Critical infrastructure systems : security analysis and modelling approach

A system security analysis and system modelling framework tool is proposed adopting an associated conceptual methodology as the basis for assessing security and conceptually modelling a critical infrastructure system incident. The intent is to identify potential system security issues and gain operational insights that will contribute to improving system resilience, contingency planning, disaster recovery and ameliorating incident management responses for critical infrastructure system incidents. The aforementioned system security analysis and modelling framework is applied to an adverse critical infrastructure system incident case study. This paper reports on the practical application of the framework to a case study of an actual critical infrastructure system failure and the resultant incident implications for the system and the wider regional communities.<br /

An IT service engineering and management framework (ITS-EMF)

There is a rich amount of literature on services from Information Technology (IT) (Management view) and IT System Engineering (ITSE) (Engineering view) domains. However, such a variety has produced disparate views. Furthermore, given that IT and ITSE service-based systems must be linked to business services (the User view), conceptual interrelationships are increased, causing yet more diversity. This paper identifies that this generates a lack of theoretical conceptual cohesion and leads to multiple practical confusions. To address these issues and to reduce such conceptual gaps, an IT Service Engineering and Management Framework (ITS-EMF) is proposed. ITS-EMF is generated by careful review and examination of the main conceptualiza- tions on IT, ITSE and business services. The paper claims that ITS-EMF is useful for: (1) mapping services concepts from disparate IT literature, (2) reducing service conceptual confusion from the multiple available sources, and (3) providing conceptual links between service constructs used in business services and IT and ITSE services layers. It concludes with the implications, both academic and practical, for engineering and managing IT services in business organizations

Supply chain integration:challenges and solutions

Since its introduction by management consultants in the early 1980s, supply chain management (SCM) has been primarily concerned with the integration of processes and activities both within and between organisations. The concept of supply chain integration (SCI) is based on documented evidence that suggests that much of the waste throughout businesses is a consequence of fragmented supply chain configurations. However, there is also evidence to suggest that the achievement of higher levels of intra- and inter-firm integration presents an array of managerial challenges. The need for innovation in all aspects of SCM is widely recognised. Given the pivotal role of the integration paradigm within SCM, any meaningful innovation in this area must focus heavily on this issue. This chapter outlines some of the challenges by exploring the evolving SCM business context. It goes on to relate SCM theory to the widely cited Porter value chain concept. The core of the chapter provides a detailed description of SCI based on a wide variety of literature. It does so with particular reference to the challenges inherent in implementing an integrated business paradigm with a view to identifying a range of possible innovative solutions. The adoption of more integrated supply chain structures raises questions regarding the nature of both internal and external customer/supplier relationships. The effective management of such relationships is, therefore, given particular focus

Using Network Analysis and Visualization to Analyze Problematic Enterprise Information Systems

Society is demanding larger and more complex information systems to support increasingly complex and critical organisational work. Whilst troubleshooting socio-technical issues in small-to-medium scale situations may be achievable using approaches such as ethnography, troubleshooting enterprise scale situations is an open research question because of the overwhelming number of socio-technical elements and interactions involved. This paper demonstrates proof-of-concept tools for network analysis and visualisation that may provide a promising avenue for identifying problematic elements and interactions among an overwhelming number of socio-technical elements. The findings indicate that computers may be used to aid the analysis of problematic large-scale complex socio-technical situations by using analytical techniques to highlighting elements, or groups of interacting elements, that are important to the overall outcome of a problematic situation