Reinforcing the security of corporate information resources:a critical review of the role of the acceptable use policy

Increasingly users are seen as the weak link in the chain, when it comes to the security of corporate information. Should the users of computer systems act in any inappropriate or insecure manner, then they may put their employers in danger of financial losses, information degradation or litigation, and themselves in danger of dismissal or prosecution. This is a particularly important concern for knowledge-intensive organisations, such as universities, as the effective conduct of their core teaching and research activities is becoming ever more reliant on the availability, integrity and accuracy of computer-based information resources. One increasingly important mechanism for reducing the occurrence of inappropriate behaviours, and in so doing, protecting corporate information, is through the formulation and application of a formal ‘acceptable use policy (AUP). Whilst the AUP has attracted some academic interest, it has tended to be prescriptive and overly focussed on the role of the Internet, and there is relatively little empirical material that explicitly addresses the purpose, positioning or content of real acceptable use policies. The broad aim of the study, reported in this paper, is to fill this gap in the literature by critically examining the structure and composition of a sample of authentic policies – taken from the higher education sector – rather than simply making general prescriptions about what they ought to contain. There are two important conclusions to be drawn from this study: (1) the primary role of the AUP appears to be as a mechanism for dealing with unacceptable behaviour, rather than proactively promoting desirable and effective security behaviours, and (2) the wide variation found in the coverage and positioning of the reviewed policies is unlikely to be fostering a coherent approach to security management, across the higher education sector.

A policy model for secure information flow

When a computer program requires legitimate access to confidential data, the question arises whether such a program may illegally reveal sensitive information. This paper proposes a policy model to specify what information flow is permitted in a computational system. The security definition, which is based on a general notion of information lattices, allows various representations of information to be used in the enforcement of secure information flow in deterministic or nondeterministic systems. A flexible semantics-based analysis technique is presented, which uses the input-output relational model induced by an attacker's observational power, to compute the information released by the computational system. An illustrative attacker model demonstrates the use of the technique to develop a termination-sensitive analysis. The technique allows the development of various information flow analyses, parametrised by the attacker's observational power, which can be used to enforce what declassification policies.

Environmental Information Access as a Security Risk

The United Sates was founded on the principles of freedom. Events in recent history have threatened the freedoms we as individuals enjoy. Notably, changes to government legislation and policies regarding access to environmentally sensitive information following September 11, 2001, are troubling. The government has struggled with a difficult balancing act. The public has the right of access to information, yet, information some view as sensitive or dangerous must be kept out of the hands of terrorists. This project examines and discusses the information access debate within the United States and how to best provide the public environmentally sensitive information.

Information and wildlife valuation: Experiments and policy

The authors use experimental surveys to investigate the association between individuals' knowledge of particular wildlife species and their stated willingness to allocate funds to conserve each. The nature of variations in these allocations between species (e.g., their dispersion) as participants' knowledge increases is examined. Factors influencing these changes are suggested. Willingness-to-pay allocations are found not to measure the economic value of species, but are shown to be policy relevant. The results indicate that poorly known species, e.g., in remote areas, may obtain relatively less conservation support than they deserve.

The Utility of the Human Security Agenda for Policy-makers

The idea of “human security” is gaining attention among policy-makers and security analysts. Little scholarly attention has been given to the questions of why states accept (or reject) a human security agenda or how such an agenda is incorporated into policy practices. The article suggests that a human security approach is most likely to be applied when both humanitarian and national interests combine. Yet when states or organisations adopt a human security approach, they often misjudge the complex and long-term commitment required of such an approach. There is also the potential for such an agenda to be manipulated to justify questionable courses of action. These issues frame an analysis of six recent case studies.

Evidence and information for health policy: a decade of change

Over the past decade or so, there has been increasing demand for greater clarity about the major causes of disease and injury, how these differentially affect populations, and how they are changing. In part, this demand has been motivated by resource constraints and a realisation that better health is possible with more informed allocation of resources. At the same time, there has been a change in the way population health and its determinants are quantified, with a much closer integration of the quantitative population sciences (such as epidemiology, demography and health economics) to strengthen and broaden the evidence base for healthcare policy.

Biblioteca para a realização de security token services

A família de especificações WS-* define um modelo de segurança para web services, baseado nos conceitos de claim, security token e Security Token Service (STS). Neste modelo, a informação de segurança dos originadores de mensagens (identidade, privilégios, etc.) é representada através de conjuntos de claims, contidos dentro de security tokens. A emissão e obtenção destes security tokens, por parte dos originadores de mensagens, são realizadas através de protocolos legados ou através de serviços especiais, designados de Security Token Services, usando as operações e os protocolos definidos na especificação WS-Trust. O conceito de Security Token Service não é usado apenas no contexto dos web services. Propostas como o modelo dos Information Cards, aplicável no contexto de aplicações web, também utilizam este conceito. Os Security Token Services desempenham vários papéis, dependendo da informação presente no token emitido. São exemplos o papel de Identity Provider, quando os tokens emitidos contêm informação de identidade, ou o papel de Policy Decision Point, quando os tokens emitidos definem autorizações. Este documento descreve o projecto duma biblioteca software para a realização de Security Token Services, tal como definidos na norma WS-Trust, destinada à plataforma .NET 3.5. Propõem-se uma arquitectura flexível e extensível, de forma a suportar novas versões das normas e as diversas variantes que os Security Token Services possuem, nomeadamente: o tipo dos security token emitidos e das claims neles contidas, a inferência das claims e os métodos de autenticação das entidades requerentes. Apresentam-se aspectos de implementação desta arquitectura, nomeadamente a integração com a plataforma WCF, a sua extensibilidade e o suporte a modelos e sistemas externos à norma. Finalmente, descrevem-se as plataformas de teste implementadas para a validação da biblioteca realizada e os módulos de extensão da biblioteca para: suporte do modelo associado aos Information Cards, do modelo OpenID e para a integração com o Authorization Manager.

Security prices and market transparency: the role of prior information

This paper analyzes the role of traders' priors (proper versus improper) on the implications of market transparency by comparing a pre-trade transparent market with an opaque market in a set-up based on Madhavan (1996). We show that prices may be more informative in the opaque market, regardless of how priors are modelled. In contrast, the comparison of market liquidity and volatility in the two market structures are affected by prior specification. Key words: Market microstructure, Transparency, Prior information

When ESDP confronts ENP: security sector reform as a bridge in the EU’s foreign policy

The European Neighbourhood Policy’s birth has taken place in parallel with the renewed momentum of the European Security and Defence Policy, which has launched 14 operations since 2003. Both policies’ instruments have converged in the neighbouring area covered by ENP: Georgia, in the East and the Palestinian Territories in the South. In both cases, the Security Sector Reform strategies have been the main focus for ESDP and an important objective for ENP. In this paper, two objectives are pursued: first, to assess the EU’s involvement in both cases in SSR terms; and second, to analyse whether the convergence of ESDP operations with a broader EU neighbourhood policy implies that the former has become an instrument for the a EU external action.

Public Policy and Ageing in Northern Ireland: Identifying Levers for Change

Public Policy and Ageing in Northern Ireland: Identifying Levers for Change Judith Cross, Policy Officer with the Centre for Ageing Research Development in Ireland (CARDI)��������Introduction Identifying a broad range of key public policy initiatives as they relate to age can facilitate discussion and create new knowledge within and across government to maximise the opportunities afforded by an ageing population. This article looks at how examining the current public policy frameworks in Northern Ireland can present opportunities for those working in this field for the benefit of older people. Good policy formulation needs to be evidence-based, flexible, innovative and look beyond institutional boundaries. Bringing together architects and occupational therapists, for example, has the potential to create better and more effective ways relevant to health, housing, social services and government departments. Traditional assumptions of social policy towards older people have tended to be medically focused with an emphasis on care and dependency. This in turn has consequences for the design and delivery of services for older people. It is important that these assumptions are challenged as changes in thinking and attitudes can lead to a redefinition of ageing, resulting in policies and practices that benefit older people now and in the future. Older people, their voices and experiences, need to be central to these developments. The Centre for Ageing Research and Development in Ireland The Centre for Ageing Research and Development in Ireland (CARDI) (1) is a not for profit organisation developed by leaders from the ageing field across Ireland (North and South) including age sector focused researchers and academics, statutory and voluntary, and is co-chaired by Professor Robert Stout and Professor Davis Coakley. CARDI has been established to provide a mechanism for greater collaboration among age researchers, for wider dissemination of ageing research information and to advance a research agenda relevant to the needs of older people in Ireland, North and South. Operating at a strategic level and in an advisory capacity, CARDI�۪s work focuses on promoting research co-operation across sectors and disciplines and concentrates on influencing the strategic direction of research into older people and ageing in Ireland. It has been strategically positioned around the following four areas: Identifying and establishing ageing research priorities relevant to policy and practice in Ireland, North and South;Promoting greater collaboration and co-operation on ageing research in order to build an ageing research community in Ireland, North and South;Stimulating research in priority areas that can inform policy and practice relating to ageing and older people in Ireland, North and South;Communicating strategic research issues on ageing to raise the profile of ageing research in Ireland, North and South, and its role in informing policy and practice. Context of Ageing in Ireland Ireland �۪s population is ageing. One million people aged 60 and over now live on the island of Ireland. By 2031, it is expected that Northern Ireland�۪s percentage of older people will increase to 28% and the Republic of Ireland�۪s to 23%. The largest increase will be in the older old; the number aged 80+ is expected to triple by the same date. However while life expectancy has increased, it is not clear that life without disability and ill health has increased to the same extent. A growing number of older people may face the combined effects of a decline in physical and mental function, isolation and poverty. Policymakers, service providers and older people alike recognise the need to create a high quality of life for our ageing population. This challenge can be meet by addressing the problems relating to healthy ageing, reducing inequalities in later life and creating services that are shaped by, and appropriate for, older people. Devolution and Structures of Government in Northern Ireland The Agreement (2) reached in the Multi-Party Negotiations in Belfast 1998 established the Northern Ireland Assembly which has full legislative authority for all transferred matters. The majority of social and economic public policy such as; agriculture, arts, education, health, environment and planning is determined by the Northern Ireland Assembly at Stormont. There are 11 Government Departments covering the main areas of responsibility with 108 elected Members of the Legislative Assembly (MLA�۪s). The powers of the Northern Ireland Assembly do not cover ��� reserved�۪ matters or ��� excepted�۪ matters . These are the responsibility of Westminster and include issues such as, tax, social security, policing, justice, defence, immigration and foreign affairs. Northern Ireland has 18 elected Members of Parliament (MP�۪s) to the House of Commons. Public Policy Context in Northern Ireland The economic, social and political consequence of an ageing population is a challenge for policy makers across government. Considering the complex and diverse causal factors that contribute to ageing in Northern Ireland, there are a number of areas of government policy at regional, national and international levels that are likely to impact in this area. International The Madrid International Plan of Action on Ageing (3) and the Research Agenda on Ageing for the 21st Century (4) provide important mechanisms for furthering research into ageing. The United Kingdom has signed up to these. The Madrid International Plan of Action on Ageing commits member states to a systematic review of the Plan of Action through Regional Implementation Strategies. The United Kingdom�۪s Regional Implementation Strategy covers Northern Ireland. National At National level, pension and social security are high on the agenda. The Pensions Act (5) became law in 2007 and links pensions increases with earnings as opposed to prices from 2012. Additional credits for people raising children and caring for older people to boost their pensions were introduced. Some protections are included for those who lost occupational pensions as a result of underfunded schemes being wound up before April 2005. In relation to State Pensions and benefits, this Act will bring changes to state pensions in future. The Act now places the Pension Credit element which is up-rated in line with or above earnings, on a permanent, statutory footing. Regional At regional level there are a number of age related public policy initiatives that have the potential to impact positively on the lives of older people in Northern Ireland. Some are specific to ageing such as the Ageing in an Inclusive Society (6) and others by their nature are cross-cutting such as Lifetime Opportunities: Governments Anti-Poverty Strategy for Northern Ireland (7). The main public policy framework in Northern Ireland is the Programme for Government: Building a Better Future, 2008-2011(PfG) (8) . The PfG, is the overarching high level policy framework for Northern Ireland and provides useful principles for ageing research and public policy in Northern Ireland. The PfG vision is to build a peaceful, fair and prosperous society in Northern Ireland, with respect for the rule of law. A number of Public Service Agreements (PSA) aligned to the PfG confirm key actions that will be taken to support the priorities that the Government aim to achieve over the next three years. For example objective 2 of PSA 7: Making Peoples�۪ Lives Better: Drive a programme across Government to reduce poverty and address inequality and disadvantage, refers to taking forward strategic action to promote social inclusion for older people; and to deliver a strong independent voice for older people. The Office of the First Minister and deputy First Minister (OFMDFM) have recently appointed an Interim Older People�۪s Advocate, Dame Joan Harbison to provide a focus for older peoples issues across Government. Ageing in an Inclusive Society is the cross-departmental strategy for older people in Northern Ireland and was launched in March 2005. It sets out the approach to be taken across Government to promote and support the inclusion of older people. The vision coupled with six strategic objectives form the basis of the action plans accompanying the strategy. The vision is: ���To ensure that age related policies and practices create an enabling environment, which offers everyone the opportunity to make informed choices so that they may pursue healthy, active and positive ageing.�۝ (Ageing in an Inclusive Society, Office of the First Minister and Deputy First Minister, 2005) Action planning and maintaining momentum across government in relation to this strategy has proved to be slower than anticipated. It is proposed to refresh this Strategy in line with Opportunity Age ��� meeting the challenges of ageing in the 21st Century (9). There are a number of policy levers elsewhere which can also be used to promote the positive aspects of an ageing society. The Investing for Health (10) and A Healthier Future:A 20 Year Vision for Health and Well-being in Northern Ireland (11), seek to ensure that the overall vision for health and wellbeing is achievable and provides a useful framework for ageing policy and research in the health area. These health initiatives have the potential to positively impact on the quality of life of older people and provide a useful framework for improving current policy and practice. In addition to public policy initiatives, the anti-discrimination frameworks in terms of employment in Northern Ireland cover age as well as a range of other grounds. Goods facilitates and services are currently excluded from the Employment Equality (age) Regulations (NI) 2006 (12). Supplementing the anti-discrimination measures, Section 75 of the Northern Ireland Act 1998 (13), unique to Northern Ireland, places a statutory obligation on public authorities in fulfilling their functions to promote equality of opportunity across nine grounds, one of which is age(14). This positive duty has the potential to make a real difference to the lives of older people in Northern Ireland. Those affected by policy decisions must be consulted and their interests taken into account. This provides an opportunity for older people and their representatives to participate in public policy-making, right from the start of the process. Policy and Research Interface ���Ageing research is vital as decisions in relation to policy and practice and resource allocation will be made on the best available information�۝. (CARDI�۪s Strategic Plan 2008-2011) As outlined earlier, CARDI has been established to bridge the gap to ensure that research reaches those involved in making policy decisions. CARDI is stimulating the ageing research agenda in Ireland through a specific research fund that has a policy and practice focus. My work is presently focusing on helping to build a greater awareness of the key policy levers and providing opportunities for those within research and policy to develop closer links. The development of this shared understanding by establishing these links between researchers and policy makers is seen as the best predictor for research utilization. It is important to acknowledge and recognise that researchers and policy makers operate in different institutional, political and cultural contexts. Research however needs to ���resonate�۪ with the contextual factors in which policy makers operate. Conclusions Those working within the public policy field recognise all too often that the development of government policies and initiatives in respect of age does not guarantee that they will result in changes in actual provision of services, despite Government recommendations and commitments. The identification of public policy initiatives as they relate to age has the potential to highlight persistent and entrenched difficulties that social policy has previously failed to address. Furthermore, the identification of these difficulties can maximise the opportunities for progressing these across government. A focus on developing effective and meaningful targets to ensure measurable outcomes in public policy for older people can assist in this. Access to sound, credible and up-to-date evidence will be vital in this respect. As well as a commitment to working across departmental boundaries to effect change. Further details: If you would like to discuss this paper or for further information about CARDI please contact: Judith Cross, Policy Officer, Centre for Ageing Research and Development in Ireland CARDI). t: +44 (0) 28 9069 0066; m: +353 (0) 867 904 171; e: judith@cardi.ie ; or visit our website at: www.cardi.ie References 1) Centre for Ageing Research and Development in Ireland (2008) Strategic Plan 2008-2011. Belfast. CARDI 2) The Agreement: Agreement Reached in the Multi-Party Negotiations. Belfast 1998 3) Madrid International Plan of Action on Ageing. http://www.un.org/ageing/ 4) UN Programme on Ageing (2007) Research Agenda on Ageing for the 21st Century: 2007 Update. New York. New York. UN Programme on Ageing and the International Association of Gerontology and Geriatrics. 5) The Pensions Act 2007 Chapter 22 6) Office of the First Minister and deputy First Minister (2005). Ageing in an Inclusive Society. Belfast. OFMDFM Central Anti-Poverty Unit. 7) Office of the First Minister and deputy First Minister (2005). Lifetime Opportunities: Government�۪s Anti-Poverty and Social Inclusion Strategy for Northern Ireland. Belfast. OFMDFM Central Anti-Poverty Unit. 8) Northern Ireland Executive (2008) Building a Better Future: Programme for Government 2008-2011. Belfast. OFMDFM Economic Policy Unit. 9) Department for Work and Pensions, (2005) Opportunity Age: Meeting the Challenges of Ageing in the 21 st Century. London. DWP. 10) Department of Health, Social Services and Public Safety (DHSS&PS) (2002) Investing for Health. Belfast. DHSS&PS. 11) Department of Health, Social Services and Public Safety (DHSS&PS) (2005) A Healthier Future:A 20 Year Vision for Health and Well-being in Northern Ireland Belfast. DHSS&PS. �� 12) The Employment Equality (Age) Regulations (Northern Ireland) 2006 SR2006 No.261 13) The Northern Ireland Act 1998, Part VII, S75 14) The nine grounds covered under S75 of the Northern Ireland Act are: gender, religion, race, sexual orientation, those with dependents, disability, political opinion, marital status and age.

OECD Review of Early Childhood Education and Care Policy in Ireland - Information Note

Thematic reviews of early childhood policy originated in response to a significant change in Western societies in the latter part of the 20th century. In effect, the care and education of young children in the industrialised world had shifted from the private to the public sphere, to become a shared responsibility of families and the state. Not only was the provision of equal access to women to the labour market an important goal in this development, but also the issue of giving every child a fair start in life and at school.