Rethinking Security Incident Response: The Integration of Agile Principles

In today's globally networked environment, information security incidents can inflict staggering financial losses on organizations. Industry reports indicate that fundamental problems exist with the application of current linear plan-driven security incident response approaches being applied in many organizations. Researchers argue that traditional approaches value containment and eradication over incident learning. While previous security incident response research focused on best practice development, linear plan-driven approaches and the technical aspects of security incident response, very little research investigates the integration of agile principles and practices into the security incident response process. This paper proposes that the integration of disciplined agile principles and practices into the security incident response process is a practical solution to strengthening an organization's security incident response posture.Comment: Paper presented at the 20th Americas Conference on Information Systems (AMCIS 2014), Savannah, Georgi

The role of organizational and individual variables in aircraft maintenance performance

Aviation maintenance has been identified by the FAA as an area where better efficiency is needed to cope with ever increasing workloads. However, aviation maintenance has also been identified as one of the major causes of accidents. Consequently, if further efficiencies are to be achieved, they cannot come at the cost of reduced safety margins. The present study employed a safety climate approach to assist in the development of a model that can help to explain morale, psychological health, turnover intentions, and error in the aviation maintenance environment. An instrument called the Maintenance Environment Survey was developed and administered to 240 personnel responsible for maintenance of a large military helicopter fleet. Data collected through the survey were used to develop a structural model that predicted 45 per cent of the variance in psychological health, 67 per cent of the variance in morale, 27 per cent of the variance in turnover intentions, and 44 per cent of the variance in self-reported maintenance errors. The model shows the pathways through which organizational level and individual level variables can influence work outcomes and leads to suggestions for interventions that can help to improve maintenance efficiency

Developing an Actuarial Risk Assessment to Inform the Decisions Made by Adult Protective Service Workers

In 2008, the New Hampshire Department of Health and Human Services Bureau of Elderly and Adult Services (BEAS) and the National Council on Crime and Delinquency (NCCD), with funding provided by the National Institute of Justice (NIJ), collaborated to construct an actuarial risk assessment to classify BEAS clients by their likelihood of elder maltreatment and/or self-neglect in the future. Studies in adult and juvenile corrections and child welfare have demonstrated that active service intervention with high risk clients can reduce criminal recidivism and the recurrence of child maltreatment (Wagner, Hull, & Luttrell, 1995; Eisenberg & Markley, 1987; Baird, Heinz, & Bemus, 1981). The purpose of this research was to examine a large set of individual and referral characteristics, determine their relationship to subsequent elder self-neglect and/or maltreatment, and develop an actuarial risk assessment for BEAS workers to complete at the end of an investigation to inform their case decisions.BEAS and NCCD pursued development of an actuarial risk assessment with the goal of reducing subsequent maltreatment of elderly and vulnerable adults who have been involved in an incident of self-neglect or maltreatment by another person (i.e., abuse, exploitation, or neglect). The actuarial risk assessment described in this report provides BEAS workers with a method to more accurately identify high risk clients and therefore more effectively target service interventions in an effort to protect their most vulnerable clients

Legal, Political, and Practical Obstacles to the Enforcement of Labor Laws in El Salvador

Conducted with partners in El Salvador, this study assesses the condition of workers and examines the legal framework designed to protect them. Researchers found that weaknesses in the institutional structure and favoritism toward foreign investors undermine basic labor rights. They make recommendations for the development of labor laws, the improvement of the legal system, and the strengthening of the union movement

Published incidents and their proportions of human error

The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.Purpose - The information security field experiences a continuous stream of information security incidents and breaches, which are publicised by the media, public bodies and regulators. Despite the need for information security practices being recognised and in existence for some time the underlying general information security affecting tasks and causes of these incidents and breaches are not consistently understood, particularly with regard to human error. Methodology - This paper analyses recent published incidents and breaches to establish the proportions of human error, and where possible subsequently utilises the HEART human reliability analysis technique, which is established within the safety field. Findings - This analysis provides an understanding of the proportions of incidents and breaches that relate to human error as well as the common types of tasks that result in these incidents and breaches through adoption of methods applied within the safety field. Originality - This research provides original contribution to knowledge through the analysis of recent public sector information security incidents and breaches in order to understand the proportions that relate to human erro

Crash dieting: The effects of eating and drinking on driving performance

Previous research suggests that compared to mobile phone use, eating and drinking while driving is more common and is seen as lower risk by drivers. Nevertheless, snacking at the wheel can affect vehicle control to a similar extent as using a hands-free phone, and is actually a causal factor in more crashes. So far, though, there has not been a controlled empirical study of this problem. In an effort to fill this gap in the literature, we used the Brunel University Driving Simulator to test participants on a typical urban scenario. At designated points on the drive, which coincided with instructions to eat or drink, a critical incident was simulated by programming a pedestrian to walk in front of the car. Whilst the driving performance variables measured were relatively unaffected by eating and drinking, perceived driver workload was significantly higher and there were more crashes in the critical incident when compared to driving normally. Despite some methodological limitations of the study, when taken together with previous research, the evidence suggests that the physical demands of eating and drinking while driving can increase the risk of a crash