Information Security Models are a Solution or Puzzle for SMEs? A Systematic Literature Review

Effective information security management is necessary in the success of any organisation, including Small-and-Medium-Sized Enterprises (SMEs). Nonetheless, keeping their security needs met is always a challenge for SMEs. One of the proven ways to manage information security is through applying available international standards, frameworks and best practices. However, choosing a suitable model that addresses the SMEs holistic needs may be an overwhelming task. This systematic literature review formed the initial phase of a larger analytical project of existing models in three categories: risk management models, standards-based models and ‘other’ models. The review showed that most of models are theoretically conceived but have not been further tested empirically. Hence, their usability is unknown. More in-depth research is required to find a suitable model that may be applicable to all SMEs

Enabling data-driven decision-making for a Finnish SME: a data lake solution

In the era of big data, data-driven decision-making has become a key success factor for companies of all sizes. Technological development has made it possible to store, process and analyse vast amounts of data effectively. The availability of cloud computing services has lowered the costs of data analysis. Even small businesses have access to advanced technical solutions, such as data lakes and machine learning applications. Data-driven decision-making requires integrating relevant data from various sources. Data has to be extracted from distributed internal and external systems and stored into a centralised system that enables processing and analysing it for meaningful insights. Data can be structured, semi-structured or unstructured. Data lakes have emerged as a solution for storing vast amounts of data, including a growing amount of unstructured data, in a cost-effective manner. The rise of the SaaS model has led to companies abandoning on-premise software. This blurs the line between internal and external data as the company’s own data is actually maintained by a third-party. Most enterprise software targeted for small businesses are provided through the SaaS model. Small businesses are facing the challenge of adopting data-driven decision-making, while having limited visibility to their own data. In this thesis, we study how small businesses can take advantage of data-driven decision-making by leveraging cloud computing services. We found that the report- ing features of SaaS based business applications used by our case company, a sales oriented SME, were insufficient for detailed analysis. Data-driven decision-making required aggregating data from multiple systems, causing excessive manual labour. A cloud based data lake solution was found to be a cost-effective solution for creating a centralised repository and automated data integration. It enabled management to visualise customer and sales data and to assess the effectiveness of marketing efforts. Better skills at data analysis among the managers of the case company would have been detrimental to obtaining the full benefits of the solution

ERP implementation methodologies and frameworks: a literature review

Enterprise Resource Planning (ERP) implementation is a complex and vibrant process, one that involves a combination of technological and organizational interactions. Often an ERP implementation project is the single largest IT project that an organization has ever launched and requires a mutual fit of system and organization. Also the concept of an ERP implementation supporting business processes across many different departments is not a generic, rigid and uniform concept and depends on variety of factors. As a result, the issues addressing the ERP implementation process have been one of the major concerns in industry. Therefore ERP implementation receives attention from practitioners and scholars and both, business as well as academic literature is abundant and not always very conclusive or coherent. However, research on ERP systems so far has been mainly focused on diffusion, use and impact issues. Less attention has been given to the methods used during the configuration and the implementation of ERP systems, even though they are commonly used in practice, they still remain largely unexplored and undocumented in Information Systems research. So, the academic relevance of this research is the contribution to the existing body of scientific knowledge. An annotated brief literature review is done in order to evaluate the current state of the existing academic literature. The purpose is to present a systematic overview of relevant ERP implementation methodologies and frameworks as a desire for achieving a better taxonomy of ERP implementation methodologies. This paper is useful to researchers who are interested in ERP implementation methodologies and frameworks. Results will serve as an input for a classification of the existing ERP implementation methodologies and frameworks. Also, this paper aims also at the professional ERP community involved in the process of ERP implementation by promoting a better understanding of ERP implementation methodologies and frameworks, its variety and history

ICE-B 2010:proceedings of the International Conference on e-Business

The International Conference on e-Business, ICE-B 2010, aims at bringing together researchers and practitioners who are interested in e-Business technology and its current applications. The mentioned technology relates not only to more low-level technological issues, such as technology platforms and web services, but also to some higher-level issues, such as context awareness and enterprise models, and also the peculiarities of different possible applications of such technology. These are all areas of theoretical and practical importance within the broad scope of e-Business, whose growing importance can be seen from the increasing interest of the IT research community. The areas of the current conference are: (i) e-Business applications; (ii) Enterprise engineering; (iii) Mobility; (iv) Business collaboration and e-Services; (v) Technology platforms. Contributions vary from research-driven to being more practical oriented, reflecting innovative results in the mentioned areas. ICE-B 2010 received 66 submissions, of which 9% were accepted as full papers. Additionally, 27% were presented as short papers and 17% as posters. All papers presented at the conference venue were included in the SciTePress Digital Library. Revised best papers are published by Springer-Verlag in a CCIS Series book

Data Spaces

This open access book aims to educate data space designers to understand what is required to create a successful data space. It explores cutting-edge theory, technologies, methodologies, and best practices for data spaces for both industrial and personal data and provides the reader with a basis for understanding the design, deployment, and future directions of data spaces. The book captures the early lessons and experience in creating data spaces. It arranges these contributions into three parts covering design, deployment, and future directions respectively. The first part explores the design space of data spaces. The single chapters detail the organisational design for data spaces, data platforms, data governance federated learning, personal data sharing, data marketplaces, and hybrid artificial intelligence for data spaces. The second part describes the use of data spaces within real-world deployments. Its chapters are co-authored with industry experts and include case studies of data spaces in sectors including industry 4.0, food safety, FinTech, health care, and energy. The third and final part details future directions for data spaces, including challenges and opportunities for common European data spaces and privacy-preserving techniques for trustworthy data sharing. The book is of interest to two primary audiences: first, researchers interested in data management and data sharing, and second, practitioners and industry experts engaged in data-driven systems where the sharing and exchange of data within an ecosystem are critical

Business process modelling in ERP implementation literature review

Business processes are the backbone of any Enterprise Resource Planning (ERP) implementation. Business process modelling (BPM) has become essential for modern, process driven enterprises due to the vibrant business environments. As a consequence enterprises are dealing with a substantial rate of organizational and business processes change. Business process modelling enables a common understanding and analysis of the business processes, which is the first step in every ERP implementation methodology (blueprint phase). In order to represent enterprise processes models in an accurate manner, it is paramount to choose a right business process modeling technique and tool. The problem of many ERP projects rated as unsuccessful is directly connected to a lack of use of business process models and notations during the blueprint phase. Also, blueprint implementation phase is crucial in order to fit planned processes in an organization with processes implemented in the solution. However, business analysts and ERP implementation professionals have substantial difficulties to navigate through a large number of theoretical models and representational notations that have been proposed for business process modeling (BPM). As the availability of different business process modeling references is huge, it is time consuming to make review and classification of all modeling techniques. Therefor, in reality majority of ERP implementations blueprint documents have no business process modeling included in generating blueprint documents. Choosing the right model comprise the purpose of the analysis and acquaintance of the available process modelling techniques and tools. The number of references on business modelling is quit large, so it is very hard to make a decision which modeling notation or technique to use. The main purpose of this paper is to make a review of business process modelling literature and describe the key process modelling techniques. The focus will be on all business process modeling that could be used in ERP implementations, specifically during the blueprint phase of the implementation process. Detailed review of BPM (Business process modeling) theoretical models and representational notations, should assist decision makers and ERP integrators in comparatively evaluating and selecting suitable modeling approaches

From strategy to operations and vice-versa: a bridge that needs an Island

The Information Systems support particularly for Tactical Management is not an explicit or distinct term. There are many concepts and artifacts that are providing contemporary foundations for Information systems in the companies, both in theory and in practice. We tried to analyze different approaches, in order to determine their support specifically for tactical management. Out of this attempt, the realization is that these seemingly overarching bridges from Operations to Strategy and vice-versa appear to be overshooting an important island - the tactical management level, particularly in recognizing its distinct characteristics to be served with adjusted concepts and solutions. We see tactical management as the managerial function that implements strategies, by deploying and utilizing specific resources from the operational level in order to gain that specific competitive advantage prescribed in the strategy. The diversity of approaches and tools is provided for the strategic and overwhelmingly for operational management issues. This theoretical research is analyzing the specifics of the Sense-and-Respond Framework on a tactical level towards perfecting the sensing part of it (in terms of sustaining "low latency" (instead of operational "no latency") and striving for tactical need for "right-time" (instead of the current and hot operational "real-time") information), and how it is being closed in theory and practice on a strategic, tactical and operational level with 'endings'. Also, the tactical management characteristic of working in unpredicted environment and needing high adaptability, requires involvement of concepts and approaches that provide adaptability such as, in our opinion, the Sense-and-Respond managerial concept and the SIDA loop. To some extent, tactical management is being assimilated either by strategy or by operations, as this research confirms. Hopefully, we will result with increased perceptiveness that tactical management needs special theoretical and practical focus and output propositions. The specific sensing and interpreting, deciding and acting, in the role of a tactical manager is neither only automatic, data-capturing process nor a person-independent or company-independent one. If, and after this viewpoint is shared, much more efforts will be streamlined in the tactical management "how" to do "what" is expected, on theoretical and on practical level