Security Management Life Cycle (SMLC): A Comparative Study

We introduce an integrated conceptualization of enterprise information technology security management in the form of a life cycle that accounts for the people, processes, infrastructure, and applications within an enterprise. Our life cycle view provides a lens through which one can view the security management activities at the strategic, tactical, and operational levels with regard to their strategic alignment with organizational goals. We compare and contrast three widely adopted frameworks (COSO, COBIT and ITIL) for enterprise risk and IT management with respect to our life cycle. We conclude that although the definitions of each stage of the life cycle are similar in these frameworks, their approach, philosophy, and method of execution is primarily determined by their unique focus. By developing a life cycle abstraction which encapsulates all of these frameworks, security management can better understand how their responsibilities and activities support organizational objectives

Life history traits and gonad histology of an endemic cyprinid fish, Mond spotted barb, Capoeta mandica from Southern Iran

The life history traits and gonad development of an endemic cyprinid fish, the spotted barb, Capoeta mandica (Bianco & Banarescu 1982), from southern Iran was investigated by regular monthly collections from February 2006 through January 2007 and on the basis of microscopic and macroscopic analyses. No information on the spawning characteristics of the fish are available to date. A total of 335 specimens were captured using electrofishing including 253 males and 102 females, resulting in 2.5:1 (male: female) sex ratio, which is significantly different from the expected ratio. The commonly known five standard maturation stages were determined based on the size, shape and weight of the gonads, degree of occupation of the body cavity, presence or absence of ripe oocytes, or milt, diameter of the oocytes in the ovary, and histological observations. These stages were correlated to the reproductive indices. The ovum diameters ranged from 0.04 to 1.31 mm, with the highest mean value in May. The condition factor of male and female specimens was the highest in April. The female GSI increased from March to May, peaking in the middle of spring and decreased significantly in June. Based on the gonad maturation stages, gonadosomatic index (GSI), modified GSI, mean egg diameter, condition factor (K) and Dobriyal index (DI), it was concluded that the spotted barb spawns during May and June. The provided data, contribute baseline data towards management ecology and conservation of this endemic fish species

Management of Information Security: Challenges and Research Directions

Over the past decade management of information systems security has emerged to be a challenging task. Given the increased dependence of businesses on computer-based systems and networks, vulnerabilities of systems abound. Clearly, exclusive reliance on either the technical or the managerial controls is inadequate. Rather, a multifaceted approach is needed. In this paper, based on a panel presented at the 2007 Americas Conference on Information Systems held in Keystone, Colorado, we provide examples of failures in information security, identify challenges for the management of information systems security, and make a case that these challenges require new theory development via examining reference disciplines. We identify these disciplines, recognize applicable research methodologies, and discuss desirable properties of applicable theories

Information security: Listening to the perspective of organisational insiders

Aligned with the strategy-as-practice research tradition, this article investigates how organisational insiders understand and perceive their surrounding information security practices, how they interpret them, and how they turn such interpretations into strategic actions. The study takes a qualitative case study approach, and participants are employees at the Research & Development department of a multinational original brand manufacturer. The article makes an important contribution to organisational information security management. It addresses the behaviour of organisational insiders – a group whose role in the prevention, response and mitigation of information security incidents is critical. The article identifies a set of organisational insiders’ perceived components of effective information security practices (organisational mission statement; common understanding of information security; awareness of threats; knowledge of information security incidents, routines and policy; relationships between employees; circulation of stories; role of punishment provisions; and training), based on which more successful information security strategies can be developed

The effect of asymmetries on stock index return value-at-risk estimates

It is widely accepted that equity return volatility increases more following negative shocks rather than positive shocks. However, much of value-at-risk (VaR) analysis relies on the assumption that returns are normally distributed (a symmetric distribution). This article considers the effect of asymmetries on the evaluation and accuracy of VaR by comparing estimates based on various models

Stress factors and stress management interventions: the heuristic of “bottom up” an update from a systematic review

Organizations have increasingly sought to adopt innovative interventions to prevent stress-related issues. In the field of manufacturing, however, the effectiveness of these interventions remains unclear because a systematic and specific review of existing primary evidence has not been undertaken. The present systematic literature review sought to address the foregoing limitation in the literature by summarizing the main source of stress and effectiveness of stress management interventions as grounded in the context of manufacturing. Our review was limited to only randomized clinical trials (RCTs) and quasi-experimental studies and concerned employees from the manufacturing sector. Twenty-two studies on primary, secondary and tertiary interventions across four continents (Asia, Europe, USA and South America) were selected and analyzed in terms of stress factors, methodological properties and outcomes. Most of these were RCT studies (68% Vs 32%) with a majority of secondary interventions (N = 11, 50%), followed by primary (N = 5, 22%), tertiary (N = 3, 13%), and two (9%) mixed interventions. The main outcomes included an improvement of psychological wellbeing, decreased stress reactivity and an increment of general health. There was a predominance of interventions utilizing skills programs and/or cognitive-behavioral techniques. The main source of stress reported related to professional identity, organizational deficiencies, interpersonal conflicts, physical complaints and poor work environment. Taken together, the findings provide important theoretical and practical implications for advancing the study of stress factors and the use of stress management interventions in the workplace. The prerequisite for a successful intervention is to address the real problems experienced by professionals and help them to cope with their difficult situations. The strategy of “bottom-up” offers a potential means of enhancing employees’ health and well-being; however, the most effective means of implementing these interventions needs to be understood better

The impact of an employee wellness programme in clothing/textile manufacturing companies: a randomised controlled trial

BACKGROUND: The prevalence of health risk behaviours is growing amongst South African employees. Health risk behaviours have been identified as a major contributor to reduced health related quality of life (HRQoL) and the increased prevalence of non-communicable diseases. Worksite wellness programmes promise to promote behaviour changes amongst employees and to improve their HRQoL. The aim of this study was to evaluate the short-term effects of an employee wellness programme on HRQoL, health behaviour change, body mass index (BMI) and absenteeism amongst clothing and textile manufacturing employees. METHODS: The study used a randomised control trial design. The sample consisted of 80 subjects from three clothing manufacturing companies in Cape Town, South Africa. The experimental group was subjected to a wellness programme based on the principles of cognitive behaviour therapy (CBT) as well as weekly supervised exercise classes over six weeks. The control group received a once-off health promotion talk and various educational pamphlets, with no further intervention. Measurements were recorded at baseline and at six weeks post-intervention. Outcome measures included the EQ-5D, Stanford Exercise Behaviours Scale, body mass index and absenteeism.Data was analysed with the Statistica-8 software program. Non-parametric tests were used to evaluate the differences in the medians between the two groups and to determine the level of significance. The Sign test was used to determine the within group changes. The Mann-Whitney U test was used to determine the difference between the two groups. RESULTS: At six weeks post intervention the experimental group (39 subjects) demonstrated improvement in almost every parameter. In contrast, apart from an overall decrease in time off work and a reduction in BMI for all study participants, there was no significant change noted in the behaviour of the control group (41 subjects). Seventy percent of the experimental group had improved HRQoL EQ-5D VAS scores post intervention, indicating improved perceived HRQoL. In comparison, only 58% of the control group had improved HRQoL EQ-5D VAS scores post intervention. There was no significant difference between the two groups at baseline or at six weeks post intervention. CONCLUSION: An employee wellness programme based on the principles of CBT combined with weekly aerobic exercise class was beneficial in improving the perceived HRQoL and changing health-related behaviours of clothing manufacturing employees. However, it cannot be concluded that the EWP was more effective than the once off health promotion talk as no significant changes were noted between the two groups at 6-weeks post intervention.This trial has been registered with ClinicalTrials.gov (trial registration number NCT01625039)

Energy for cities: Supply, demand and infrastructure investment

© 2017, Springer International Publishing AG. Energy is essential to all activities in all regions of a country. However the density of energy use in, and our economic dependence on, cities means that it is more critical for urban areas. Nevertheless we suggest that the provision of energy for urban areas cannot be considered separately from the national context. We will demonstrate how to assess the ability of a nation to invest in energy infrastructure for the benefit of cities. Our approach exploits data sets which are available in most industrialised countries, and we select two quite different case studies to illustrate our method: the Colombia (Bogota) and UK (London). Our focus for energy sustainability in cities is quality of life and reduced fossil-fuel emissions. We will show that the main target for cities should be to improve air quality and reduce energy demand by improving energy efficiency