Information Security Strategy in Organisations: Review, Discussion and Future Research Directions

Dependence on information, including for some of the world’s largest organisations such as governments and multi-national corporations, has grown rapidly in recent years. However, reports of information security breaches and their associated consequences continue to indicate that attacks are still escalating on organisations when conducting these information-based activities. Clearly, more research is needed to better understand how organisations should formulate strategy to secure their information. Through a thematic review of academic security literature, we (1) analyse the antecedent conditions that motivate the potential adoption of a comprehensive information security strategy, (2) the current perspectives of strategy and (3) the yields and benefits that could be enjoyed post-adoption. Our contributions include a definition of information security strategy. We argue for a paradigm shift to extend from internally-focussed protection of organisation-wide information towards a strategic view that considers the inter-organisational level. Our findings are then used to suggest future research directions

Managing enterprises and ERP systems:a contingency model for the enterprization of operations

Purpose: The purpose of this paper is to investigate enterprise resource planning (ERP) systems development and emerging practices in the management of enterprises (i.e. parts of companies working with parts of other companies to deliver a complex product and/or service) and identify any apparent correlations. Suitable a priori contingency frameworks are then used and extended to explain apparent correlations. Discussion is given to provide guidance for researchers and practitioners to deliver better strategic, structural and operational competitive advantage through this approach; coined here as the "enterprization of operations". Design/methodology/approach: Theoretical induction uses a new empirical longitudinal case study from Zoomlion (a Chinese manufacturing company) built using an adapted form of template analysis to produce a new contingency framework. Findings: Three main types of enterprises and the three main types of ERP systems are defined and correlations between them are explained. Two relevant a priori frameworks are used to induct a new contingency model to support the enterprization of operations; known as the dynamic enterprise reference grid for ERP (DERG-ERP). Research limitations/implications: The findings are based on one longitudinal case study. Further case studies are currently being conducted in the UK and China. Practical implications: The new contingency model, the DERG-ERP, serves as a guide for ERP vendors, information systems management and operations managers hoping to grow and sustain their competitive advantage with respect to effective enterprise strategy, enterprise structure and ERP systems. Originality/value: This research explains how ERP systems and the effective management of enterprises should develop in order to sustain competitive advantage with respect to enterprise strategy, enterprise structure and ERP systems use

ERP Implementation and Interoperability Growth as Organization Improvement Agents in Public Administration Further Development

Further public administration development depends on numerous various influences - stakeholders\u27 and public needs, so when planned to be developed, implemented or improved, they have to be carefully considered. ERP and/or other system need to be incorporated according to specific conditions. Interoperability represents strong support for implementation, integration or further development for public administration. This paper aims for contribution to awareness growth and platform for further work. Considering various case studies, ERP implementation, interoperability, critical success factors and contingency approach, paper aims for further development in this area. ERP becomes a platform for further ICT development towards quantum computing

Towards inter-organizational Enterprise Architecture Management - Applicability of TOGAF 9.1 for Network Organizations Completed Research Paper

ABSTRACT Network organizations and inter-organizational systems (IOS) have recently been the subjects of extensive research and practice. Various papers discuss technical issues as well as several complex business considerations and cultural issues. However, one interesting aspect of this context has only received adequate coverage so far, namely the ability of existing Enterprise Architecture Management (EAM) frameworks to address the diverse challenges of inter-organizational collaboration. The relevance of this question is grounded in the increasing significance of IOS and the insight that many organizations model their architecture using such frameworks. This paper addresses the question by firstly conducting a conceptual literature review in order to identify a set of challenges. An EAM framework was then chosen and its ability to address the challenges was evaluated. The chosen framework is The Open Group Architecture Framework (TOGAF) 9.1 and the analysis conducted with regard to the support of network organizations highlights which issues it deals with. TOGAF serves as a good basis to solve the challenges of "Process and Data Integration" and "Infrastructure and Application Integration". Other areas such as the "Organization of the Network Organization" need further support. Both the identification of challenges and the analysis of TOGAF assist academics and practitioners alike to identify further research topics as well as to find documentation related to inter-organizational problems in EAM

A utilidade da análise fundamental na previsão de mais-valias

Dissertação apresentada para cumprimento dos requisitos necessários à obtenção do grau de em Contabilidade e FinançasEm virtude da grave crise económica e financeira atual e devido à grande incerteza que paira nos mercados financeiros, investir em Bolsa nem sempre gera retorno. Por isso, a análise financeira é útil para informar os investidores. Quando estes pretendem adquirir títulos em Bolsa fazem-no, na sua vasta maioria, duma forma racional e baseados em determinados fatores. No presente estudo, efetuou-se uma pesquisa exploratória, bibliográfica, documental e quantitativa. A metodologia aplicada baseou-se, sobretudo, em Samaras et al. (2005, citados por Pavlou et al., 2007). Como ponto de partida, efetuou-se uma reflexão sobre como utilizar o tema da análise fundamental. Depois, procurou-se um desenvolvimento que representasse uma forma diferente de abordar e analisar o tema da análise fundamental e a previsão de mais-valias. A análise fundamental implica a análise do desempenho das empresas, sobretudo, através das suas demonstrações financeiras. Entre as técnicas de apoio à análise estão os indicadores económico-financeiros que constituem um dos suportes à tomada de decisão de compra de títulos na bolsa de valores. Partindo deste pressuposto, calculou-se um conjunto de indicadores chave relativos às empresas incluídas no índice geral português (PSIgeral) e no setor da construção, no período 2010 a 2013. Posteriormente, analisaram-se as taxas de crescimento médias desses indicadores, visando atingir o objetivo geral do estudo que consiste em verificar, entre as empresas da amostra, qual a que constitui o melhor ativo para investimento com um potencial de valorização e criação de mais-valias para o investidor utilizando-se como instrumento básico os indicadores económicos, financeiros e de mercado. Verificou-se que entre as empresas indicadas e no período analisado, a que constitui o melhor ativo para investimento com um potencial de valorização e criação de mais-valias para o investidor é a Mota Engil. Ao nível da taxa média de crescimento anual foi a empresa que, em média, obteve melhores desempenhos nos indicadores selecionados da liquidez, financiamento, rendibilidade e mercado. No entanto a Teixeira Duarte, também, apresentou taxas médias de crescimento anual que permitem ter em consideração esta empresa na constituição da carteira de ativos para investimento e criação de mais-valias para o investidor. Considera-se que o impacto do trabalho, em termos subjetivos, foi positivo.Abstract: Due to the current severe economic and financial crisis and due to the great uncertainty that exists in the financial markets, investing in the stock market does not always generate returns. Thus, financial analysis is useful to inform investors. When they intend to invest in securities on the Stock Exchange, they do it, in their vast majority, in a rational way based on certain factors. In the present study, we have made an exploratory, bibliographic, documental and quantitative research. The applied methodology is based, mainly, on Samaras et al. (2005, referred by Pavlou et al., 2007). As a starting point, we have reflected on how to use the fundamental analysis issue. Then, we seek a development that represents a different approach and analyze of the topic of fundamental analysis and forecasting value added. Fundamental analysis implies the companies’ performance analysis, primarily, by means of their financial statements. Among the techniques that support the analysis are the economic and financial indicators that constitute one of the anchors of investment decision making on the Stock Exchange. Under this assumption, we calculated a set of key indicators relating to the companies included in the Portuguese general index (PSIgeral) and in the construction sector, in the period from 2010 a 2013. Subsequently, we analyzed the average growth rates of these indicators, in order to reach the overall goal of the study which consists of verifying, among companies included in the sample, which is the best asset for investment with an appreciation potential and creation of added value for the investor using as a basic tool the economic, financial and market indicators. It was found that, among the indicated companies and in the analyzed period, the best asset for investment with a potential for appreciation and creation of value added for the investor is Mota Engil. In terms of average annual growth rate it was the company that, on average, achieved better performance on the selected indicators of liquidity, funding, profitability and market. However, Teixeira Duarte also showed an average annual growth rate that allows taking this company into consideration when building the portfolio of assets for investment and creation of added value for the investor. We consider that, in subjective terms, the impact of this work is positive

An examination of audit task complexity & audit risk in the context of information technology architecture intricacy & stability: a survey & case study based research of medium & large Australian organisations in the area of information systems audit

Purpose: This thesis leverages Audit Judgement and Decision-Making, Behavioural Sciences, Information Technology, and Informing Science research, to build on extant Audit Task Complexity and Audit Risk research. The purpose of this work was to determine empirically, in the context of information systems audit, if Audit Task Complexity and Audit Risk are each associated with Information Technology Architecture intricacy and stability. Design, methodology, and approach: Departing from experimental methods generally adopted in relevant extant research, this study adopted survey and case study research methods to test the hypotheses with real-world data collected from medium to large Australian organisations. Senior information systems auditors and key information technology personnel pertaining to 30 participating organisations, each completed self-administered questionnaire survey instruments. The researcher completed the same survey questionnaire instruments for 21 case studies, the data for which was derived from information systems audit working papers obtained from a second-tier accounting firm. Partial Least Squares path modelling was used for hypothesis testing as this is best suited for non-parametric and relatively small datasets. Findings: From hypothesis testing, the results suggest that: 1. The extent of information systems audit findings reported to Management is positively associated with the extent of Information Technology Infrastructure component quantity; and 2. The Risk of Material Systems Failure is positively associated with the extent of Information Technology Infrastructure component diversity and inter-dependency. Research value: Information technology environments in a number of organisations today can present a challenge to even the most experienced information systems auditors. This research contributes to the body of knowledge pertaining to information systems audit practitioners by identifying those Information Technology Architecture and Infrastructure elements that can present a challenge to practitioners in respect of Audit Task Complexity and Audit Risk. A better understanding of these areas would invariably benefit the profession. Research exclusions and limitations: Information Technology Architectures comprise many business information systems. This study excludes Personal Information Systems as these systems are generally not audited by information systems auditors and hence will not have any impact on research results. Shadow Information Technology is also excluded as metrics around these environments cannot be captured effectively or reliably; this exclusion is expected to have minimal impact on results. Measurement limitations exist around a number of variables exist due to the availability, reliability, and extent of resources required to obtain the relevant data

Leveraging Information Systems Capabilities for Operational Performance in Services: The Role of Supply Chain Integration

The purpose of this thesis is to explore the link between IS capabilities and operational performance in services. More specifically, it aims to investigate how the processes for supplier and customer integration affect IS capabilities and consequently, firms’ operational performance. Accordingly, this study examines the effects of three dimensions of IS capabilities (IT for supply chain activities, flexible IT infrastructure, and IT operations shared knowledge) on cost and quality performance via the mediation of the processes developed for supplier and customer integration in service firms. This is achieved by measuring SCI in terms of supply side integration processes (supplier integration) as well as customer side integration processes (customer transactions, customer connection, and customer collaboration). A survey-based research design intended to measure the estimated relationships was adopted. Data were collected from 156 service establishments in the UK. Mediated multiple regression analysis revealed that integrating specific processes with supply chain members (supplier integration, customer transactions, customer connection, and customer collaboration) can fully or partially mediate the effects of IT for supply chain activities and IT operations shared knowledge on cost and quality performance; no support was found for the relationships between flexible IT infrastructure and cost and quality performance. These results provide a valuable explanation to academics as well as to practitioners regarding the importance of various processes developed for integration with supply chain members in leveraging IS for operational performance in services. This thesis takes a step towards quelling concerns about the business value of IS, contributing to the development and validation of the measurement of IS capabilities in the service operations context. Additionally, it adds to the emerging body of literature linking supply chain integration to the operational performance of service firms

A holistic supply chain integration theoretical framework within the Maltese manufacturing SMEs

Purpose: The thesis focus is to generate a theory on supply chain integration (SCI) within the Maltese manufacturing SMEs. Due to the current literature gaps there is lack of scholarly work associated with the theory of how to achieve SCI across the supply chain (SC) (Zhao et al., 2008; Flynn et al., 2010) and on holistic SCI frameworks (Holmberg, 2000; Mentzer et al., 2001; Flynn et al., 2010; Garetti & Taisch, 2012). The thesis seeks to address these gaps by trying to establish two main objectives: the SCI substantive theory; and the SCI holistic conceptual framework, needed to be adopted both within focal firm and beyond the dyad relationships across the SC. Method: The Straussian Grounded Theory methodology (GTM) was used to inductively derive the SCI theory. The research data collection and analysis was performed on 22 in-depth interviews from 17 firms within various manufacturing sector, using both primary and secondary data. The grounded theory data analysis was based on both Computer Assisted Qualitative Data Analysis Software (CAQDAS) and storyline narrative approaches to serve as data analytic triangulation tools so as to validate the emerged theory. Analytic intricacies and iterative sense-making was pivotal in all theorising stages to arrive at the final substantive theory with its conceptual framework. Findings: The research findings inductively established that the substantive theory is based on a cross-disciplinary approach mainly consisting of the following disciplines: management, leadership, business, manufacturing and SC strategies respectively and technology, both within information systems and manufacturing automated processes. The research established a substantive theory for SMEs to achieve SCI, which revolves around the integrative management and leadership approach (IMLA). The IMLA is considered to be an original conceptual term within the SCI theory, and it is defined to be both a driver and a binding force of all SC actors, based on the integration of a dual concept of management and leadership. The management approach maintains all the necessary quality standards and sustainable measures in place and at the same time streamline and optimise all activities to meet competitively all operational and business targets. The leadership approach focuses ideally on a shared leadership style, to promote a decentralised management approach based on teamwork initiatives, but it is not excluded that firms may adopt an individual leadership style, based on a centralised management approach. The research also established a set of propositions to contribute to the discipline scholarly work, which may also be tested by quantitative future research to increase the research robustness. Limitations: The findings are based on a relatively small sample of 17 firms involved in various positions within the SC. Practical & Methodological implications: The conceptual model with its underpinning theory and the recommended road map are to serve as a guide for all managers across the command chain in various SC positions to deploy the right IMLA, as the core theme within the conceptual model, to achieve outstanding competitive performance. This research also extends the applicability of GTM within the management discipline. Originality: This research outlines an original concept within SCI literature, which is a core driver, represented by the term IMLA. Such an IMLA is able to achieve a holistic SCI management approach beyond the SC dyadic relationship by adopting four leadership traits, situated within the strategic perspective of the firm based on the business, manufacturing and SC strategies with the role of technology as an enabler and even a driver to achieve competitive capabilities

Managing enterprise resource planning and multi-organisational enterprise governance:a new contingency framework for the enterprisation of operations

This research has been undertaken to determine how successful multi-organisational enterprise strategy is reliant on the correct type of Enterprise Resource Planning (ERP) information systems being used. However there appears to be a dearth of research as regards strategic alignment between ERP systems development and multi-organisational enterprise governance as guidelines and frameworks to assist practitioners in making decision for multi-organisational collaboration supported by different types of ERP systems are still missing from theoretical and empirical perspectives. This calls for this research which investigates ERP systems development and emerging practices in the management of multi-organisational enterprises (i.e. parts of companies working with parts of other companies to deliver complex product-service systems) and identify how different ERP systems fit into different multi-organisational enterprise structures, in order to achieve sustainable competitive success. An empirical inductive study was conducted using the Grounded Theory-based methodological approach based on successful manufacturing and service companies in the UK and China. This involved an initial pre-study literature review, data collection via 48 semi-structured interviews with 8 companies delivering complex products and services across organisational boundaries whilst adopting ERP systems to support their collaborative business strategies – 4 cases cover printing, semiconductor manufacturing, and parcel distribution industries in the UK and 4 cases cover crane manufacturing, concrete production, and banking industries in China in order to form a set of 29 tentative propositions that have been validated via a questionnaire receiving 116 responses from 16 companies. The research has resulted in the consolidation of the validated propositions into a novel concept referred to as the ‘Dynamic Enterprise Reference Grid for ERP’ (DERG-ERP) which draws from multiple theoretical perspectives. The core of the DERG-ERP concept is a contingency management framework which indicates that different multi-organisational enterprise paradigms and the supporting ERP information systems are not the result of different strategies, but are best considered part of a strategic continuum with the same overall business purpose of multi-organisational cooperation. At different times and circumstances in a partnership lifecycle firms may prefer particular multi-organisational enterprise structures and the use of different types of ERP systems to satisfy business requirements. Thus the DERG-ERP concept helps decision makers in selecting, managing and co-developing the most appropriate multi-organistional enterprise strategy and its corresponding ERP systems by drawing on core competence, expected competitiveness, and information systems strategic capabilities as the main contingency factors. Specifically, this research suggests that traditional ERP(I) systems are associated with Vertically Integrated Enterprise (VIE); whilst ERPIIsystems can be correlated to Extended Enterprise (EE) requirements and ERPIII systems can best support the operations of Virtual Enterprise (VE). The contribution of this thesis is threefold. Firstly, this work contributes to a gap in the extant literature about the best fit between ERP system types and multi-organisational enterprise structure types; and proposes a new contingency framework – the DERG-ERP, which can be used to explain how and why enterprise managers need to change and adapt their ERP information systems in response to changing business and operational requirements. Secondly, with respect to a priori theoretical models, the new DERG-ERP has furthered multi-organisational enterprise management thinking by incorporating information system strategy, rather than purely focusing on strategy, structural, and operational aspects of enterprise design and management. Simultaneously, the DERG-ERP makes theoretical contributions to the current IS Strategy Formulation Model which does not explicitly address multi-organisational enterprise governance. Thirdly, this research clarifies and emphasises the new concept and ideas of future ERP systems (referred to as ERPIII) that are inadequately covered in the extant literature. The novel DERG-ERP concept and its elements have also been applied to 8 empirical cases to serve as a practical guide for ERP vendors, information systems management, and operations managers hoping to grow and sustain their competitive advantage with respect to effective enterprise strategy, enterprise structures, and ERP systems use; referred to in this thesis as the “enterprisation of operations”