Iowa Emergency Response Plan, October, 2010

The State of Iowa has adopted a multi-hazard approach to managing the consequences of emergency/disaster response. Underlying this approach is the principle that a standard set of generic functional capabilities can be employed to effectively address a wide variety of hazardous conditions and categories of incidents, whether these have a known probability of occurring or are totally unforeseen. Therefore, to the greatest extent possible, the activities described and assigned in this plan are organized along functional lines first, rather than by agency, type of hazard, or type of incident. Contained in this section of the Plan, known as the ―Basic Plan,‖ are instructions, policies, and explanatory information related to many or all of the agencies/entities involved in emergency/ disaster response, as well as information about the legal and administrative foundations for the Plan, the state’s characteristics and significant hazards, lines of succession for the state’s chief executive, plan activation requirements, and the structure of the response organization.

Fast analysis of doping agents in urine by ultra-high-pressure liquid chromatography-quadrupole time-of-flight mass spectrometry I. Screening analysis.

The general strategy to perform anti-doping analyses of urine samples starts with the screening for a wide range of compounds. This step should be fast, generic and able to detect any sample that may contain a prohibited substance while avoiding false negatives and reducing false positive results. The experiments presented in this work were based on ultra-high-pressure liquid chromatography coupled to hybrid quadrupole time-of-flight mass spectrometry. Thanks to the high sensitivity of the method, urine samples could be diluted 2-fold prior to injection. One hundred and three forbidden substances from various classes (such as stimulants, diuretics, narcotics, anti-estrogens) were analysed on a C(18) reversed-phase column in two gradients of 9min (including two 3min equilibration periods) for positive and negative electrospray ionisation and detected in the MS full scan mode. The automatic identification of analytes was based on retention time and mass accuracy, with an automated tool for peak picking. The method was validated according to the International Standard for Laboratories described in the World Anti-Doping Code and was selective enough to comply with the World Anti-Doping Agency recommendations. In addition, the matrix effect on MS response was measured on all investigated analytes spiked in urine samples. The limits of detection ranged from 1 to 500ng/mL, allowing the identification of all tested compounds in urine. When a sample was reported positive during the screening, a fast additional pre-confirmatory step was performed to reduce the number of confirmatory analyses.

Le dialogisme intertextuel des contes des Grimm

Ute Heidmann Le dialogisme intertextuel des contes des Grimm Préalables pour une enquête à mener « Le caractère le plus important de l'énoncé, ou en tous les cas le plus ignoré, est son dialogisme, c'est-à-dire sa dimension intertextuelle », constate Todorov en référence à la conception dialogique du langage proposée par Bakthine. Cet article introductif postule que ce constat s'applique aussi aux contes des Grimm. En partant des recherches déjà menées sur Apulée, Straporola, Basile, Perrault, La Fontaine et Lhéritier*, il présente des concepts (réponse intertextuelle, reconfiguration générique et scénographie en trompe-l'oeil) dont il illustre l'efficacité pour l'analyse des Kinder- und Hausmärchen. L'analyse de la préface de 1812 montre que les Grimm créent une scénographie pour légitimer le genre des Kinder- und Hausmärchen en les présentant comme des contes "d'origine" qui auraient "poussé" comme des plantes dans leur région et qu'ils n'auraient fait que "collecter". Cette scénographie en trompe-l'oeil permet de dissimuler le fort impact des contes européens et notamment français sur les Kinder- und Hausmärchen. Leurs commentaires paratextuels permettent en revanche de retracer ces dialogues intertextuels qui ne se limitent pas à imiter les "voix déjà présentes dans le choeur complexe" des narrateurs des contes déjà racontés, mais qui créent des effets de sens nouveaux et significativement différents en guise de réponse aux "histoires ou contes du passé", comme l'avaient déjà fait Charles Perrault avant eux. *(dans Féeries 8 et Textualité et intertextualité des contes, Editions Classiques Garnier 2010) "The most important feature of the utterance, or at least the most neglected, is its dialogism, that is, its intertextual dimension" states Todorov in reference to Bakthin's dialogical conception of human speech. Ute Heidmann's introductory essay argues that this applies also to the Grimm's tales. Extending her former theoretical and intertextual investigation on Apuleius, Straporala, Basile, Perrault, La Fontaine and Lhéritier*, she proposes a series of conceptual options (as intertextual response, scenography, trompe l'oeil, generic reconfiguration, discursive strategy) that can efficiently be used for the work on the Kinder- und Hausmärchen, gesammelt durch die Brüder Grimm. The article shows how the Grimms skilfully construct a highly suggestive scenography and topography for the new generic form thus creating the idea of a genuine tale, having grown naturally in the earth of their own region and how it is efficiently used to dissimulate the strong impact of the European and namely the French fairy tales on the Grimm's tales. The extensive paratextual commentaries are shown to serve the same purpose. Once these strategies are "deconstructed" as such, the way is free to trace the very complex intertextual dialogues with already existing Italian, French, German tales, that underlie the Kinder- und Hausmärchen. Comparative textual analysis can then make us discover, that these dialogues are from just "imitating" "the many other voices already present in the complex chorus" of fairy tale writers and narrators: they actually create new and different meaning by responding to them. * (in Féeries 8, Textualité et intertextualité des contes, Classiques Garnier 2010)

Conjuring the Curse of Repetition or « Sleeping Beauty » Revamped : Angela Carter's Vampirella and The Lady of the House of Love

Abstract:This article illustrates Angela Carter's literary practice through her utilization of "Sleeping Beauty" in the radio play Vampirella and its prose variation The Lady of the House of Love. It argues that she vampirised European culture as she transfused old stories into new bodies to give them new life and bite. Carter's experiments with forms, genres and mediums in her vampire fiction capture the inherent hybridity of the fairy tale as it sheds new light on her main source, Charles Perrault's La Belle au bois dormant, bringing to the fore the horror and terror as well as the textual ambiguities of the French conte that were gradually obscured in favor of the romance element. Carter's vampire stories thus trace the 'dark' underside of the reception of the tale in Gothic fiction and in the subculture of comic books and Hammer films so popular in the 1970s, where the Sleeping Beauty figure is revived as a femme fatale or vamp who takes her fate in her own hands.Résumé:Cet article s'attache à montrer comment l'utilisation de La Belle au bois dormant dans deux histoires de vampire d'Angela Carter, la pièce radiophonique Vampirella et sa réécriture en prose The Lady of the House of Love, illustre la pratique littéraire de l'auteur, qui consiste à vampiriser la culture européenne et à transfuser les vieilles histoires dans de nouvelles formes, genres, et médias afin de leur donner une nouvelle vie. Le traitement du conte de fée permet d'aborder un aspect essentiel de la démarche créative de l'auteur, tout en offrant un éclairage inédit sur le conte de Perrault. En effet, Carter met en évidence les éléments inquiétants et l'atmosphère de menace qui caractérisent la deuxième partie du conte, tout en jouant sur les ambiguités du texte français souvent négligés au profit de la veine romanesque. A cet égard, ses histoires de vampire peuvent se lire comme une réflexion sur la réception 'obscure' du conte de fées dans la culture populaire, qui voit le personnage de la Belle au bois dormant prendre son destin en main et se réinventer en femme fatale ou vamp dans la bande dessinée et les séries B des années 1970.

A design science approach to support the assessment of disruptive technology : the Swiss mobile payment case

Abstract In this thesis we present the design of a systematic integrated computer-based approach for detecting potential disruptions from an industry perspective. Following the design science paradigm, we iteratively develop several multi-actor multi-criteria artifacts dedicated to environment scanning. The contributions of this thesis are both theoretical and practical. We demonstrate the successful use of multi-criteria decision-making methods for technology foresight. Furthermore, we illustrate the design of our artifacts using build and-evaluate loops supported with a field study of the Swiss mobile payment industry. To increase the relevance of this study, we systematically interview key Swiss experts for each design iteration. As a result, our research provides a realistic picture of the current situation in the Swiss mobile payment market and reveals previously undiscovered weak signals for future trends. Finally, we suggest a generic design process for environment scanning.

Changes in the use of broad-spectrum antibiotics after cefepime shortage: a time series analysis.

The original cefepime product was withdrawn from the Swiss market in January 2007, and replaced by a generic 10 months later. The goals of the study were to assess the impact of this cefepime shortage on the use and costs of alternative broad-spectrum antibiotics, on antibiotic policy, and on resistance of Pseudomonas aeruginosa towards carbapenems, ceftazidime and piperacillin-tazobactam. A generalized regression-based interrupted time series model assessed how much the shortage changed the monthly use and costs of cefepime and of selected alternative broad-spectrum antibiotics (ceftazidime, imipenem-cilastatin, meropenem, piperacillin-tazobactam) in 15 Swiss acute care hospitals from January 2005 to December 2008. Resistance of P. aeruginosa was compared before and after the cefepime shortage. There was a statistically significant increase in the consumption of piperacillin-tazobactam in hospitals with definitive interruption of cefepime supply, and of meropenem in hospitals with transient interruption of cefepime supply. Consumption of each alternative antibiotic tended to increase during the cefepime shortage and to decrease when the cefepime generic was released. These shifts were associated with significantly higher overall costs. There was no significant change in hospitals with uninterrupted cefepime supply. The alternative antibiotics for which an increase in consumption showed the strongest association with a progression of resistance were the carbapenems. The use of alternative antibiotics after cefepime withdrawal was associated with a significant increase in piperacillin-tazobactam and meropenem use and in overall costs, and with a decrease in susceptibility of P. aeruginosa in hospitals. This warrants caution with regard to shortages and withdrawals of antibiotics.

Learning about Bayesian networks for forensic interpretation : An example based on the "the problem of multiple propositions"

Both, Bayesian networks and probabilistic evaluation are gaining more and more widespread use within many professional branches, including forensic science. Notwithstanding, they constitute subtle topics with definitional details that require careful study. While many sophisticated developments of probabilistic approaches to evaluation of forensic findings may readily be found in published literature, there remains a gap with respect to writings that focus on foundational aspects and on how these may be acquired by interested scientists new to these topics. This paper takes this as a starting point to report on the learning about Bayesian networks for likelihood ratio based, probabilistic inference procedures in a class of master students in forensic science. The presentation uses an example that relies on a casework scenario drawn from published literature, involving a questioned signature. A complicating aspect of that case study - proposed to students in a teaching scenario - is due to the need of considering multiple competing propositions, which is an outset that may not readily be approached within a likelihood ratio based framework without drawing attention to some additional technical details. Using generic Bayesian networks fragments from existing literature on the topic, course participants were able to track the probabilistic underpinnings of the proposed scenario correctly both in terms of likelihood ratios and of posterior probabilities. In addition, further study of the example by students allowed them to derive an alternative Bayesian network structure with a computational output that is equivalent to existing probabilistic solutions. This practical experience underlines the potential of Bayesian networks to support and clarify foundational principles of probabilistic procedures for forensic evaluation.

El portafolios digital como herramienta para el desarrollo de competencias transversales en el alumnado.

Partiendo de un enfoque sobre las relaciones entre las tecnologías digitales como herramientas de mediación, se analiza el papel de un caso concreto, los portafolios electrónicos, para la mejora de competencias transversales en el ámbito universitario. Los resultados indican que se obtienen mejoras, como mínimo desde la percepción de los propios estudiantes, en algunas dimensiones ligadas a la capacidad para seleccionar y organizar información, así como a la planificación del aprendizaje.

The nine-year sustained cost-containment impact of swiss pilot physicians-pharmacists quality circles.

BACKGROUND: Six pioneer physicians-pharmacists quality circles (PPQCs) located in the Swiss canton of Fribourg (administratively corresponding to a state in the US) were under the responsibility of 6 trained community pharmacists moderating the prescribing process of 24 general practitioners (GPs). PPQCs are based on a multifaceted collaborative process mediated by community pharmacists for improving compliance with clinical guidelines within GPs' prescribing practices. OBJECTIVE: To assess, over a 9-year period (1999-2007), the cost-containment impact of the PPQCs. METHODS: The key elements of PPQCs are a structured continuous quality improvement and education process; local networking; feedback of comparative and detailed data regarding costs, drug choice, and frequency of prescribed drugs; and structured independent literature review for interdisciplinary continuing education. The data are issued from the community pharmacy invoices to the health insurance companies. The study analyzed the cost-containment impact of the PPQCs in comparison with GPs working in similar conditions of care without particular collaboration with pharmacists, the percentage of generic prescriptions for specific cardiovascular drug classes, and the percentage of drug costs or units prescribed for specific cardiovascular drugs. RESULTS: For the 9-year period, there was a 42% decrease in the drug costs in the PPQC group as compared to the control group, representing a $225,000 (USD) savings per GP only in 2007. These results are explained by better compliance with clinical and pharmacovigilance guidelines, larger distribution of generic drugs, a more balanced attitude toward marketing strategies, and interdisciplinary continuing education on the rational use of drugs. CONCLUSIONS: The PPQC work process has yielded sustainable results, such as significant cost savings, higher penetration of generics and reflection on patient safety, and the place of "new" drugs in therapy. The PPQCs may also constitute a solid basis for implementing more comprehensive collaborative programs, such as medication reviews, adherence-enhancing interventions, or disease management approaches.

El portafolios digital como herramienta para el desarrollo de competencias transversales en el alumnado.

Partiendo de un enfoque sobre las relaciones entre las tecnologías digitales como herramientas de mediación, se analiza el papel de un caso concreto, los portafolios electrónicos, para la mejora de competencias transversales en el ámbito universitario. Los resultados indican que se obtienen mejoras, como mínimo desde la percepción de los propios estudiantes, en algunas dimensiones ligadas a la capacidad para seleccionar y organizar información, así como a la planificación del aprendizaje.

Viral self-assembly as a thermodynamic process

The protein shells, or capsids, of nearly all spherelike viruses adopt icosahedral symmetry. In the present Letter, we propose a statistical thermodynamic model for viral self-assembly. We find that icosahedral symmetry is not expected for viral capsids constructed from structurally identical protein subunits and that this symmetry requires (at least) two internal switching configurations of the protein. Our results indicate that icosahedral symmetry is not a generic consequence of free energy minimization but requires optimization of internal structural parameters of the capsid proteins

Citrus asymmetric somatic hybrids produced via fusion of gamma-irradiated and iodoacetamide-treated protoplasts

The objective of this study was to produce citrus somatic asymmetric hybrids by fusing gamma-irradiated protoplasts with iodoacetamide-treated protoplasts. Protoplasts were isolated from embryogenic suspension cells of grapefruit (Citrus paradisi Macfad.) cultivars Ruby Red and Flame, sweet oranges (C. sinensis Osbeck) 'Itaboraí', 'Natal', Valencia', and 'Succari', from 'Satsuma' (C. unshiu Marcow.) and 'Changsha' mandarin (C. reticulata Blanco) and 'Murcott' tangor (C. reticulata x C. sinensis). Donor protoplasts were exposed to gamma rays and receptor protoplasts were treated with 3 mmol L-1 iodoacetamide (IOA), and then they were fused for asymmetric hybridization. Asymmetric embryos were germinated, and the resulting shoots were either grafted onto sour orange, rough lemon or 'Swingle' (C. paradisi x Poncirus trifoliata) x 'Sunki' mandarin rootstock seedlings, or rooted after dipping their bases in indol-butyric acid (IBA) solution. The products were later acclimatized to greenhouse conditions. Ploidy was analyzed by flow cytometry, and hybridity was confirmed by amplified fragment length polymorphism (AFLP) analysis of plantlet DNAsamples. The best treatment was the donor-recipient fusion combination of 80 Gy-irradiated 'Ruby Red' protoplasts with 20 min IOA-treated 'Succari' protoplasts. Tetraploid and aneuploid plants were produced. Rooting recalcitrance was solved by dipping shoots' stems in 3,000 mg L-1 IBA solution for 10 min.

A Framework for Building Hypercubes Using MapReduce

The European Space Agency's Gaia mission will create the largest and most precise three dimensional chart of our galaxy (the Milky Way), by providing unprecedented position, parallax, proper motion, and radial velocity measurements for about one billion stars. The resulting catalogue will be made available to the scientific community and will be analyzed in many different ways, including the production of a variety of statistics. The latter will often entail the generation of multidimensional histograms and hypercubes as part of the precomputed statistics for each data release, or for scientific analysis involving either the final data products or the raw data coming from the satellite instruments. In this paper we present and analyze a generic framework that allows the hypercube generation to be easily done within a MapReduce infrastructure, providing all the advantages of the new Big Data analysis paradigmbut without dealing with any specific interface to the lower level distributed system implementation (Hadoop). Furthermore, we show how executing the framework for different data storage model configurations (i.e. row or column oriented) and compression techniques can considerably improve the response time of this type of workload for the currently available simulated data of the mission. In addition, we put forward the advantages and shortcomings of the deployment of the framework on a public cloud provider, benchmark against other popular solutions available (that are not always the best for such ad-hoc applications), and describe some user experiences with the framework, which was employed for a number of dedicated astronomical data analysis techniques workshops.

A Framework for Building Hypercubes Using MapReduce

The European Space Agency's Gaia mission will create the largest and most precise three dimensional chart of our galaxy (the Milky Way), by providing unprecedented position, parallax, proper motion, and radial velocity measurements for about one billion stars. The resulting catalogue will be made available to the scientific community and will be analyzed in many different ways, including the production of a variety of statistics. The latter will often entail the generation of multidimensional histograms and hypercubes as part of the precomputed statistics for each data release, or for scientific analysis involving either the final data products or the raw data coming from the satellite instruments. In this paper we present and analyze a generic framework that allows the hypercube generation to be easily done within a MapReduce infrastructure, providing all the advantages of the new Big Data analysis paradigmbut without dealing with any specific interface to the lower level distributed system implementation (Hadoop). Furthermore, we show how executing the framework for different data storage model configurations (i.e. row or column oriented) and compression techniques can considerably improve the response time of this type of workload for the currently available simulated data of the mission. In addition, we put forward the advantages and shortcomings of the deployment of the framework on a public cloud provider, benchmark against other popular solutions available (that are not always the best for such ad-hoc applications), and describe some user experiences with the framework, which was employed for a number of dedicated astronomical data analysis techniques workshops.

An assurance-based model to holistically assess the information security posture

EXECUTIVE SUMMARY : Evaluating Information Security Posture within an organization is becoming a very complex task. Currently, the evaluation and assessment of Information Security are commonly performed using frameworks, methodologies and standards which often consider the various aspects of security independently. Unfortunately this is ineffective because it does not take into consideration the necessity of having a global and systemic multidimensional approach to Information Security evaluation. At the same time the overall security level is globally considered to be only as strong as its weakest link. This thesis proposes a model aiming to holistically assess all dimensions of security in order to minimize the likelihood that a given threat will exploit the weakest link. A formalized structure taking into account all security elements is presented; this is based on a methodological evaluation framework in which Information Security is evaluated from a global perspective. This dissertation is divided into three parts. Part One: Information Security Evaluation issues consists of four chapters. Chapter 1 is an introduction to the purpose of this research purpose and the Model that will be proposed. In this chapter we raise some questions with respect to "traditional evaluation methods" as well as identifying the principal elements to be addressed in this direction. Then we introduce the baseline attributes of our model and set out the expected result of evaluations according to our model. Chapter 2 is focused on the definition of Information Security to be used as a reference point for our evaluation model. The inherent concepts of the contents of a holistic and baseline Information Security Program are defined. Based on this, the most common roots-of-trust in Information Security are identified. Chapter 3 focuses on an analysis of the difference and the relationship between the concepts of Information Risk and Security Management. Comparing these two concepts allows us to identify the most relevant elements to be included within our evaluation model, while clearing situating these two notions within a defined framework is of the utmost importance for the results that will be obtained from the evaluation process. Chapter 4 sets out our evaluation model and the way it addresses issues relating to the evaluation of Information Security. Within this Chapter the underlying concepts of assurance and trust are discussed. Based on these two concepts, the structure of the model is developed in order to provide an assurance related platform as well as three evaluation attributes: "assurance structure", "quality issues", and "requirements achievement". Issues relating to each of these evaluation attributes are analysed with reference to sources such as methodologies, standards and published research papers. Then the operation of the model is discussed. Assurance levels, quality levels and maturity levels are defined in order to perform the evaluation according to the model. Part Two: Implementation of the Information Security Assurance Assessment Model (ISAAM) according to the Information Security Domains consists of four chapters. This is the section where our evaluation model is put into a welldefined context with respect to the four pre-defined Information Security dimensions: the Organizational dimension, Functional dimension, Human dimension, and Legal dimension. Each Information Security dimension is discussed in a separate chapter. For each dimension, the following two-phase evaluation path is followed. The first phase concerns the identification of the elements which will constitute the basis of the evaluation: ? Identification of the key elements within the dimension; ? Identification of the Focus Areas for each dimension, consisting of the security issues identified for each dimension; ? Identification of the Specific Factors for each dimension, consisting of the security measures or control addressing the security issues identified for each dimension. The second phase concerns the evaluation of each Information Security dimension by: ? The implementation of the evaluation model, based on the elements identified for each dimension within the first phase, by identifying the security tasks, processes, procedures, and actions that should have been performed by the organization to reach the desired level of protection; ? The maturity model for each dimension as a basis for reliance on security. For each dimension we propose a generic maturity model that could be used by every organization in order to define its own security requirements. Part three of this dissertation contains the Final Remarks, Supporting Resources and Annexes. With reference to the objectives of our thesis, the Final Remarks briefly analyse whether these objectives were achieved and suggest directions for future related research. Supporting resources comprise the bibliographic resources that were used to elaborate and justify our approach. Annexes include all the relevant topics identified within the literature to illustrate certain aspects of our approach. Our Information Security evaluation model is based on and integrates different Information Security best practices, standards, methodologies and research expertise which can be combined in order to define an reliable categorization of Information Security. After the definition of terms and requirements, an evaluation process should be performed in order to obtain evidence that the Information Security within the organization in question is adequately managed. We have specifically integrated into our model the most useful elements of these sources of information in order to provide a generic model able to be implemented in all kinds of organizations. The value added by our evaluation model is that it is easy to implement and operate and answers concrete needs in terms of reliance upon an efficient and dynamic evaluation tool through a coherent evaluation system. On that basis, our model could be implemented internally within organizations, allowing them to govern better their Information Security. RÉSUMÉ : Contexte général de la thèse L'évaluation de la sécurité en général, et plus particulièrement, celle de la sécurité de l'information, est devenue pour les organisations non seulement une mission cruciale à réaliser, mais aussi de plus en plus complexe. A l'heure actuelle, cette évaluation se base principalement sur des méthodologies, des bonnes pratiques, des normes ou des standards qui appréhendent séparément les différents aspects qui composent la sécurité de l'information. Nous pensons que cette manière d'évaluer la sécurité est inefficiente, car elle ne tient pas compte de l'interaction des différentes dimensions et composantes de la sécurité entre elles, bien qu'il soit admis depuis longtemps que le niveau de sécurité globale d'une organisation est toujours celui du maillon le plus faible de la chaîne sécuritaire. Nous avons identifié le besoin d'une approche globale, intégrée, systémique et multidimensionnelle de l'évaluation de la sécurité de l'information. En effet, et c'est le point de départ de notre thèse, nous démontrons que seule une prise en compte globale de la sécurité permettra de répondre aux exigences de sécurité optimale ainsi qu'aux besoins de protection spécifiques d'une organisation. Ainsi, notre thèse propose un nouveau paradigme d'évaluation de la sécurité afin de satisfaire aux besoins d'efficacité et d'efficience d'une organisation donnée. Nous proposons alors un modèle qui vise à évaluer d'une manière holistique toutes les dimensions de la sécurité, afin de minimiser la probabilité qu'une menace potentielle puisse exploiter des vulnérabilités et engendrer des dommages directs ou indirects. Ce modèle se base sur une structure formalisée qui prend en compte tous les éléments d'un système ou programme de sécurité. Ainsi, nous proposons un cadre méthodologique d'évaluation qui considère la sécurité de l'information à partir d'une perspective globale. Structure de la thèse et thèmes abordés Notre document est structuré en trois parties. La première intitulée : « La problématique de l'évaluation de la sécurité de l'information » est composée de quatre chapitres. Le chapitre 1 introduit l'objet de la recherche ainsi que les concepts de base du modèle d'évaluation proposé. La maniéré traditionnelle de l'évaluation de la sécurité fait l'objet d'une analyse critique pour identifier les éléments principaux et invariants à prendre en compte dans notre approche holistique. Les éléments de base de notre modèle d'évaluation ainsi que son fonctionnement attendu sont ensuite présentés pour pouvoir tracer les résultats attendus de ce modèle. Le chapitre 2 se focalise sur la définition de la notion de Sécurité de l'Information. Il ne s'agit pas d'une redéfinition de la notion de la sécurité, mais d'une mise en perspectives des dimensions, critères, indicateurs à utiliser comme base de référence, afin de déterminer l'objet de l'évaluation qui sera utilisé tout au long de notre travail. Les concepts inhérents de ce qui constitue le caractère holistique de la sécurité ainsi que les éléments constitutifs d'un niveau de référence de sécurité sont définis en conséquence. Ceci permet d'identifier ceux que nous avons dénommés « les racines de confiance ». Le chapitre 3 présente et analyse la différence et les relations qui existent entre les processus de la Gestion des Risques et de la Gestion de la Sécurité, afin d'identifier les éléments constitutifs du cadre de protection à inclure dans notre modèle d'évaluation. Le chapitre 4 est consacré à la présentation de notre modèle d'évaluation Information Security Assurance Assessment Model (ISAAM) et la manière dont il répond aux exigences de l'évaluation telle que nous les avons préalablement présentées. Dans ce chapitre les concepts sous-jacents relatifs aux notions d'assurance et de confiance sont analysés. En se basant sur ces deux concepts, la structure du modèle d'évaluation est développée pour obtenir une plateforme qui offre un certain niveau de garantie en s'appuyant sur trois attributs d'évaluation, à savoir : « la structure de confiance », « la qualité du processus », et « la réalisation des exigences et des objectifs ». Les problématiques liées à chacun de ces attributs d'évaluation sont analysées en se basant sur l'état de l'art de la recherche et de la littérature, sur les différentes méthodes existantes ainsi que sur les normes et les standards les plus courants dans le domaine de la sécurité. Sur cette base, trois différents niveaux d'évaluation sont construits, à savoir : le niveau d'assurance, le niveau de qualité et le niveau de maturité qui constituent la base de l'évaluation de l'état global de la sécurité d'une organisation. La deuxième partie: « L'application du Modèle d'évaluation de l'assurance de la sécurité de l'information par domaine de sécurité » est elle aussi composée de quatre chapitres. Le modèle d'évaluation déjà construit et analysé est, dans cette partie, mis dans un contexte spécifique selon les quatre dimensions prédéfinies de sécurité qui sont: la dimension Organisationnelle, la dimension Fonctionnelle, la dimension Humaine, et la dimension Légale. Chacune de ces dimensions et son évaluation spécifique fait l'objet d'un chapitre distinct. Pour chacune des dimensions, une évaluation en deux phases est construite comme suit. La première phase concerne l'identification des éléments qui constituent la base de l'évaluation: ? Identification des éléments clés de l'évaluation ; ? Identification des « Focus Area » pour chaque dimension qui représentent les problématiques se trouvant dans la dimension ; ? Identification des « Specific Factors » pour chaque Focus Area qui représentent les mesures de sécurité et de contrôle qui contribuent à résoudre ou à diminuer les impacts des risques. La deuxième phase concerne l'évaluation de chaque dimension précédemment présentées. Elle est constituée d'une part, de l'implémentation du modèle général d'évaluation à la dimension concernée en : ? Se basant sur les éléments spécifiés lors de la première phase ; ? Identifiant les taches sécuritaires spécifiques, les processus, les procédures qui auraient dû être effectués pour atteindre le niveau de protection souhaité. D'autre part, l'évaluation de chaque dimension est complétée par la proposition d'un modèle de maturité spécifique à chaque dimension, qui est à considérer comme une base de référence pour le niveau global de sécurité. Pour chaque dimension nous proposons un modèle de maturité générique qui peut être utilisé par chaque organisation, afin de spécifier ses propres exigences en matière de sécurité. Cela constitue une innovation dans le domaine de l'évaluation, que nous justifions pour chaque dimension et dont nous mettons systématiquement en avant la plus value apportée. La troisième partie de notre document est relative à la validation globale de notre proposition et contient en guise de conclusion, une mise en perspective critique de notre travail et des remarques finales. Cette dernière partie est complétée par une bibliographie et des annexes. Notre modèle d'évaluation de la sécurité intègre et se base sur de nombreuses sources d'expertise, telles que les bonnes pratiques, les normes, les standards, les méthodes et l'expertise de la recherche scientifique du domaine. Notre proposition constructive répond à un véritable problème non encore résolu, auquel doivent faire face toutes les organisations, indépendamment de la taille et du profil. Cela permettrait à ces dernières de spécifier leurs exigences particulières en matière du niveau de sécurité à satisfaire, d'instancier un processus d'évaluation spécifique à leurs besoins afin qu'elles puissent s'assurer que leur sécurité de l'information soit gérée d'une manière appropriée, offrant ainsi un certain niveau de confiance dans le degré de protection fourni. Nous avons intégré dans notre modèle le meilleur du savoir faire, de l'expérience et de l'expertise disponible actuellement au niveau international, dans le but de fournir un modèle d'évaluation simple, générique et applicable à un grand nombre d'organisations publiques ou privées. La valeur ajoutée de notre modèle d'évaluation réside précisément dans le fait qu'il est suffisamment générique et facile à implémenter tout en apportant des réponses sur les besoins concrets des organisations. Ainsi notre proposition constitue un outil d'évaluation fiable, efficient et dynamique découlant d'une approche d'évaluation cohérente. De ce fait, notre système d'évaluation peut être implémenté à l'interne par l'entreprise elle-même, sans recourir à des ressources supplémentaires et lui donne également ainsi la possibilité de mieux gouverner sa sécurité de l'information.