Towards a knowledge perspective in information security risk assessments - an illustrative case study

Many methodologies exist to assess the security risks associated with unauthorized leakage, modification and interruption of information for a given organisation. We argue that the traditional orientation of these methodologies, towards the identification and assessment of technical information assets, obscures key risks associated with the cultivation and deployment of organisational knowledge. Our argument is developed through an illustrative case study in which a well-documented methodology is applied to a complex data back-up process. This process is seen to depend, in subtle and often informal ways, on knowledge to sustain operational complexity, handle exceptions and make frequent interventions. Although typical information security methodologies identify people as critical assets, we suggest a new approach might draw on more detailed accounts of individual knowledge, collective knowledge, and their relationship to organisational processes. Drawing on the knowledge management literature, we suggest mechanisms to incorporate these knowledge-based considerations into the scope of information security risk methodologies.

Incorporating a knowledge perspective into security risk assessments

Purpose – Many methodologies exist to assess the security risks associated with unauthorized leakage, modification and interruption of information used by organisations. This paper argues that these methodologies have a traditional orientation towards the identification and assessment of technical information assets. This obscures key risks associated with the cultivation and deployment of organisational knowledge. The purpose of this paper is to explore how security risk assessment methods can more effectively identify and treat the knowledge associated with business processes.

Design/methodology/approach – The argument was developed through an illustrative case study in which a well-documented traditional methodology is applied to a complex data backup process. Follow-up interviews were conducted with the organisation’s security managers to explore the results of the assessment and the nature of knowledge “assets” within a business process.

Findings – It was discovered that the backup process depended, in subtle and often informal ways, on tacit knowledge to sustain operational complexity, handle exceptions and make frequent interventions. Although typical information security methodologies identify people as critical assets, this study suggests a new approach might draw on more detailed accounts of individual knowledge, collective knowledge and their relationship to organisational processes.

Originality/value – Drawing on the knowledge management literature, the paper suggests mechanisms to incorporate these knowledge-based considerations into the scope of information security risk methodologies. A knowledge protection model is presented as a result of this research. This model outlines ways in which organisations can effectively identify and treat risks around process knowledge critical to the business.

Does government linked companies (GLCs) perform better than non-GLCs? Evidence from Malaysian listed companies

The purpose of this paper is to examine the impact of an alternative ownership/control structure of corporate governance on firm performance. Specifically, we investigated the governance system of government linked companied (GLCs) in Malaysia. In this paper, we examine governance mechanism and firm performance of Malaysian GLCs and non-GLCs over a 11 year period from 1995 to 2005. We only select a sample of companies which are listed in Main Board. We chose a sample of 210 firms. We used Tobin’s Q which is an indicator of market performance is used as a proxy for company’s performances; meanwhile ROA is used to determine accounting performance. This paper is to determines whether after controlling firm specific characteristics such as corporate governance, agency cost, growth, risk and profitability, GLCs perform better than non-GLCs. Findings highlight that non-GLCs performance is better GLCs in term of corporate governance, and other firm specific characteristics. The relationship between ownership structure and firm performance has been issue of interest among academics, investors and policy makers as one of key issues in understanding the effectiveness of alternative governance systems where government ownership serves as a control mechanism.

Nonadditivity of faradaic currents and modification of double layer capacitance in the voltammetry of mixtures of ferrocene and ferrocenium salts in ionic liquids

Electrochemical studies on the Fc + e− Fc+ (Fc = ferrocene) process have been undertaken via the oxidation of Fc and reduction of Fc+ as the hexafluorophosphate (PF6−) or tetrafluoroborate (BF4−) salts and their mixtures in three ionic liquids (ILs) (1-butyl-1-methylpyrrolidinium bis[(trifluoromethyl)sulfonyl]imide, 1-butyl-3-methylimidazolium tetrafluoroborate, and 1-butyl-3-methylimidazolium hexafluorophosphate). Data obtained at macro- and microdisk electrodes using conventional dc and Fourier-transformed large-amplitude ac (FT-ac) voltammetry reveal that diffusion coefficients for Fc and Fc+ differ significantly and are a function of the Fc and Fc+ concentration, in contrast to findings in molecular solvents with 0.1 M added supporting electrolyte media. Thus, the Faradaic currents associated with the oxidation of Fc (Fc0/+) and reduction of FcPF6 or FcBF4 (Fc+/0) when both Fc and Fc+ are simultaneously present in the ILs differ from values obtained when individual Fc and Fc+ solutions are used. The voltammetry for both the Fc0/+ and Fc+/0 processes exhibited near-Nernstian behavior at a glassy carbon macrodisk electrode and a platinum microdisk electrode, when each process was studied individually in the ILs. As expected, the reversible formal potentials (E°′) and diffusion coefficients (D) at 23 ± 1 °C were independent of the electrode material and concentration. However, when Fc and FcPF6 or FcBF4 were both present, alterations to the mass transport process occurred and apparent D values calculated for Fc and Fc+ were found to be about 25−39% and 32−42% larger, respectively, than those determined from individual solutions. The apparent value of the double layer capacitance determined by FT-ac voltammetry from individual and mixed Fc and Fc+ conditions at the GC electrode was also a function of concentration. Double layer capacitance values increased significantly with the concentration of Fc and FcPF6 or FcBF4 when species were studied individually or simultaneously, but had a larger magnitude under conditions where both species were present. Variation in the structure of the ILs and hence mobilities of the ionic species, when Fc and FcPF6 or FcBF4 are simultaneously present, is considered to be the origin of the nonadditivity of the Faradaic currents and variation in capacitance.

Highly selective and sensitive DNA assay based on electrocatalytic oxidation of ferrocene bearing zinc(II)-cyclen complexes with diethylamine

A highly selective and sensitive electrochemical biosensor has been developed that detects DNA hybridization by employing the electrocatalytic activity of ferrocene (Fc) bearing cyclen complexes (cyclen = 1,4,7,10-tetraazacyclododecane, Fc[Zn(cyclen)H2O]2(ClO4)4 (R1), Fc(cyclen)2 (R2), Fc[Zn(cyclen)H2O](ClO4)2 (R3), and Fc(cyclen) (R4)). A sandwich-type approach, which involves hybridization of a target probe hybridized with the preimmobilized thiolated capture probe attached to a gold electrode, is employed to fabricate a DNA duplex layer. Electrochemical signals are generated by voltammetric interrogation of a Fc bearing Zn−cyclen complexes that selectively and quantitatively binds to the duplex layers through strong chelation between the cyclen complexes and particular nucleobases within the DNA sequence. Chelate formation between R1 or R3 and thymine bases leads to the perturbation of base-pair (A−T) stacking in the duplex structure, which greatly diminishes the yield of DNA-mediated charge transport and displays a marked selectivity to the presence of the target DNA sequence. Coupling the redox chemistry of the surface-bound Fc bearing Zn−cyclen complex and dimethylamine provides an electrocatalytic pathway that increases sensitivity of the assay and allows the 100 fM target DNA sequence to be detected. Excellent selectivity against even single-base sequence mismatches is achieved, and the DNA sensor is stable and reusable.

Nonadditivity of Faradaic currents and modification of capacitance currents in the voltammetry of mixtures of ferrocene and the cobaltocenium cation in protic and aprotic ionic liquids

Unexpected nonadditivity of currents encountered in the electrochemistry of mixtures of ferrocene (Fc) and cobaltocenium cation (Cc+) as the PF6 - salt has been investigated by direct current (dc) and Fourier-transformed alternating current (ac) cyclic voltammetry in two aprotic (1-butyl-3-methylimidazolium tetrafluoroborate and 1-butyl-3-methylimidazolium hexafluorophosphate) and three protic (triethylammonium formate, bis(2-hydroxyethyl)ammonium acetate, and triethylammonium acetate) ionic liquids (ILs). The voltammetry of the individual Fc0/+ and Cc+/0 couples always exhibits near-Nernstian behavior at glassy carbon and gold electrodes. As expected for an ideal process, the reversible formal potentials and diffusion coefficients at 23 ( 1 °C in each IL determined from measurement on individual Fc and Cc+ solutions were found to be independent of electrode material, concentration, and technique used for the measurement. However, when Fc and Cc+ were simultaneously present, the dc and ac peak currents per unit concentration for the Fc0/+ and Cc+/0 processes were found to be significantly enhanced in both aprotic and protic ILs. Thus, the apparent diffusion coefficient values calculated for Fc and Cc+ were respectively found to be about 25 and 35% larger than those determined individually in the aprotic ILs. A similar change in the Fc0/+ mass transport characteristics was observed upon addition of tetrabutylammonium hexafluorophosphate (Bu4NPF6), and the double layer capacitance also varied in distinctly different ways when Fc and Cc+ were present individually or in mixtures. Importantly, the nonadditivity of Faradaic current is not associated with a change in viscosity or from electron exchange as found when some solutes are added to ILs. The observation that the 1H NMR T1 relaxation times for the proton resonance in Cc+ also are modified in mixed systems implies that specific interaction with aggregates of the constituent IL ionic species giving rise to subtle structural changes plays an important role in modifying the mass transport, double layer characteristics, and dynamics when solutes of interest in this study are added to ILs. Analogous voltammetric changes were not observed in studies in organic solvent media containing 0.1 M added supporting electrolyte. Implications of the nonadditivity of Faradaic and capacitance terms in ILs are considered.

Electrooxidation of [(η5-C5H5)Fe(CO)2]2 as a probe of the nucleophilic properties of ionic liquid anions

The oxidative electrochemistry of [CpFe(CO)2]2, 1 (Cp = [η5-C5H5]–), was examined in detail in ionic liquids (ILs) composed of ions of widely varying Lewis acid−base properties. Cyclic voltammetric responses were strongly dependent on the nucleophilic properties of the IL anion, but all observations are consistent with the initial formation of 1+ followed by attack from the IL anion. In [NTf2]–-based ILs ([NTf2]– = bis(trifluoromethylsulfonyl)amide), the process shows nearly ideal chemical reversibility as the reaction between 1+ and [NTf2]– is very slow. This is highly significant, as 1+ is known to be highly susceptible to nucleophilic attack and its stability indicates a remarkable lack of coordinating ability of these ILs. In 1-methyl-3-butylimidazolium hexafluorophosphate, [bmim][PF6], the oxidation of 1 is still largely reversible, but there is more pronounced evidence of [PF6]– coordination. In contrast, 1 exhibits an irreversible two-electron oxidation process in a dicyanamide-based IL. This overall oxidation process is thought to proceed via an ECE mechanism, details of which are presented. Rate constants were estimated by fitting the experimental data to digital simulations of the proposed mechanism. The use of [NTf2]–-based ILs as a supporting electrolyte in CH2Cl2 was examined by using this solvent/electrolyte as a medium in which to perform bulk electrolyses of 1 and 1*, the permethylated analogue [Cp*Fe(CO)2]2 (Cp* = [η5-C5(CH3)5]–). These cleanly yielded the corresponding binuclear radical-cation species, 1+ and 1*+, which were subsequently characterized by electron paramagnetic resonance (EPR) spectroscopy. In addition to the above oxidation studies, the reduction of 1 was studied in each of the ILs; differences in cathodic peak potentials are attributed, in part, to ion-pairing effects. This study illustrates the wide range of electrochemical environments available with ILs and demonstrates their utility for the investigation of the redox properties of metal carbonyls and other organometallic compounds.

Macrocyclic Zn complexes for DNA detection

Researchers from Monash University have developed an electrocatalytic method based on a charge transport through DNA films, which allows detection of complementary over non-complementary and mismatched DNA sequences in fully hybridized duplexes.

Non-additivity of Faradaic and capacitance terms in ionic liquids

A study was conducted to evaluate the unexpected non-additivity of Faradaic and capacitance currents encountered in the case of ionic liquids. The results highlight that the non-additivity of Faradaic and capacitance currents should be considered in IL electrochemistry when multiple solutes are present.

Perceptions of corporate social and environmental accounting and reporting practices from accountants in Bangladesh

Purpose – The aim of this study is to elicit accountants' perceptions regarding corporate social and environmental accounting and reporting practices in a developing country such as Bangladesh.

Design/methodology/approach – Members of the Institute of Chartered Accountants of Bangladesh (ICAB) were surveyed to determine their perceptions on issues pertaining to social and environmental accounting and reporting practices in Bangladesh.

Findings – Whilst the findings show that accountants have positive attitudes toward corporate social and environmental accounting, progress is limited, with the absence of ICAB in making any noticeable effort to develop such practices.

Research implications – Unlike prior studies, the implications of this study suggest that without international influence, it is less likely that institutional forces in Bangladesh (ICAB and the government) would be effective in dealing with social and environmental accounting and reporting issues.

Originality/value – While prior studies advocate proactive roles of the accounting profession, this study argues that proactive roles are less likely to prevail in the context of Bangladesh without direct intervention from institutional and regulatory authorities in the international arena.

Corporate sustainability reporting of major commercial banks in line with GRI : Bangladesh evidence

Purpose – This paper aims to examine the tendencies of sustainability reporting by major commercial banks in Bangladesh in comparison with global sustainability reporting indicators outlined in the GRI framework together with banks' predilection toward reporting 16 GRI financial service sector (FSS) specific performance indicators.

Design/methodology/approach – Based on the GRI G3 guidelines, the paper investigated banks' reporting in five broad areas of sustainability, such as environment, labour practices and decent works, product responsibility, human rights and society. The 2008/2009 annual reports of 12 major commercial banks listed on Dhaka stock exchange were analysed and coded using a content-based technique.

Findings – The results show that information on society is addressed most extensively with regard to extent of reporting. This is followed by the disclosures prepared on decent works and labour practices and environmental issues. Furthermore, the disclosures of product responsibility information and the information for human rights are rather scarce in banks' reporting; on the subject of FSS-specific disclosures, only seven items out of 16 are disclosed by all sample banks.

Research limitations/implications – The findings of the study indicate that Bangladeshi commercial banks' social disclosures could develop in this style to become more holistic and over time (in association with the country's central bank involvement) to resemble a type of structured reporting to the point where they are properly labelled per se.

Originality/value – The study contributes to the social disclosure literature, in particular in a developing countries banking sector context, seeing as it disseminates evidence of the standing on social disclosures practices at the level of GRI with developing countries' banks data.