Applying Real Options Thinking to Information Security in Networked Organizations

An information security strategy of an organization participating in a networked business sets out the plans for designing a variety of actions that ensure confidentiality, availability, and integrity of company’s key information assets. The actions are concerned with authentication and nonrepudiation of authorized users of these assets. We assume that the primary objective of security efforts in a company is improving and sustaining resiliency, which means security contributes to the ability of an organization to withstand discontinuities and disruptive events, to get back to its normal operating state, and to adapt to ever changing risk environments. When companies collaborating in a value web view security as a business issue, risk assessment and cost-benefit analysis techniques are necessary and explicit part of their process of resource allocation and budgeting, no matter if security spendings are treated as capital investment or operating expenditures. This paper contributes to the application of quantitative approaches to assessing risks, costs, and benefits associated with the various components making up the security strategy of a company participating in value networks. We take a risk-based approach to determining what types of security a strategy should include and how much of each type is enough. We adopt a real-options-based perspective of security and make a proposal to value the extent to which alternative components in a security strategy contribute to organizational resiliency and protect key information assets from being impeded, disrupted, or destroyed

The real SAP® Business one cost : a case study of ERP adoption in an SME

This paper reports on a UK based service management Small and Medium-sized Enterprise (SME) that invested into SAP® Business One. The action research case study highlights the real cost and difficulties faced in moving to the one single SAP system and the process that was followed in order to identify third-party vendors that can integrate or customise SAP® Business One. This paper highlights the additional costs required to ensure a ‘fit-for-purpose’ solution to close the gap between strategic needs and the existing SAP Business One solution. The gap itself is illustrated by highlighting 10 key functionalities expected by the given service management SME. The actual implementation cost of the Enterprise Resource Planning (ERP) was found to be approximately double the initial SAP costs. The real costs involve time for, among other things, process reengineering, strategic decision making, software add-ons, staff-training, project-management and software maintenance

A Survey on Economic-driven Evaluations of Information Technology

The economic-driven evaluation of information technology (IT) has become an important instrument in the management of IT projects. Numerous approaches have been developed to quantify the costs of an IT investment and its assumed profit, to evaluate its impact on business process performance, and to analyze the role of IT regarding the achievement of enterprise objectives. This paper discusses approaches for evaluating IT from an economic-driven perspective. Our comparison is based on a framework distinguishing between classification criteria and evaluation criteria. The former allow for the categorization of evaluation approaches based on their similarities and differences. The latter, by contrast, represent attributes that allow to evaluate the discussed approaches. Finally, we give an example of a typical economic-driven IT evaluation

Factors influencing ERP projects success in the vendor selection process

Successful implementation of an ERP system is the result of knowledgeable and dedicated people working together. It entails company-wide commitment, openness to change, good planning and experienced guidance. These primary criteria determine the probability of gaining significant return on investment (ROI) from an ERP system. Using these criteria as guidelines during the system selection process and subsequent implementation can ensure that the chosen system will support and enable the business improvements envisioned. Among the numerous critical success factors (CSFs) in the implementation of ERP systems, identified and demonstrated by practitioners and academic researchers in the last few years, we will synthesize and analyze the vendor selection issues, in connection to the implementation aspects, as we consider implementation the essential “ingredient” of the ERP success.ERP implementation, ERP vendor selection process, critical success factors, ROI, ERP success

Correlating Architecture Maturity and Enterprise Systems Usage Maturity to Improve Business/IT Alignment

This paper compares concepts of maturity models in the areas of Enterprise Architecture and Enterprise Systems Usage. We investigate whether these concepts correlate, overlap and explain each other. The two maturity models are applied in a case study. We conclude that although it is possible to fully relate constructs from both kinds of models, having a mature architecture function in a company does not imply a high Enterprise Systems Usage maturity

Challenges and influential factors in ERP adoption and implementation

The adoption and implementation of Enterprise Resource Planning (ERP) systems is a challenging and expensive task that not only requires rigorous efforts but also demands to have a detailed analysis of such factors that are critical to the adoption or implementation of ERP systems. Many efforts have been made to identify such influential factors for ERP; however, they are not filtered comprehensively in terms of the different perspectives. This paper focuses on the ERP critical success factors from five different perspectives such as: stakeholders; process; technology; organisation; and project. Results from the literature review are presented and 19 such factors are identified that are imperative for a successful ERP implementation, which are listed in order of their importance. Considering these factors can realize several benefits such as reducing costs and saving time or extra effort

Evaluation of the applicability of investment appraisal techniques for assessing the business value of IS services.

There is a consensus among academics and practitioners that ICT investments should be carefully justified, measured and controlled. This is not different for the development of a service architecture or the development of particular services as such. In practice, the traditional capital investment appraisal techniques (CIAT’s) such as payback period or net present value are by far the most used techniques for assessing the feasibility of ICT investments. Nevertheless, serious doubts about the fitness of these techniques in a service based value net environment arise. Value nets have special characteristics such as high flexibility and agility, re-use of services,… that makes the use of these techniques very difficult and the reliability of the outcome most uncertain. Efforts are made to find more appropriate techniques. In the past, CIAT’s have been adjusted so that these techniques become more reliable in an ICT environment and new justification methods and techniques have been developed. However neither these adjusted techniques nor the new techniques are frequently used. This might be explained by the fact that the outcome of these techniques is difficult to interpret and to use and the fact that some significant problems (like the estimation of hidden costs) remain unsolved. Moreover, most of the new techniques are still in the conceptual phase. In this paper we evaluate these adjusted and new techniques in the light of service oriented architectures. We will argue that non of the techniques offers a good solution for assessing the business value of IS services. Despite the existence of a wealth of literature, the IS community appears to be no nearer to a solution to many problems associated with ICT appraisal. This is potentially problematic when dealing with investments in emerging technology such as IS services or service architectures. Since all techniques presented in the article have their drawbacks, it is safe to say that reliance on a sole technique may lead to sub-optimalisation or even failure. Therefore it makes sense to use a mixture of techniques, eliminating or diminishing the weaknesses of each of the techniques used. We strongly recommend a multi-layer evaluation process, or an evaluation process derived from the balanced scorecard, for the appraisal of investments in services or service architectures.

Semantic discovery and reuse of business process patterns

Patterns currently play an important role in modern information systems (IS) development and their use has mainly been restricted to the design and implementation phases of the development lifecycle. Given the increasing significance of business modelling in IS development, patterns have the potential of providing a viable solution for promoting reusability of recurrent generalized models in the very early stages of development. As a statement of research-in-progress this paper focuses on business process patterns and proposes an initial methodological framework for the discovery and reuse of business process patterns within the IS development lifecycle. The framework borrows ideas from the domain engineering literature and proposes the use of semantics to drive both the discovery of patterns as well as their reuse

Exploring ERP-enabled Technology Adoption: A Real Options Perspective

For decades, practitioners and scholars have focused on achieving optimal values in and benefits from enterprise resource planning (ERP) systems. Given that scholars have identified ERP systems as having option-like characteristics such as the capacity to create an information technology (IT) platform that enables the adoption of subsequent function-specific applications, we face a need to explore the linkage between post-ERP systems implementation and subsequent ERP-enabled technology adoption. We used real options theory to explore the underlying relationship between the initial ERP system implementation and subsequent technology adoptions. We surveyed 519 IT executives in the United States and found that the level of technology uncertainty, managerial flexibility, and formal real option analysis in ERP adoption decisions influenced the organizational relative advantage of subsequent non-ERP technologies. Our results also reveal that the level of uncertainty had a negative relationship with ERP-enabled technology adoption, while formal real option analysis in ERP adoption decisions positively influenced ERP-enabled adoption

An Alternative Method to Evaluate Complex Information Technology Projects

For most companies, it is a reality to face uncertainties when conducting complex projects focused on the implementation of Information Systems (IS) and, as a consequence, cost-benefit evaluation of this kind of projects has become a difficult task. In this context, Real Options Theory (ROT) has proved to be a viable alternative to provide methods to evaluate complex projects, not only in Information Technology but in many other economics and business areas. This paper intends to demonstrate how ROT can be applied to evaluate complex Information Technology projects, exploring a case study involving an implementation project of an Enterprise Resource Planning (ERP). In the case study, two distinct solutions for the implementation of an ERP were evaluated, demonstrating the applicability of ROT to such complex situations