Enterprise information security policy assessment : an extended framework for metrics development utilising the goal-question-metric approach

Effective enterprise information security policy management requires review and assessment activities to ensure information security policies are aligned with business goals and objectives. As security policy management involves the elements of policy development process and the security policy as output, the context for security policy assessment requires goal-based metrics for these two elements. However, the current security management assessment methods only provide checklist types of assessment that are predefined by industry best practices and do not allow for developing specific goal-based metrics. Utilizing theories drawn from literature, this paper proposes the Enterprise Information Security Policy Assessment approach that expands on the Goal-Question-Metric (GQM) approach. The proposed assessment approach is then applied in a case scenario example to illustrate a practical application. It is shown that the proposed framework addresses the requirement for developing assessment metrics and allows for the concurrent undertaking of process-based and product-based assessment. Recommendations for further research activities include the conduct of empirical research to validate the propositions and the practical application of the proposed assessment approach in case studies to provide opportunities to introduce further enhancements to the approach.

Predictors of young people’s charitable intentions to donate money : an extended theory of planned behavior perspective

An extended theory of planned behavior (TPB) was used to predict young people’s intentions to donate money to charities in the future. Students (N = 210; 18-24 years) completed a questionnaire assessing their attitude, subjective norm, perceived behavioral control [PBC], moral obligation, past behavior and intentions toward donating money. Regression analyses revealed the extended TPB explained 61% of the variance in intentions to donate money. Attitude, PBC, moral norm, and past behavior predicted intentions, representing future targets for charitable giving interventions.

The enterprise information security policy as a strategic business policy within the corporate strategic plan (extended abstract)

Information security has been recognized as a core requirement for corporate governance that is expected to facilitate not only the management of risks, but also as a corporate enabler that supports and contributes to the sustainability of organizational operations. In implementing information security, the enterprise information security policy is the set of principles and strategies that guide the course of action for the security activities and may be represented as a brief statement that defines program goals and sets information security and risk requirements. The enterprise information security policy (alternatively referred to as security policy in this paper) that represents the meta-policy of information security is an element of corporate ICT governance and is derived from the strategic requirements for risk management and corporate governance. Consistent alignment between the security policy and the other corporate business policies and strategies has to be maintained if information security is to be implemented according to evolving business objectives. This alignment may be facilitated by managing security policy alongside other corporate business policies within the strategic management cycle. There are however limitations in current approaches for developing and managing the security policy to facilitate consistent strategic alignment. This paper proposes a conceptual framework for security policy management by presenting propositions to positively affect security policy alignment with business policies and prescribing a security policy management approach that expounds on the propositions.

Clinical performance of a new silicone hydrogel contact lens over 6 months of extended wear

Purpose: Silicone hydrogel contact lenses (CLs) are becoming increasingly popular for daily wear (DW), extended wear (EW) and continuous wear (CW), due to their higher oxygen transmissibility compared to hydrogel CLs. The aim of this study was to investigate the clinical and subjective performance of asmofilcon A (Menicon Co., Ltd), a new surface treated silicone hydrogel CL, during 6-night EW over 6 months (M). Methods: A prospective, randomised, single-masked, monadic study was conducted. N=60 experienced DW soft CL wearers were randomly assigned to wear either asmofilcon A (test: Dk=129, water content (WC)=40%, Nanogloss surface treatment) or senofilcon A (control: Dk=103, WC=38%, PVP internal wetting agent, Vistakon, Johnson & Johnson Vision Care) CLs bilaterally for 6 M on an EW basis. A PHMB-preserved solution (Menicon Co., Ltd) was dispensed for CL care. Evaluations were conducted at CL delivery and after 1 week (W), 4 W, 3 M and 6 M of EW. At each visit, a range of objective and subjective clinical performance measures were assessed. Results: N=50 subjects (83%) successfully completed the study, with the majority of discontinuations due to loss to follow-up (n=3) or moving away/travel (n=5). N=2 subjects experienced adverse events; n=1 unilateral red eye with asmofilcon A and n=1 asymptomatic infiltrate with senofilcon A. There were no significant differences in high or low contrast distance visual acuity (HCDVA or LCDVA) between asmofilcon A and senofilcon A; however, LCDVA decreased significantly over time with both CL types (p<0.05). The two CL types did not vary significantly with respect to any of the objective and subjective measures assessed (p>0.05); CL fitting characteristics and CL surface measurements were very similar and mean bulbar and limbal redness measures were always less than grade 1.0. Superior palpebral conjunctival injection showed a statistically, but not clinically, significant increase over time with both CL types (p<0.05). Corneal staining did not vary significantly between asmofilcon A and senofilcon A (p>0.05), with low median gradings of less than 0.5 observed for all areas assessed. There were no solution-related staining reactions observed with either CL type. The asmofilcon A and senofilcon A CLs were both rated highly with respect to overall comfort, with medians of 14 or 15 hours of comfortable lens wearing time per day reported at each of the study visits (p>0.05). Conclusions: Over 6 months of EW, the asmofilcon A and senofilcon A CLs performed in a similar manner with respect to visual acuity, ocular health and CL performance measures. Some changes over time were observed with both CL types, including reduced LCDVA and increased superior palpebral injection, which warrant further investigation in longer-term EW studies. Asmofilcon A appeared to be equivalent in performance to senofilcon A.

Food and interaction design [Extended Abstract]

Food and interaction design presents an interesting challenge to the HCI community in attending to the pervasive nature of food, the socio-cultural differences in food practices and a changing global foodscape. To design for meaningful and positive interactions it is essential to identify daily food practices and the opportunities for the design of technology to support such practices. This workshop brings together a community of researchers and practitioners in human-food interaction to attend to the practical and theoretical difficulties in designing for human-food interactions in everyday life. Through a practical field study and workshop we explore themes of food experiences, health and wellbeing, sustainability and alternative food cultures.

Assessment of flood-related recharge to alluvial aquifers of an irrigated catchment following extended drought conditions using 3D visualisation and environmental tracers, Lockyer Valley, southeast Queensland, Australia.

The Lockyer Valley in southeast Queensland, Australia, hosts an economically significant alluvial aquifer system which has been impacted by prolonged drought conditions (~1997 to ~ 2009). Throughout this time, the system was under continued groundwater extraction, resulting in severe aquifer depletion. By 2008, much of the aquifer was at <30% of storage but some relief occurred with rains in early 2009. However, between December 2010 and January 2011, most of southeast Queensland experienced unprecedented flooding, which generated significant aquifer recharge. In order to understand the spatial and temporal controls of groundwater recharge in the alluvium, a detailed 3D lithological property model of gravels, sands and clays was developed using GOCAD software. The spatial distribution of recharge throughout the catchment was assessed using hydrograph data from about 400 groundwater observation wells screened at the base of the alluvium. Water levels from these bores were integrated into a catchment-wide 3D geological model using the 3D geological modelling software GOCAD; the model highlights the complexity of recharge mechanisms. To support this analysis, groundwater tracers (e.g. major and minor ions, stable isotopes, 3H and 14C) were used as independent verification. The use of these complementary methods has allowed the identification of zones where alluvial recharge primarily occurs from stream water during episodic flood events. However, the study also demonstrates that in some sections of the alluvium, rainfall recharge and discharge from the underlying basement into the alluvium are the primary recharge mechanisms of the alluvium. This is indicated by the absence of any response to the flood, as well as the observed old radiocarbon ages and distinct basement water chemistry signatures at these locations. Within the 3D geological model, integration of water chemistry and time-series displays of water level surfaces before and after the flood suggests that the spatial variations of the flood response in the alluvium are primarily controlled by the valley morphology and lithological variations within the alluvium. The integration of time-series of groundwater level surfaces in the 3D geological model also enables the quantification of the volumetric change of groundwater stored in the unconfined sections of this alluvial aquifer during drought and following flood events. The 3D representation and analysis of hydraulic and recharge information has considerable advantages over the traditional 2D approach. For example, while many studies focus on singular aspects of catchment dynamics and groundwater-surface water interactions, the 3D approach is capable of integrating multiple types of information (topography, geological, hydraulic, water chemistry and spatial) into a single representation which provides valuable insights into the major factors controlling aquifer processes.

Bending and blurring blended learning boundaries [Extended Abstract]

This presentation presents a blended learning model that provides greater opportunity for learning to be self-managed and personalized.

An extended theory of planned behavior intervention for older adults With Type 2 diabetes and cardiovascular disease

A randomized controlled trial evaluated the effectiveness of a 4-wk extended theory of planned behavior (TPB) intervention to promote regular physical activity and healthy eating among older adults diagnosed with Type 2 diabetes or cardiovascular disease (N = 183). Participants completed TPB measures of attitude, subjective norm, perceived behavioral control, and intention, as well as planning and behavior, at preintervention and 1 wk and 6 wk postintervention for each behavior. No significant time-by-condition effects emerged for healthy eating. For physical activity, significant time-by-condition effects were found for behavior, intention, planning, perceived behavioral control, and subjective norm. In particular, compared with control participants, the intervention group showed short-term improvements in physical activity and planning, with further analyses indicating that the effect of the intervention on behavior was mediated by planning. The results indicate that TPB-based interventions including planning strategies may encourage physical activity among older people with diabetes and cardiovascular disease.

The role of mindfulness in an extended TPB framework to understand drivers’ speeding intentions in school zones.

Many researchers have demonstrated the applicability of the Theory of Planned Behaviour (TPB) in predicting both intention to speed and actual speeding behaviour. However, there remain shortcomings in the explanatory power of the TPB, with research suggesting that even when drivers had reported an intention to not speed approximately 25% of drivers report behaviour that does not align with their intentions (i.e., they engaged in speeding, Elliott & Armitage, 2006). This research explores the role of a novel and promising construct, mindfulness, in enhancing the explanatory utility of the TPB for the understanding of drivers’ speeding behaviour in school zones. Mindfulness is a concept which has been widely used in studies of consciousness, but has recently been applied to the understanding of behaviour in other areas, including clinical psychology, physical activity, education and business. It has been suggested that mindfulness can also be applied to road safety, though its application within this context currently remains limited. This study was based on an e-survey of the general driving public (N=240). Overall, the results identified mindfulness as a construct which may aid understanding of the relationship between drivers’ intentions and behaviour. Theoretically, the findings may have implications in terms of identifying mindfulness as an additional explanatory construct within a TPB framework. In road safety practice, the findings suggest that efficacious countermeasures around school zones may be those that function to heighten drivers’ mindfulness, such as flashing lights and physical speed reduction measures.

Emotional arousal of beginning physics teachers during extended experimental investigations

Teachers often have difficulty implementing inquiry-based activities, leading to the arousal of negative emotions. In this multicase study of beginning physics teachers in Australia, we were interested in the extent to which their expectations were realized and how their classroom experiences while implementing extended experimental investigations (EEIs) produced emotional states that mediated their teaching practices. Against rhetoric of fear expressed by their senior colleagues, three of the four teachers were surprised by the positive outcomes from their supervision of EEIs for the first time. Two of these teachers experienced high intensity positive emotions in response to their students’ success. When student actions / outcomes did not meet their teachers’ expectations, frustration, anger, and disappointment were experienced by the teachers, as predicted by a sociological theory of human emotions (Turner, 2007). Over the course of the EEI projects, the teachers’ practices changed along with their emotional states and their students’ achievements. We account for similarities and differences in the teachers’ emotional experiences in terms of context, prior experience, and expectations. The findings from this study provide insights into effective supervision practices that can be used to inform new and experienced teachers alike.

How to design extended finite state machine test models in Java

This chapter is a tutorial that teaches you how to design extended finite state machine (EFSM) test models for a system that you want to test. EFSM models are more powerful and expressive than simple finite state machine (FSM) models, and are one of the most commonly used styles of models for model-based testing, especially for embedded systems. There are many languages and notations in use for writing EFSM models, but in this tutorial we write our EFSM models in the familiar Java programming language. To generate tests from these EFSM models we use ModelJUnit, which is an open-source tool that supports several stochastic test generation algorithms, and we also show how to write your own model-based testing tool. We show how EFSM models can be used for unit testing and system testing of embedded systems, and for offline testing as well as online testing.

Early adolescents’ helping behaviours when a friend is injured in a fight : the role of an extended Theory of Planned Behavior

This paper examines the role of first aid training in increasing adolescent helping behaviours when taught in a school-based injury prevention program, Skills for Preventing Injury in Youth (SPIY). The research involved the development and application of an extended Theory of Planned Behaviour (TPB), including “behavioural willingness in a fight situation,” “first aid knowledge” and “perceptions of injury seriousness”, to predict the relationship between participation in SPIY and helping behaviours when a friend is injured in a fight. From 35 Queensland high schools, 2500 Year 9 students (mean age = 13.5, 40% male) completed surveys measuring their attitudes, perceived behavioural control, subjective norms and behavioural intention, from the TPB, and added measures of behavioural willingness in a fight situation, perceptions of injury seriousness and first aid knowledge, to predict helping behaviours when a friend is injured in a fight. It is expected that the TPB will significantly contribute to understanding the relationship between participation in SPIY and helping behaviours when a friend is injured in a fight. Further analyses will determine whether the extension of the model significantly increases the variance explained in helping behaviours. The findings of this research will provide insight into the critical factors that may increase adolescent bystanders’ actions in injury situations.