Managing Security Requirements: Towards Better Alignment Between Information Systems And Business

Information Systems are increasingly becoming essential to the success of business organizations. They play a central role in the success of almost all components of the organization such as business decision-making, business strategy formulation, business goal modeling, managing organizational resources, structure, managing organizational data etc. However, protecting information systems and organizational resources from security threats is a critical task in the management of the business, which alternately, negatively affects the alignment process between business and information systems. Managing information security within business organizations calls for a clear understanding of the viewpoint of business and the architecture of the system that is being used in the organization. This paper presents a requirements engineering based approach to modeling and maping the issue of information security at an early stage of the system’s development life cycle in the context of alignment between business and information systems

Using agent based simulation to empirically examine complexity in carbon footprint business process

Through the critical analysis of the extant literature, it is observed that Simulation is widely used as a research method in Natural Sciences, Engineering and Social Sciences, in addition to argumentation and formalisation as the third way of carrying out research. Simulation is not so widely used in Business and Management research as it ought to have been, though this is changing for the better with the technological advances in computers and their computational power. These technological advances enhance the capability of theoretical research models, in defining a problem and their use in empirically examining a solution to the problem in simulated reality, like never before. Management journal searches for “Simulation and Complexity Theory” returned nil or zero returns, which explain that this combination is not popular in management research, though they are used individually more often. The major objective of this paper is to analyse some of the conceptual (or theoretical) and methodological (or empirical) contributions that Agent Based Simulation and Complexity Theory can make to the business and management community in their business process related research In view of this, some basic ideas are discussed of using Agent Based Simulation as a method in Business and Management Studies research and how an Agent Based Model can be applied to a business process as complex as Carbon Footprint. It is in this context that the use of Complexity as the base theory to empirically examine a business process is discussed. Throughout this article, our research on complex adaptive systems (e.g., Accounting Information System) in continuously changing organisations managing complex business processes (e.g., Carbon Footprint business process) is considered as the basis for illustrating some of the concepts. Through this article, avenues for further management research using these tools and methodology are suggested

The Conceptual Framework for Business Process Innovation: Towards a Research Program on Global Supply Chain Intelligence

This paper proposes a research program on Business Process Innovation: Towards Global Supply Chain Intelligence. Few words are more ubiquitous in business or society today than "innovation". This reflects that businesses are striving for ways to survive and thrive in an increasingly complex and connected world (IBM 2006). Most industrial supply chains today are globally scattered and nearly all organizations rely on their Enterprise Information Systems (ES) for integration and coordination of their activities. In this context innovation inevitably is driven by advanced information technology. Organizations today are required not only to operate effective business processes but they also need to accommodate to changing business conditions at an increasing rate. Consequently the ability to develop and implement new processes driven by the Enterprise Information Systems is a central competence in most industries, and furthermore it is a critical practice for a global enterprise. The next practice in Global Supply Chain Management is Business Process Innovation. Business Process Innovation is the transformation of a global supply chain driven by a new advanced Enterprise Information Systems technology. This technology holds the potential to "close the control loop", but until now few organizations have managed to unleash the full potential of global supply chain intelligence. Thus, there is an emerging need for managing the transformation and for new approaches that will lead to robust global supply chains. This paper presents a conceptual framework for Business Process Innovation. A research proposal based on five interrelated topics is derived from the framework. The research program is intended to establish and to develop the conceptual framework for business process innovation and to apply this framework in a global supply chain context. These topics are presented in the following sections, but first the background for the program is discussed.No keywords;

Managing Process Variants in the Process Life Cycle

When designing process-aware information systems, often variants of the same process have to be specified. Each variant then constitutes an adjustment of a particular process to specific requirements building the process context. Current Business Process Management (BPM) tools do not adequately support the management of process variants. Usually, the variants have to be kept in separate process models. This leads to huge modeling and maintenance efforts. In particular, more fundamental process changes (e.g., changes of legal regulations) often require the adjustment of all process variants derived from the same process; i.e., the variants have to be adapted separately to meet the new requirements. This redundancy in modeling and adapting process variants is both time consuming and error-prone. This paper presents the Provop approach, which provides a more flexible solution for managing process variants in the process life cycle. In particular, process variants can be configured out of a basic process following an operational approach; i.e., a specific variant is derived from the basic process by applying a set of well-defined change operations to it. Provop provides full process life cycle support and allows for flexible process configuration resulting in a maintainable collection of process variants

Discovering Business Models for Software Process Management - An Approach for Integrating Time and Resource Perspectives from Legacy Information Systems

Business Process Management (BPM) is becoming the modern core to support business in all type of organizations and software business is not an exception. Software companies are often involved in important and complex collaborative projects carried out by many stakeholders. Each actor (customers, suppliers or government instances, among others) works with individual and shared processes. Everyone needs dynamic and evolving approaches for managing their software projects lifecycle. Nevertheless, many companies still use systems that are out of the scope of BPM for planning and control projects and managing enterprise content (Enterprise Content Management, ECM) as well as all kinds of resources (ERP). Somehow systems include scattered artifacts that are related to BPM perspectives: control and data flow, time, resource and case, for example. It is aimed to get interoperable BPM models from these classical Legacy Information Systems (LIS). Model-Driven Engineering (MDE) allows going from application code to higher-level of abstraction models. Particularly, there are standards and proposals for reverse engineering LIS. This paper illustrates LIS cases for software project planning and ECM, looking at time and resource perspectives. To conclude, we will propose a MDE-based approach for taking out business models in the context of software process management.Ministerio de Economía y Competitividad TIN2013-46928-C3-3-

When organisational effectiveness fails: business continuity management and the paradox of performance

Purpose: The aim of the paper is to consider the nature of the business continuity management (BCM) process and to frame it within wider literature on the performance of socio-technical systems. Despite the growth in BCM activities in organisations, some questions remain as to whether academic research has helped to drive this process. The paper seeks to stimulate discussion within this journal of the interplay between organisational performance and BCM and to frame it within the context of the potential tensions between effectiveness and efficiency. Design/methodology/approach: The paper considers how BCM is defined within the professional and academic communities that work in the area. It deconstructs these definitions in order to and set out the key elements of BCM that emerge from the definitions and considers how the various elements of BCM can interact with each other in the context of organisational performance. Findings: The relationships between academic research in the area of crisis management and the practice-based approaches to business continuity remain somewhat disjointed. In addition, recent work in the safety management literature on the relationships between success and failure can be seen to offer some interesting challenges for the practice of business continuity. Practical implications: The paper draws on some of the practice-based definitions of BCM and highlights the limitations and challenges associated with the construct. The paper sets out challenges for BCM based upon theoretical challenges arising in cognate areas of research. The aim is to ensure that BCM is integrated with emerging concepts in other aspects of the management of uncertainty and to do so in a strategic context. Originality/value: Academic research on performance reflects both the variety and the multi-disciplinary nature of the issues around measuring and managing performance. Failures in organisational performance have also invariably attracted considerable attention due to the nature of a range of disruptive events. The paper reveals some of the inherent paradoxes that sit at the core of the BCM process and its relationships with organisational performance

A Framework for the Intelligent Delivery and User-Adequate Visualization of Process Information

A continuously increasing amount of data makes it difficult for knowledge-workers to identify the information they need to perform their tasks in the best possible way. Particularly challenging in this context is the alignment of process-related information (e.g., working instructions, best practices) with business processes. In fact, process-related information (process information for short) and business processes are usually handled separately. On one hand, shared drives, databases, and information systems are used to manage process information, on the other, process management technology provides the basis for managing business processes. In practice, enterprises often establish (Intranet) portals to connect both perspectives. However, such portals are not sufficient. Reasons are that process information is usually delivered without considering the current work context and business processes are presented to process participants in a rather static manner. Therefore, enterprises crave for new ways of making process information available. This paper picks up this challenge and presents the niPRO framework. niPRO is based on semantic technology and enables the intelligent delivery and user-adequate visualization of comprehensive process information

Context-based Configuration of Process Variants

When designing process-aware information systems, usually, variants of the same process type have to be defined and maintained. Each of these process variants constitutes an adjustment of the same process to specific requirements building the variant context. Current business process management tools do not support the context-based definition and configuration of such variants in an adequate manner. Instead, each process variant has to be defined from scratch and be kept in a separate model. This results in considerable redundancies when modeling and adapting process variants, and is also a time consuming and error-prone procedure. This paper presents a more flexible and context-based approach for configuring and managing process variants. In particular, we allow for the configuration of process variants by applying a context-dependent set of well-defined change operations to a base process

An End-User Development Approach to Building Customizable Web-Based Document Workflow Management Systems

As organizations seek to control their practices through Business Process Management (BPM - or the process of improving the efficiency and effectiveness of an organization through the automation of tasks), workflow management systems (WFMS) have emerged as fundamental supporting software tools. A WFMS must maintain process state while managing the utilization of people and applications (resources), data (context), and constraints (rules) associated with each of the tasks [Baeyens04]. It must also be configurable so it can be easily adapted to manage specific workflows within any application domain. Finally, the WFMS should be flexible enough to allow for changing business needs. In order to meet these challenges, a WFMS must provide access to process and document definition tools as well as administrative tools. In this project we have used an End User Developmentn (EUD) approach [Repenning04] to build a stand-alone web-based WFMS which offers the non-technical end user the ability to design, launch, and manage multiple automated workflows and their associated documents. It empowers end users to build and customize their own systems without requiring from them skills other than those associated with their domain of expertise