Enterprise information security policy assessment - an extended framework for metrics development utilising the goal-question-metric approach

Effective enterprise information security policy management requires review and assessment activities to ensure information security policies are aligned with business goals and objectives. As security policy management involves the elements of policy development process and the security policy as output, the context for security policy assessment requires goal-based metrics for these two elements. However, the current security management assessment methods only provide checklist types of assessment that are predefined by industry best practices and do not allow for developing specific goal-based metrics. Utilizing theories drawn from literature, this paper proposes the Enterprise Information Security Policy Assessment approach that expands on the Goal-Question-Metric (GQM) approach. The proposed assessment approach is then applied in a case scenario example to illustrate a practical application. It is shown that the proposed framework addresses the requirement for developing assessment metrics and allows for the concurrent undertaking of process-based and product-based assessment. Recommendations for further research activities include the conduct of empirical research to validate the propositions and the practical application of the proposed assessment approach in case studies to provide opportunities to introduce further enhancements to the approach

What to Fix? Distinguishing between design and non-design rules in automated tools

Technical debt---design shortcuts taken to optimize for delivery speed---is a critical part of long-term software costs. Consequently, automatically detecting technical debt is a high priority for software practitioners. Software quality tool vendors have responded to this need by positioning their tools to detect and manage technical debt. While these tools bundle a number of rules, it is hard for users to understand which rules identify design issues, as opposed to syntactic quality. This is important, since previous studies have revealed the most significant technical debt is related to design issues. Other research has focused on comparing these tools on open source projects, but these comparisons have not looked at whether the rules were relevant to design. We conducted an empirical study using a structured categorization approach, and manually classify 466 software quality rules from three industry tools---CAST, SonarQube, and NDepend. We found that most of these rules were easily labeled as either not design (55%) or design (19%). The remainder (26%) resulted in disagreements among the labelers. Our results are a first step in formalizing a definition of a design rule, in order to support automatic detection.Comment: Long version of accepted short paper at International Conference on Software Architecture 2017 (Gothenburg, SE

Tipping the scales: ambidexterity practices on e-HRM projects

Purpose: We examine and conceptualise the ways in which a balance can be achieved between optimising the efficiency and effectiveness of electronic HRM (e-HRM) systems for human resource management (HRM) and enabling innovation to occur during the system implementation. Design/methodology/approach: An intepretive case study of a UK local authority e-HRM system implementation is examined using the notion of ambidexterity as an analytical device. Ambidexterity relates to how an organisation develops the ability to operate efficiently in the now, while at the same time being able to adapt to environmental changes around and ahead of them in order to grow into the future. Findings: As an intra-organisational capability, ambidexterity is found to derive from the simultaneous interplay and balancing of dual capabilities: exploitation and exploration.. E-HRM exploitation concerned the capability to generate new knowledge with innovatory effects, created through the everyday practices performed by practitioners at all levels in the organisation. E-HRM exploration, rather than being a purposeful act, was found to be an accidental consequence of engaging in exploitation to maintain the status quo. Originality/value: There is a lack of detailed investigation of how organisations actually achieve ambidexterity, particularly in three under-researched areas: ambidexterity in the public sector, at HR functional level and e-HRM systems implementation. Bundling these three areas into an integrated examination allows us to both identify how exploitation and exploration play out in the ambidextrous practices of an e-HRM project and also to identify the dimensions of ambidexterity in balancing e-HRM work

An IMS-Learning Design Editor for a Higher Education Blended Learning Scenario

The IMS-Learning Design has been developed to support the creation of reusable and pedagogically neutral learning scenarios and content. Although it is especially suitable for eLearning, there is a lot of interest on using it in higher education blended learning scenarios. However there are some related key issues which must be managed such as cultural bias and the need for expensive human resources to design and develop specification compliant units of learning. They can be addressed by the design of ad-hoc editors supporting concrete learning design units of learning. We suggest some solutions to overcome these limitations, based on our experience designing the user interface of an IMS-LD compliant editor, GDUS+. We also explain our user centering approach, and give some conclusions about the benefits of using IMS-LD

Carving out new business models in a small company through contextual ambidexterity: the case of a sustainable company

Business model innovation (BMI) and organizational ambidexterity have been pointed out as mechanisms for companies achieving sustainability. However, especially considering small and medium enterprises (SMEs), there is a lack of studies demonstrating how to combine these mechanisms. Tackling such a gap, this study seeks to understand how SMEs can ambidextrously manage BMI. Our aim is to provide a practical artifact, accessible to SMEs, to operationalize BMI through organizational ambidexterity. To this end, we conducted our study under the design science research to, first, build an artifact for operationalizing contextual ambidexterity for business model innovation. Then, we used an in-depth case study with a vegan fashion small e-commerce to evaluate the practical outcomes of the artifact. Our findings show that the company improves its business model while, at the same time, designs a new business model and monetizes it. Thus, our approach was able to take the first steps in the direction of operationalizing contextual ambidexterity for business model innovation in small and medium enterprises, democratizing the concept. We contribute to theory by connecting different literature strands and to practice by creating an artifact to assist managemen

Information technology and performance management for build-to-order supply chains

En las siguientes líneas se plantea un artículo de reflexión que tiene en cuenta parte del marco teórico que sustenta la investigación titulada “Prácticas pedagógicas que promueven la competencia argumentativa escrita (CAE) en niños campesinos de los grados 4° y 5° del Centro Educativo Municipal La Caldera, Sede Principal de Pasto”, desarrollada en el año 2012. En él se contemplan los aportes de las ciencias del lenguaje y la comunicación, la teoría de la argumentación, la didáctica de la lengua escrita y los géneros discursivos, que dan cuenta de la necesidad de desarrollar la capacidad crítica en los estudiantes a través de la argumentación, lo cual implica transformar las prácticas pedagógicas para que se alejen de la transmisión de conocimientos y den paso a la comunicación, para que la palabra escrita sea apropiada de manera significativa