Search results

Cyber security has never been more important than it is today in an ever more connected and pervasive digital world. However, frequently reported shortages of suitably skilled and trained information system (IS)/cyber security professionals elevate the importance of delivering effective Security Education,Training and Awareness (SETA) programmes within organisations. Therefore, the purpose of this study is the questionable effectiveness of SETA programmes at changing employee behaviour and an absence of empirical studies on the critical success factors (CSFs) for SETA programme effectiveness.

This exploratory study follows a three-stage research design to give voice to practitioners with SETA programme expertise. Data is gathered in Stage 1 using semi-structured interviews with 20 key informants (the emergence of the CSFs), in Stage 2 from 65 respondents to a short online survey (the ranking of the CSFs) and in Stage 3 using semi-structured interviews with nine IS/cyber security practitioners (the emergence of the guiding principles). Using a multi-stage research design allows the authors to propose and evaluate the 11 CSFs for SETA programme effectiveness.

This study conducted a mean score analysis to evaluate the level of importance of each CSF within two independent groups of IS/cyber security professionals. This multi-stage analysis produces a ranked list of 11 CSFs for SETA programme effectiveness, while the difference in the rankings leads to the emergence of five CSF-specific guiding principles (to increase the likelihood of delivering an effective SETA programme within an organisational context). This analysis also reveals that most of the contradictions/differences in CSF rankings between IS/cyber security practitioners are linked to the design phase of the SETA programme life cycle. While two CSFs, “maintain quarterly evaluation of employee performance” (CSF-DS6) and “build security awareness campaigns” (CSF-EV1), represent the most significant contradiction in this study.

The 11 CSFs for SETA programme effectiveness, along with the five CSF-specific guiding principles, provide a greater depth of knowledge contributing to both theory and practice and lays the foundation for future studies. Therefore, the outputs of this study provide valuable insights on the areas that practice needs to get right to deliver effective SETA programmes.

This study explores the critical success factors (CSFs) for Security Education, Training and Awareness (SETA) program effectiveness. The questionable effectiveness of SETA programs at changing employee behavior and an absence of empirical studies on the CSFs for SETA program effectiveness is the key motivation for this study.

This exploratory study follows a systematic inductive approach to concept development. The methodology adopts the “key informant” approach to give voice to practitioners with SETA program expertise. Data are gathered using semi-structured interviews with 20 key informants from various geographic locations including the Gulf nations, Middle East, USA, UK and Ireland.

In this study, the analysis of these key informant interviews, following an inductive open, axial and selective coding approach, produces 11 CSFs for SETA program effectiveness. These CSFs are mapped along the phases of a SETA program lifecycle (design, development, implementation and evaluation) and nine relationships identified between the CSFs (within and across the lifecycle phases) are highlighted. The CSFs and CSFs' relationships are visualized in a Lifecycle Model of CSFs for SETA program effectiveness.

This research advances the first comprehensive conceptualization of the CSFs for SETA program effectiveness. The Lifecycle Model of CSFs for SETA program effectiveness provides valuable insights into the process of introducing and sustaining an effective SETA program in practice. The Lifecycle Model contributes to both theory and practice and lays the foundation for future studies.

The study aims to provide insights in the sensemaking process and the use of business analytics (BA) for project selection and prioritisation in start-up settings. A major focus is on the various ways start-ups can understand their data through the analytical process of sensemaking.

This is a comparative case study of two start-ups that use BA in their projects. The authors follow an interpretive approach and draw from the constructivist grounded theory method (GTM) for the purpose of data analysis, whereby the theory of sensemaking functions as the sensitising device that supports the interpretation of the data.

The key findings lie within the scope of project selection and prioritisation, where the sensemaking process is implicitly influenced by each start-up's strategy and business model. BA helps start-ups notice changes within their internal and external environment and focus their attention on the more critical questions along the lines of their processes, operations and business model. However, BA alone cannot support decision-making around less structured problems such as project selection and prioritisation, where intuitive judgement and personal opinion are still heavily used.

This study extends the research on BA applied in organisations as tools for business development. Specifically, the authors draw on the literature of BA tools in support of project management from multiple perspectives. The perspectives include but are not limited to project assessment and prioritisation. The authors view the decision-making process and the path from insight to value, as a sensemaking process, where data become part of the sensemaking roadmap and BA helps start-ups navigate the decision-making process.

The purpose of this article is to identify design guidelines for online resources based on the subjective assessment criteria used by individuals to assess and process information resources. This method of creating design guidelines targeted at precise user groups has the potential to aid designers and developers to create more user-centred information resources.

The authors gathered data using a prospective longitudinal study investigating the information behaviour of expectant and new mothers. Women were asked to report on their information-seeking activities in a series of semi-structured interviews covering pregnancy and early motherhood.

This research identified 15 assessment criteria that were utilised by women to assess and process information resources. The most popular resource criteria amongst participants were credibility and convenience, while completeness and relevance were the most popular information content criteria. The authors found that assessment criteria were not considered in isolation, with criteria such as formatting and search engine ranking impacting on participants' perception of other criteria.

This research demonstrates the potential of linking a user groups subjective assessment criterion to design guidelines. The authors propose that these guidelines could be used to help design an online information resource. They could also be used to assess if an existing online resource met the needs of a user group. The methodology used in this study could be leveraged to create design guidelines for user groups.

This research uses subjective assessment criteria as a means of understanding how expectant new mothers process information resources. People use subjective judgements when processing information resources, and this should be incorporated into the design of information resources. Analysing longitudinal data allowed the authors to build a rich picture of how participants evaluated and compared different information resources.

The purpose of this paper is to explore the current literature on data governance in scientific and practice-oriented publications, and to provide a comparative analysis of the activities reported for data governance. Data have become a key organisational asset and data governance both a necessary and critical activity.

A comprehensive literature review is conducted in order to identify the published material that reflects the current state of knowledge. A systematic procedure was followed that identified 61 publications that explicitly mention data governance activities. Open coding techniques were applied to conduct content analysis, resulting in the identification of 591 concepts. A critical analysis also identified gaps in the literature.

The analysis identified 120 data governance activities which are understood as: “action” plus “area of governance” plus “decision domain” (e.g. define data policies for data quality). The authors define and present a data governance activities model based on the analysis. The analysis also shows a higher volume of data governance activities reported by practice-oriented publications that are associated with the “implement” and “monitor” actions of the areas of governance across the decision domains compared with scientific publications, whereas The authors found that the scientific publications focus more on defining activities. The results contribute to identifying research gaps and concerns on which ongoing and future research efforts can be focused.

This paper is of interest to both academics and practitioners, as it helps them understand the activities associated with a data governance programme. Current literature fails to provide a comprehensive understanding of the data governance activities that are required when considering a data governance programme. Therefore, the proposed model for data governance activities can be used to give insights into these activities.

To the knowledge of the authors, this study is the first to explicitly consider data governance activities from both an academic and practice-oriented perspective.

The need for an integrated enterprise‐wide approach to management information pronounced data warehousing (DW) the “hot topic” of the early‐to‐mid‐1990s. However, it became unfashionable in the late 1990s, with the widespread implementation of enterprise resource planning (ERP) systems. With ERP managers were led to believe that they would derive informational as well as operational benefits from the introduction of integrated enterprise‐wide systems. However, the recent re‐emergence of DW, to address the limitations and unrealised benefits of ERP systems, provides a new, more complex integration challenge. The main objective of this paper is to present the concept of organisational prerequisites for enterprise‐wide integration projects as a means to help managers preparing for and managing their ERP/DW projects.

This paper draws on existing literature on ERP and DW implementations. It puts forward a model to be further tested and validated by ERP researchers.

The proposed model has the potential to solve the problems experienced in ERP implementations and, more generally, in projects leading to large‐scale enterprise integration.

Existing ERP research indicates that the intelligence phase of most ERP projects is ignored both in practice and in research. This paper lays the foundation for a framework that addresses this problem.

The success rate of enterprise resource planning (ERP) implementations is not high in view of the sums invested by organisations in these applications. It has often been indicated that a combination of inadequate preparedness and inappropriate project management have been responsible for the low‐success rate of ERP implementations. The purpose of this paper is to present a case study of a successful ERP implementation.

In this paper, the authors use a case study of a very successful roll out of an ERP application in the Irish subsidiary of a UK multinational to investigate the validity of one of the most commonly cited project management frameworks, the project management body of knowledge (PMBOK), to ERP projects. Discussing each category of the framework in turn, the case data to illustrate where the PMBOK framework is a good fit or needs refining for ERP projects is used.

It is found that, by and large, PMBOK, because it is a very broad framework, can shed light on most of the key aspects of an ERP project. However, the specificities of this type of project require a different emphasis on some of the factors, as discussed in the authors conclusions. The case analysis also raised some interesting insights into how companies evaluate the success of such highly complex change management initiatives.

This research work will need to be extended to cover other case studies of ERP implementation across other industries and organisational contexts; for example in less tightly regulated industries and smaller organisations.

This discussion will be of great value to ERP project managers who are in the early stages of a project and need to understand and anticipate the areas which will require specific attention on their part, based on their knowledge of the specific circumstances within their organisational context.

This paper presents an investigation into the project management strategy adopted in the Pharma Inc. case and illustrates the mechanics of a successful ERP project implementation, categorised using the PMBOK framework.

The objective of this paper is to present a case study of an organisation in pursuit of becoming a 100 per cent e‐corporation.

This exploratory research case study documents the deployment of two e‐supply chain initiatives undertaken by the organisation, highlighting the benefits of these initiatives to the organisation.

The findings of this study suggest that, while benefits can be realised from creating an e‐supply chain, an organisation needs to ensure a common understanding and definition of what it is striving to achieve in undertaking an e‐supply chain initiative in an effort to become a 100 per cent e‐corporation.

A limitation of this study relates to the fact that Intel's suppliers were not interviewed as part of this research, although available supplier‐related documentation was analysed.

Intel is identified as being quite a distance from achieving its ultimate goal of becoming a “100 per cent e‐corporation”. This paper highlights the fact that a shared understanding throughout the entire organisation of what a “100 per cent e‐corporation” means is a key requirement for any organisation undertaking such an initiative.

The principal contribution of this paper is the fact that it refers to a previously unused term – “100 per cent e‐corporation”. The exact meaning of this term has many interpretations within the case studied in this paper, and indeed this will also be true in all organisations pursuing such an e‐supply chain strategy.

The limited success of electronic health records (EHRs) implementation in the healthcare services in general, and a national EHR in particular, requires better understand and documentation of the current drivers and inhibitors of EHR adoption, together with a definition of a national EHR. This paper aims to address these issues.

Factors affecting EHR adoptions are elicited from extant literature and the stakeholder/actor framework is used as the theoretical framework. The multiple case study approach is used as the research method, and data are collected in Ireland and Israel by interviews and analysed using text coding methods.

Factors elicited in the literature are generally corroborated, yet the salient factor on the localized perspective appears to be the degree of centralization of the healthcare services; while different factors affect the national perspective. In summary, it seems that Israel is more ready for national EHR implementation than Ireland due to the high level of computerization and high levels of integration of primary and secondary care patient data.

Contribution to research is in the definition of a national EHR, the illustration of various levels of analysis and their relative impacts on EHR adoption, the analysis framework, and by showing that EHR adoption is a top‐down, change management process.

EHR adoption should be driven by a powerful actor in the healthcare sector addressing the need for a high level of integration within and between care levels, while focusing on clinicians' requirements. Technological and legislative infrastructures are mandatory for establishing a national EHR.

Data for this study are collected in two countries that represent different healthcare structures, one being highly centralized while the other is just the opposite. These differences provide an additional interesting lens through which factors affecting EHR adoption can be assessed. As far as we know, not many previous studies have compared EHR adoption across two diverse healthcare systems.

This briefing is prepared by an independent writer who adds their own impartial comments and places the articles in context.

This paper aims to review the latest management developments across the globe and pinpoint practical implications from cutting-edge research and case studies.

Business analytics (BA) can help firms better select and prioritize project work they undertake. Data generated through analytics permits awareness of changes in the operating environment and can be used to inform sensemaking and alongside intuition to enhance decision-making.

The briefing saves busy executives and researchers hours of reading time by selecting only the very best, most pertinent information and presenting it in a condensed and easy-to-digest format.