bluuebunny/crossref_metadata_2025_split huggingface dataset:
An integrated view of human, organizational, and technological challenges of IT security management
Authors: Werlinger Rodrigo , Hawkey Kirstie , Beznosov Konstantin 
Published: March 2009

PurposeThe purpose of this study is to determine the main challenges that IT security practitioners face in their organizations, including the interplay among human, organizational, and technological factors.Design/methodology/approachThe data set consisted of 36 semi‐structured interviews with IT security practitioners from 17 organizations (academic, government, and private). The interviews were analyzed using qualitative description with constant comparison and inductive analysis of the data to identify the challenges that security practitioners face.FindingsA total of 18 challenges that can affect IT security management within organizations are indentified and described. This analysis is grounded in related work to build an integrated framework of security challenges. The framework illustrates the interplay among human, organizational, and technological factors.Practical implicationsThe framework can help organizations identify potential challenges when implementing security standards, and determine if they are using their security resources effectively to address the challenges. It also provides a way to understand the interplay of the different factors, for example, how the culture of the organization and decentralization of IT security trigger security issues that make security management more difficult. Several opportunities for researchers and developers to improve the technology and processes used to support adoption of security policies and standards within organizations are provided.Originality/valueA comprehensive list of human, organizational, and technological challenges that security experts have to face within their organizations is presented. In addition, these challenges within a framework that illustrates the interplay between factors and the consequences of this interplay for organizations are integrated.
Formalizing the ranking of authentication products
Authors: Helkala Kirsi , Snekkenes Einar 
Published: March 2009

PurposeThe purpose of this paper is to present a new method for ranking authentication products. Using this method, issues such as technical performance, application/system‐specific requirements, cost and usability are addressed. The method simplifies and makes the selection process more transparent by identifying issues that are important when selecting products.Design/methodology/approachThe paper used quantitative cost and performance analysis.FindingsThe method can be widely applied, allowing the comparison and ranking of an extensive variety of authentication products (passwords, biometrics, tokens). The method can be used for both product selection and the process of product development as supported by the case studies.Originality/valueThis is a work that demonstrates how to compare authentication methods from different categories. A novel ranking method has been developed which allows the comparison of different authentication products in a defined usage scenario.
Using penetration testing feedback to cultivate an atmosphere of proactive security amongst end‐users
Authors: Styles Martyn , Tryfonas Theo 
Published: March 2009

PurposeThe purpose of this case study paper is to demonstrate that, no matter how complex computer security systems are, effort should be concentrated and focused on employees to improve their security awareness. Each employee needs to become a “Security Deputy” to the company's computer security staff and he or she needs to take some responsibility for preventing security breaches – whether inside the workplace or not. It is easy to unwittingly spread a virus, or open security vulnerabilities, and such actions might damage a company's systems perhaps even more than malicious employees, through simple ignorance of security issues.Design/methodology/approachA series of surveys and questionnaires were designed along with practical exercises and security awareness training sessions.FindingsFollowing their involvement in the exercises and awareness training, employees demonstrated improvement in security awareness. Users were made explicitly aware of the realities of IT security with pertinent questions asked in order to force them evaluate their own reactions to a situation which may escalate into a security incident.Research limitations/implicationsThe research was undertaken in a typical medium‐large sized company within the energy business sector, but it is possible that results may be different in other sectors.Practical implicationsIt is clear that security technologies alone cannot prevent incidents and therefore employees need good quality security awareness training in order to protect the organisation.Originality/valueIt is becoming increasingly important that employees are taken through a more rigorous security‐awareness training programme, in order to protect business computer systems and to “protect them from themselves”.
Social engineering: assessing vulnerabilities in practice
Authors: Bakhshi Taimur , Papadaki Maria , Furnell Steven 
Published: March 2009

PurposeThe purpose of this paper is to investigate the level of susceptibility to social engineering amongst staff within a cooperating organisation.Design/methodology/approachAn e‐mail‐based experiment was conducted, in which 152 staff members were sent a message asking them to follow a link to an external web site and install a claimed software update. The message utilised a number of social engineering techniques, but was also designed to convey signs of a deception in order to alert security‐aware users. The external web site, to which the link was pointing, was intentionally badly designed in the hope of raising the users' suspicions and preventing them from proceeding with the software installation.FindingsIn spite of a short window of operation for the experiment, the results revealed that 23 per‐cent of recipients were fooled by the attack, suggesting that many users lack a baseline level of security awareness that is useful to protect them online.Research limitations/implicationsAfter running for approximately 3.5 h, the experiment was ceased, after a request from the organisation's IT department. Thus, the correct percentage of unique visits is likely to have been higher. Also, the mailings were sent towards the end of a working day, thus limiting the number of people who got to read and respond to the message before the experiment was ended.Practical implicationsDespite its limitations, the experiment clearly revealed a significant level of vulnerability to social engineering attacks. As a consequence, the need to raise user awareness of social engineering and the related techniques is crucial.Originality/valueThis paper provides further evidence of users' susceptibility to the problems, by presenting the results of an e‐mail‐based social engineering study that was conducted amongst staff within a cooperating organisation.
A theoretical perspective of the cultural influences of individualism/collectivism, group membership, and performance variation on allocation behaviors of supervisors
Authors: Fadil Paul A. , Williamson Steven , Knudstrup Mike 
Published: March 2009

PurposeThe purpose of this paper is to strengthen the theoretical foundation of the distributive justice literature by isolating and exploring the major independent variables (individualism/collectivism; subordinate group membership; and subordinate performance variations) identified from previous studies. Their individual and cumulative influence on supervisory allocation behaviour is the foundation of this paper.Design/methodology/approachA conceptual exploration of past studies reveals the variables that impact the allocation choice of supervisors. Utilizing these factors, a theoretically based model that explores the direct and interactive influences of these independent variables on allocation behaviour, as well as the subsequent impact of the allocation behaviour on future supervisors – subordinate social exchanges are developed.FindingsA cogent, theoretical framework is delineated for a well‐established research stream (distributive justice) that severely needs one. Propositions are also derived to direct future empirical inquiry. In sum, the allocation model succeeds in consolidating the plethora of fragmented studies that currently dot the distributive justice literary landscape.Practical implicationsThis paper synthesizes past allocation studies while developing a theoretically based model which illustrate the interaction of the major independent variables. Practically, it also shows that managers cannot ignore cultural factors when compensating employees.Originality/valueThis paper provides a theoretical framework for past studies while laying the groundwork for future empirical inquiries on supervisory allocation choices.
Leveraging closed‐loop orientation and leadership for environmental sustainability
Authors: Clifford Defee C. , Esper Terry , Mollenkopf Diane 
Published: March 2009

PurposeThe paper's aim is to develop a closed‐loop supply chain orientation as a strategic alternative available to supply chain organizations seeking competitive advantage in a setting that puts a premium on socially responsible decisions.Design/methodology/approachThe literature describing the concepts of supply chain orientation and supply chain leadership is used to develop a framework for achieving a competitive advantage.FindingsCreating a closed‐loop supply chain orientation may be facilitated when the supply chain leader demonstrates a transformational leadership style, and when socially important environmental issues are present.Research limitations/implicationsThe paper presents a synthesis of previously unconnected concepts in a conceptual framework that sets a stage for future research in this area.Practical implicationsThe paper highlights the strategic importance of developing a closed‐loop supply chain orientation in the presence of environmental factors, and a supply chain leadership style that may enhance the transformation to such an orientation.Originality/valueThe paper extends the strategic concept of supply chain orientation to include forward and reverse flows in a holistic, closed‐loop view of the supply chain.
Supply management ethical responsibility: reputation and performance impacts
Authors: Eltantawy Reham A. , Fox Gavin L. , Giunipero Larry 
Published: March 2009

PurposeThere is a lack of extensive research related to the immediate consequences of supply management ethical responsibility (SMER) and the moderating and/or mediating factors that strengthen or weaken its consequences. Although the underlying presumption is that companies no longer have the luxury of ignoring the importance of SMER, the lack of empirical research of SMER's impact on supply management performance (SMP) reflects the need for research that draws on and empirically tests established theories concerning the role of corporate ethics within the context of supply management (SM). Therefore, the purpose of this study is to determine the impact of SMER and strategic supply management skills on SM perceived reputation and performance.Design/methodology/approachStructural equation modeling is employed to investigate the hypothesized relationships. A sample of 162 purchasing managers provided the data via survey.FindingsStrategic supply management skills and perceived reputation have a positive direct impact on performance. SMER is not directly affected by skills and has an indirect impact on performance through its positive relationship with perceived reputation.Practical implicationsThe findings suggest that SMER is limited in its ability to predict performance, but is a valuable component of building SM perceived reputation. Firms should not ignore SMER, as it may provide strategic marketing advantage as an order qualifier or limiting criterion.Originality/valueThis paper investigates the interplay among several important determinants of supply chain performance, including the greatly under‐studied ethics construct.
Sustainable procurement in the United Kingdom public sector
Authors: Walker Helen , Brammer Stephen 
Published: March 2009

PurposeThis study aims to investigate sustainable procurement in the UK public sector.Design/methodology/approachSustainable procurement is investigated using a questionnaire that draws on established scales for “purchasing social responsibility”. The survey was administered across the UK public sector, and 106 responses were received from procurement officers.FindingsAnalysis of quantitative and qualitative survey data reveal there is significant variation across public sector agencies in the nature of sustainable procurement practice. Local authorities have a particularly strong emphasis on buying from local and small suppliers relative to other sectors, health looks generally lower in many categories, and education appears to have something of an emphasis on environmental aspects of sustainable procurement. Cost has been found to be the leading barrier to sustainable procurement, and top management support the leading facilitator.Research limitations/implicationsThere is likely to be selection bias in the sample, with those practitioners engaging in the sustainability agenda being more likely to have responded to the questionnaire. The United Kingdom government has an objective amongst the leaders in Europe on sustainable procurement by 2009, and early signs are encouraging that progress towards this goal is underway.Originality/valueThis paper provides the first survey of sustainable procurement practices across the UK public sector. It also provides a conceptual framework of influences upon the propensity to engage in sustainable procurement practice.
Student perception of learning through a problem‐based learning exercise: an exploratory study
Authors: Werth Eric P. 
Published: March 2009

PurposeStaff at Idaho Peace Officer Standards and Training developed a 70‐hour problem‐based learning exercise (PBLE) and integrated this program into the existing Basic Patrol Officer Academy. This paper aims to examine the effectiveness of PBL in developing subject‐specific policing knowledge as well as decision‐making, problem‐solving, and collaboration skills.Design/methodology/approachFollowing the PBLE, students completed an in‐depth survey prompting feedback on the ability of the program to develop various skills known to be important to policing. These self‐reported data were collected from 122 students over three academy sessions and evaluated by Chi‐square statistical analysis.FindingsResults indicate that the pilot PBLE is significant in helping students develop new policing skills, demonstrating how information learned in class applies to field work, aiding in recall of class material, developing problem‐solving skills, and learning skills needed to work in groups in the law enforcement field (p<0.01).Research limitations/implicationsThis research demonstrates that PBLEs can be effective in developing difficult‐to‐teach skills. The pilot program also helps students discover how material presented in class applies to fieldwork. A program able to bridge the gap between information recall and application would be a significant addition to any training.Originality/valueResearch demonstrating the effectiveness of programs based on PBL philosophy is difficult to find, particularly in relation to law police training. The experience of students who have been through the Idaho program is a valuable step towards filling this void. The program also demonstrates that some of the purposed benefits of PBL can be achieved without necessitating a rewrite in training curriculum.
Paying a marriage tax
Authors: Archbold Carol A. , Hassell Kimberly D. 
Published: March 2009

PurposeThis paper aims to examine some of the factors associated with the decision to participate in the promotion process for female police officers in a Midwestern police agency.Design/methodology/approachFace‐to‐face, structured interviews were conducted in the spring of 2006 with most (74 percent) of the female police officers employed by a Midwestern, municipal police agency.FindingsThe authors identified several organizational and personal factors that impact on female police officers' decision to participate in the promotion process. This study also uncovers a factor that has not been addressed in previous research: how being married to fellow police officers (or part of a “cop couple”) can restrict the upward mobility of female police officers.Research limitations/implicationsData for this study were collected from one municipal police agency in the Midwest; therefore, the research findings may not be generalizable to small or very large police agencies. In addition, the female officers in this police agency comprise a relatively high percentage of sworn positions (15 percent) compared to the national average of 12.6 percent; therefore, the experiences of the women in this department may not be representative of other female police officers working in agencies where women comprise either more or less than 15 percent of all sworn positions. Another limitation of this study is that the sample size is small. This is a limitation that most researchers will encounter when they choose to study female police officers, as there are so few women who work in American police agencies.Practical implicationsBy identifying the barriers that female officers face when deciding to go through the promotion process, the authors were able to provide several administrative changes that could be made to encourage more female officers to participate in the promotion process.Originality/valueThere is very limited published research on the promotion of female police officers. This study uncovers a factor that has not been addressed in previous research: how being married to fellow police officers can restrict the upward mobility of female police officers, thus resulting in a “marriage tax” for female police officers.
Towards a human‐oriented metrology for improvement and change
Authors: Mi Dahlgaard‐Park Su 
Published: March 2009

PurposeAn overall aim with a new human‐oriented TQM metrology is to help managers in giving answers to the questions of what to measure, how to measure and why? It is the purpose of this paper to give input to answering these questions. In doing so the measurement problems are to be discussed in relation to the context in which the measurements are applied. Some common risks or failures are also to be discussed when more complex or advanced measurements are used such as LISREL or PLS measurements.Design/methodology/approachThe main methodology is to re‐interpret measurements from three company cases by having a special focus on understanding the importance of the human‐oriented dimension of TQM and Change Management. The European Excellence Model (EFQM) is used as the reference framework for understanding what to measure, how to measure and why?FindingsThe measurements support the view that establishing measurements related to the human dimension of TQM and Change gives new opportunities for understanding the results achieved or not achieved.Research limitations/implicationsBecause the research is based on a combination of theory and case studies it is believed that the findings can be generalized to most companies working under the laws of free competition. The specific measurement examples should not be copied but should be adapted carefully to other contexts and cultures.Practical implicationsThe case companies analysed are two relatively big global industrial companies and a big national and government‐owned service company (Post Denmark). Case studies from small‐ and medium companies have not been analysed here but several materials from these kinds of companies support the conclusions in the paper.Originality/valueThis is the first paper towards a human‐oriented metrology for improvement and change. The main value of establishing performance measurement systems with a balanced focus on tangibles and intangibles (the human dimension) is that this kind of measurement is a necessity for understanding the root causes of the results achieved or not achieved.
Practice follows structure: QM in Malaysian public hospitals
Authors: Manaf Noor Hazilah Abd 
Published: March 2009

PurposeThe main aim of this study is to provide an empirical analysis on the practice of quality management among employees of Malaysian public hospitals at the district, state and national level hospitals. This paper aims to perform a comparative analysis on quality management practices among the three levels of hospitals.Design/methodology/approachThe main method of data collection was self‐administered questionnaire, and cluster sampling was used to select the respondent hospitals, while respondent employees were selected by stratified random sampling. Altogether 23 public hospitals throughout Peninsular Malaysia participated in the survey.FindingsPractice of quality management was found to be significantly higher in district hospitals than in the national referral centre. However, there was no significant difference in perception on implementation outcome between the three levels of hospitals. Among the factors of quality management, teamwork was found to be significantly higher in district hospitals than in state hospitals and the national referral centre. Leadership and management commitment were found to be significantly higher in district and state hospitals than in the national referral centre. The effect of organizational structure could have an effect on practice of quality management.Originality/valueEmpirical studies on the effect of organisational structure on practice of quality management among employees of Malaysian public hospitals have never been conducted before and this thus contributes to the body of knowledge in this discipline of research.
Quality in NHS hospitals: no one knows better than patients
Authors: Karassavidou Eleonora , Glaveli Niki , Papadopoulos Chrissoleon T. 
Published: March 2009

PurposeNational Health Systems (NHS) experience low trust and lack of public confidence while receiving strong pressure from governments and societies to improve their quality and compete effectively. The purpose of this paper is threefold. First, to investigate how patients perceive service quality in Greek NHS hospitals. Second, to assess patients' perceptions, expectations and the relevant gaps concerning the quality provided by public hospitals. Third, to determine the relative importance of quality dimensions in influencing patients' overall quality perceptions.Design/methodology/approachEmpirical research using the SERVQUAL instrument was conducted in six NHS hospitals located in North Greece. A total of 137 usable questionnaires were collected.FindingsThe research results revealed a three‐dimension SERVQUAL construct, which proved to be a valid, reliable and flexible tool for measuring quality in Greek hospitals. The human factor was revealed as being the most critical dimension of quality, reflecting the significance of the traditional view of the doctor‐patient relationship. Quality gaps are illuminated, suggesting that there is room for improvement initiatives.Practical implicationsThe paper provides guidelines to hospital managers and policymakers as to developing strategies that aim at meeting patients' expectations of service quality and restoring trust in public hospitals.Originality/valueThe paper sheds light on service quality, a critical aspect of hospital performance, drawing attention to patients' orientations. The study gives support to the view that quality in hospitals can be determined, measured and systematically monitored with the goal of responding to patients' needs.