A software audit framework for spyware risk mitigation

Our research described in this paper identifies a three part premise relating to the spyware paradigm. Firstly the data suggests spyware is proliferating at an exponential rate. Secondly ongoing research confirms that spyware produces many security risks – including that of privacy/confidentiality breaches via illicit data collection and reporting. Thirdly, anti-spyware controls are improving but are still considered problematic for several reasons. Our research then concludes that control measures to counter this very significant challenge should merit compliance auditing – and this auditing may effectively target the vital message passing performed by all illicit data collection spyware. Our research then evolves into an experiment involving the design and implementation of a software audit tool to conduct the desired compliance auditing. The software audit tool is positioned at the protected network’s gateway. The software audit tool uses ‘phone-home’ IP addresses as spyware signatures to detect the presence of the offending software. The audit tool also has the capability to differentiate legitimate message passing software from that produced by spyware – and ‘learn’ both new spyware signatures and new legitimate message passing profiles. The testing stage of the software has proven successful – albeit using very limited levels of network message passing variety and frequency.

A RELAÇÃO DAS PRÁTICAS DE GOVERNANÇA CORPORATIVA EM EMPRESAS PRESTADORAS DE SERVIÇOS DE PORTARIA E LIMPEZA NA REGIÃO DO ABC

Após escândalos em gestão como o caso da Enron, Parmalat e Xerox, as boas práticas da Governança Corporativa são consideradas uma ferramenta de auxilio na gestão, exigindo que a organização tenha mais transparência, equidade, responsabilidade corporativa e prestação de contas. Mediante a isto, este trabalho de pesquisa tem como objetivo principal verificar as práticas da governança corporativa que são praticadas em empresas de capital fechado consideradas pequenas e médias (PME`s) no segmento de portaria e limpeza e, se as boas ou algumas destas práticas trazem geração de valor para as organizações. Essa pesquisa será realizada nas cidades de Santo André, São Bernardo e São Caetano do Sul, Estado de São Paulo. A justificativa para este projeto de pesquisa se dá pelo fato de existir carência de estudos medindo diretamente as práticas de governança corporativa em empresas de serviço (PME s) e também porque a taxa de mortalidade entre as empresas prestadoras de serviços segundo dados do IBGE (2008) é considerada alta devido a vários fatores, sendo um em especial, mensurado como deficiência do gestor. A governança corporativa trata diretamente do controle interno e a gestão de risco da organização (MOTTA, SILVEIRA E BORGES 2006), portanto as falhas gerencias podem ser minimizadas com a adoção desta prática. As informações foram obtidas através de survey de questionários a partir de gestores das empresas estudadas previamente mapeados e escala com dados primários e quantitativos. Os resultados apresentaram que existe uma relação com a Governança Corporativa e Desempenho nas empresas da amostra. Os construtos responsabilidade corporativa, prestação de contas e transparência tiveram maior significância enquanto equidade apresentou sentido inverso com o desempenho.(AU)

Communities of implementation

The concept of communities of practice (CoPs) has rapidly gained ground in fields such as knowledge management and organisational learning since it was first identified by Lave and Wenger (1991) and Brown and Duguid (1991). In this article, we consider a related concept that we have entitled “communities of implementation.” Communities of implementation (CoIs) are similar to communities of practice in that they offer an opportunity for a collection of individuals to support each other and share knowledge in a dynamic environment and on a topic in which they share interest. In addition, and to differentiate them from CoPs, a community of implementation extends the responsibilities of a CoP by having as its focus the implementation of a programme of change. This may well extend to designing the change programme. Thus, whereas a main purpose of a CoP is to satisfy “a real need to know what each other knows” (Skyrme, 1999) in an informal way, we argue that a main purpose of a community of implementation is to “pool individual knowledge (including contacts and ways of getting things done) to stimulate collective enthusiasm in order to take more informed purposeful action for which the members are responsible.” Individual and collective responsibility and accountability for successfully implementing the actions/change programme is a key feature of a community of implementation. Without these pressures the members might lower the priority of implementation, allowing competing priorities to dominate their attention and resources. Without responsibility and accountability, the result is likely to be (at best) an organisation which has not begun a change programme, or (at worst) an organisation which is stuck halfway through another failing initiative. To achieve these additional objectives beyond those of a CoP, the CoI needs to provide heightened support to its members. In fact often the members will collectively strategise the development and implementation of the change programme they are leading in the organisation. Other concepts similar to CoPs have appeared in the literature, for example “communities of knowing” (Boland & Tenkasi, 1995), but none have a specific focus on implementation. Perhaps the closest example of a CoI, as suggested by our definition, is reported by Karsten, Lyytinen, Hurskainen, and Koskelainen (2001) who describe a CoP in a paper machinery manufacturer which seems to have the necessary focus on implementation. The theoretical aspects of this article will explore the relationship between CoPs and CoIs, and the needs for different arrangements for a CoI. The practical aspect of this article will consist of a report on a case study of a CoI that was successful in its implementation of a programme of change that aimed to improve its organisation’s knowledge management activities. Over two years the CoI implemented a suite of complementary actions across the organisation. These actions transformed the organisation and moved it towards achieving its ‘core values’ and overall objectives. The article will explore: the activities that formed and gelled the community, the role of the community in the implementation of actions, and experiences from key members of this community on its success and potential improvements.

Corporate governance in the NHS

Corporate Governance - which is concerned with the management and direction of organizations at the very highest level - has grown in importance in the private sector, from where the concept largely derives, as a result mainly of malpractice. As a consequence, interest in the topic has grown steadily, largely on the part of Governments, regulators and academics. Managerial reforms of the NHS introduced refashioned District Health Authorities (DHAs) which mimic the role and structure of the Company board. The research reported in this thesis is an assessment of corporate governance in post reform English DHAs. The research examines the characteristics of directors, the extent to which corporate governance can be empirically demonstrated, the extent to which it is consistent with the Working for Patients reforms, and, the consequences of such changes for the development of directors and of DHAs. The research also considers the relevance of the findings to other parts of the NHS and public sector. The work draws upon the conceptual framework established by Tricker (1984; also Hilmer & Tricker 1991) with detailed survey and case study findings concerned with issues of direction, executive management, supervision and accountability. The findings from this new research make an important contribution to the policy debate and to the literature(s) concerned.

A sociological analysis of four police consultative committees in Birmingham

Consultation between the police and the community was a recommendation of Lord Scarman in his report into the Brixton riots in 1981. By 1982 the West Midlands Police Authority had established local consultative committees on each police sub-division. This thesis is a study of four Police Consultative Committees in Birmingham, using qualitative methods of attendance at committee meetings and interviews with committee members. The research was carried out between 1990 and 1992 - ten years after formal consultation was established, and aimed to examine the relationship between the micro social processes of the committees and key sociological theoretical concepts. The analysis of the four committees contextualises them within the social and political parameters of urban policing in the late 1980s. Each committee is taken as a case study to highlight the following aspects of consultation:- relations between the police and black communities; membership, representation and accountability; responding to community conflict; crime prevention agencies and networks of social control. The findings are then generalised to the sociological theoretical concepts of hegemony, legitimation, community conflict and social control. The central proposition of this thesis is that, whilst these committees are not fulfilling the role Lord Scarman envisaged for them (of involving local community representatives in policing strategies and policies), they do have important policing and political roles. It is argued that they offer a platform from which senior police officers can engage local people into supporting policing objectives without actually involving them in determining those objectives. Furthermore, such committees have political symbolism in that they enable the government to be seen to be responding to the issues of accountability and relations between the police and black communities following the urban disorders, without actually devolving any statutory powers to the community.

A cross-national investigation into the marketing department's influence within the firm:toward initial empirical generalizations

An ongoing strong debate within the marketing discipline concerns the role of marketing within the firm. It has been frequently reported that the marketing function is in a deep decline. Marketing executives and academics alike are interested in the antecedents of this decline and potential performance consequences of this decline. Recent academic research have started investigations on this important topic. Using studies in single countries innovativeness and accountability of the marketing department has been reported as major antecedents of the influence of the marketing department within the organization. Academic research, however, does not provide convincing evidence for a direct link between this influence and business performance. Instead it shows that market orientation is a crucial intervening variable, as marketing department influence is positively related market orientation, which subsequently positively related to business performance. As noted prior research, however, studies firms in single countries. In this article we execute a cross-national study on the antecedents and performance consequences of marketing department influence in order to derive initial empirical generalizations. This study is executed in seven Western-oriented countries, including USA, UK, The Netherlands, Germany, Sweden, Israel and Australia. The study heavily builds on the framework developed in the 2009 Journal of Marketing article of Verhoef and Leeflang. This framework is tested per country and subsequently meta-analytic tests are used to derive initial empirical generalizations. An important empirical generalization is that innovativeness, the customer-connecting capabilities, and accountability of the marketing department are positively related to marketing department influence. Interestingly, a second initial generalization is that creativity of the marketing negative induces less influence. Our results also show a third empirical generalization in that firms having a CEO with a marketing background tend to have more influential marketing departments. Confirming prior research a fourth initial empirical generalization is that MD influence measures and market orientation are positively related. Market orientation is subsequently positively related to business performance. Our most important generalization is, however, that MD influence is positively related to business performance. Hence, beyond striving to become market oriented, firms should also aim to have strong marketing departments. These departments can create a stronger focus on the customer and can also coordinate marketing efforts. In order to become more influential marketing departments should: (1) acquire innovative capabilities, (2) be more connected to customers, (3) invest in accountability, and (4) be careful with be careful being too creative.

Stakeholders' perceptions of Corporate Social Reporting (CSR) in Bangladesh

The paper addresses a significant gap in the CSR literature indicated by the lack of studies that examine non-managerial stakeholders’ perceptions of the practice. Recent calls in the CSR literature have emphasised the importance of giving voice to non-managerial stakeholders groups. The research examines the perceptions of a wide group of stakeholders in the context of a developing country, Bangladesh. A series of semi-structured interviews were conducted with various stakeholder groups including employees, consumers, pressure groups, regulatory body and accounting professionals. The current practice of CSR in Bangladesh is interpreted in terms of ‘largely cosmetic responses’, ‘marketing strategy’ and ‘response to pressures from international markets’. Additionally, while some of the interviewees sharply criticised the current process of imposing social accounting codes/standards on developing countries which fail to consider the important local socio-economic context, the findings suggest that there is overwhelming support for mandatory externally verified CSR reporting based on the principles of peoples’ right to know, full disclosure/completeness, and relevance, which are anchored in the broader principles of transparency and accountability.

Ethical reporting in Islami Bank Bangladesh Limited (1983-2010)

The main aim of this study is to undertake a critical examination of the ethical and developmental performance of an Islamic bank as communicated in its annual reports over a period of 28 years (1983-2010). Islami Bank Bangladesh Limited's (IBBL hereafter) ethical performance and disclosures are further analyzed through interviews conducted with the bank's senior management. The key findings include an overall increase in ethical disclosures during the study period. However, the focus on various stakeholders' needs has varied over time reflecting the evolving nature of the Islamic finance industry over the last three decades. Based on a secular economy, IBBL focused in the first two decades on the "Particular" Shariah compliance disclosure as a way of establishing its reputation and differentiating itself from conventional banks in a dual banking system. Post 2005, the ethical performance and disclosure shifted to more "Universal" disclosures such as sustainability, charity, employees, and community related disclosures signaling responsible conduct and the bank's adoption of a "wider stakeholder approach." However the bank is still failing to provide full disclosure on certain significant categories such as sources and uses of disposable income, thereby contradicting the principles of full and comprehensive disclosure and accountability. In addition, the structure of IBBL's investment portfolio reveals an overreliance on debt-based financial instruments and a shortcoming in fulfilling the developmental and social objectives of Islamic finance. This is evidenced by the "qualified" Shariah Supervisory Board reports that the bank consistently received. This research provides further evidence that Islamic banking and Finance in its current practices reflect the "global" and the "local" influences in an era dominated by global conventional finance. © 2014 Springer Science+Business Media Dordrecht.

Interactive data in financial reporting:the construction of the non-professional investor

The Securities and Exchange Commission (SEC) in the United States and in particular its immediately past chairman, Christopher Cox, has been actively promoting an upgrade of the EDGAR system of disseminating filings. The new generation of information provision has been dubbed by Chairman Cox, "Interactive Data" (SEC, 2006). In October this year the Office of Interactive Disclosure was created(http://www.sec.gov/news/press/2007/2007-213.htm). The focus of this paper is to examine the way in which the non-professional investor has been constructed by various actors. We examine the manner in which Interactive Data has been sold as the panacea for financial market 'irregularities' by the SEC and others. The academic literature shows almost no evidence of researching non-professional investors in any real sense (Young, 2006). Both this literature and the behaviour of representatives of institutions such as the SEC and FSA appears to find it convenient to construct this class of investor in a particular form and to speak for them. We theorise the activities of the SEC and its chairman in particular over a period of about three years, both following and prior to the 'credit crunch'. Our approach is to examine a selection of the policy documents released by the SEC and other interested parties and the statements made by some of the policy makers and regulators central to the programme to advance the socio-technical project that is constituted by Interactive Data. We adopt insights from ANT and more particularly the sociology of translation (Callon, 1986; Latour, 1987, 2005; Law, 1996, 2002; Law & Singleton, 2005) to show how individuals and regulators have acted as spokespersons for this malleable class of investor. We theorise the processes of accountability to investors and others and in so doing reveal the regulatory bodies taking the regulated for granted. The possible implications of technological developments in digital reporting have been identified also by the CEO's of the six biggest audit firms in a discussion document on the role of accounting information and audit in the future of global capital markets (DiPiazza et al., 2006). The potential for digital reporting enabled through XBRL to "revolutionize the entire company reporting model" (p.16) is discussed and they conclude that the new model "should be driven by the wants of investors and other users of company information,..." (p.17; emphasis in the original). Here rather than examine the somewhat illusive and vexing question of whether adding interactive functionality to 'traditional' reports can achieve the benefits claimed for nonprofessional investors we wish to consider the rhetorical and discursive moves in which the SEC and others have engaged to present such developments as providing clearer reporting and accountability standards and serving the interests of this constructed and largely unknown group - the non-professional investor.

From bilateral to trilateral governance in local government contracting in France

In France, the tradition of contracting out local public services has been predominantly one of partnership and co-operation rather than competition and antagonism. However, in recent years the traditional approach has come under intense criticism, something which has far-reaching implications for public-private governance. Adopting the socio-legal approach to the study of contract governance set out by Peter Vincent-Jones, this paper explores the discrepancy between descriptions of a traditional French approach to local public services governance, in which the bilateral values of trust and co-operation are emphasized, and a new discourse of local public services governance, which argues for detailed contract planning and close contract monitoring. It is argued that this discrepancy reveals the beginning of a shift in the governance of public service exchange relationships from relatively noncontractual and bilateral to relatively contractual and trilateral. The French case highlights the importance of regulatory and accountability frameworks to the manner in which contracting parties perceive exchange governance. © Blackwell Publishing Ltd. 2005.

A kockázat szerepe a könyvvizsgálatban = The role of risk in external audits

A tanulmány a kockázatnak és a kockázatok felmérésének az éves beszámolók (pénzügyi kimutatások) könyvvizsgálatban betöltött szerepével foglalkozik. A modern könyvvizsgálat – belső és külső korlátainál fogva – nem létezhet a vizsgált vállalkozás üzleti kockázatainak felmérése nélkül. Olyannyira igaz ez, hogy a szakma alapvető szabályait lefektető nemzeti és nemzetközi standardok is kötelező jelleggel előírják az ügyfelek üzleti kockázatainak megismerését. Mindez nem öncélú tevékenység, hanem éppen ez jelenti a könyvvizsgálat kiinduló magját: a kockázatbecslés – a tervezés részeként – az audit végrehajtásának alapja, és egyben vezérfonala. A szerző először bemutatja a könyvvizsgálat és a kockázat kapcsolatának alapvonásait, azt, hogy miként jelenik meg egyáltalán a kockázat problémája a könyvvizsgálatban. Ezt követően a különféle kockázatalapú megközelítéseket tárgyalja, majd néhány főbb elem kiragadásával ábrázolja a kockázatkoncepció beágyazódását a szakmai szabályozásba. Végül – mintegy az elmélet tesztjeként – bemutatja a kockázatmodell gyakorlati alkalmazásának néhány aspektusát. ______ The study examines the role of risk and the assessment of risks in the external audit of financial statements. A modern audit – due to its internal and external limitations – cannot exist without the assessment of the business risk of the entity being audited. This is not a l’art pour l’art activity but rather the very core of the audit. It is – as part of the planning of the audit – a guideline to the whole auditing process. This study has three main sections. The first one explains the connection between audit and risk, the second discusses the different risk based approaches to auditing and the embeddedness of the risk concept into professional regulation. Finally – as a test of theory – some practical aspects of the risk model are discussed through the lens of former empirical research carried out mostly in the US. The conclusion of the study is that though risk based models of auditing have many weaknesses they still result in the most effective and efficient high quality audits.

Teacher talk: A community of colleagues that values practical teacher knowledge through sharing experiences

The purpose of this study was to describe the experiences of five educators participating in a teacher-initiated learning community that valued practical teacher knowledge. Connelly and Clandinin (2000) argued that practical teacher knowledge grew out of experience through interaction in the professional knowledge landscape. Collaboration that promoted teacher learning was the foundation to effective school change (Wood, 1997). This teacher-initiated learning community consisted of members who had equal status and collaborated by participating in discourse on curriculum and instruction. The collegiality of the community fostered teacher professionalism that improved practice and benefited the school. This study focused on the following research questions: (1) What was the experience of these five educators in this learning community? (2) What did these five individuals understand about the nature of practical teacher knowledge? (3) According to the participants, what was the relationship between teacher empowerment and effective school change? ^ The participants were chosen because each voluntarily attended this teacher-initiated learning community. Each participant answered questions regarding the experience during three semi-structured tape-recorded interviews. The interviews were transcribed, and significant statements of meaning were extracted. Using a triangulation of ideas that were common to at least three of the participants ensured the trustworthiness of the analysis. These statements were combined to describe what was experienced and how the participants described their experience. The emerging themes were the characteristics of and the relationships, methods, conditions, and environment for the teachers. The teachers described how a knowledge base of practical teacher knowledge was gained as a spirit of camaraderie developed. The freedom that the teachers experienced to collaborate and learn fostered new classroom practice that affected school change as student interaction and productivity increased. ^ The qualitative analysis of this study provided a description of a learning community that valued practical teacher knowledge and fostered professional development. This description was important to educational stakeholders because it demonstrated how practical teacher knowledge was gained during the teachers' daily work. By sharing every day experiences, the teacher talk generated collaboration and accountability that the participants felt improved practice and fostered a safe, productive learning environment for students. ^

TEACHNJ: An Evaluation of Two Years Implementation

The Teacher Effectiveness and Accountability for the Children of New Jersey (TEACHNJ) Act was adopted by the New Jersey legislature in August 2012 with the intent to raise student achievement by improving the overall quality of instruction. As a result of this act, new teacher evaluation systems are being introduced in school districts across the state in an effort to more accurately assess teacher performance. The new teacher evaluations will be based on multiple classroom observations as well as the academic achievement of their students as measured on standardized tests. In addition, professional development opportunities are likely to change under this legislation, with schools customizing professional development programs to more effectively meet the needs of their teachers. The overarching question that informs our research is what impact will TEACH NJ have on the overall value of teacher evaluations and the quality of professional development opportunities offered to teachers. Data collected through survey research presents the pre-implementation practices (2011-2012 school year) as well as one year post-implementation practices (2013-2014) taking place in school districts throughout New Jersey. The findings reflect teachers’ perceptions of the value of the current teacher evaluation practices, the quality of the current professional development opportunities and the value the school administration places on teacher evaluations.

The Effects of Civic Education on Political Knowledge

Traditionally political knowledge was regarded as an important potential outcome for civic education efforts. Most of the currently available research, however, tends to focus on non-cognitive goals, despite the fact that studies repeatedly have shown that political knowledge is an important resource for enlightened and engaged citizenship. In this article, we investigate whether civic education contributes to political knowledge levels. The analysis is based on the Belgian Political Panel Survey, a two year panel study among 2,988 Belgian late adolescents. The analysis shows that experiences with group projects at school contribute significantly to political knowledge levels two years later on. Furthermore, we can observe an interaction effect as those who are already most knowledgeable about politics, gain most from these group projects. Classes about politics, on the other hand, did not have an effect on knowledge levels. In the discussion, it is argued that civic education can have strong cognitive effects, but that these effects are not always related to classical civic education efforts.

Common Bound: The Small Groups of Methodism

The system of small groups John Wesley established to promote a proper life of discipleship in early Methodist converts was, in many respects, the strength of the Methodist movement. Those who responded to Wesley’s initial invitation to “flee the wrath to come” were organized into large gatherings called “societies,” which were then subdivided into smaller bands, class meetings, select societies, and penitent bands. The smaller groups gave Wesley the opportunity, through a system of appointed leaders, to keep track of the spiritual progress of every member in his movement, which grew to tens of thousands by the time of his death in 1791. As Methodism shifted from renewal movement to institutional church in the nineteenth century, however, growth slowed, and participation in such groups declined rapidly. By the early twentieth century, classes and bands were virtually extinct in every sector of Methodism save the African-American tradition. In recent years, scholars in various sectors of the Wesleyan tradition, particularly David Lowes Watson and Kevin Watson, have called for a recovery of these small groups for purposes of renewal in the church. There is no consensus, however, concerning what exactly contributed to the vitality of these groups during Wesley’s ministry.

Over the last century, sociological studies of group dynamics have revealed three common traits that are crucial to highly functioning groups: interdependence created by the existence of a common goal, interaction among group members that is “promotive” or cooperative in nature, and high levels of feedback associated with personal responsibility and individual accountability. All three of these were prevalent in the early Methodist groups. Interdependence existed around a shared goal, which for Wesley and the Methodists was holiness. That interdependence was cooperative in nature; individuals experienced the empowering grace of God as they each pursued the goal in the company of fellow pilgrims. Finally, the groups existed for purposes of feedback and accountability as individuals took responsibility both for themselves and others as they progressed together toward the goal of holy living. Wesley seemed to instinctively understand the essential nature of each of these characteristics in maintaining the vitality of the movement when he spoke of the importance of preserving the “doctrine, spirit and discipline” of early Methodism. Analysis of some of the present-day attempts to restore Wesley’s groups reveals frequent neglect to one or more of these three components. Perhaps most critical to recovering the vitality of the early Methodist groups will be reclaiming the goal of sanctification and coming to a consensus on what its pursuit means in the present day.