Threat modeling a factory environment using Microsoft Security Development Lifecycle methodology

The number of security violations is increasing and a security breach could have irreversible impacts to business. There are several ways to improve organization security, but some of them may be difficult to comprehend. This thesis demystifies threat modeling as part of secure system development. Threat modeling enables developers to reveal previously undetected security issues from computer systems. It offers a structured approach for organizations to find and address threats against vulnerabilities. When implemented correctly threat modeling will reduce the amount of defects and malicious attempts against the target environment. In this thesis Microsoft Security Development Lifecycle (SDL) is introduced as an effective methodology for reducing defects in the target system. SDL is traditionally meant to be used in software development, principles can be however partially adapted to IT-infrastructure development. Microsoft threat modeling methodology is an important part of SDL and it is utilized in this thesis to find threats from the Acme Corporation’s factory environment. Acme Corporation is used as a pseudonym for a company providing high-technology consumer electronics. Target for threat modeling is the IT-infrastructure of factory’s manufacturing execution system. Microsoft threat modeling methodology utilizes STRIDE –mnemonic and data flow diagrams to find threats. Threat modeling in this thesis returned results that were important for the organization. Acme Corporation now has more comprehensive understanding concerning IT-infrastructure of the manufacturing execution system. On top of vulnerability related results threat modeling provided coherent views of the target system. Subject matter experts from different areas can now agree upon functions and dependencies of the target system. Threat modeling was recognized as a useful activity for improving security.

Towards east or west? : Defence planning in Finland 1944-1966

Finnish Defence Studies is published under the auspices of the National Defence University, and the contributions reflect the fields of research and teaching of the University. Finnish Defence Studies will occasionally feature documentation on Finnish Security Policy. Views expressed are those of the authors and do not necessarily imply endorsement by the National Defence University.

Benefits and challenges of Enterprise Resource Planning for Pakistani SMEs

Enterprise resource planning (ERP) software is used to combine all the functions happening inside the organization with the help of one software. All the data is centralized which makes it easy to manage information for all participants. The literature on ERP is studied thoroughly the whole process of adoption till the implementation and final evaluations. But studies that focus on small and medium sized enterprises are limited in number when compared to the large scale enterprises. In case of Pakistan, research is very limited. In this thesis, the author tries to analyze the current status of SMEs usage of ERP system. The benefits obtained and challenges faced by SMEs of Pakistan are studied. Framework presented by Shang and Seddon (2000) is used to understand the benefits obtained by the SMEs in Pakistan. This is a comprehensive framework that classifies the benefits obtained by the ERP adoption, into five categories: operational benefits, managerial benefits, Strategic benefits, IT benefits, and Organizational benefits. The results show that SMEs of Pakistan are also getting many benefits after adoption of ERP. Most of the firms had implemented SAP software. Operational benefits were mentioned by all the firms. The most important benefits were report generation, quick access to critical information, better product and cost planning. Respondents also mentioned that they had reduced corruption as a result of ERP implementation. It is also an important benefit considering high corruption rate in Pakistan. Along with benefits, challenges faced by Pakistani SMEs included infrastructure problems like electricity, difficulties with integration of one module with other module, costs of adoption and lack of skilled ERP consultants. Further studies in this regard can be conducted on cloud based ERP which is fast growing all around the world.

EXPLOITING SCENARIO PLANNING FOR STRATEGIC ASSESSMENT OF THE EXTERNAL BUSINESS ENVIRONMENT Future insights of the European pet food sector

The purpose of this study is to explore how scenarios can be exploited in strategic assessment of the external business environment. One of the key challenges for managers worldwide is to adapt their businesses to the ever-changing business environment. As the companies’ external business environment is constantly presenting new opportunities and threats, it is extremely important that companies continuously monitor the possible changes happening around it. As the speed of change rises, assessing the future has become more and more vital. The study was conducted as an exploratory research and the research strategy was influenced by scenario planning and case study strategy. The study examined the European pet food sector from the future point of view. Qualitative study was chosen as research approach and empirical data was collected primarily by seven expert interviews. The secondary data about the sector was applied as complementary empirical data. In the theoretical part of the research it was discovered that nowadays, traditional analysis frameworks are ill-suited for strategic assessment of the external business environment. This is why a self-created combination framework for analysis was employed both as study’s theoretical framework and analysis technique. Furthermore, the framework formed the base for interview questions. Both in theoretical and the empirical part of the study it was found that today, in strategic assessment of the external business environment, besides setting focus on the current situation, it is important to concentrate also on the future. The traditional analysis frameworks offer a good starting point for collecting relevant data but they do not encourage conducting a deeper analysis. By adding characteristics from scenario planning to these more traditional tools, a new analysis framework was created, which ensured the more comprehensive analysis. By understanding the interconnections between discovered phenomena and changes, and by recognizing uncertainties, the user is helped to reflect the environment more profoundly. The contributions of the study are both theoretical and managerial. A new analysis framework strives to answer to the current needs for strategic assessment of external business environment and the framework was tested in the context of European pet food sector. When it comes to managerial contributions, the importance lies in understanding the future. Managers must take future into account and understand that future includes various possibilities which all must be reflected