The enterprise information security policy as a strategic business policy within the corporate strategic plan (extended abstract)

Information security has been recognized as a core requirement for corporate governance that is expected to facilitate not only the management of risks, but also as a corporate enabler that supports and contributes to the sustainability of organizational operations. In implementing information security, the enterprise information security policy is the set of principles and strategies that guide the course of action for the security activities and may be represented as a brief statement that defines program goals and sets information security and risk requirements. The enterprise information security policy (alternatively referred to as security policy in this paper) that represents the meta-policy of information security is an element of corporate ICT governance and is derived from the strategic requirements for risk management and corporate governance. Consistent alignment between the security policy and the other corporate business policies and strategies has to be maintained if information security is to be implemented according to evolving business objectives. This alignment may be facilitated by managing security policy alongside other corporate business policies within the strategic management cycle. There are however limitations in current approaches for developing and managing the security policy to facilitate consistent strategic alignment. This paper proposes a conceptual framework for security policy management by presenting propositions to positively affect security policy alignment with business policies and prescribing a security policy management approach that expounds on the propositions.

A case study examination of the influence of cultural diversity in the multicultural nursing workforce on the quality of care and patient safety in a Saudi Arabian hospital

The purpose of the study: The purpose of this study is to investigate the influence of cultural diversity, in a multicultural nursing workforce, on the quality and safety of patient care and the work environment at King Abdul-Aziz Medical City, Riyadh region. Study background: Due to global migration and workforce mobility, to varying degrees, cultural diversity exists in most health services around the world, particularly occurring where the health care workforce is multicultural or where the domestic population comprises minority groups from different cultures speaking different languages. Further complexities occur when countries have a multicultural workforce which is different from the population for whom they care, in addition to the workers being from culturally diverse countries and with different languages. In Saudi Arabia the health system is mainly staffed by expatriate nurses who comprise 67.7% of the total number of nurses. Study design: This research utilised a case study design which incorporated multiple methods including survey, qualitative interviews and document review. Methods: The participant nurses were selected for the survey via a population sampling strategy; 319 nurses returned their completed Safety Climate Survey questionnaires. Descriptive and inferential statistics (Kruskal–Wallis test) were used to analyse survey data. For the qualitative component of the study, a purposive sampling strategy was used; 24 nurses were interviewed using a semi-structured interview technique. The documentary review included KAMC-R policy documents that met the inclusion criteria using a predetermined data abstraction instrument. Content analysis was used to analyse the policy documents data. Results: The data revealed the nurses‘ perceptions of the clinical climate in this multicultural environment is that it was unsafe, with a mean score of 3.9 out of 5. No significant difference was detected between the age groups or years of experience of the nurses and the perception of safety climate in this context; the study did reveal a statistically significant difference between the cultural background categories and the perception of safety climate. The qualitative phase indicated that the nurses within this environment were struggling to achieve cultural competence; consequently, they were having difficulties in meeting the patients‘ cultural and spiritual needs as well as maintaining a high standard of care. The results also indicated that nurses were disempowered in this context. Importantly, there was inadequate support by the organisation to manage the cultural diversity issue and to protect patients from any associated risks, as demonstrated by the policy documents and supported by the nurses‘ experiences. The study also illustrated the limitations of the conceptual framework of cultural competence when tested in this multicultural workforce context. Therefore, this study generated amendments to the model that is suitable to be used in the context of a multicultural nursing workforce. Conclusion: The multicultural nature of this nursing work environment is inherently risky due to the conflicts that arise from the different cultural norms, beliefs, behaviours and languages. Further, there was uncertainty within the multicultural nursing workforce about the clinical and cultural safety of the patient care environment and about the cultural safety of the nursing workforce. The findings of the study contribute important new knowledge to the area of patient and nurse safety in a multicultural environment and contribute theoretical development to the field of cultural competence. Specifically, the findings will inform policy and practice related to patient care in the context of cultural diversity.

Internet Child Abuse: Current Research, Policy and Practice

Internet Child Abuse: Current Research and Policy provides a timely overview of international policy, legislation and offender management and treatment practice in the area of Internet child abuse. Internet use has grown considerably over the last five years, and information technology now forms a core part of the formal education system in many countries. There is however, increasing evidence that the Internet is used by some adults to access children and young people in order to ‘groom’ them for the purposes of sexual abuse; as well as to produce and distribute indecent illegal images of children. This book presents and assesses the most recent and current research on internet child abuse, addressing: its nature, the behaviour and treatment of its perpetrators, international policy, legislation and protection, and policing. It will be required reading for an international audience of academics, researchers, policy-makers and criminal justice practitioners with interests in this area.

Deviance and Crime: Theory, Research and Policy

This book sensitizes the reader to the fact that there is substantial disagreement within the academic community, and among policymakers and the general public, over what behaviors, conditions (e.g., physical attributes), and people should be designated as deviant or criminal. Normative conceptions, the societal reaction/labeling approach, and the critical approach are offered as frameworks within which to study these definitions. A comprehensive explanation of theory and social policy on deviance is constructed.