INFOSEC in a Basket, 2004-2013

Topical and methodological diversity are key strengths of Information Systems (IS) research. To the extent that an IS sub-field such as IS security (hereafter, InfoSec) employs varied methods to examine various topics, the sub-field can claim strength through diversity. We conducted a systematic review of ten years of 85 InfoSec studies published in the IS Senior Scholars Basket of eight journals. We find that InfoSec researchers have employed a variety of quantitative and qualitative methods to study a variety of topics; that some journals published papers based on some methods and InfoSec topics more than others; that many methods are underutilized as applied to some topics; and that topics addressing the organizational/managerial and inter-organizational levels of analysis are understudied. We conclude that InfoSec research is maturing, yet abundant opportunities still exist to conduct further research aimed at building stronger theories and offering stronger implications for InfoSec practice

Why Cooperate? Ethical Analysis of InfoSec Vulnerability Disclosure

Vendors, security consultants and information security researchers seek guidance on if and when to disclose information about specific software or hardware security vulnerabilities. We apply Kantianism to argue that vendors and third parties (InfoSec researchers, consultants, and other interested parties) have an ethical obligation to inform customers and business partners (such as channel partners or providers of complementary products and services) about specific software vulnerabilities (thus addressing if disclosure should occur). We apply Utilitarianism to address the question of when disclosure should occur. By applying these two philosophical perspectives we conclude that to maximize social welfare, vendors should release software fixes as soon as possible, and third parties should adopt a coordinated disclosure policy to avoid placing customers and business partners at unnecessary risk

Seven C’s of Information Security

The 1991 United States Federal Sentencing Guidelines for Organizations (updated in 2004) describes legal requirements for organizations’ ethical business procedures. We adapt this framework for the purpose of developing a high-level “Seven C’s” framework for ethically-responsible information security (InfoSec) procedures. Informed by the Resource Based View (RBV) of strategic management, we analyze case studies of two organizations to demonstrate the adapted guidelines’ applicability. Each organization has a well-established InfoSec program, yet each requires further development according to guidelines in our Seven C’s model. We discuss implications for InfoSec policies and standards

Capabilities and Skill Configurations of Information Security Incident Responders

This paper identifies skill sets that contribute to effective InfoSec incident response. Even though many organizations have staff dedicated to InfoSec incident response teams, there is a lack of consensus as to the skill set each team member needs to effectively perform his/her job, and general and specialized skills that need to be represented in incident response teams (but usually not all held by each team member). Previous guidance was offered based on non-empirical methods. In this study, we used the Repertory Grid (RepGrid) method to elicit lists of incident response skills from industry experts. Skill archetypes were then identified by clustering incident responders who share similar characteristics. The findings extend the Theory of Resource Complements and provide managers with practical guidance regarding the skill sets most critical to the incident response role

Clinically Actionable Hypercholesterolemia and Hypertriglyceridemia in Children with Nonalcoholic Fatty Liver Disease

OBJECTIVE: To determine the percentage of children with nonalcoholic fatty liver disease (NAFLD) in whom intervention for low-density lipoprotein cholesterol or triglycerides was indicated based on National Heart, Lung, and Blood Institute guidelines. STUDY DESIGN: This multicenter, longitudinal cohort study included children with NAFLD enrolled in the National Institute of Diabetes and Digestive and Kidney Diseases Nonalcoholic Steatohepatitis Clinical Research Network. Fasting lipid profiles were obtained at diagnosis. Standardized dietary recommendations were provided. After 1 year, lipid profiles were repeated and interpreted according to National Heart, Lung, and Blood Institute Expert Panel on Integrated Guidelines for Cardiovascular Health and Risk Reduction. Main outcomes were meeting criteria for clinically actionable dyslipidemia at baseline, and either achieving lipid goal at follow-up or meeting criteria for ongoing intervention. RESULTS: There were 585 participants, with a mean age of 12.8 years. The prevalence of children warranting intervention for low-density lipoprotein cholesterol at baseline was 14%. After 1 year of recommended dietary changes, 51% achieved goal low-density lipoprotein cholesterol, 27% qualified for enhanced dietary and lifestyle modifications, and 22% met criteria for pharmacologic intervention. Elevated triglycerides were more prevalent, with 51% meeting criteria for intervention. At 1 year, 25% achieved goal triglycerides with diet and lifestyle changes, 38% met criteria for advanced dietary modifications, and 37% qualified for antihyperlipidemic medications. CONCLUSIONS: More than one-half of children with NAFLD met intervention thresholds for dyslipidemia. Based on the burden of clinically relevant dyslipidemia, lipid screening in children with NAFLD is warranted. Clinicians caring for children with NAFLD should be familiar with lipid management

Researching complex interventions in health: the state of the art

CITATION: Craig, P., et al. 2016. Researching complex interventions in health : the state of the art. BMC Health Services Research, 16:101, doi:10.1186/s12913-016-1274-0.The original publication is available at https://bmchealthservres.biomedcentral.comENGLISH SUMMARY : Keynote presentationsPublishers' Versio

Positioning Europe for the EPITRANSCRIPTOMICS challenge

The genetic alphabet consists of the four letters: C, A, G, and T in DNA and C,A,G, and U in RNA. Triplets of these four letters jointly encode 20 different amino acids out of which proteins of all organisms are built. This system is universal and is found in all kingdoms of life. However, bases in DNA and RNA can be chemically modified. In DNA, around 10 different modifications are known, and those have been studied intensively over the past 20 years. Scientific studies on DNA modifications and proteins that recognize them gave rise to the large field of epigenetic and epigenomic research. The outcome of this intense research field is the discovery that development, ageing, and stem-cell dependent regeneration but also several diseases including cancer are largely controlled by the epigenetic state of cells. Consequently, this research has already led to the first FDA approved drugs that exploit the gained knowledge to combat disease. In recent years, the ~150 modifications found in RNA have come to the focus of intense research. Here we provide a perspective on necessary and expected developments in the fast expanding area of RNA modifications, termed epitranscriptomics.SCOPUS: no.jinfo:eu-repo/semantics/publishe

Developing a core outcome set for fistulising perianal Crohn's disease

OBJECTIVE: Lack of standardised outcomes hampers effective analysis and comparison of data when comparing treatments in fistulising perianal Crohn's disease (pCD). Development of a standardised set of outcomes would resolve these issues. This study provides the definitive core outcome set (COS) for fistulising pCD. DESIGN: Candidate outcomes were generated through a systematic review and patient interviews. Consensus was established via a three-round Delphi process using a 9-point Likert scale based on how important they felt it was in determining treatment success culminating in a final consensus meeting. Stakeholders were recruited nationally and grouped into three panels (surgeons and radiologists, gastroenterologists and IBD specialist nurses, and patients). Participants received feedback fromtheir panel(in the second round) andall participants(in the third round) to allow refinement of their scores. RESULTS: A total of 295 outcomes were identified from systematic reviews and interviews that were categorised into 92 domains. 187 stakeholders (response rate 78.5%) prioritised 49 outcomes through a three-round Delphi study.The final consensus meeting of 41 experts and patients generated agreement on an eight domain COS. The COS comprised three patient-reported outcome domains (quality of life, incontinence and a combined score of patient priorities) and five clinician-reported outcome domains (perianal disease activity, development of new perianal abscess/sepsis, new/recurrent fistula, unplanned surgery and faecal diversion). CONCLUSION: A fistulising pCD COS has been produced by all key stakeholders. Application of the COS will reduce heterogeneity in outcome reporting, thereby facilitating more meaningful comparisons between treatments, data synthesis and ultimately benefit patient care