Information security management : a case study of an information security culture

This thesis argues that in order to establish a sound information security culture it is necessary to look at organisation's information security systems in a socio- technical context. The motivation for this research stems from the continuing concern of ineffective information security in organisations, leading to potentially significant monetary losses. It is important to address both technical and non- technical aspects when dealing with information security management. Culture has been identified as an underlying determinant of individuals' behaviour and this extends to information security culture, particularly in developing countries. This research investigates information security culture in the Saudi Arabia context. The theoretical foundation for the study is based on organisational and national culture theories. A conceptual framework for this study was constructed based on Peterson and Smith's (1997) model of national culture. This framework guides the study of national, organisational and technological values and their relationships to the development of information security culture. Further, the study seeks to better understand how these values might affect the development and deployment of an organisation's information security culture. Drawing on evidence from three exploratory case studies, an emergent conceptual framework was developed from the traditional human behaviour and the social environment perspectives used in social work, This framework contributes to in- formation security management by identifying behaviours related to four modes of information security practice. These modes provide a sound basis that can be used to evaluate individual organisational members' behaviour and the adequacy of ex- isting security measures. The results confirm the plausibility of the four modes of practice. Furthermore, a final framework was developed by integrating the four modes framework into the research framework. The outcomes of the three case stud- ies demonstrate that some of the national, organisational and technological values have clear impacts on the development and deployment of organisations' informa- tion security culture. This research, by providing an understanding the in uence of national, organi- sational and technological values on individuals' information security behaviour, contributes to building a theory of information security culture development within an organisational context. The research reports on the development of an inte- grated information security culture model that highlights recommendations for developing an information security culture. The research framework, introduced by this research, is put forward as a robust starting point for further related work in this area.

An integrated framework for assessing community resilience in disaster management

Climate change is predicted to increase the frequency and severity of extreme weather events which pose significant challenges to the ability of government and other relief agencies to plan for, cope with and respond to disasters. Consequently, it is important that communities in climate sensitive and potential disaster prone areas strengthen their resilience to natural disasters in order to expeditiously recover from potential disruptions and damage caused by disasters. Building self reliance and, particularly in the immediate aftermath of a disaster, can facilitate short-term and long-term community recovery. To build stronger and more resilient communities, it is essential to have a better understanding of their current resilience capabilities by assessing areas of strength, risks and vulnerabilities so that their strengths can be enhanced and the risks and vulnerability can be appropriately addressed and mitigated through capacity building programs. While a number of conceptual frameworks currently exist to assess the resilience level of communities to disasters, they have tended to differ on their emphasis, scope and definition of what constitutes community resilience and how community resilience can be most effectively and accurately assessed. These limitations are attributed to the common approach of viewing community resilience through a mono-disciplinary lens. To overcome this, this paper proposes an integrated conceptual framework that takes into account the complex interplay of environmental, social, governance, infrastructure and economic attributes associated with community resilience. The framework can be operationalised using a range of resilience indicators to suit the nature of a disaster and the specific characteristics of a study region.

Conceptual framework for understanding the demand for emergency health services

Background & Objectives Emergency health services (EHS) throughout the world are increasingly congested. As more people use EHS, factors such as population growth and aging cannot fully explain this increase. Also, focus on patients’ clinical characteristics ignores the role that attitudinal and perceptual factors and motivations play in directing their decisions and actions. The aim of this study is to review and synthesize an integrated conceptual framework for understanding social psychological factors underpinning demand for EHS. Methodology A comprehensive search and review of empirical and theoretical studies about the utilization of EHS was conducted using major medical, health, social and behavioral sciences databases. Results A small number of studies used a relevant conceptual framework (e.g. Health Services Utilization Model or Health Belief Model) or their components to analyze patients’ decision to use EHS. The studies evidenced that demand was affected by perceived severity of the condition; perceived costs and benefits (e.g. availability, accessibility and affordability of alternative services); experience, preference and knowledge; perceived and actual social support; and demographic characteristics (e.g. age, sex, socioeconomic status, ethnicity, marital and living circumstances, place of residence). Conclusions Conceptual models that are commonly used in areas like social and behavioral sciences have rarely been applied in the EHS utilization field. Understanding patients’ decision-making and associated factors will lay the groundwork for identification of the evidence to inform improved policy responses and the development of demand management strategies. An integrated conceptual framework will be introduced as part of this study.

Primary students' group metacognitive processes in a computer supported collaborative learning environment

The current understanding of students’ group metacognition is limited. The research on metacognition has focused mainly on the individual student. The aim of this study was to address the void by developing a conceptual model to inform the use of scaffolds to facilitate group metacognition during mathematical problem solving in computer supported collaborative learning (CSCL) environments. An initial conceptual framework based on the literature from metacognition, cooperative learning, cooperative group metacognition, and computer supported collaborative learning was used to inform the study. In order to achieve the study aim, a design research methodology incorporating two cycles was used. The first cycle focused on the within-group metacognition for sixteen groups of primary school students working together around the computer; the second cycle included between-group metacognition for six groups of primary school students working together on the Knowledge Forum® CSCL environment. The study found that providing groups with group metacognitive scaffolds resulted in groups planning, monitoring, and evaluating the task and team aspects of their group work. The metacognitive scaffolds allowed students to focus on how their group was completing the problem-solving task and working together as a team. From these findings, a revised conceptual model to inform the use of scaffolds to facilitate group metacognition during mathematical problem solving in computer supported collaborative learning (CSCL) environments was generated.

Determination of coastal ground and surface water processes and character by use of hydrochemistry and stable isotopes, Fraser Coast, Queensland

This study was part of an integrated project developed in response to concerns regarding current and future land practices affecting water quality within coastal catchments and adjacent marine environments. Two forested coastal catchments on the Fraser Coast, Australia, were chosen as examples of low-modification areas with similar geomorphological and land-use characteristics to many other coastal zones in southeast Queensland. For this component of the overall project, organic , physico-chemical (Eh, pH and DO), ionic (Fe2+, Fe3+), and isotopic (ä13CDIC, ä15NDIN ä34SSO4) data were used to characterise waters and identify sources and processes contributing to concentrations and form of dissolved Fe, C, N and S within the ground and surface waters of these coastal catchments. Three sites with elevated Fe concentrations are discussed in detail. These included a shallow pool with intermittent interaction with the surface water drainage system, a monitoring well within a semi-confined alluvial aquifer, and a monitoring well within the fresh/saline water mixing zone adjacent to an estuary. Conceptual models of processes occurring in these environments are presented. The primary factors influencing Fe transport were; microbial reduction of Fe3+ oxyhydroxides in groundwaters and in the hyporheic zone of surface drainage systems, organic input available for microbial reduction and Fe3+ complexation, bacterial activity for reduction and oxidation, iron curtain effects where saline/fresh water mixing occurs, and variation in redox conditions with depth in ground and surface water columns. Data indicated that groundwater seepage appears a more likely source of Fe to coastal waters (during periods of low rainfall) via tidal flux. The drainage system is ephemeral and contributes little discharge to marine waters. However, data collected during a high rainfall event indicated considerable Fe loads can be transported to the estuary mouth from the catchment.

Media education, collaboration and industry : a case study of what a group of year 10 and 11 students value in a community of practice

This case study incorporated an analysis of a group of young people as media producers and placed young people’s perspectives of their media education learning at the core of the analysis. Communities of practice social learning theory provided an effective conceptual framework for investigating the nature of the participants’ involvement in a secondary school and creative industry partnership. The analysis of the data in this study indicated that the participants valued their learning by imagining, actively participating and belonging to a media education community of practice. By enabling young people to work directly with creative industries this school and industry partnership provided students with what they saw as valuable first-hand experience of professional expertise, that contributed to students’ understanding of their own and others’ identities.

Model-driven process configuration of enterprise systems

The configuration of comprehensive enterprise systems to meet the specific requirements of an organisation up to today is consuming significant resources. The results of failing or delayed enterprise system implementation projects are severe and may even threaten the organisation’s existence. One of the main drivers for implementing comprehensive enterprise systems is to streamline business processes. However, an intuitive conceptual support for business process configuration is insufficiently addressed by enterprise system vendors and inadequately researched in academia. This paper presents a model-driven approach to target this problem and proposes several configuration patterns that describe generic patterns of configuration alternatives, in order to understand what situations can occur during business process configuration. Based on these configuration patterns, a configuration notation is introduced that allows for visually highlighting configuration alternatives. Finally, we will sketch how configurable Event Driven Process Chains and the configuration of business processes can be supported using relational databases.

Concepts, water and reflections on practice

This paper discusses the nature of the conceptual structure in art practice, by example. It draws on insights gained from a practice based research (PBR) approach to making art. The PBR methods used include Reflective Practice and are briefly described. They have informed an understanding of the conceptual structure as an instance of problem framing. This is demonstrated by two creative examples, taken from two interactive artworks. These were informed by an evolving conceptual structure concerned with water.

A critical analysis of crisis escalation models : understanding stages and severity in infrastructure disturbance

A range of authors from the risk management, crisis management, and crisis communications literature have proposed different models as a means of understanding components of crisis. A generic component of these sources has focused on preparedness practices before disturbance events and response practices during events. This paper provides a critical analysis of three key explanatory models of how crises escalate highlighting the strengths and limitations of each approach. The paper introduces an optimised conceptual model utilising components from the previous work under the four phases of pre-event, response, recovery, and post-event. Within these four phases, a ten step process is introduced that can enhance understanding of the progression of distinct stages of disturbance for different types of events. This crisis evolution framework is examined as a means to provide clarity and applicability to a range of infrastructure failure contexts and provide a path for further empirical investigation in this area.

Managing Ethical Dilemmas

This chapter reviews almost a decade of research and writing undertaken by the authors into ethical dilemmas faced by leaders in a number of different operational contexts, including schools, universities and the public sector. The importance of this body of work is emphasised by one of our research participants who argued that ethical dilemmas were the 'bread and butter' of what leaders do. The chapter comprises four main sections. The first section overviews key theoretical aspects as background to the chapter, including relevant discussions about ethics and ethical decision-making. The second section synthesises the research findings from our work in the three contexts noted above, drawing out a set of learnings that contribute to better understandings of the nature, complexities and challenges of ethical dilemmas. This section is followed by a discussion of an explanatory conceptual model of ethical dilemmas that was developed initially from the literature and confirmed by our research. The model reminds us of some of the critical issues at play in ethical dilemmas, and some of the consequences and implications for organisational culture building they can generate. By way of a short scenario, the final section provides a theory-to-practice illustration of an ethical dilemma in action. A set of recommendations, drawn from the ideas of school leaders who have worked with this and similar dilemmas, is offered as a way forward to better understanding and resolution of such dilemmas so prevalent in our schools today.

Commentary: Making sense of identity dialogues

In this commentary an alternative conceptual model of identity construction is proposed. In this model, identity construction is seen as part of a person’s ongoing sense-making. Identity is perceived as a subjective sense of continuity and sameness that renders one’s being in the world meaningful. Drawing on empirical examples provided in the target articles, it is shown how this model, which is built around the notions of rupture, identity dialogues and striving towards meaningfulness, can be utilized to analyse identity dynamics in different space and time contexts. The importance of examining links between an individual’s sense-making and collective meaning field, in which sense-making is embedded, is also highlighted.

Commercial friendships between gay sales associates and straight female customers in luxury settings: A proposed theoretical framework

This study investigates friendships between gay sales associates and heterosexual female customers in luxury retail settings. By employing grounded theory methodology, the study integrates theories and findings from diverse literature streams into an original conceptual framework to illustrate the resources gay sales associates and straight female customers receive from and provide to each other during retail exchanges. The study explains why gay male–straight female friendships are uniquely suited for luxury consumption settings. Female customers characterize their friendships with gay sales associates as providing honesty, security, trust, and comfort, which stems from the absence of sexual interest and a lack of inter-female competition. Gay sales associates receive acceptance for who they are and for their displays of unconventional masculinity in retail settings. They also obtain a temporary rite from their female customers, a so-called mandate of privacy, which permits both parties to ignore the bounds of modesty and accept a degree of intimacy. Such intimacy facilitates transactions that require both personalization and customer–employee closeness, such as the selling of high-end apparel, accessories, and jewelry.

Place making facilitators of knowledge and innovation spaces: Insights from European best practices

Knowledge economy seeks its nourishment from diversity and dissemination of ideas and creativity of its talent base. This has led to the acknowledgement of place making as a major strategy to attract and retain the knowledge base into the emerging knowledge and innovation spaces. The study seeks to explore the adoption of place making in this context. Literature and practice provide information to understand the evolution of various spatial typologies and the specialised role of place making in such locations. This helps in determining the key facilitators of place making. The paper takes an interdisciplinary approach and develops an integrated conceptual framework considering dimensions and facilitators of place making. Through the lens of the framework, best practices across Europe—i.e., Cambridge Science Park (UK), 22@Barcelona (Spain), Arabianranta (Finland), Strijp-S (Netherlands), and Digital Hub (Ireland)—are scrutinised to highlight various approaches to place making. The findings provide insights and a discussion into the interplay of form, function, image and underlying processes in globally emerging spatial typologies of contemporary knowledge and innovation spaces.