Incorporating a knowledge perspective into security risk assessments

Purpose – Many methodologies exist to assess the security risks associated with unauthorized leakage, modification and interruption of information used by organisations. This paper argues that these methodologies have a traditional orientation towards the identification and assessment of technical information assets. This obscures key risks associated with the cultivation and deployment of organisational knowledge. The purpose of this paper is to explore how security risk assessment methods can more effectively identify and treat the knowledge associated with business processes.

Design/methodology/approach – The argument was developed through an illustrative case study in which a well-documented traditional methodology is applied to a complex data backup process. Follow-up interviews were conducted with the organisation’s security managers to explore the results of the assessment and the nature of knowledge “assets” within a business process.

Findings – It was discovered that the backup process depended, in subtle and often informal ways, on tacit knowledge to sustain operational complexity, handle exceptions and make frequent interventions. Although typical information security methodologies identify people as critical assets, this study suggests a new approach might draw on more detailed accounts of individual knowledge, collective knowledge and their relationship to organisational processes.

Originality/value – Drawing on the knowledge management literature, the paper suggests mechanisms to incorporate these knowledge-based considerations into the scope of information security risk methodologies. A knowledge protection model is presented as a result of this research. This model outlines ways in which organisations can effectively identify and treat risks around process knowledge critical to the business.

The effects of perceived business uncertainty, external consultants and risk management on organisational outcomes

Purpose – The purpose of this paper is to investigate the relations between perceived business uncertainty (PBU), use of external risk management (RM) consultants, formalisation of RM, magnitude of RM methods and perceived organisational outcomes.
Design/methodology/approach – This paper is based on a questionnaire survey of members of the Chartered Institute of Management Accountants in the UK. Using AMOS 17.0, the paper tests the strength of the direct and indirect effects among the variables and explores the fit of the overall path model.
Findings – The results indicate significant and positive associations exist between the extent of PBU and the level ofRMformalisation, as well as between the level ofRMformalisation and the magnitude of RMmethods adopted. The use of externalRMconsultants is also found to have a significant and positive impact on the magnitude of RM methods adopted. Finally, both the extent of RM formalisation and the magnitude of RM methods adopted are seen to be significantly associated with overall improvement in organisational outcomes.
Research limitations/implications – The study uses perceptual measures of the level of business uncertainty, usage of RM and organisational outcomes. Further, the respondents are members of a management accounting professional body and the views of other managers, such as risk managers, who are also important to the governance process are not incorporated.
Originality/value – This study provides empirical evidence on the impact ofRMdesign and usage on improvements in organisational outcomes. It contributes to the RM literature where empirical research is needed in order to be comparable with the traditional management control system literature.

Internal audit involvement in enterprise risk management

Purpose – The purpose of this paper is to examine the impact of internal auditors’ involvement in enterprise risk management (ERM) on perceptions of their willingness to report a breakdown in risk procedures and whether a strong relationship with the audit committee affects such willingness to report. The study also investigates the use of ERM and the role of internal audit in ERM in Australian private and public sector entities.
Design/methodology/approach – The study uses an experimental design, manipulating the internal auditor’s involvement in ERM and the strength of the relationship between internal audit and the audit committee. Participants are 117 certified internal auditors. The study also gathers descriptive data on the use of ERM.
Findings – The study indicates that a high involvement in ERM impacts the perceptions of internal
auditors’ willingness to report a breakdown in risk procedures to the audit committee. However, a strong relationship with the audit committee does not appear to affect their perceived willingness to report. The study also finds that the majority of organisations have recently adopted ERM. Internal auditors are involved in ERM assurance activities but some also engage in activities that could compromise objectivity.
Research limitations/implications – There are internal and external validity threats associated with the experimental design.
Practical implications – The findings reinforce the need for organisations to adhere to the recommendations of the Institute of Internal Auditors and to ensure that internal auditors do not play an inappropriate role in ERM.
Originality/value – The paper contributes to our understanding of the impact of involvement in ERM on internal audit objectivity and of the current role of internal audit in ERM in Australia.

The value of sustainability in real estate : a review from a valuation perspective

Purpose – The purpose of this paper is to synthesise the plethora of research that has been conducted into the relationship between sustainability and market value in real estate, by critically analysing the research and the applicability of sustainability and value research in valuation practice.

Design/methodology/approach – The research on the relationship between sustainability and market value in real estate is examined from the perspective of its usefulness to the valuation profession in providing guidance, information and evidence to be used in valuation practice.

Findings – Existing research conducted into the relationship between sustainability and market value has not provided the valuation profession with evidence which would allow the incorporation of normative theories on the value of sustainability in valuation practice. This review highlights the lack of evidence, and the applicability of current research into sustainability and value to the valuation profession in providing guidance and information in valuing real estate incorporating sustainability.

Practical implications – This paper highlights the limited applicability of research to date in regard to the relationship between sustainability and market value for the valuation profession. The lack of historical evidence, data or information on the quantifiable effects on market value of this new trend (sustainability), leaves the valuation profession uncertain as to the relationship between sustainability and market value. There is a probable risk of valuers interpreting strategic research incorrectly, and making inappropriate adjustments or comparisons because of their lack of knowledge and limited sustainability assessment skills. Although there is an evolving body of knowledge, there is a need for extensive analysis of unbiased, evidence-based research in individual and broader markets to provide guidance, evidence and knowledge of the implications of sustainability in the valuation of real estate.

Originality/value – The examination of research investigating the relationship between sustainability and value from a valuation perspective provides an alternative insight into the applicability of current research in valuation practice. The increasing profile and role of sustainability in the real estate sector needs to be addressed in valuation practice; however, the variety of research to date needs to be interpreted by valuers in the correct context. This paper brings to light the applicability of sustainability and value research for the broader valuation profession, and the potential implications of misuse or misunderstanding of that research.

Which interventions offer best value for money in primary prevention of cardiovascular disease?

Background
Despite many decades of declining mortality rates in the Western world, cardiovascular disease remains the leading cause of death worldwide. In this research we evaluate the optimal mix of lifestyle, pharmaceutical and population-wide interventions for primary prevention of cardiovascular disease.

Methods and Findings
In a discrete time Markov model we simulate the ischaemic heart disease and stroke outcomes and cost impacts of intervention over the lifetime of all Australian men and women, aged 35 to 84 years, who have never experienced a heart disease or stroke event. Best value for money is achieved by mandating moderate limits on salt in the manufacture of bread, margarine and cereal. A combination of diuretic, calcium channel blocker, ACE inhibitor and low-cost statin, for everyone with at least 5% five-year risk of cardiovascular disease, is also cost-effective, but lifestyle interventions aiming to change risky dietary and exercise behaviours are extremely poor value for money and have little population health benefit.

Conclusions
There is huge potential for improving efficiency in cardiovascular disease prevention in Australia. A tougher approach from Government to mandating limits on salt in processed foods and reducing excessive statin prices, and a shift away from lifestyle counselling to more efficient absolute risk-based prescription of preventive drugs, could cut health care costs while improving population health.

Factor analysis of partners' commitment to risk management in public-private partnership projects

Purpose – The purpose of this paper is to investigate and uncover key determinants that could explain partners' commitment to risk management in public-private partnership projects so that partners' risk management commitment is taken into the consideration of optimal risk allocation strategies.

Design/methodology/approach – Based on an extensive literature review and an examination of the purchasing power parity (PPP) market, an industry-wide questionnaire survey was conducted to collect the data for a confirmatory factor analysis. Necessary statistical tests are conducted to ensure the validity of the analysis results.

Findings – The factor analysis results show that the procedure of confirmatory factor analysis is statistically appropriate and satisfactory. As a result, partners' organizational commitment to risk management in public-private partnerships can now be determined by a set of components, namely general attitude to a risk, perceived one's own ability to manage a risk, and the perceived reward for bearing a risk.

Practical implications – It is recommended, based on the empirical results shown in this paper, that, in addition to partners' risk management capability, decision-makers, both from public and private sectors, should also seriously consider partners' risk management commitment. Both factors influence the formation of optimal risk allocation strategies, either by their individual or interacting effects. Future research may therefore explore how to form optimal risk allocation strategies by integrating organizational capability and commitment, the determinants and measurement of which have been established in this study.

Originality/value – This paper makes an original contribution to the general body of knowledge on risk allocation in large-scale infrastructure projects in Australia adopting the procurement method of public-private partnership. In particular, this paper has innovatively established a measurement model of organisational commitment to risk management, which is crucial to determining optimal risk allocation strategies and in turn achieving project success. The score coefficients of all obtained components can be used to construct components by linear combination so that commitment to risk management can be measured. Previous research has barely focused on this topic.

Modelling SME credit risk : a Thai empirical evidence

This paper develops and tests a model to predict small and medium enterprise (SME) financial distress based on empirical evidence from Thailand. A sample comprising 198 financial statements of non-financially distressed and 68 statements of financially distressed SMEs were used. A parametric t-test was conducted to establish differences between financial characteristics of the two groups of SMEs.

Results show statistically significant differences (t values significant at .001) between the two groups of SMEs in the financial ratios used for the study. Discriminant analysis was then conducted to develop a model for predicting the likelihood of an SME experiencing financial distress.

The model hits an accuracy level of 97%, which compares favourably with the probability of accurate classification by chance (i.e., 65% after adjusting for the unequal sample sizes of the two groups of SMEs). A test of the model with a new sample shows the validity of the model beyond the original sample, confirming that Thai SME financial distress is amenable to prediction to a statistically significant extent. The model is expected to serve SME managers and creditors in assessing financial health of SMEs before making important decisions. The results are also expected to inform policymakers in formulating economic policies concerning SMEs.

Value-added role of internal audit : an Ethiopian case study

Purpose – The purpose of this paper is to draw inferences – from the results of an Ethiopian public sector corporation (for-profit) case study – on how the attributes of a value-adding internal audit department would vary among organisations.

Design/methodology/approach – The case study strategy is employed. The internal audit function of a public sector corporation was examined using an analytical framework derived from the literature. Research evidence was gathered distributing questionnaires to managers and internal auditors, conducting a semi-structured interview with the internal audit department manager, and reviewing documents.

Findings – The results highlight that traditional/compliance audit is dominant in the organisation studied as contrasted with value-added auditing. The paper concludes that goals and strategies pursued and the level of risk faced by organisations to which internal audit provides service, appear to shape the attributes of a value-adding internal audit department. The study also demonstrates that the quality of strategic planning for, and marketing of, internal audit would influence the extent to which an appropriate value-added profile is attained in a particular context.

Research limitations/implications – Since a single unit of analysis is examined, universal generalisability of the findings cannot be claimed. Also, the research design assumed that the unit of analysis investigated falls within the scope of internal audit departments considered in the literature that served as a basis to develop the analytical framework and data collection instruments.

Originality/value – The paper is expected to inspire conclusive follow-on research on the role of internal audit in Ethiopia, or other countries with similar settings.

Development and evaluation of a screening tool to identify people with diabetes at increased risk of medication problems relating to hypoglycaemia and medication non-adherence

Abstract Aims: To develop and evaluate a screening tool to identify people with diabetes at increased risk of medication problems relating to hypoglycaemia and medication non-adherence. Methods: A retrospective audit of attendances at a diabetes outpatient clinic at a public, teaching hospital over a 16-month period was conducted. Logistic regression was undertaken to examine risk factors associated with medication problems relating to hypoglycaemia and medication non-adherence and the most predictive set of factors comprise the Diabetes Medication Risk Screening Tool. Evaluating the tool involved assessing sensitivity and specificity, positive and negative predictive values, cut-off scores, inter-rater reliability, and content validity. Results: The Diabetes Medication Risk Screening Tool comprises seven predictive factors: age, living alone, English language, mental and behavioural problems, comorbidity index score, number of medications prescribed, and number of high-risk medications prescribed. The tool has 76.5% sensitivity, 59.5% specificity, and has a 65.1% positive predictive value, and a 71.8% negative predictive value. A score of 27 or more out of 62 was associated with high-risk of a medication problem. The inter-rater reliability of the tool was high (κ = 0.79, 95% CI 0.75 - 0.84) and the content validity index was 99.4%. Conclusion: The Diabetes Medication Risk Screening Tool has good psychometric properties and can proactively identify people with diabetes at greatest risk of medication problems relating to hypoglycaemia and medication non-adherence.

Balancing risk? First year performing arts students’ experience of a community arts event

This study examines participants’ responses to first year students’ street performances as a non-placement work-integrated learning (WIL) activity over a two year period. The purpose of the study was to determine: (1) community perception, (2) continuous improvement, and (3) future needs. Data was collected through surveying participants’ post-viewing of the street performances, students’ reflective notes, and a recorded focus group interview. The findings indicated that audience members require additional assistance to value the students’ street performances. The results revealed that students require more guidance around researching the sites of practice, understanding group work dynamics, relaxation methods, intra- and interpersonal skill development, conflict resolution and how to effectively build community relations with the local government Council. From the findings, specific recommendations for continual improvement are made. These include offering an explanation of the street performances’ historical and aesthetic connections to the building sites for audience members, affording battery operated body-microphones and light rostrum for improved sight lines, delivering group dynamics information and arranging opportunities for students to engage more effectively with the Council. While the recommendations in this study are intended to advance the field of research that evaluates non-placement WIL performing arts curriculum in higher education, the findings are relevant to any group-based performance activity in learning and teaching.

An integrated framework for suicide risk prediction

Suicide is a major concern in society. Despite of great attention paid by the community with very substantive medico-legal implications, there has been no satisfying method that can reliably predict the future attempted or completed suicide. We present an integrated machine learning framework to tackle this challenge. Our proposed framework consists of a novel feature extraction scheme, an embedded feature selection process, a set of risk classifiers and finally, a risk calibration procedure. For temporal feature extraction, we cast the patient’s clinical history into a temporal image to which a bank of one-side filters are applied. The responses are then partly transformed into mid-level features and then selected in 1-norm framework under the extreme value theory. A set of probabilistic ordinal risk classifiers are then applied to compute the risk probabilities and further re-rank the features. Finally, the predicted risks are calibrated. Together with our Australian partner, we perform comprehensive study on data collected for the mental health cohort, and the experiments validate that our proposed framework outperforms risk assessment instruments by medical practitioners.

DNA transfer by examination tools--a risk for forensic casework?

The introduction of profiling systems with increased sensitivity has led to a concurrent increase in the risk of detecting contaminating DNA in forensic casework. To evaluate the contamination risk of tools used during exhibit examination we have assessed the occurrence and level of DNA transferred between mock casework exhibits, comprised of cotton or glass substrates, and high-risk vectors (scissors, forceps, and gloves). The subsequent impact of such transfer in the profiling of a target sample was also investigated. Dried blood or touch DNA, deposited on the primary substrate, was transferred via the vector to the secondary substrate, which was either DNA-free or contained a target sample (dried blood or touch DNA). Pairwise combinations of both heavy and light contact were applied by each vector in order to simulate various levels of contamination. The transfer of dried blood to DNA-free cotton was observed for all vectors and transfer scenarios, with transfer substantially lower when glass was the substrate. Overall touch DNA transferred less efficiently, with significantly lower transfer rates than blood when transferred to DNA-free cotton; the greatest transfer of touch DNA occurred between cotton and glass substrates. In the presence of a target sample, the detectability of transferred DNA decreased due to the presence of background DNA. Transfer had no impact on the detectability of the target profile, however, in casework scenarios where the suspect profiles are not known, profile interpretation becomes complicated by the addition of contaminating alleles and the probative value of the evidence may be affected. The results of this study reiterate the need for examiners to adhere to stringent laboratory cleaning protocols, particularly in the interest of contamination minimisation, and to reduce the handling of items to prevent intra-item transfer.

A systematic evaluation of field-based screening methods for the assessment of anterior cruciate ligament (ACL) injury risk

BACKGROUND: Laboratory-based measures provide an accurate method to identify risk factors for anterior cruciate ligament (ACL) injury; however, these methods are generally prohibitive to the wider community. Screening methods that can be completed in a field or clinical setting may be more applicable for wider community use. Examination of field-based screening methods for ACL injury risk can aid in identifying the most applicable method(s) for use in these settings. OBJECTIVE: The objective of this systematic review was to evaluate and compare field-based screening methods for ACL injury risk to determine their efficacy of use in wider community settings. DATA SOURCES: An electronic database search was conducted on the SPORTDiscus™, MEDLINE, AMED and CINAHL databases (January 1990-July 2015) using a combination of relevant keywords. A secondary search of the same databases, using relevant keywords from identified screening methods, was also undertaken. STUDY SELECTION: Studies identified as potentially relevant were independently examined by two reviewers for inclusion. Where consensus could not be reached, a third reviewer was consulted. Original research articles that examined screening methods for ACL injury risk that could be undertaken outside of a laboratory setting were included for review. STUDY APPRAISAL AND SYNTHESIS METHODS: Two reviewers independently assessed the quality of included studies. Included studies were categorized according to the screening method they examined. A description of each screening method, and data pertaining to the ability to prospectively identify ACL injuries, validity and reliability, recommendations for identifying 'at-risk' athletes, equipment and training required to complete screening, time taken to screen athletes, and applicability of the screening method across sports and athletes were extracted from relevant studies. RESULTS: Of 1077 citations from the initial search, a total of 25 articles were identified as potentially relevant, with 12 meeting all inclusion/exclusion criteria. From the secondary search, eight further studies met all criteria, resulting in 20 studies being included for review. Five ACL-screening methods-the Landing Error Scoring System (LESS), Clinic-Based Algorithm, Observational Screening of Dynamic Knee Valgus (OSDKV), 2D-Cam Method, and Tuck Jump Assessment-were identified. There was limited evidence supporting the use of field-based screening methods in predicting ACL injuries across a range of populations. Differences relating to the equipment and time required to complete screening methods were identified. LIMITATIONS: Only screening methods for ACL injury risk were included for review. Field-based screening methods developed for lower-limb injury risk in general may also incorporate, and be useful in, screening for ACL injury risk. CONCLUSIONS: Limited studies were available relating to the OSDKV and 2D-Cam Method. The LESS showed predictive validity in identifying ACL injuries, however only in a youth athlete population. The LESS also appears practical for community-wide use due to the minimal equipment and set-up/analysis time required. The Clinic-Based Algorithm may have predictive value for ACL injury risk as it identifies athletes who exhibit high frontal plane knee loads during a landing task, but requires extensive additional equipment and time, which may limit its application to wider community settings.