Enterprise information security policy assessment : an extended framework for metrics development utilising the goal-question-metric approach

Effective enterprise information security policy management requires review and assessment activities to ensure information security policies are aligned with business goals and objectives. As security policy management involves the elements of policy development process and the security policy as output, the context for security policy assessment requires goal-based metrics for these two elements. However, the current security management assessment methods only provide checklist types of assessment that are predefined by industry best practices and do not allow for developing specific goal-based metrics. Utilizing theories drawn from literature, this paper proposes the Enterprise Information Security Policy Assessment approach that expands on the Goal-Question-Metric (GQM) approach. The proposed assessment approach is then applied in a case scenario example to illustrate a practical application. It is shown that the proposed framework addresses the requirement for developing assessment metrics and allows for the concurrent undertaking of process-based and product-based assessment. Recommendations for further research activities include the conduct of empirical research to validate the propositions and the practical application of the proposed assessment approach in case studies to provide opportunities to introduce further enhancements to the approach.

Understanding the use of technology in organisations : a structurational approach

Information Technology and its relationship to organisational performance has long been the interest of researchers. While there is concurrence that IT does contribute to performance, and we are efficiently expanding our knowledge on what factors cause better leveraging of IT resources in organisations, we have done little to understand how these factors interact with technology that results in improved performance. Using a structurational lens that recognises the recursive interaction between technology and people in the presence of social practices, and the norms that inform their ongoing practices, we propose an ethnographic approach to understanding the interaction between technology and resources, aiming to provide richer insight on the nature of the environment that promotes better use of IT resources. Such insights could provide the IT users with at least an initial conception of the IT usage platform that they could promote in their organisations to leverage the most from their IT resources.

Towards a Deeper Understanding of Information Technology Governance Effectiveness : A Capabilities-Based Approach

We examine the relationship between the effectiveness of IT steering committee-driven IT governance initiatives and firm’s IT management and IT infrastructure related capabilities. We test these relationships empirically by a field survey of 216 firms. Results of this study suggest that a firms’ effectiveness of IT steering committee-driven IT governance initiatives positively relate to the level of their IT-related capabilities. We also found positive relationships between IT-related capabilities and internal process-level performance, which positively relate to improvement in customer service and firm-level performance. For researchers, we demonstrate that the resourcebased theory provides a more robust explanation of the determinants of firms IT governance initiatives. This would be ideal in evaluating other IT governance initiatives effectiveness in relation to how they contribute to building performance-differentiating IT-related capabilities. For decision makers, we hope our study has reiterated the notion that IT governance is truly a coordinated effort, embracing all levels of human resources.

Power in legal education : a (new) critical and analytical approach

This article explores power within legal education scholarship. It suggests that power relations are not effectively reflected on within this scholarship, and it provokes legal educators to consider power more explicitly and effectively. It then outlines in-depth a conceptual and methodological approach based on Michel Foucault’s concept of ‘governmentality’ to assist in such an analysis. By detailing the conceptual moves required in order to research power in legal education more effectively, this article seeks to stimulate new reflection and thought about the practice and scholarship of legal education, and allow for political interventions to become more ethically sensitive and potentially more effective.

The traditional rationale of the arm’s length approach to transfer pricing : should the separate accounting model be maintained for modern multinational entities?

This article examines the current transfer pricing regime to consider whether it is a sound model to be applied to modern multinational entities. The arm's length price methodology is examined to enable a discussion of the arguments in favour of such a regime. The article then refutes these arguments concluding that, contrary to the very reason multinational entities exist, applying arm's length rules involves a legal fiction of imagining transactions between unrelated parties. Multinational entities exist to operate in a way that independent entities would not, which the arm's length rules fail to take into account. As such, there is clearly an air of artificiality in applying the arm's length standard. To demonstrate this artificiality with respect to modern multinational entities, multinational banks are used as an example. The article concluded that the separate entity paradigm adopted by the traditional transfer pricing regime is incongruous with the economic theory of modern multinational enterprises.

Creating successful cultural Brokers : the pros and cons of a community of practice approach in arts management education

Arts managers play a critical role in creating a strong, sustainable arts and cultural sector. They operate as brokers, creating programs, and, more critically, coordinating the relationships between artists, audiences, communities, governments and sponsors required to make these programs a success. Based on study of model developed for a subject in the Master of Creative Industries (Creative Production & Arts Management) at Queensland University of Technology (QUT), this paper examines the pros and cons of a “community of practice” approach in training arts management students to act as cultural brokers. It provides data on the effectiveness of a range of activities – including Position Papers, Case Studies, Masterclasses, and offline and online conversations – that can be used facilitate the peer-to-peer engagement by which students work together to build their cultural brokering skills in a community of practice. The data demonstrates that, whilst students appreciate this approach, educators must provide enough access to voices of authority – that is, to arts professionals – to establish a well-functioning community of practice, and ensure that more expert students do not become frustrated when they are unwittingly and unwillingly thrust into this role by less expert classmates. This is especially important in arts management, where classes are always diverse, due to the fact that most dedicated programs in Australia, as in the US, UK and Europe, are taught via small-scale programs at graduate level which accept applicants from a wide variety of arts and non-arts backgrounds.

International transfer pricing : the Australian approach and lessons for Canada

In response to developments in international trade and an increased focus on international transfer-pricing issues, Canada’s minister of finance announced in the 1997 budget that the Department of Finance would undertake a review of the transfer-pricing provisions in the Income Tax Act. On September 11, 1997, the Department of Finance released draft transfer-pricing legislation and Revenue Canada released revised draft Information Circular 87-2R. The legislation was subsequently amended and included in Bill C-28, which received first reading on December 10, 1997. The new rules are intended to update Canada’s international transfer-pricing practices. In particular, they attempt to harmonize the standards in the Income Tax Act with the arm’s-length principle established in the OECD’s transfer pricing guidelines. The new rules also set out contemporaneous documentation requirements in respect of cross-border related-party transactions, facilitate administration of the law by Revenue Canada, and provide for a penalty where transfer prices do not comply with the arm’s-length principle. The Australian tax authorities have similarly reviewed and updated their transfer-pricing practices. Since 1992, the Australian commissioner of taxation has issued three rulings and seven draft rulings directly relating to international transfer pricing. These rulings outline the selection and application of transfer pricing methodologies, documentation requirements, and penalties for non-compliance. The Australian Taxation Office supports the use of advance pricing agreements (APAs) and has expanded its audit strategy by conducting transfer-pricing risk assessment reviews. This article presents a detailed review of Australia’s transfer-pricing policy and practices, which address essentially the same concerns as those at which the new Canadian rules are directed. This review provides a framework for comparison of the approaches adopted in the two jurisdictions. The author concludes that although these approaches differ in some respects, ultimately they produce a similar result. Both regimes set a clear standard to be met by multinational enterprises in establishing transfer prices. Both provide for audits and penalties in the event of noncompliance. And both offer the alternative of an APA as a means of avoiding transfer-pricing disputes with Australian and Canadian tax authorities.

Efficiency and productivity of Singapore’s manufacturing sector 2001-2010: An analysis using Simar and Wilson’s (2007) bootstrapped truncated approach

This paper seeks to explain the lagging productivity in Singapore’s manufacturing noted in the statements of the Economic Strategies Committee Report 2010. Two methods are employed: the Malmquist productivity to measure total factor productivity change and Simar and Wilson’s (J Econ, 136:31–64, 2007) bootstrapped truncated regression approach. In the first stage, the nonparametric data envelopment analysis is used to measure technical efficiency. To quantify the economic drivers underlying inefficiencies, the second stage employs a bootstrapped truncated regression whereby bias-corrected efficiency estimates are regressed against explanatory variables. The findings reveal that growth in total factor productivity was attributed to efficiency change with no technical progress. Most industries were technically inefficient throughout the period except for ‘Pharmaceutical Products’. Sources of efficiency were attributed to quality of worker and flexible work arrangements while incessant use of foreign workers lowered efficiency.

A practical approach for identifying expected solution performance and robustness in operations research applications

A practical approach for identifying solution robustness is proposed for situations where parameters are uncertain. The approach is based upon the interpretation of a probability density function (pdf) and the definition of three parameters that describe how significant changes in the performance of a solution are deemed to be. The pdf is constructed by interpreting the results of simulations. A minimum number of simulations are achieved by updating the mean, variance, skewness and kurtosis of the sample using computationally efficient recursive equations. When these criterions have converged then no further simulations are needed. A case study involving several no-intermediate storage flow shop scheduling problems demonstrates the effectiveness of the approach.

A cross-cultural approach towards designing digital noticeboards with a remote aboriginal community

This working paper reflects upon the opportunities and challenges of designing a form of digital noticeboard system with a remote Aboriginal community that supports their aspirations for both internal and external communication. The project itself has evolved from a relationship built through ecological work between scientists and the local community on the Groote Eylandt archipelago to study native populations of animal species over the long term. In the course of this work the aspiration has emerged to explore how digital noticeboards might support communication on the island and externally. This paper introduces the community, the context and the history of the project. We then reflect upon the science project, its outcomes and a framework empowering the Aboriginal viewpoint, in order to draw lessons for extending what we see as a pragmatic and relationship based approach towards cross-cultural design.

Navigational traffic conflict technique: a proactive approach to quantitative measurement of collision risks in port waters

Navigational safety analysis relying on collision statistics is often hampered because of low number of observations. A promising alternative approach that overcomes this problem is proposed in this paper. By analyzing critical vessel interactions this approach proactively measures collision risk in port waters. The proposed method is illustrated for quantitative measurement of collision risks in Singapore port fairways, and validated by examining correlations between the measured risks with those perceived by pilots. This method is an ethically appealing alternative to the collision-based analysis for fast, reliable and effective safety assessment, thus possesses great potential for managing collision risks in port waters.

Principals’ and teacher leaders’ perceptions of their role and interaction under current Chinese reform : a case study in Shandong province

This study aims to explore the perceptions of principals and teacher leaders regarding their roles and the interaction between these roles in Chinese urban primary schools at the time of unprecedented curriculum reform. This involves a complexity of factors such as the influence of globalisation, the impact of traditional Chinese cultural attitudes towards education through Confucianism, and the implementation requirements of the current education reforms. All of these wider contextual factors help to shape the leadership practices that are described in the study. A qualitative exploratory case study approach has been utilised to undertake this investigation. The conceptual framework for this study draws upon scholars‘ work from Western countries but has been adapted in order to address three research questions for the study‘s focus on the context in Shandong province, Mainland China. Three research questions were addressed: First, what are principals‘ perceptions of their leadership roles in Mainland China under current educational reform? Second, what are teacher leaders‘ perceptions of their leadership roles in Mainland China under current educational reform? And finally, what are principals‘ and teacher leaders‘ perceptions of how their roles interact? With reference to the principals in the study, the findings confirm Gurr‘s (2008) comprehensive leadership model relating to four roles, specifically, learning and teaching, symbolic and cultural awareness, future orientation, and accountability. Significantly, some sub-roles that emerge from the data are uniquely Chinese. For example, school culture construction is a very deliberate process in which principals and their staff talked openly about and were involved in creating a positive school climate comprising spiritual, material, and system dimensions. Another finding relates to school feature construction. This refers to the process that principals and staff used to make their schools distinctive and different from other schools and included such features as the school‘s philosophy and the school-based curriculum. In seeking to understand the nature of teacher leadership in Chinese primary schools, this research confirms some findings identified in Western literature. For instance, teacher leaders in Shandong province were involved in decision-making, working with parents and community members, undertaking and planning professional development for staff, and mediating between colleagues (Day & Harris, 2002; Harrison & Killion, 2007; Leithwood, Jantzi, & Steinbach, 1999; Muijs & Harris, 2006; Smylie, 1992). However, some new aspects, such as a heightened awareness of the importance of accountability, emerge from this study. The study‘s conceptual framework also draws upon some significant insights from micropolitics and, in particular, two core constructs, namely cooperation and conflict (Blase, 1991), to explore the interactions between principals and teacher leaders. In this study, principals and teacher leaders employed exchange and facilitation as two strategies in cooperative processes; and they adopted enforcement and compromise in conflictive processes. Finally, the study‘s findings indicate that principals and teacher leaders were developing new ways of interacting in response to the requirements of significant education reform. Most principals were exercising their power through (Blase, 1991) their teacher leaders who in turn, were working in alignment with their principals to achieve the desired outcomes in schools. It was significant that this form of 'parallel leadership' (Crowther, Ferguson, & Ham, 2009) characterised the teacher leadership roles at this period of change to the curriculum in Mainland China.

A new approach to automatically producing schedules for cane railways

The scheduling of locomotive movements on cane railways has proven to be a very complex task. Various optimisation methods have been used over the years to try and produce an optimised schedule that eliminates or minimises bin supply delays to harvesters and the factory, while minimising the number of locomotives, locomotive shifts and cane bins, and also the cane age. This paper reports on a new attempt to develop an automatic scheduler using a mathematical model solved using mixed integer programming and constraint programming approaches and blocking parallel job shop scheduling fundamentals. The model solution has been explored using conventional constraint programming search techniques and found to produce a reasonable schedule for small-scale problems with up to nine harvesters. While more effort is required to complete the development of the full model with metaheuristic search techniques, the work completed to date gives confidence that the metaheuristic techniques will provide near optimal solutions in reasonable time.

Visual support for work assignment in process-aware information systems : framework formalisation and implementation

Process-aware information systems, ranging from generic workflow systems to dedicated enterprise information systems, use work-lists to offer so-called work items to users. In real scenarios, users can be confronted with a very large number of work items that stem from multiple cases of different processes. In this jungle of work items, users may find it hard to choose the right item to work on next. The system cannot autonomously decide which is the right work item, since the decision is also dependent on conditions that are somehow outside the system. For instance, what is “best” for an organisation should be mediated with what is “best” for its employees. Current work-list handlers show work items as a simple sorted list and therefore do not provide much decision support for choosing the right work item. Since the work-list handler is the dominant interface between the system and its users, it is worthwhile to provide an intuitive graphical interface that uses contextual information about work items and users to provide suggestions about prioritisation of work items. This paper uses the so-called map metaphor to visualise work items and resources (e.g., users) in a sophisticated manner. Moreover, based on distance notions, the work-list handler can suggest the next work item by considering different perspectives. For example, urgent work items of a type that suits the user may be highlighted. The underlying map and distance notions may be of a geographical nature (e.g., a map of a city or office building), but may also be based on process designs, organisational structures, social networks, due dates, calendars, etc. The framework proposed in this paper is generic and can be applied to any process-aware information system. Moreover, in order to show its practical feasibility, the paper discusses a full-fledged implementation developed in the context of the open-source workflow environment YAWL, together with two real examples stemming from two very different scenarios. The results of an initial usability evaluation of the implementation are also presented, which provide a first indication of the validity of the approach.