Understanding and Specifying Information Security Needs to Support the Delivery of High Quality Security Services

In this paper we present an approach for specifying and prioritizing information security requirements in organizations. It is important to prioritize security requirements since hundred per cent security is\ud not achievable and the limited resources available should be directed to satisfy the most important ones. We propose to explicitly link security requirements with the organization’s business vision, i.e. to provide business\ud rationale for security requirements. The rationale is then used as a basis for comparing the importance of different security requirements.\ud Furthermore we discuss how to integrate the aforementioned solution concepts into a service level management process for security services, which is an important step in IT Governance. We validate our approach by way of a focus group session

How can SMEs benefit from big data? Challenges and a path forward

Big data is big news, and large companies in all sectors are making significant advances in their customer relations, product selection and development and consequent profitability through using this valuable commodity. Small and medium enterprises (SMEs) have proved themselves to be slow adopters of the new technology of big data analytics and are in danger of being left behind. In Europe, SMEs are a vital part of the economy, and the challenges they encounter need to be addressed as a matter of urgency. This paper identifies barriers to SME uptake of big data analytics and recognises their complex challenge to all stakeholders, including national and international policy makers, IT, business management and data science communities. The paper proposes a big data maturity model for SMEs as a first step towards an SME roadmap to data analytics. It considers the ‘state-of-the-art’ of IT with respect to usability and usefulness for SMEs and discusses how SMEs can overcome the barriers preventing them from adopting existing solutions. The paper then considers management perspectives and the role of maturity models in enhancing and structuring the adoption of data analytics in an organisation. The history of total quality management is reviewed to inform the core aspects of implanting a new paradigm. The paper concludes with recommendations to help SMEs develop their big data capability and enable them to continue as the engines of European industrial and business success. Copyright © 2016 John Wiley & Sons, Ltd.Peer ReviewedPostprint (author's final draft

Scenarios for the development of smart grids in the UK: literature review

Smart grids are expected to play a central role in any transition to a low-carbon energy future, and much research is currently underway on practically every area of smart grids. However, it is evident that even basic aspects such as theoretical and operational definitions, are yet to be agreed upon and be clearly defined. Some aspects (efficient management of supply, including intermittent supply, two-way communication between the producer and user of electricity, use of IT technology to respond to and manage demand, and ensuring safe and secure electricity distribution) are more commonly accepted than others (such as smart meters) in defining what comprises a smart grid. It is clear that smart grid developments enjoy political and financial support both at UK and EU levels, and from the majority of related industries. The reasons for this vary and include the hope that smart grids will facilitate the achievement of carbon reduction targets, create new employment opportunities, and reduce costs relevant to energy generation (fewer power stations) and distribution (fewer losses and better stability). However, smart grid development depends on additional factors, beyond the energy industry. These relate to issues of public acceptability of relevant technologies and associated risks (e.g. data safety, privacy, cyber security), pricing, competition, and regulation; implying the involvement of a wide range of players such as the industry, regulators and consumers. The above constitute a complex set of variables and actors, and interactions between them. In order to best explore ways of possible deployment of smart grids, the use of scenarios is most adequate, as they can incorporate several parameters and variables into a coherent storyline. Scenarios have been previously used in the context of smart grids, but have traditionally focused on factors such as economic growth or policy evolution. Important additional socio-technical aspects of smart grids emerge from the literature review in this report and therefore need to be incorporated in our scenarios. These can be grouped into four (interlinked) main categories: supply side aspects, demand side aspects, policy and regulation, and technical aspects.

Reducing Biological Risks to Security: International Policy Recommendations for the Obama Administration

Summarizes discussions among biotechnology and life sciences experts on the risks of bioterrorism and threats to public health and agriculture. Assesses current efforts and makes recommendations for strengthening global prevention and response measures

Beyond Victimhood: Women's Peacebuilding in Sudan, Congo and Uganda

Peacebuilding cannot succeed if half the population is excluded from the process. Crisis Group's research in Sudan, Congo (DRC) and Uganda suggests that peace agreements, post-conflict reconstruction, and governance do better when women are involved. Women make a difference, in part because they adopt a more inclusive approach toward security and address key social and economic issues that would otherwise be ignored. But in all three countries, as different as each is, they remain marginalised in formal processes and under-represented in the security sector as a whole. Governments and the international community must do much more to support women peace activists

Cyber maturity in the Asia-Pacific Region 2014

Summary: To make considered, evidence-based cyber policy judgements in the Asia-Pacific there’s a need for better tools to assess the existing ‘cyber maturity’ of nations in the region. Over the past twelve months the Australian Strategic Policy Institute’s International Cyber Policy Centre has developed a Maturity Metric which provides an assessment of the regional cyber landscape. This measurement encompasses an evaluation of whole-of-government policy and legislative structures, military organisation, business and digital economic strength and levels of cyber social awareness. This information is distilled into an accessible format, using metrics to provide a snapshot by which government, business, and the public alike can garner an understanding of the cyber profile of regional actors

Study on cash transfers for seed security in humanitarian settings

This study examines the barriers and opportunities for cash transfers to be used to address seed security in humanitarian situations. Cash, while not a new approach, has gained momentum in recent years, especially with the emergence of the Cash Learning Partnership (CaLP) and humanitarian organizations’ commitments through the Grand Bargain.2 Historically, direct seed distribution (DSD) has dominated agricultural responses in emergencies. While effective in many situations, other modalities of addressing farmers’ needs have also proven to be effective, including seed and voucher fairs and, increasingly, cash transfer responses. The latter response typically provides farmers greater choices to make decisions about their seed needs and preferences. However, as with direct distribution and vouchers, cash can be a viable option but may not always be appropriate in every situation. The quality of seed is of paramount importance in choosing a response and has been an ongoing (and often contentious and political) discussion for decades. The results of this study advocate for a multi- stakeholder perspective on the quality of seed, while offering farmers the most flexible and most appropriate response possible for their given situation. In some cases, this will be cash transfers, but certainly not in all cases. A range of options offers the best chance for a successful, responsive, and appropriate program. The evidence base on outcomes from using cash for seed in humanitarian contexts is limited, however, reviewing a series of examples shows the breadth and range of options that are being explored. The cases from an array of organizations and countries including Iraq, Ethiopia, Nigeria, Uganda, Zambia, Zimbabwe, Malawi, Madagascar, and Guatemala, show that understanding the context is key to the response analysis and the choice of modality. Organizational approaches and previous experience also played a role in the choice of modality. The evidence to date shows that cash, in addition to complementary programming such as technical or business training, offers promise for seed security interventions. In addition, initiatives to support both the demand and supply side of the market have proven to be effective. Key findings include: 1. Market and needs assessments must include a seed component or SSSA to ensure a response designed to address the right problem, not the assumption. For markets, both informal and formal seed markets need to be included. 2. Good needs assessments, response analysis and program design help ensure participants’ spending cash on what implementers anticipate they will. 3. Program participants’ preferences on modalities are not consistently included in response analysis. 4. Mixed modalities (cash and vouchers, or cash and DSD) can broaden crop choices. 5. Quality screenings for seed are taking place; the quality of seed is important to organizations and project participants. 6. Cash for seed security interventions are limited, but growing in prevalence. 7. Providing cash plus complementary support is a promising practice for fostering seed security. 8. The nexus between relief and development is critical—designing projects with a longer-term development view: cash can prepare the way for farmers to continue true market engagement post-relief, spur business development in subsequent seasons, and offer opportunities for financial inclusion. 9. Supporting supply side to bring quality seed markets ‘closer’ to project participants should be considered along with demand-side interventions (cash, voucher and other). 10. Investment in preparedness provides a better foundation to implement impactful cash for seed security response. The risks, mitigating actions, opportunities and enablers for cash and seed security response are also explored. The study concludes with actionable and practical recommendations for further advancing the evidence base, as well as implementation suggestions. Continuous collaboration of key stakeholders in seed systems is essential to advance the discussions and action on the way forward with cash and seed systems