Securing small business - the role of information technology policy

As small and medium enterprises develop their capacity to trade  electronically, they and their trading partners stand to gain considerable benefit from the resulting transaction efficiencies and business  relationships. However, this raises the question of how well small business manages its IT security and the threats that security lapses may pose to the wider trading network. It is in the interest of all members of an electronic trading network, as well as governments, to assist smaller companies to secure their business data. This paper considers the relationship between IT security management and IT policy implementation among small  businesses involved in business-to-business eCommerce. It reports the results of a survey of 240 Australian small and medium businesses  operating in a cross-industry environment. The survey found a low level of strategic integration of eCommerce along with inadequate IT security among the respondents, despite the fact that 81% were doing business online and 97% identified their business data as confidential. Businesses which implemented satisfactory levels of security technologies were more likely than others to have an information technology policy within the organisation. The paper proposes a model that outlines the development of security governance and policy implementation for small and medium businesses.

Families as carers-information needs in a cultural context

While the important role of family as a carer has been increasingly recognised in healthcare service provision, particularly for patients with acute or chronic illnesses, the carer’s information needs have not been well understood and adequately supported by current health information systems. In order to effectively provide continuous and home-based care for the patient, a family relative as the primary carer needs sufficient access to medical knowledge and patient’s health information. There are two challenges. First, being a family relative, the primary carer is often a non-medical practitioner. Second, in Australia, many primary carers are family relatives of patients from a non-English speaking background. They are often seen as interpreters in clinical consultation sessions. Their roles and responsibilities as an interpreter and a carer are often mixed and blurry.
Therefore, their information needs are often seen as secondary to the patient or neglected. The primary carer’s information needs are currently not yet well understood.

This paper reports finding from a case study which examines an on-line diary of a husband-carer who provided support and care for his wife, who at the time of care was a lung cancer patient. The case study examines an ongoing learning process that the husband went through, identifies information needs by the carer and cultural factors which played an important role in the husband’s interpretation of information, decision making and provision of care. The finding extends a current model of the user’s information needs in the literature and suggests implications for further research into developing health information systems to meet information needs by the family carer.

Understanding informations systems outsourcing success and risks through the lens of cognitive biases

Because outsourcing of information systems (IS) is now widespread, it is generally assumed to be successful. It is also often assumed that outsourcing risks are easily managed. In this paper we adopt an “evidence based management” approach to first test these assumptions through a qualitative metaanalysis of academic studies into IS outsourcing outcomes. Our research reveals a shortage of reliable and valid evidence for outsourcing’s benefits, and for the level of risk involved. We then use data from a series of focus groups to explain the paradox of widespread adoption of a strategy with limited empirical support. These focus groups were interpreted through the lens of research on a
range of cognitive mechanisms and biases that are known to affect decision makers. We conclude that cognitive mechanisms that are likely to affect sourcing decisions include framing biases, cognitive dissonance, attribution error, and the “optimism”, “confirmation”, “disconfirmation” and “overconfidence” biases. Given the shortage of supporting evidence, and the potential for these biases to operate, we argue that researchers need to be more critical in their analysis of reports of the success and risks of IS outsourcing.

Attitudes of Australian information system managers against online attackers

Examines the attitudes of Australian IS/IT managers to the concept of cyber-vigilantism. Also, it explores the policies and procedures which have been set in place by various organisations to cope with concerted attacks on their systems. It finds that although a majority of managers do approve of the concept of “striking back”, only a minority are prepared for this eventuality. There appears to be complacency about the threats posed by organised, offensive attackers.

Information warfare: using the viable system model as a framework to attack organisations

Information is the glue in any organization. It is needed for policy, decision-making, control, and co-ordination. If an organisation's information systems are disrupted or destroyed, then damage to the whole inevitably follows. This paper uses a proven systemic, analytic framework the Viable System Model (VSM) - in a functionalist mode, to analyse the vulnerabilities of an organisation's information resources to this form of aggression. It examines the tactics available, and where they can be used to effectively attack an organisation.

International examples of large-scale systems-theory and practice IV: B2B e-commerce implementation in the Australian context

Two of the most commonly used classifications in IS research are the factor approach and the process approach. While many studies of IS implementation are undertaken using a factor approach, little research so far examines the process of e-commerce implementation, especially in relation to the implementation of e-commerce in business-to-business (B2B) relationships. A holistic understanding of implementation which combines both the factor and process approaches using a case study method, is suggested as particularly suitable because of its ability to capture the reality of e-commerce implementation in an organisation's natural environment and in much greater detail than is possible using one of these approaches alone. In this paper, therefore, we endeavour to contribute to what we perceive as a gap in the body of theory surrounding the implementation process in the business-to-business e-commerce literature. We describe the findings of multiple case studies involving ten major Australian e-commerce initiators. In addition to confirming our earlier finding of the importance of non-technical factors for the success of the implementation process we also present, through our case studies, the various management and business issues associated with the success or failure of B2B e-commerce implementation.

The importance of national ICT visions for information society in South East Asia

This paper addresses the question ‘How necessary is a national information and communications technology (ICT) strategy/vision for the development of an information society?’ For the purpose of this paper, ‘information society’ is reduced to two key dimensions: penetration of ICT, and access to government information on-line. In considering the question, the paper calls on data contained in the International Telecommunication Union’s (ITU) case studies of e-readiness in eight South East Asian (SEA) nations (Cambodia, Indonesia, Laos, Malaysia, Philippines, Singapore, Thailand and Vietnam). The background to the paper includes an overview of the SEA nations in terms of demographics and a discussion of the dilemma of government involvement in developing an information society in the light of the ‘small government mantra’ that has dominated in recent years. National ICT strategies visions of each nation are presented, followed by on overview of their information society policies and practices and their ICT penetration. The importance of the vision is then contrasted with other factors including level of development and national income. The conclusions draw attention to the importance of a vision irrespective of level of development and resource availability. In fact, for the least developed nations, poor infrastructure may be an opportunity to leap frog to the most advanced networks supporting an information society, if the vision is relevant, powerful and broadly held.