but as well provides an assessment and analysis of different stages of CSR within the South Asian area."--published website