It is not my job: exploring the disconnect between corporate security policies and actual security practices in SMEs

Purpose: This paper aims to present empirical results exemplifying challenges related to information security faced by small and medium enterprises (SMEs). It uses guidelines based on work system theory (WST) to frame the results, thereby illustrating why the mere existence of corporate security policies or general security training often is insufficient for establishing and maintaining information security. Design/methodology/approach: This research was designed to produce a better appreciation and understanding of potential issues or gaps in security practices in SMEs. The research team interviewed 187 employees of 39 SMEs in the UK. All of those employees had access to sensitive information. Gathering information through interviews (instead of formal security documentation) made it possible to assess security practices from employees’ point of view. Findings: Corporate policies that highlight information security are often disconnected from actual work practices and routines and often do not receive high priority in everyday work practices. A vast majority of the interviewed employees are not involved in risk assessment or in the development of security practices. Security practices remain an illusory activity in their real-world contexts. Research limitations/implications: This paper focuses only on closed-ended questions related to the following topics: awareness of existing security policy; information security practices and management and information security involvement. Practical implications: The empirical findings show that corporate information security policies in SMEs often are insufficient for maintaining security unless those policies are integrated with visible and recognized work practices in work systems that use or produce sensitive information. The interpretation based on WST provides guidelines for enhancing information system security. Originality/value: Beyond merely reporting empirical results, this research uses WST to interpret the results in a way that has direct implications for practitioners and for researchers

Computational Modeling of Contrast Sensitivity and Orientation Tuning in Schizophrenia

Computational modeling is being increasingly used to understand schizophrenia, but, to date, it has not been used to account for the common perceptual disturbances in the disorder. We manipulated schizophrenia-relevant parameters in the GCAL (gain control, adaptation, laterally connected) model (Stevens et al., 2013), run using the Topographica simulator (Bednar, 2012), to model low-level visual processing changes in the disorder. Our models incorporated: separate sheets for retinal, LGN, and V1 activity; gain control in the LGN; homeostatic adaptation in V1 based on a weighted sum of all inputs and limited by a logistic (sigmoid) nonlinearity; lateral excitation and inhibition in V1; and self-organization of synaptic weights based on Hebbian learning. Data indicated that: 1) findings of increased contrast sensitivity for low spatial frequency stimuli in first episode schizophrenia (FES) can be successfully modeled as a function of reduced retinal and LGN efferent activity within the context of normal LGN gain control and cortical mechanisms (see Figure 1); and 2) findings of reduced contrast sensitivity and broadened orientation tuning in chronic schizophrenia can be successfully modeled by a combination of reduced V1 lateral inhibition and an increase in the Hebbian learning rate at V1 synapses for LGN input (see Figures 1-3). These models are consistent with many current findings (Silverstein, 2016) and they predict relationships that have not yet been explored. They also have implications for understanding links between perceptual changes and psychotic symptom formation, and for understanding changes during the long-term course of the disorder

How a Diverse Research Ecosystem Has Generated New Rehabilitation Technologies: Review of NIDILRR’s Rehabilitation Engineering Research Centers

Over 50 million United States citizens (1 in 6 people in the US) have a developmental, acquired, or degenerative disability. The average US citizen can expect to live 20% of his or her life with a disability. Rehabilitation technologies play a major role in improving the quality of life for people with a disability, yet widespread and highly challenging needs remain. Within the US, a major effort aimed at the creation and evaluation of rehabilitation technology has been the Rehabilitation Engineering Research Centers (RERCs) sponsored by the National Institute on Disability, Independent Living, and Rehabilitation Research. As envisioned at their conception by a panel of the National Academy of Science in 1970, these centers were intended to take a “total approach to rehabilitation”, combining medicine, engineering, and related science, to improve the quality of life of individuals with a disability. Here, we review the scope, achievements, and ongoing projects of an unbiased sample of 19 currently active or recently terminated RERCs. Specifically, for each center, we briefly explain the needs it targets, summarize key historical advances, identify emerging innovations, and consider future directions. Our assessment from this review is that the RERC program indeed involves a multidisciplinary approach, with 36 professional fields involved, although 70% of research and development staff are in engineering fields, 23% in clinical fields, and only 7% in basic science fields; significantly, 11% of the professional staff have a disability related to their research. We observe that the RERC program has substantially diversified the scope of its work since the 1970’s, addressing more types of disabilities using more technologies, and, in particular, often now focusing on information technologies. RERC work also now often views users as integrated into an interdependent society through technologies that both people with and without disabilities co-use (such as the internet, wireless communication, and architecture). In addition, RERC research has evolved to view users as able at improving outcomes through learning, exercise, and plasticity (rather than being static), which can be optimally timed. We provide examples of rehabilitation technology innovation produced by the RERCs that illustrate this increasingly diversifying scope and evolving perspective. We conclude by discussing growth opportunities and possible future directions of the RERC program

Stroke: Working Toward a Prioritized World Agenda

The aim of the Synergium was to devise and prioritize new ways of accelerating progress in reducing the risks, effects, and consequences of stroke

Stroke: Working Toward a Prioritized World Agenda

The aim of the Synergium was to devise and prioritize new ways of accelerating progress in reducing the risks, effects, and consequences of stroke

Making Sense of Institutional Change in China: The Cultural Dimension of Economic Growth and Modernization

Building on a new model of institutions proposed by Aoki and the systemic approach to economic civilizations outlined by Kuran, this paper attempts an analysis of the cultural foundations of recent Chinese economic development. I argue that the cultural impact needs to be conceived as a creative process that involves linguistic entities and other public social items in order to provide integrative meaning to economic interactions and identities to different agents involved. I focus on three phenomena that stand at the center of economic culture in China, networks, localism and modernism. I eschew the standard dualism of individualism vs. collectivism in favour of a more detailed view on the self in social relationships. The Chinese pattern of social relations, guanxi, is also a constituent of localism, i.e. a peculiar arrangement and resulting dynamics of central-local interactions in governing the economy. Localism is balanced by culturalist controls of the center, which in contemporary China builds on the worldview of modernism. Thus, economic modernization is a cultural phenomenon on its own sake. I summarize these interactions in a process analysis based on Aoki's framework