Information integration and its impacts on logistics performance - Using information technology and systems to facilitate information integration

Fast changing environment sets pressure on firms to share large amount of information with their customers and suppliers. The terms information integration and information sharing are essential for facilitating a smooth flow of information throughout the supply chain, and the terms are used interchangeably in research literature. By integrating and sharing information, firms want to improve their logistics performance. Firms share information with their suppliers and customers by using traditional communication methods (telephone, fax, Email, written and face-to-face contacts) and by using advanced or modern communication methods such as electronic data interchange (EDI), enterprise resource planning (ERP), web-based procurement systems, electronic trading systems and web portals. Adopting new ways of using IT is one important resource for staying competitive on the rapidly changing market (Saeed et al. 2005, 387), and an information system that provides people the information they need for performing their work, will support company performance (Boddy et al. 2005, 26). The purpose of this research has been to test and understand the relationship between information integration with key suppliers and/or customers and a firm’s logistics performance, especially when information technology (IT) and information systems (IS) are used for integrating information. Quantitative and qualitative research methods have been used to perform the research. Special attention has been paid to the scope, level and direction of information integration (Van Donk & van der Vaart 2005a). In addition, the four elements of integration (Jahre & Fabbe-Costes 2008) are closely tied to the frame of reference. The elements are integration of flows, integration of processes and activities, integration of information technologies and systems and integration of actors. The study found that information integration has a low positive relationship to operational performance and a medium positive relationship to strategic performance. The potential performance improvements found in this study vary from efficiency, delivery and quality improvements (operational) to profit, profitability or customer satisfaction improvements (strategic). The results indicate that although information integration has an impact on a firm’s logistics performance, all performance improvements have not been achieved. This study also found that the use of IT and IS have a mediocre positive relationship to information integration. Almost all case companies agreed on that the use of IT and IS could facilitate information integration and improve their logistics performance. The case companies felt that an implementation of a web portal or a data bank would benefit them - enhance their performance and increase information integration.

Towards combining interactive mobile TV and smart spaces : architectures, tools and application development

Technological developments in microprocessors and ICT landscape have made a shift to a new era where computing power is embedded in numerous small distributed objects and devices in our everyday lives. These small computing devices are ne-tuned to perform a particular task and are increasingly reaching our society at every level. For example, home appliances such as programmable washing machines, microwave ovens etc., employ several sensors to improve performance and convenience. Similarly, cars have on-board computers that use information from many di erent sensors to control things such as fuel injectors, spark plug etc., to perform their tasks e ciently. These individual devices make life easy by helping in taking decisions and removing the burden from their users. All these objects and devices obtain some piece of information about the physical environment. Each of these devices is an island with no proper connectivity and information sharing between each other. Sharing of information between these heterogeneous devices could enable a whole new universe of innovative and intelligent applications. The information sharing between the devices is a diffcult task due to the heterogeneity and interoperability of devices. Smart Space vision is to overcome these issues of heterogeneity and interoperability so that the devices can understand each other and utilize services of each other by information sharing. This enables innovative local mashup applications based on shared data between heterogeneous devices. Smart homes are one such example of Smart Spaces which facilitate to bring the health care system to the patient, by intelligent interconnection of resources and their collective behavior, as opposed to bringing the patient into the health system. In addition, the use of mobile handheld devices has risen at a tremendous rate during the last few years and they have become an essential part of everyday life. Mobile phones o er a wide range of different services to their users including text and multimedia messages, Internet, audio, video, email applications and most recently TV services. The interactive TV provides a variety of applications for the viewers. The combination of interactive TV and the Smart Spaces could give innovative applications that are personalized, context-aware, ubiquitous and intelligent by enabling heterogeneous systems to collaborate each other by sharing information between them. There are many challenges in designing the frameworks and application development tools for rapid and easy development of these applications. The research work presented in this thesis addresses these issues. The original publications presented in the second part of this thesis propose architectures and methodologies for interactive and context-aware applications, and tools for the development of these applications. We demonstrated the suitability of our ontology-driven application development tools and rule basedapproach for the development of dynamic, context-aware ubiquitous iTV applications.

Trust in inter-organisational dyadic relationships

Understanding the trust in organisations and the business relationships have been an emerging trend in past years. Researchers and executives and subject matter experts in companies have recognised the importance of managing the trust in inter-organisational relationships. Further, the interest both in academia and in business has raised an interest to under-stand dyadic relationships. The objective of this thesis was to examine trust in inter-organisational and inter-personal dyadic relationships. Trust and the dyadic relationships were analysed in information technolo-gy services and outsourcing industry. Dyads were established between the supplier company operating in the industry and its customers. The empiric part of the study was carried out by an email survey that was sent to 331 respondents resulting with effective response rate of 48.7 per cent. Statistical analyses were applied to analyse the data sample. In general, results indicated reputation, trustworthiness, capability and collaboration in dyadic trust relationships. Experience grown in duration of the relationship affected the trust positively. No drastic differences in trust were recognised when comparing supplier and customer responses.

Fetal alcohol spectrum disorders in Finnish children and adolescents : diagnosis, cognition, behavior, adaptation and brain metabolic alterations

Alcohol consumption during pregnancy can potentially affect the developing fetus in devastating ways, leading to a range of physical, neurological, and behavioral alterations most accurately termed Fetal Alcohol Spectrum Disorders (FASD). Despite the fact that it is a preventable disorder, prenatal alcohol exposure today constitutes a leading cause of intellectual disability in the Western world. In Western countries where prevalence studies have been performed the rates of FASD exceed, for example, autism spectrum disorders, Down’s syndrome and cerebral palsy. In addition to the direct effects of alcohol, children and adolescents with FASD are often exposed to a double burden in life, as their neurological sequelae are accompanied by adverse living surroundings exposing them to further environmental risk. However, children with FASD today remain remarkably underdiagnosed by the health care system. This thesis forms part of a larger multinational research project, The Collaborative Initiative on Fetal Alcohol Spectrum Disorders (the CIFASD), initiated by the National Institute of Alcohol Abuse and Alcoholism (NIAAA) in the U.S.A. The general aim of the present thesis was to examine a cohort of children and adolescents growing up with fetal alcohol-related damage in Finland. The thesis consists of five studies with a broad focus on diagnosis, cognition, behavior, adaptation and brain metabolic alterations in children and adolescents with FASD. The participants consisted of four different groups: one group with histories of prenatal exposure to alcohol, the FASD group; one IQ matched contrast group mostly consisting of children with specific learning disorder (SLD); and two typically-developing control groups (CON1 and CON2). Participants were identified through medical records, random sampling from the Finnish national population registry and email alerts to students. Importantly, the participants in the present studies comprise a group of very carefully clinically characterized children with FASD as the studies were performed in close collaboration with leading experts in the field (Prof. Edward Riley and Prof. Sarah Mattson, Center for Behavioral Teratology, San Diego State University, U.S.A; Prof. Eugene Hoyme, Sanford School of Medicine, University of South Dakota, U.S.A.). In the present thesis, the revised Institute of Medicine diagnostic criteria for FASD were tested on a Finnish population and found to be a reliable tool for differentiating among the subgroups of FASD. A weighted dysmorphology scoring system proved to be a valuable additional adjunct in quantification of growth deficits and dysmorphic features in children with FASD (Study 1). The purpose of Study 2 was to clarify the relationship between alcohol-related dysmorphic features and general cognitive capacity. Results showed a significant correlation between dysmorphic features and cognitive capacity, suggesting that children with more severe growth deficiency and dysmorphic features have more cognitive limitations. This association was, however, only moderate, indicating that physical markers and cognitive capacity not always go hand in hand in individuals with FASD. Behavioral problems in the FASD group proved substantial compared to the typically developing control group. In Study 3 risk and protective factors associated with behavioral problems in the FASD group were explored further focusing on diagnostic and environmental factors. Two groups with elevated risks for behavioral problems emerged: length of time spent in residential care and a low dysmorphology score proved to be the most pervasive risk factor for behavioral problems. The results underscore the clinical importance of appropriate services and care for less visibly alcohol affected children and highlight the need to attend to children with FASD being raised in institutions. With their background of early biological and psychological impairment compounded with less opportunity for a close and continuous caregiver relationship, such children seem to run an especially great risk of adverse life outcomes. Study 4 focused on adaptive abilities such as communication, daily living skills and social skills, in other words skills that are important for gradually enabling an independent life, maintain social relationships and allow the individual to become integrated into society. The results showed that adaptive abilities of children and adolescents growing up with FASD were significantly compromised compared to both typically-developing peers and IQ-matched children with SLD. Clearly different adaptive profiles were revealed where the FASD group performed worse than the SLD group, who in turn performed worse than the CON1 group. Importantly, the SLD group outperformed the FASD group on adaptive behavior in spite of comparable cognitive levels. This is the first study to compare adaptive abilities in a group of children and adolescents with FASD relative to both a contrast group of IQ-matched children with SLD and to a group of typically-developing peers. Finally, in Study 5, through magnetic resonance spectroscopic imaging (MRS) evidence of longstanding neurochemical alterations were observed in adolescents and young adults with FASD related to alcohol exposure in utero 14-20 years earlier. Neurochemical alterations were seen in several brain areas: in frontal and parietal cortices, corpus callosum, thalamus and frontal white matter areas as well as in the cerebellar dentate nucleus. The findings are compatible with neuropsychological findings in FASD. Glial cells seemed to be more affected than neurons. In conclusion, more societal efforts and resources should be focused on recognizing and diagnosing FASD, and supporting subgroups with elevated risk of poor outcome. Without adequate intervention children and adolescents with FASD run a great risk of marginalization and social maladjustment, costly not only to society but also to the lives of the many young people with FASD.

DEVELOPING SOCIAL CAPITAL WITHIN COMPANIES THROUGH ENTERPRISE 2.0

Whereas external social media has been studied, hyped and integrated into companies´ strategies, an insignificant concentration has been put on internal social solutions, which companies provide increasingly to their personnel. An enterprise focusing solely on the benefits of external social media might end up underestimating the true potential embedded in social business. The purpose of this thesis was to examine how social collaboration can be depicted as a structuration process in an Enterprise 2.0 environment. Furthermore, this thesis sought to reveal the benefits, challenges and possibilities of social business. This thesis focused on researching Enterprise 2.0 at the workplace. The studied Enterprise 2.0 solution was IBM Connections. The qualitative research methodology was an extensive case study. Three companies took part into this thesis and all in all 12 employees were interviewed. Additionally, seven IBM Social Business Experts were interviewed in order to receive a better understanding of the phenomenon. Three research questions were designed to fulfill the purpose of this thesis. The research questions were: 1. How are the dimensions of social capital structured through collaboration? 2. How does agency form in Enterprise 2.0? 3. How does social collaboration emerge as a result of the interplay between agency and dimensions of social capital in an Enterprise 2.0 environment and creates outcomes such as trust, identification and knowledge? The main research findings indicate that social collaboration increases trust, identification and knowledge by giving employees more capabilities to do their work. Consequently, social collaboration increases company performance by making individuals and groups more effective. The support of top management is crucial in making Enterprise 2.0 successful, because it is more a cultural than a technological change. Power agency, the lack of top management support and old established work ways such as email and databases work as barriers to social collaboration.

Providing Discourse Services for Researchers in a Repository Setting

Poster at Open Repositories 2014, Helsinki, Finland, June 9-13, 2014

Sustainable linguistic repository built on DSpace

Presentation at Open Repositories 2014, Helsinki, Finland, June 9-13, 2014

Memoria virtualis - death and mourning rituals in online environments

The main objective of this work has been to understand the ritual aspect of how private people use the Internet to mourn and honor their intimates in various online environments. The research material was compiled in 2007–2013 through ethnographic and autoethnographic observations in social media applications, online memorial websites, one shared virtual environment (Second Life) and one massive multi-player online role-playing game (World of Warcraft). The research material consists of – in addition to the ethnographic observations – three online surveys with 153 respondents (mainly from Finland, the United States and the United Kingdom). In addition, the researcher conducted 38 longer online interviews (i.e. via email, an avatar). The theoretical framework is derived from ritual theory, hermeneutic-phenomenological anthropology and discourse analysis. The research questions are as follows: Why are death rituals practiced in online environments? How are virtual memorials created in various online environments? What kind of systems of meanings are virtual memorials constructed from? The results indicate that online mourning and honoring is appropriated in addition to the “traditional” offline rituals. In online environments the bereaved can choose, where, when, how and with whom they share their grief and loss. Memorials are created in the web intentionally and unintentionally, where the latter refers inter alia to the Facebook profile of the deceased where his/her intimates gather to mourn and honor immediately after the death. The first refers to intentionally memorialized online places spaces via different service providers. Virtual memorials are a way to construct the identity of the deceased, as well as the bereaved in multiple ways. They also re-enforce and create a sense of communality both privately and publicly, and enable one meaningful online place where all the intimates of the deceased can gather together to mourn and honor despite the geographical or time distances. Tämä väitöstutkimus tarkastelee miten nykyiset kuolemanrituaalit ovat digitalisoituneet verkkoympäristöihin. Tutkimus on suoritettu verkkoetnografisin sekä autoetnografisin menetelmin sosiaalisen median sivustoilla, virtuaalimuistomerkkipalveluissa, yhdestä virtuaalimaailmassa (Second Life) sekä yhdestä reaaliaikaisessa verkkopelissä (World of Warcraft) vuosina 2007–2013. Tutkimusaineisto koostuu etnografisten havainnointien lisäksi kolmesta verkkokyselystä, joissa vastaajia on yhteensä 153 pääasiassa Suomesta, Yhdysvalloista sekä Iso-Britanniasta. Kyselyjen lisäksi tutkija on tehnyt myös 38 laajempaa verkkohaastattelua eri ympäristöissä (esim. sähköposti, avatar virtuaalimaailmassa). Teoreettinen kehys koostuu rituaaliteoriasta, hermeneuttis-phenomenologiasta sekä diskurssianalyysista. Tutkimuskysymykset ovat seuraavat: miksi kuolemanrituaaleja harjoitetaan verkkoympäristöissä, miten virtuaalisia muistomerkkejä luodaan verkkoon, sekä millaisista merkitysjärjestelmistä virtuaaliset muistomerkit muodostuvat? Tutkimustulosten mukaan verkkosureminen ja muistaminen ovat tulleet perinteisten kuolemanrituaalien rinnalle, jolloin sureva itse voi päättää miten, missä, milloin sekä kenen kanssa suree läheistään. Muistomerkkejä verkkoon luodaan suunnitellusti (intentional) sekä suunnittelemattomasti (unintentional), jolloin jälkimmäinen viittaa esimerkiksi edesmenneen Facebook profiiliin, missä hänen läheisensä kokoontuvat muistelemaan ja suremaan välittömästi kuoleman jälkeen. Ensimmäinen taas viittaa suunnitelmalliseen muistomerkin luomiseen, jota varten löytyy useita palveluntarjoajia. Virtuaalimuistomerkit ovat keino rakentaa sekä edesmenneen että surevan identiteettiä, vahvistaa ja luoda yhteisöllisyyttä niin yksityisesti kuin julkisesti, sekä luoda yksi yhteinen aina ja kaikkialta saavutettavissa oleva merkityksellinen paikka verkkoon, missä kaikki läheiset voivat ajasta ja paikasta riippumatta muistella ja surra läheistään.

Bridging the digital divide in developing countries: The role of mobile technology in bridging the digital divide

This thesis investigates how mobile technology usage could help to bring Information and communication technologies (ICT) to the people in developing countries. Some people in developing countries have access to use ICT while other people do not have such opportunity. This digital divide among people is present in many developing countries where computers and the Internet are difficult to access. The Internet provides information that can increase productivity and enable markets to function more efficiently. The Internet reduces information travel time and provides more efficient ways for firms and workers to operate. ICT and the Internet can provide opportunities for economic growth and productivity in developing countries. This indicates that it is very important to bridge the digital divide and increase Internet connections in developing countries. The purpose of this thesis is to investigate how can mobile technology and mobile services help to bridge the digital divide in developing countries. Theoretical background of this thesis consists of a collection of articles and reports. Theoretical material was gathered by going through literature on the digital divide, mobile technology and mobile application development. The empirical research was conducted by sending a questionnaire by email to a selection of application developers located in developing countries. The questionnaire’s purpose was to gather qualitative information concerning mobile application development in developing countries. This thesis main result suggests that mobile phones and mobile technology usage can help to bridge the digital divide in developing countries. This study finds that mobile technology provides one of the best tools that can help to bridge the digital divide in developing countries. Mobile technology can bring affordable ICT to people who do not have access to use computers. Smartphones can provide Internet connection, mobile services and mobile applications to a rapidly growing number of mobile phone users in developing countries. New low-cost smartphones empower people in developing countries to have access to information through the Internet. Mobile technology has the potential to help to bridge the digital divide in developing countries where a vast amount of people own mobile phones.

Tragedian tarina. Nuoren itsemurhaan päättynyt elämä vanhemman kertomana

Tutkimuksessa tarkastellaan suomalaisnuorten itsemurhia teon inhimillisen ja sosiaalisen ulottuvuuden näkökulmasta. Tutkimustehtävänä on itsemurhan tehneen lapsen vanhempien subjektiivisten kokemusten tavoittaminen. Tarkoituksena on selvittää (1) millaisia sisältöjä ja merkityksiä nuoren elämä ja itsemurha saavat vanhempien kertomuksissa, (2) millä tavoin vanhemmat ovat ennakoineet nuoren tulevaa itsemurhaa ja millaisiksi varjelevat tekijät muodostuvat vanhempien ennakointien pohjalta sekä (3) miten auttamistyö merkityksellistyy osana ennusmerkkeihin ja varjeleviin tekijöihin liittyviä kertomuksia. Tutkimus on suunnattu edistämään itsemurhien ehkäisyä. Tutkimustyyppinä on narratiivinen laadullinen tutkimus. Pääaineistona on 14 lapsen itsemurhakuoleman kokeneen vanhemman kerronnallista haastattelua. Nuorten kuoliniän vaihteluväli on 15–31 vuotta. Täydentävä aineisto koostuu vanhempien kanssa käydyistä sähköpostikeskusteluista sekä heidän antamasta kirjallisesta lisämateriaalista, johon lukeutuu vanhempien omia muistelmia, heidän itsemurhan tehneiden lasten päiväkirjamerkintöjä ja jäähyväiskirjeitä. Analysointi on väljästi ymmärrettynä aineistolähtöinen. Analyysi perustuu narratiivisuuden ja sisällönanalyysin suomiin mahdollisuuksiin tukeutuen myös elämäkerralliseen näkökulmaan. Elämä ja kuolema ovat toistensa vastakohtia ja tiloja, jotka ovat jatkuvassa vuorovaikutuksessa keskenään. Itsensä surmaamisessa merkityksellistyy tavoitteellinen toiminta, jolla on korostuneesti yhteys nuoren sosiaaliseen ympäristöön suhteineen ja tapahtumineen. Ennusmerkit, eli vanhempien jälkikäteen näkemät vihjeet ennen lapsen itsemurhaa, liittyvät useisiin samanaikaisesti tapahtuneisiin prosesseihin, joissa elämään yleisesti liittyvät osa-alueet ovat yhdistyneet toisiinsa ja sekoittuneet keskenään. Varjelevat tekijät rakentuvat ennusmerkkien kääntöpuolina eli sisältöinä, joita vanhemman näkökulmasta nuoren eläessä olisi pitänyt tapahtua. Kyse voi olla myös seikoista, joista vanhempi on jälkeenpäin pohtinut, että tämä jonkun olisi pitänyt ymmärtää tai tehdä toisin. Vanhemmat kritisoivat laajasti auttamistyötä. Kritiikki kohdistui palvelujärjestelmään ja auttamistyötä toteuttaneiden tahojen toimintaan. Vanhempien kriittinen toimijuus tekee näkyväksi yksilön ja yhteiskunnan välisen kompleksisen suhteen. Palvelujärjestelmää on kehitettävä kokemusperäisen tiedon näkökulmasta. Ammattikäytännöissä korostuu psykososiaalisen työn merkitys. Tutkimus osoittaa, että sensitiivisten aiheiden tutkiminen on tärkeää ja laadullisen kulttuurisen kontekstin huomioivain itsemurhatutkimuksen tarve on suuri.

Sähköpostista sosiaaliseen mediaan - sosiaalisen median strategia muoviteollisuusalan yritykselle

Sosiaalinen media on muuttanut markkinointia vuorovaikutteisuudella, avoimuudella ja läpinäkyvyydellä. Siksi yritysten kannattaa miettiä kuinka ja miksi lähteä mukaan sosiaaliseen mediaan. Tutkimusta asiasta on rajallisesti ja siksi tässä työssä rakennetaan sosiaalisen media strategia muoviteollisuusalan yritykselle. Työn empiirisessä osuudessa sosiaalisen median strategisia tavoitteita kysyttiin Uponorin johdolta sähköpostikyselyllä. Tulokset analysoitiin kvalitatiivisesti. Lisäksi kartoitettiin Uponorin henkilökunnalle tehdyn verkkopohjaisen lähtötila-analyysin avulla sosiaalisen median käyttöönottoa edistäviä ja estäviä tekijöitä yrityksissä. Aineisto analysoitiin kvantitatiivisin menetelmin. Tulosten perusteella myönteinen suhtautuminen voi edistää sosiaalisen median käyttöönottoa yrityksissä. Toisaalta tutkimuksessa ei voitu osoittaa, että yrityskulttuuriset tekijät estäisivät sosiaalisen median käyttöönottoa. Sosiaalisen median strategia rakennettiin teorian ja kyselyiden tulosten perusteella. Sosiaalisen median käyttö yrityksissä lisääntyy, joten jatkotutkimusta tarvitaan sosiaalisen median hyödyntämisestä yrityskontekstissa myös ulkoisten sidosryhmien osalta.

Challenges for virtual teams in voluntary organizations

This research concerns virtual teams in the field of volunteer work. The developments in the area of information and communication technology have decreased their costs and made them easily accessible. As a result, it seems natural that also the voluntary organizations have adopted online tools and virtual teams as a part of their work modes. However, virtual teams have not received much research in this context, and one of the goals of this study was to begin closing that gap. The research had two main focus areas: the challenges that the volunteers face in the teams, and the leadership that the teams have. The study used a qualitative approach and semi-structured interviews. The interviews were conducted over Skype and email and included members from six different teams. The case organization was a European-wide student organization that widely utilized virtual teams in its work. The study identified three critical issues for managing the virtual teams. The first challenge was creating common ground for teamwork through electronic communication. Secondly, volunteering created challenges for the teams through variations in the level of commitment of the members, as some left the organization during the term of the team. Lastly, knowledge transfer was a challenge that came from changing the team members regularly each year. As for the second key topic, leadership in the teams was spread among the team members unevenly. The teams had a formal leader, but they exhibited signs of shared leadership, and the team members were able to influence the team through their own level of involvement. Especially the experience that a member had contributed the amount of influence she held. All in all, the challenges that the volunteers faced were similar to those of normal virtual teams. Volunteering brought additional challenges through the varying levels of commitment and the changing of the team members. Additionally, the role of the team leader was not as firm. The results of the study can be applied to other volunteer organizations that utilize virtual teams.

Challenges for virtual teams in voluntary organizations

This research concerns virtual teams in the field of volunteer work. The developments in the area of information and communication technology have decreased their costs and made them easily accessible. As a result, it seems natural that also the voluntary organizations have adopted online tools and virtual teams as a part of their work modes. However, virtual teams have not received much research in this context, and one of the goals of this study was to begin closing that gap. The research had two main focus areas: the challenges that the volunteers face in the teams, and the leadership that the teams have. The study used a qualitative approach and semi-structured interviews. The interviews were conducted over Skype and email and included members from six different teams. The case organization was a European-wide student organization that widely utilized virtual teams in its work. The study identified three critical issues for managing the virtual teams. The first challenge was creating common ground for teamwork through electronic communication. Secondly, volunteering created challenges for the teams through variations in the level of commitment of the members, as some left the organization during the term of the team. Lastly, knowledge transfer was a challenge that came from changing the team members regularly each year. As for the second key topic, leadership in the teams was spread among the team members unevenly. The teams had a formal leader, but they exhibited signs of shared leadership, and the team members were able to influence the team through their own level of involvement. Especially the experience that a member had contributed the amount of influence she held. All in all, the challenges that the volunteers faced were similar to those of normal virtual teams. Volunteering brought additional challenges through the varying levels of commitment and the changing of the team members. Additionally, the role of the team leader was not as firm. The results of the study can be applied to other volunteer organizations that utilize virtual teams.

Measuring software security from the design of software

The vast majority of our contemporary society owns a mobile phone, which has resulted in a dramatic rise in the amount of networked computers in recent years. Security issues in the computers have followed the same trend and nearly everyone is now affected by such issues. How could the situation be improved? For software engineers, an obvious answer is to build computer software with security in mind. A problem with building software with security is how to define secure software or how to measure security. This thesis divides the problem into three research questions. First, how can we measure the security of software? Second, what types of tools are available for measuring security? And finally, what do these tools reveal about the security of software? Measuring tools of these kind are commonly called metrics. This thesis is focused on the perspective of software engineers in the software design phase. Focus on the design phase means that code level semantics or programming language specifics are not discussed in this work. Organizational policy, management issues or software development process are also out of the scope. The first two research problems were studied using a literature review while the third was studied using a case study research. The target of the case study was a Java based email server called Apache James, which had details from its changelog and security issues available and the source code was accessible. The research revealed that there is a consensus in the terminology on software security. Security verification activities are commonly divided into evaluation and assurance. The focus of this work was in assurance, which means to verify one’s own work. There are 34 metrics available for security measurements, of which five are evaluation metrics and 29 are assurance metrics. We found, however, that the general quality of these metrics was not good. Only three metrics in the design category passed the inspection criteria and could be used in the case study. The metrics claim to give quantitative information on the security of the software, but in practice they were limited to evaluating different versions of the same software. Apart from being relative, the metrics were unable to detect security issues or point out problems in the design. Furthermore, interpreting the metrics’ results was difficult. In conclusion, the general state of the software security metrics leaves a lot to be desired. The metrics studied had both theoretical and practical issues, and are not suitable for daily engineering workflows. The metrics studied provided a basis for further research, since they pointed out areas where the security metrics were necessary to improve whether verification of security from the design was desired.

Liikeriskit ja riskinhallinta Ukrainan kriisissä vuonna 2014 – Tapaustutkimus eräästä suomalaisesta yrityksestä

Tutkimuksen tarkoitus on analysoida suomalaisen yrityksen vuonna 2014 kohtaamia riskejä Ukrainassa sekä tutkia sitä, miten niitä hallitaan ja miten ne vaikuttivat yrityksen liiketoimintaan. Ukraina ei ole merkittävä kauppakumppani Suomelle, mutta silti monet suomalaiset yritykset toimivat maassa ja vuoden 2014 kriisin jälkeen maahan on tullut uusia suomalaisia yrityksiä. Ukraina on kooltaan merkittävä markkina-alue, ja sen merkitys saattaa kasvaa kun se on aloittanut siirtymisen kohti EU:ta. Tutkimuksen tarkoituksena on tutkia millaisia riskejä Ukrainan liiketoimintaympäristössä esiintyi vuonna 2014 ja kuinka tutkittu yritys on hallinnut niitä. Tutkimusta varten on suoritettu laadullinen tapaustutkimus, jonka aineisto kerättiin teemahaastatteluiden sekä sähköpostivaihdon avulla. Tämän lisäksi on perehdytty aihetta käsitteleviin journaaleihin, aikakausilehtiin sekä Internet-sivustoihin relevantin ja monipuolisen tiedon hankkimista varten. Teoriapohjana on tutkimuksessa käytetty riskin määritelmää sekä COSO:n kokonaisvaltaista riskinhallintamallia. Tutkimuksessa tehtyjen havaintojen perusteella voidaan todeta, että tutkitun yrityksen riskinhallintatoimenpiteet eivät eronneet merkittävästi COSO:n mallissa esitetyistä, muutamaa poikkeusta lukuun ottamatta. Tutkittaessa suomalaisen yrityksen kohtaamia riskejä Ukrainassa vuonna 2014 huomattiin, että riskit jakautuvat viiteen eri kategoriaan: sosiaalisiin riskeihin, teknisiin riskeihin, henkilöstö riskeihin, poliittisiin riskeihin ja taloudellisiin riskeihin. Tutkimustuloksista huomattiin että yritys vastasi kolmeen eri riskikategoriaan poikkeavalla tavalla verrattuna malliin. Sosiaalisten-, teknisten- ja henkilöstö riskien osalta toimenpiteet erosivat mallissa esitetyistä. Yritys vastasi sosiaalisista riskeistä johtuviin boikotteihin vähentämällä niitä uudelleen brändäämällä tuotteitaan. Teknisiä riskejä hallittiin muuttamalla tuotteita ja tuotantoa uuteen toimintaympäristöön sopiviksi. Henkilöstöriskejä vältettiin olemalla käyttämättä tiettyyn etniseen ryhmään kuuluvia henkilöitä. Tutkimuksessa ilmenneitä riskinhallintakeinoja, jotka poikkesivat COSO:n mallista, ei tullut esille aikaisemmissa akateemisissa tutkimuksissa