Insider threats: the major challenge to security risk management

Security risk management is by definition, a subjective and complex exercise and it takes time to perform properly. Human resources are fundamental assets for any organization, and as any other asset, they have inherent vulnerabilities that need to be handled, i.e. managed and assessed. However, the nature that characterize the human behavior and the organizational environment where they develop their work turn these task extremely difficult, hard to accomplish and prone to errors. Assuming security as a cost, organizations are usually focused on the efficiency of the security mechanisms implemented that enable them to protect against external attacks, disregarding the insider risks, which are much more difficult to assess. All these demands an interdisciplinary approach in order to combine technical solutions with psychology approaches in order to understand the organizational staff and detect any changes in their behaviors and characteristics. This paper intends to discuss some methodological challenges to evaluate the insider threats and its impacts, and integrate them in a security risk framework, that was defined according to the security standard ISO/IEC_JTC1, to support the security risk management process.

Project management under uncertainty: a study on solution methods

Project Management involves onetime endeavors that demand for getting it right the first time. On the other hand, project scheduling, being one of the most modeled project management process stages, still faces a wide gap from theory to practice. Demanding computational models and their consequent call for simplification, divert the implementation of such models in project management tools from the actual day to day project management process. Special focus is being made to the robustness of the generated project schedules facing the omnipresence of uncertainty. An "easy" way out is to add, more or less cleverly calculated, time buffers that always result in project duration increase and correspondingly, in cost. A better approach to deal with uncertainty seems to be to explore slack that might be present in a given project schedule, a fortiori when a non-optimal schedule is used. The combination of such approach to recent advances in modeling resource allocation and scheduling techniques to cope with the increasing flexibility in resources, as can be expressed in "Flexible Resource Constraint Project Scheduling Problem" (FRCPSP) formulations, should be a promising line of research to generate more adequate project management tools. In reality, this approach has been frequently used, by project managers in an ad-hoc way.

Analysis of energy management in GMIT

Energy management is the process of monitoring, controlling and conserving energy in a building or organisation. The main reasons for this are for cost purposes and benefit to the environment. Through various techniques and solutions for lighting, heating, office equipment, the building fabric etc along with a change in people’s attitudes there can be a substantial saving in the amount spent on energy. A good example o f energy waste in GMIT is the lighting situation in the library. All the lights are switched on all day on even in places where that is adequate daylighting, which is a big waste o f energy. Also the lights for book shelves are left on. Surely all these books won’t be searched for all at the one time. It would make much more sense to have local switches that the users can control when they are searching for a particular book. Heating controls for the older parts o f the college are badly needed. A room like 834 needs a TRV to prevent it from overheating as temperatures often reach the high twenties due to the heat from the radiators, computers, solar gains and heat from users o f the room. Also in the old part o f the college it is missing vital insulation, along with not being air tight due to the era when it was built. Pumped bonded bead insulation and sealant around services and gaps can greatly improve the thermal performance o f the building and help achieve a higher BER cert. GMIT should also look at the possibility o f installing a CHP plant to meet the base heating loads. It would meet the requirement o f running 4500 hours a year and would receive some financial support from the Accelerated Capital Allowance. I f people’s attitudes are changed through energy awareness campaigns and a few changes made for more energy efficient equipment, substantial savings can be made in the energy expenditure.

Implementation of the I.S. EN 16001:2009 energy management standard into GlaxoSmithKline (GSK) Ltd, Cork

As manufacturers face an increasingly competitive environment, they seek out opportunities to reduce production costs without negatively affecting the yield or the quality of their finished products. The challenge of maintaining high product quality while simultaneously reducing production costs can often be met through investments in energy efficient technologies and energy efficiency practices. Energy management systems can offer both technological and best practice efficiencies in order to achieve substantial savings. A strong energy management system provides a solid foundation for an organisation to reduce production costs and improve site efficiency. The I.S EN16001 energy management standard specifies the requirements for establishing, implementing, maintaining and improving an energy management system and represents the latest best practice for energy management in Ireland. The objective of the energy management system is to establish a systematic approach for improving energy performance continuously. The I.S EN16001 standard specifies the requirements for continuous improvement through using energy more efficiently. The author analysed how GlaxoSmithKline’s (GSK) pharmaceutical manufacturing facility in Cork implemented the I.S. EN16001 energy management system model, and defined how energy saving opportunities where identified and introduced to improve efficiency performance. The author performed an extensive literature research in order to determine the current status of the pharmaceutical industry in Ireland, the processes involved in pharmaceutical manufacturing, the energy users required for pharmaceutical manufacturing and the efficiency measures that can be applied to these energy users in order to reduce energy consumption. The author then analysed how energy management standards are introduced to industry and critically analysed the driving factors for energy management performance in Ireland through case studies. Following an investigation as to how the I.S. EN16001 energy management standard is operated in GSK, a critical analysis of the performance achieved by the GSK energy management system is undertaken in order to determine if implementing the I.S EN16001 standard accelerates achieving energy savings. Since its introduction, the I.S. EN16001 model for energy management has enabled GSK to monitor, target and identify energy efficiency opportunities throughout the site. The model has put in place an energy management system that is continuously reviewed for improvement and to date has reduced GSK’s site operations cost by over 30% through technical improvements and generating energy awareness for smarter energy consumption within the GSK Cork site. Investment in I.S. EN16001 has proved to be a sound business strategy for GSK especially in today's manufacturing environment.

Development of a life cycle management system for remote products.

The research described in this thesis has been developed as a part of the Reliability and Field Data Management for Multi-Component Products (REFIDAM) Project. This project was funded under the Applied Research Grants Scheme administered by Enterprise Ireland. The project was a partnership between Galway-Mayo Institute of Technology and an industrial company, Thermo King Europe. The project aimed to develop a system to manage the information required for maintenance costing, cost of ownership, reliability assessment and improvement of multi-component products, by establishing information flows between the customer network and across the Thermo King organisation.

Surviving Sepsis Campaign: international guidelines for management of severe sepsis and septic shock: 2008.

OBJECTIVE: To provide an update to the original Surviving Sepsis Campaign clinical management guidelines, "Surviving Sepsis Campaign Guidelines for Management of Severe Sepsis and Septic Shock," published in 2004. DESIGN: Modified Delphi method with a consensus conference of 55 international experts, several subsequent meetings of subgroups and key individuals, teleconferences, and electronic-based discussion among subgroups and among the entire committee. This process was conducted independently of any industry funding. METHODS: We used the Grades of Recommendation, Assessment, Development and Evaluation (GRADE) system to guide assessment of quality of evidence from high (A) to very low (D) and to determine the strength of recommendations. A strong recommendation (1) indicates that an intervention's desirable effects clearly outweigh its undesirable effects (risk, burden, cost) or clearly do not. Weak recommendations (2) indicate that the tradeoff between desirable and undesirable effects is less clear. The grade of strong or weak is considered of greater clinical importance than a difference in letter level of quality of evidence. In areas without complete agreement, a formal process of resolution was developed and applied. Recommendations are grouped into those directly targeting severe sepsis, recommendations targeting general care of the critically ill patient that are considered high priority in severe sepsis, and pediatric considerations. RESULTS: Key recommendations, listed by category, include early goal-directed resuscitation of the septic patient during the first 6 hrs after recognition (1C); blood cultures before antibiotic therapy (1C); imaging studies performed promptly to confirm potential source of infection (1C); administration of broad-spectrum antibiotic therapy within 1 hr of diagnosis of septic shock (1B) and severe sepsis without septic shock (1D); reassessment of antibiotic therapy with microbiology and clinical data to narrow coverage, when appropriate (1C); a usual 7-10 days of antibiotic therapy guided by clinical response (1D); source control with attention to the balance of risks and benefits of the chosen method (1C); administration of either crystalloid or colloid fluid resuscitation (1B); fluid challenge to restore mean circulating filling pressure (1C); reduction in rate of fluid administration with rising filing pressures and no improvement in tissue perfusion (1D); vasopressor preference for norepinephrine or dopamine to maintain an initial target of mean arterial pressure > or = 65 mm Hg (1C); dobutamine inotropic therapy when cardiac output remains low despite fluid resuscitation and combined inotropic/vasopressor therapy (1C); stress-dose steroid therapy given only in septic shock after blood pressure is identified to be poorly responsive to fluid and vasopressor therapy (2C); recombinant activated protein C in patients with severe sepsis and clinical assessment of high risk for death (2B except 2C for postoperative patients). In the absence of tissue hypoperfusion, coronary artery disease, or acute hemorrhage, target a hemoglobin of 7-9 g/dL (1B); a low tidal volume (1B) and limitation of inspiratory plateau pressure strategy (1C) for acute lung injury (ALI)/acute respiratory distress syndrome (ARDS); application of at least a minimal amount of positive end-expiratory pressure in acute lung injury (1C); head of bed elevation in mechanically ventilated patients unless contraindicated (1B); avoiding routine use of pulmonary artery catheters in ALI/ARDS (1A); to decrease days of mechanical ventilation and ICU length of stay, a conservative fluid strategy for patients with established ALI/ARDS who are not in shock (1C); protocols for weaning and sedation/analgesia (1B); using either intermittent bolus sedation or continuous infusion sedation with daily interruptions or lightening (1B); avoidance of neuromuscular blockers, if at all possible (1B); institution of glycemic control (1B), targeting a blood glucose < 150 mg/dL after initial stabilization (2C); equivalency of continuous veno-veno hemofiltration or intermittent hemodialysis (2B); prophylaxis for deep vein thrombosis (1A); use of stress ulcer prophylaxis to prevent upper gastrointestinal bleeding using H2 blockers (1A) or proton pump inhibitors (1B); and consideration of limitation of support where appropriate (1D). Recommendations specific to pediatric severe sepsis include greater use of physical examination therapeutic end points (2C); dopamine as the first drug of choice for hypotension (2C); steroids only in children with suspected or proven adrenal insufficiency (2C); and a recommendation against the use of recombinant activated protein C in children (1B). CONCLUSIONS: There was strong agreement among a large cohort of international experts regarding many level 1 recommendations for the best current care of patients with severe sepsis. Evidenced-based recommendations regarding the acute management of sepsis and septic shock are the first step toward improved outcomes for this important group of critically ill patients.

Cost evaluation of cardiovascular magnetic resonance versus coronary angiography for the diagnostic work-up of coronary artery disease: Application of the European Cardiovascular Magnetic Resonance registry data to the German, United Kingdom, Swiss, and United States health care systems.

ABSTRACT: BACKGROUND: Cardiovascular magnetic resonance (CMR) has favorable characteristics for diagnostic evaluation and risk stratification of patients with known or suspected CAD. CMR utilization in CAD detection is growing fast. However, data on its cost-effectiveness are scarce. The goal of this study is to compare the costs of two strategies for detection of significant coronary artery stenoses in patients with suspected coronary artery disease (CAD): 1) Performing CMR first to assess myocardial ischemia and/or infarct scar before referring positive patients (defined as presence of ischemia and/or infarct scar to coronary angiography (CXA) versus 2) a hypothetical CXA performed in all patients as a single test to detect CAD. METHODS: A subgroup of the European CMR pilot registry was used including 2,717 consecutive patients who underwent stress-CMR. From these patients, 21% were positive for CAD (ischemia and/or infarct scar), 73% negative, and 6% uncertain and underwent additional testing. The diagnostic costs were evaluated using invoicing costs of each test performed. Costs analysis was performed from a health care payer perspective in German, United Kingdom, Swiss, and United States health care settings. RESULTS: In the public sectors of the German, United Kingdom, and Swiss health care systems, cost savings from the CMR-driven strategy were 50%, 25% and 23%, respectively, versus outpatient CXA. If CXA was carried out as an inpatient procedure, cost savings were 46%, 50% and 48%, respectively. In the United States context, cost savings were 51% when compared with inpatient CXA, but higher for CMR by 8% versus outpatient CXA. CONCLUSION: This analysis suggests that from an economic perspective, the use of CMR should be encouraged as a management option for patients with suspected CAD.

Quantitative ultrasound for the detection and management of osteoporosis.

Quantitative ultrasound (QUS) appears to be developing into an acceptable, low-cost and readily-accessible alternative to dual X-ray absorptiometry (DXA) measurements of bone mineral density (BMD) in the detection and management of osteoporosis. Perhaps the major difficulty with their widespread use is that many different QUS devices exist that differ substantially from each other, in terms of the parameters they measure and the strength of empirical evidence supporting their use. But another problem is that virtually no data exist outside of Caucasian or Asian populations. In general, heel QUS appears to be most tested and most effective. Some, but not all heel QUS devices are effective assessing fracture risk in some, but not all populations, the evidence being strongest for Caucasian females > 55 years old, though some evidence exists for Asian females > 55 and for Caucasian and Asian males > 70. Certain devices may allow to estimate the likelihood of osteoporosis, but very limited evidence exists supporting QUS use during the initiation or monitoring of osteoporosis treatment. Likely, QUS is most effective when combined with an assessment of clinical risk factors (CRF); with DXA reserved for individuals who are not identified as either high or low risk using QUS and CRF. However, monitoring and maintenance of test and instrument accuracy, precision and reproducibility are essential if QUS devices are to be used in clinical practice; and further scientific research in non-Caucasian, non-Asian populations clearly is compulsory to validate this tool for more widespread use.

Best practice in the management of mild-to-moderately active ulcerative colitis and achieving maintenance of remission using mesalazine.

Optimizing treatment goals in ulcerative colitis requires recognizing the needs of patients. It is increasingly recognized that adapting treatment strategies aligned with patient needs can improve patient compliance and consequently minimize relapse rates. Tailoring of treatment strategies can improve not only patient quality of life, and decrease the number harmed by adverse events from more potent drugs, but can also save valuable healthcare costs by avoiding high-cost treatment interventions associated with acute ulcerative colitis. This review will consider several elements of mesalazine management from the patient perspective based on a range of clinical and patient-focused evidence. By highlighting patient preferences in disease management it is envisaged that this review will aid physicians to optimize treatment decisions with the different mesalazine preparations available.

Rapid diagnostic tests for the home-based management of malaria, in a high-transmission area.

Rapid diagnostic tests (RDT) are sometimes recommended to improve the home-based management of malaria. The accuracy of an RDT for the detection of clinical malaria and the presence of malarial parasites has recently been evaluated in a high-transmission area of southern Mali. During the same study, the cost-effectiveness of a 'test-and-treat' strategy for the home-based management of malaria (based on an artemisinin-combination therapy) was compared with that of a 'treat-all' strategy. Overall, 301 patients, of all ages, each of whom had been considered a presumptive case of uncomplicated malaria by a village healthworker, were checked with a commercial RDT (Paracheck-Pf). The sensitivity, specificity, and positive and negative predictive values of this test, compared with the results of microscopy and two different definitions of clinical malaria, were then determined. The RDT was found to be 82.9% sensitive (with a 95% confidence interval of 78.0%-87.1%) and 78.9% (63.9%-89.7%) specific compared with the detection of parasites by microscopy. In the detection of clinical malaria, it was 95.2% (91.3%-97.6%) sensitive and 57.4% (48.2%-66.2%) specific compared with a general practitioner's diagnosis of the disease, and 100.0% (94.5%-100.0%) sensitive but only 30.2% (24.8%-36.2%) specific when compared against the fulfillment of the World Health Organization's (2003) research criteria for uncomplicated malaria. Among children aged 0-5 years, the cost of the 'test-and-treat' strategy, per episode, was about twice that of the 'treat-all' (U.S.$1.0. v. U.S.$0.5). In older subjects, however, the two strategies were equally costly (approximately U.S.$2/episode). In conclusion, for children aged 0-5 years in a high-transmission area of sub-Saharan Africa, use of the RDT was not cost-effective compared with the presumptive treatment of malaria with an ACT. In older patients, use of the RDT did not reduce costs. The question remains whether either of the strategies investigated can be made affordable for the affected population.

Analyse de la prise en charge médicale et de l'impact économique des patients ayant présentés des coûts extrêmes dans un hôpital universitaire [Analysis of the medical management and the economic impact of patients who have represented extreme costs at a university hospital]

Les coûts de traitement de certains patients s'avèrent extrêmement élevés, et peuvent faire soupçonner une prise en charge médicale inadéquate. Comme I'évolution du remboursement des prestations hospitalières passe à des forfaits par pathologie, il est essentiel de vérifier ce point, d'essayer de déterminer si ce type de patients peut être identifié à leur admission, et de s'assurer que leur devenir soit acceptable. Pour les années 1995 et 1997. les coûts de traitement dépassant de 6 déviations standard le coût moyen de la catégorie diagnostique APDRG ont été identifiés, et les dossiers des 50 patients dont les coûts variables étaient les plus élevés ont été analysés. Le nombre total de patients dont I'hospitalisation a entraîné des coûts extrêmes a passé de 391 en 1995 à 328 patients en 1997 (-16%). En ce qui concerne les 50 patients ayant entraîné les prises en charge les plus chères de manière absolue, les longs séjours dans de multiples services sont fréquents, mais 90% des patients sont sortis de l'hôpital en vie, et près de la moitié directement à domicile. Ils présentaient une variabilité importante de diagnostics et d'interventions, mais pas d'évidence de prise en charge inadéquate. En conclusion, les patients qualifiés de cas extrêmes sur un plan économique, ne le sont pas sur un plan strictement médical, et leur devenir est bon. Face à la pression qu'exercera le passage à un mode de financement par pathologie, les hôpitaux doivent mettre au point un système de revue interne de I'adéquation des prestations fournies basées sur des caractéristiques cliniques, s'ils veulent garantir des soins de qualité. et identifier les éventuelles prestations sous-optimales qu'ils pourraient être amenés à délivrer. [Auteurs] Treatment costs for some patients are extremely high and might let think that medical care could have been inadequate. As hospital financing systems move towards reimbursement by diagnostic groups, it is essential to assess whether inadequate care is provided, to try to identify these patients upon admission, and make sure that their outcome is good. For the years 1995 and 1997, treatment costs exceeding by 6 standard deviations the average cost of their APDRG category were identified, and the charts of the 50 patients with the highest variable costs were analyzed. The total number of patients with such extreme costs diminished from 391 in 1995 to 328 in 1997 (-16%). For the 50 most expensive patients, long stays in several services were frequent, but 90% of these patients left the hospital alive, and about half directly to their home. They presented an important variation in diagnoses and operations, but no evidence for inadequate care. Thus, patients qualified as extreme from an economic perspective cannot be qualified as such from a medical perspective, and their outcome is good. To face the pressure linked with the change in financing system, hospitals must develop an internal review system for assessing the adequacy of care, based on clinical characteristics, if they want to guarantee good quality of care and identify potentially inadequate practice.

Consensus statement of the European guidelines on clinical management of HIV-1 tropism testing

Introduction: Testing for HIV tropism is recommended before prescribing a chemokine receptor blocker. To date, in most European countries HIV tropism is determined using a phenotypic test. Recently, new data have emerged supporting the use of a genotypic HIV V3-loop sequence analysis as the basis for tropism determination. The European guidelines group on clinical management of HIV-1 tropism testing was established to make recommendations to clinicians and virologists. Methods: We searched online databases for articles from Jan 2006 until March 2010 with the terms: tropism or CCR5-antagonist or CCR5 antagonist or maraviroc or vicriviroc. Additional articles and/or conference abstracts were identified by hand searching. This strategy identified 712 potential articles and 1240 abstracts. All were reviewed and finally 57 papers and 42 abstracts were included and used by the panel to reach a consensus statement. Results: The panel recommends HIV-tropism testing for the following indications: i) drug-naïve patients in whom toxicity or limited therapeutic options are foreseen; ii) patients experiencing therapy failure whenever a treatment change is considered. Both the phenotypic Enhanced Trofile assay (ESTA) and genotypic population sequencing of the V3-loop are recommended for use in clinical practice. Although the panel does not recommend one methodology over another it is anticipated that genotypic testing will be used more frequently because of its greater accessibility, lower cost and shorter turnaround time. The panel also provides guidance on technical aspects and interpretation issues. If using genotypic methods, triplicate PCR amplification and sequencing testing is advised using the G2P interpretation tool (clonal model) with an FPR of 10%. If the viral load is below the level of reliable amplification, proviral DNA can be used, and the panel recommends performing triplicate testing and use of an FPR of 10%. If genotypic DNA testing is not performed in triplicate the FPR should be increased to 20%. Conclusions: The European guidelines on clinical management of HIV-1 tropism testing provide an overview of current literature, evidence-based recommendations for the clinical use of tropism testing and expert guidance on unresolved issues and current developments. Current data support both the use of genotypic population sequencing and ESTA for co-receptor tropism determination. For practical reasons genotypic population sequencing is the preferred method in Europe.

An ATM distributed simulator for network management research

Due to the high cost of a large ATM network working up to full strength to apply our ideas about network management, i.e., dynamic virtual path (VP) management and fault restoration, we developed a distributed simulation platform for performing our experiments. This platform also had to be capable of other sorts of tests, such as connection admission control (CAC) algorithms, routing algorithms, and accounting and charging methods. The platform was posed as a very simple, event-oriented and scalable simulation. The main goal was the simulation of a working ATM backbone network with a potentially large number of nodes (hundreds). As research into control algorithms and low-level, or rather cell-level methods, was beyond the scope of this study, the simulation took place at a connection level, i.e., there was no real traffic of cells. The simulated network behaved like a real network accepting and rejecting SNMP ones, or experimental tools using the API node

Is a Virtual Library cost effective?

The Andalusian Public Health System Virtual Library (Biblioteca Virtual del Sistema Sanitario Público de Andalucía, BV-SSPA), was created in June 2006. In this paper an evaluation is made to see whether the investment made by the Andalusian Government has been worthwhile. The cost-effectiveness and efficiency of the project together with the management criteria are explored.