Enterprise information security policy assessment : an extended framework for metrics development utilising the goal-question-metric approach

Effective enterprise information security policy management requires review and assessment activities to ensure information security policies are aligned with business goals and objectives. As security policy management involves the elements of policy development process and the security policy as output, the context for security policy assessment requires goal-based metrics for these two elements. However, the current security management assessment methods only provide checklist types of assessment that are predefined by industry best practices and do not allow for developing specific goal-based metrics. Utilizing theories drawn from literature, this paper proposes the Enterprise Information Security Policy Assessment approach that expands on the Goal-Question-Metric (GQM) approach. The proposed assessment approach is then applied in a case scenario example to illustrate a practical application. It is shown that the proposed framework addresses the requirement for developing assessment metrics and allows for the concurrent undertaking of process-based and product-based assessment. Recommendations for further research activities include the conduct of empirical research to validate the propositions and the practical application of the proposed assessment approach in case studies to provide opportunities to introduce further enhancements to the approach.

Measuring the realization of benefits from enterprise architecture management

Enterprise architecture management (EAM) has become an intensively discussed approach to manage enterprise transformations. While many organizations employ EAM, a notable insecurity about the value of EAM remains. In this paper, we propose a model to measure the realization of benefits from EAM. We identify EAM success factors and EAM benefits through a comprehensive literature review and eleven explorative expert interviews. Based on our findings, we integrate the EAM success factors and benefits with the established DeLone & McLean IS success model resulting in a model that explains the realization of EAM benefits. This model aids organizations as a benchmark and framework for identifying and assessing the setup of their EAM initiatives and whether and how EAM benefits are materialized. We see our model also as a first step to gain insights in and start a discussion on the theory of EAM benefit realization.

Realizing benefits from enterprise architecture : a measurement model

Enterprise architecture (EA) management has become an intensively discussed approach to manage enterprise transformations. Despite the popularity and potential of EA, both researchers and practitioners lament a lack of knowledge about the realization of benefits from EA. To determine the benefits from EA, we explore the various dimensions of EA benefit realization and report on the development of a validated and robust measurement instrument. In this paper, we test the reliability and construct validity of the EA benefit realization model (EABRM), which we have designed based on the DeLone & McLean IS success model and findings from exploratory interviews. A confirmatory factor analysis confirms the existence of an impact of five distinct and individually important dimensions on the benefits derived from EA: EA artefact quality, EA infrastructure quality, EA service quality, EA culture, and EA use. The analysis presented in this paper shows that the EA benefit realization model is an instrument that demonstrates strong reliability and validity.

Hospital to home outreach for malnourished elders (HHOME) : a feasibility pilot

Objectives: Malnutrition is common in older hospitalised patients, and barriers to adequate intake in hospital limit the effectiveness of hospital-based nutrition interventions. This pilot study was undertaken to determine whether nutrition-focussed care at discharge and in the early post-hospital period is feasible and acceptable to patients and carers, and improves nutritional status. Design: Prospective cohort study Setting: Internal medicine wards of a tertiary teaching hospital in Brisbane, Australia Participants: Patients aged 65 and older admitted for at least 3 days, identified as malnourished or at risk of malnutrition using Mini Nutritional Assessment (MNA). Interventions: An interdisciplinary discharge team (specialist discharge planning nurse and accredited practicing dietitian) provided nutrition-focussed education, advice, service coordination and follow-up (home visits and telephone) for 6 weeks following hospitalisation Measurements: Nutritional intake, weight, functional status and MNA were recorded 6 and 12 weeks after discharge. Service intensity and changes to care were noted, and hospital readmissions recorded. Service feedback from patients and carers was sought using a brief questionnaire. Results: 12 participants were enrolled during the 6 week pilot (mean age 82 years, 50% male). All received 1-2 home visits, and 3-8 telephone calls. Four participants had new community services arranged, 4 were commenced on oral nutritional supplements, and 7 were referred to community dietetics services for follow-up. Two participants had a decline in MNA score of more than 10% at 12 week follow-up, while the remainder improved by at least 10%. Individualised care including community service coordination was valued by participants. Conclusion: The proposed model of care for older adults was feasible, acceptable to patients and carers, and associated with improved nutritional status at 12 weeks for most participants. The pilot data will be useful for design of intervention trials.

Social enterprise and regional development : a pilot study

This preliminary study is an early attempt to explicitly explore the role of social enterprises in regional development. Focusing on North West Tasmania, an isolated and predominately rural region, this study examines three social enterprises based in the region and the nature of their social and economic impacts.

Abundance of introduced species at home predicts abundance away in herbaceous communities

Many ecosystems worldwide are dominated by introduced plant species, leading to loss of biodiversity and ecosystem function. A common but rarely tested assumption is that these plants are more abundant in introduced vs. native communities, because ecological or evolutionary-based shifts in populations underlie invasion success. Here, data for 26 herbaceous species at 39 sites, within eight countries, revealed that species abundances were similar at native (home) and introduced (away) sites – grass species were generally abundant home and away, while forbs were low in abundance, but more abundant at home. Sites with six or more of these species had similar community abundance hierarchies, suggesting that suites of introduced species are assembling similarly on different continents. Overall, we found that substantial changes to populations are not necessarily a pre-condition for invasion success and that increases in species abundance are unusual. Instead, abundance at home predicts abundance away, a potentially useful additional criterion for biosecurity programmes.

Mobility and active ageing in suburban environments : findings from in-depth interviews and person-based GPS tracking

Background. Governments face a significant challenge to ensure that community environments meet the mobility needs of an ageing population. Therefore, it is critical to investigate the effect of suburban environments on the choice of transportation and its relation to participation and active ageing. Objective. This research explores if and how suburban environments impact older people’s mobility and their use of different modes of transport. Methods. Data derived from GPS tracking, travel diaries, brief questionnaires, and semistructured interviews were gathered from thirteen people aged from 56 to 87 years, living in low-density suburban environments in Brisbane, Australia. Results. The suburban environment influenced the choice of transportation and out-of-home mobility. Both walkability and public transportation (access and usability) impact older people’s transportation choices. Impracticality of active and public transportation within suburban environments creates car dependency in older age. Conclusion. Suburban environments often create barriers to mobility, which impedes older people’s engagement in their wider community and ability to actively age in place. Further research is needed to develop approaches towards age-friendly suburban environments which will encourage older people to remain active and engaged in older age.

Social innovation and social enterprise : evidence from Australia

‘Social innovation’ is a construct increasingly used to explain the practices, processes and actors through which sustained positive transformation occurs in the network society (Mulgan, G., Tucker, S., Ali, R., Sander, B. (2007). Social innovation: What it is, why it matters and how can it be accelerated. Oxford:Skoll Centre for Social Entrepreneurship; Phills, J. A., Deiglmeier, K., & Miller, D. T. Stanford Social Innovation Review, 6(4):34–43, 2008.). Social innovation has been defined as a “novel solution to a social problem that is more effective, efficient, sustainable, or just than existing solutions, and for which the value created accrues primarily to society as a whole rather than private individuals.” (Phills,J. A., Deiglmeier, K., & Miller, D. T. Stanford Social Innovation Review, 6 (4):34–43, 2008: 34.) Emergent ideas of social innovation challenge some traditional understandings of the nature and role of the Third Sector, as well as shining a light on those enterprises within the social economy that configure resources in novel ways. In this context, social enterprises – which provide a social or community benefit and trade to fulfil their mission – have attracted considerable policy attention as one source of social innovation within a wider field of action (see Leadbeater, C. (2007). ‘Social enterprise and social innovation: Strategies for the next 10 years’, Cabinet office,Office of the third sector http://www.charlesleadbeater.net/cms xstandard/social_enterprise_innovation.pdf. Last accessed 19/5/2011.). And yet, while social enterprise seems to have gained some symbolic traction in society, there is to date relatively limited evidence of its real world impacts.(Dart, R. Not for Profit Management and Leadership, 14(4):411–424, 2004.) In other words, we do not know much about the social innovation capabilities and effects of social enterprise. In this chapter, we consider the social innovation practices of social enterprise, drawing on Mulgan, G., Tucker, S., Ali, R., Sander, B. (2007). Social innovation: What it is, why it matters and how can it be accelerated. Oxford: Skoll Centre for Social Entrepreneurship: 5) three dimensions of social innovation: new combinations or hybrids of existing elements; cutting across organisational, sectoral and disciplinary boundaries; and leaving behind compelling new relationships. Based on a detailed survey of 365 Australian social enterprises, we examine their self-reported business and mission-related innovations, the ways in which they configure and access resources and the practices through which they diffuse innovation in support of their mission. We then consider how these findings inform our understanding of the social innovation capabilities and effects of social enterprise,and their implications for public policy development.

A trusted ecosystem for Android applications based on context-aware access control

Private data stored on smartphones is a precious target for malware attacks. A constantly changing environment, e.g. switching network connections, can cause unpredictable threats, and require an adaptive approach to access control. Context-based access control is using dynamic environmental information, including it into access decisions. We propose an "ecosystem-in-an-ecosystem" which acts as a secure container for trusted software aiming at enterprise scenarios where users are allowed to use private devices. We have implemented a proof-of-concept prototype for an access control framework that processes changes to low-level sensors and semantically enriches them, adapting access control policies to the current context. This allows the user or the administrator to maintain fine-grained control over resource usage by compliant applications. Hence, resources local to the trusted container remain under control of the enterprise policy. Our results show that context-based access control can be done on smartphones without major performance impact.

The emerging role of the Board of Directors in enterprise business technology governance

In an increasingly business technology (BT) dependent world, the impact of the extraordinary changes brought about by the nexus of mobile and cloud technologies, social media and big data is increasingly being felt in the board room. As leaders of enterprises of every type and size, board directors can no longer afford to ignore, delegate or avoid BT-related decisions. Competitive, financial and reputational risk is increased if boards fail to recognize their role in governing technology as an asset and in removing barriers to improving enterprise business technology governance (EBTG). Directors’ awareness of the need for EBTG is increasing. However, industry research shows that board level willingness to rectify the gap between awareness and action is very low or non-existent. This literature review-based research identifies barriers to EBTG effectiveness. It provides a practical starting point for board analysis. We offer four outcomes that boards might focus on to ensure the organizations they govern are not left behind by those led by the upcoming new breed of technology-savvy leaders. Most extant research looks backward for examples, examining data pre-2010, the time when a tipping point in the personal and business use of multimedia and mobile-internet devices significantly deepened the impacts of the identified nexus technology forces, and began rapidly changing the way many businesses engage with their customers, employees and stakeholders. We situate our work amidst these nexus forces, discuss the board’s role in EBTG in this context, and modernize current definitions of enterprise technology governance. The primary limitation faced is the lack of scholarly research relating to EBTG in the rapidly changing digital economy. Although we have used recent (2011 - 2013) industry surveys, the volume of these surveys and congruence across them is significant in terms of levels of increased awareness and calls for increased board attention and competency in EBTG and strategic information use. Where possible we have used scholarly research to illustrate or discuss industry findings.

Configuring processes and business documents : an integrated approach to enterprise systems collaboration

Enterprise Systems (ES) provide standardized, off-theshelf support for operations and management within organizations. With the advent of ES based on a serviceoriented architecture (SOA) and an increasing demand of IT-supported interorganizational collaboration, implementation projects face paradigmatically new challenges. The configuration of ES is costly and error-prone. Dependencies between business processes and business documents are hardly explicit and foster component proliferation instead of reuse. Configurative modeling can support the problem in two ways: First, conceptual modeling abstracts from technical details and provides more intuitive access and overview. Second, configuration allows the projection of variants from master models providing manageable variants with controlled flexibility. We aim at tackling the problem by proposing an integrated model-based framework for configuring both, processes and business documents, on an equal basis; as together, they constitute the core business components of an ES.

From conceptual process models to running workflows : a holistic approach for the configuration of enterprise systems

The configuration of comprehensive Enterprise Systems to meet the specific requirements of an organisation up to today is consuming significant resources. The results of failing implementation projects are severe and may even threaten the organisation’s existence. This paper proposes a method which aims at increasing the efficiency of Enterprise Systems implementations. First, we argue that existing process modelling languages that feature different degrees of abstraction for different user groups exist and are used for different purposes which makes it necessary to integrate them. We describe how to do this using the meta models of the involved languages. Second, we motivate that an integrated process model based on the integrated meta model needs to be configurable and elaborate on the mechanisms by which this model configuration can be achieved. We introduce a business example using SAP modelling techniques to illustrate the proposed method.

Model-driven process configuration of enterprise systems

The configuration of comprehensive enterprise systems to meet the specific requirements of an organisation up to today is consuming significant resources. The results of failing or delayed enterprise system implementation projects are severe and may even threaten the organisation’s existence. One of the main drivers for implementing comprehensive enterprise systems is to streamline business processes. However, an intuitive conceptual support for business process configuration is insufficiently addressed by enterprise system vendors and inadequately researched in academia. This paper presents a model-driven approach to target this problem and proposes several configuration patterns that describe generic patterns of configuration alternatives, in order to understand what situations can occur during business process configuration. Based on these configuration patterns, a configuration notation is introduced that allows for visually highlighting configuration alternatives. Finally, we will sketch how configurable Event Driven Process Chains and the configuration of business processes can be supported using relational databases.

Hydrogen sensing properties of Pt/Lanthanum oxide- molybdenum oxide nanoplatelet/SiC based Schottky diode

An investigation of the electrical and hydrogen sensing properties of a novel Schottky diode based on a nanostructured lanthanum oxide-molybdenum oxide compound is presented herein. Molybdenum oxide (MoO3) nanoplatelets were grown on SiC substrates via thermal evaporation which was then subsequently coated with lanthanum oxide (La2O3) by RF sputtering. The current-voltage characteristics and hydrogen sensing performance (change in barrier height and sensitivity as well as the dynamic response) were examined from 25 to 300°C. At 180°C, a voltage shift of 2.23V was measured from the sensor while exposed to 1% hydrogen gas under a 100 μA constant reverse bias current. The results indicate that the presence of a La2O3 thin layer substantially improves the hydrogen sensitivity of the MoO3 nanoplatelets.

Embedding graphic organisers in the teaching and learning of family and consumer sciences (home economics) in Kuwait

Educational reforms currently being enacted in Kuwaiti Family and Consumer Sciences (FCS) in response to contemporary demands for increased student-centred teaching and learning are challenging for FCS teachers due to their limited experience with student-centred learning tools such as Graphic Organisers (GOs). To adopt these reforms, Kuwaiti teachers require a better understanding of and competency in promoting cognitive learning processes that will maximise student-centred learning approaches. This study followed the experiences of four Grade 6 FCS Kuwaiti teachers as they undertook a Professional Development (PD) program specifically designed to advance their understanding of the use of GOs and then as they implemented what they had learned in their Grade 6 FCS classroom. The PD program developed for this study was informed by Nasseh.s competency PD model as well as Piaget and Ausubel.s cognitive theories. This model enabled an assessment and evaluation of the development of the teachers. competencies as an outcome of the PD program in terms of the adoption of GOs, in particular, and their capacity to use GOs to engage students in personalised, in-depth, learning through critical thinking and understanding. The research revealed that the PD program was influential in reforming the teachers. learning, understanding of and competency in, cognitive and visual theories of learning, so that they facilitated student-centred teaching and learning processes that enabled students to adopt and adapt GOs in constructivist learning. The implementation of five GOs - Flow Chart, Concept Maps, K-W-L Chart, Fishbone Diagram and Venn Diagram - as learning tools in classrooms was investigated to find if changes in pedagogical approach for supporting conceptual learning through cognitive information processing would reduce the cognitive work load of students and produce better learning approaches. The study as evidenced by the participant teachers. responses and classroom observations, showed a marked increase in student interest, participation, critical thought, problem solving skills, as a result of using GOs, compared to using traditional teaching and learning methods. A theoretical model was developed from the study based on the premise that teachers. knowledge of the subject, pedagogy and student learning precede the implementation of student-centred learning reform, that it plays an important role in the implementation of student-centred learning and that it brings about a change in teaching practice. The model affirmed that observed change in teaching-practice included aspects of teachers. beliefs, as well as confidence and effect on workplace and on student learning, including engagement, understanding, critical thinking and problem solving. The model assumed that change in teaching practice is inseparable from teachers. lifelong PD needs related to knowledge, understanding, skills and competency. These findings produced a set of preliminary guidelines for establishing student-centred constructivist strategies in Kuwaiti education while retaining Kuwait.s cultural uniqueness.