A probabilistic approach to information management of order fulfilment reliability with the help of perfect-order analytics

2023 | International Journal of Information Management | Citations: 0

Authors: Lukinskiy, Valery; Lukinskiy, Vladislav; Ivanov, Dmitry; Sokolov, Boris; Bazhina, Darya

Abstract: Supplier reliability and order fulfilment performance are usually assessed using ... Expand

Abstract: Supplier reliability and order fulfilment performance are usually assessed using a perfect-order calculation. In­ formation management of perfect-order estimation is frequently reduced to expert estimates and to the multi­ plication of probabilities of failure-free performance of some logistics operations. Moreover, perfect-order estimation is calculated without consideration of supply chain structure, possible combinations of failures, and operational policies (e.g., safety stock levels and alternative transportation routes). As a result, the existing methods frequently provide different estimates for the same statistics and cannot be consistently used in the allocation of companies’ resources to improve the order fulfilment process. This paper considers different var­ iants of probabilistic assessment of a perfect order and proposes an approach to assess the impact of changes in parameter probabilities and number of parameters on the value of a perfect order. The proposed models are based on an analytical approach using discrete distributions of random variables. We illustrate the applicability of our approach to several numerical examples to confirm the adequacy of the proposed method. Our approach can be immediately applied in practice to assess supply and order fulfilment process reliability and to evaluate the effectiveness of various operational policies (safety stock levels or modes of transportation) to achieve some planned values of a perfect order in the supply chain. Collapse

Topics: supply chain management logistics management information exchange backup information system use

Methods: experiment literature study computational algorithm survey mixed method

Theories: fuzzy set theory

When Stablecoin is No Longer Stable - A Case Study on the Failure of TerraUSD

2023 | International Conference on Information Systems | Citations: 0

Authors: Nurbaev, Vladimir; Au, Cheuk Hang; Chou, Chih-Yuan

Abstract: Comparing to other price-volatile cryptocurrencies, stablecoins provide a relia ... Expand

Abstract: Comparing to other price-volatile cryptocurrencies, stablecoins provide a reliable way to store value and make transactions, and thus are more suitable for daily-life usage and investment risk control. However, there remains a lack of understanding of how stablecoin can gain success. This may lead to the introduction of stablecoins based on uninformed proposals, which may eventually fail. In turn, owners of these stablecoins may suffer from significant financial losses. Using theories of Information Systems and digital startups failures as the theoretical foundation, our study identified four underlying factors (lack of scarcity, lack of fiat reserve backup, decentralization, and failure of value creation) and two triggers (massive selling by major investors and algorithm malfunction) behind the collapse of a stablecoin, based on the case of TerraUSD's collapse. Our findings provide implications for stablecoins issuers to prioritize maintenance and foster user adoption, thus increasing the likelihood of success of stablecoins. Collapse

Topics: stablecoin value creation backup digital entrepreneurship social media

Methods: qualitative coding case study field study netnography business process modeling

Toward AI Governance: Identifying Best Practices and Potential Barriers and Outcomes

2023 | Information Systems Frontiers | Citations: 2

Authors: Papagiannidis, Emmanouil; Enholm, Ida Merete; Dremel, Chirstian; Mikalef, Patrick; Krogstie, John

Abstract: In recent years artificial intelligence (AI) has been seen as a technology with ... Expand

Abstract: In recent years artificial intelligence (AI) has been seen as a technology with tremendous potential for enabling companies to gain an operational and competitive advantage. However, despite the use of AI, businesses continue to face challenges and are unable to immediately realize performance gains. Furthermore, firms need to introduce robust AI systems and mitigate AI risks, which emphasizes the importance of creating suitable AI governance practices. This study, explores how AI governance is applied to promote the development of robust AI applications that do not introduce negative effects, based on a comparative case analysis of three firms in the energy sector. The study illustrates which practices are placed to produce knowledge that assists with decision making while at the same time overcoming barriers with recommended actions leading to desired outcomes. The study contributes by exploring the main dimensions relevant to AI’s governance in organizations and by uncovering the practices that underpin them. Collapse

Topics: artificial intelligence backup decision making competitive advantage video conference

Methods: qualitative interview case study multiple case study triangulation qualitative coding

Designing Extended Zero Trust Maturity Model – From Technical to Socio-Technical

2023 | International Conference on Information Systems | Citations: 0

Authors: Tokerud, Simen; Jansen, Jarand; Niemimaa, Marko; Järveläinen, Jonna

Abstract: Recent successful cybersecurity attacks have exploited trust to compromise orga ... Expand

Abstract: Recent successful cybersecurity attacks have exploited trust to compromise organizational information systems. Scholars and practitioners agree that the issue originates from the organizational perimeter security approach, within which perimeter trust is assumed. To improve the situation, building security principles on the idea that trust is not inherent but earned has been proposed, coined as Zero Trust. However, the current discussions spearheaded by technology-minded practitioners have focused mostly on trust at the network security and architecture levels, largely omitting the organizational aspects of security. To address this gap, we build on socio-technical approach and maturity models to develop a novel artifact with security experts, addressing the need for organizational Zero Trust through the Extended Zero Trust Maturity Model. Our research contributes to discussions on holistic information security management by extending the principles of Zero Trust from technical into socio-technical approach and responds to calls to reconsider foundational assumptions of IS security. Collapse

Topics: data security information security management IT security spreadsheet phishing

Methods: maturity model design science qualitative interview literature study case study

Availability-Aware Virtual Resource Provisioning for Infrastructure Service Agreements in the Cloud

2023 | Information Systems Frontiers | Citations: 0

Authors: Yuan, Shuai; Das, Sanjukta; Ramesh, Ram; Qiao, Chunming

Abstract: Service availability is a key construct in Service Level Agreements (SLA) betwee ... Expand

Abstract: Service availability is a key construct in Service Level Agreements (SLA) between a cloud service provider and a client. The provider typically allocates backup resources to mitigate the risk of violating the SLA-specified uptime guarantee. However, initial backups may need to be adjusted in response to real-time failure and recovery events. In this study, we first develop a recurrent intervention at fixed intervals (RIFI) strategy that allows the provider to adjust the allocation of backup resources such that the expected total cost is minimized. Next, we focus on the limit to number of interventions, starting from single intervention strategy, as frequent reallocations may be operationally disruptive. Particularly, we provide a cost minimization approach to guide the service providers in their virtual resources management, and a specific downtime minimization approach for more mission-critical applications as a more aggressive alternative. We present computational results exploring the impact of intervention on the likelihood of SLA violation for the rest of the contract period, and evaluate parameters such as time and quantum of resource level adjustment, penalty levels desired by clients, and their influences on the backup resource provisioning strategies. We also validate our models through the analysis of use cases from Amazon Elastic Compute Cloud. Finally, we summarize this study by providing key practical managerial implications for resource deployment in the availability-aware cloud. Collapse

Topics: backup cloud computing resource allocation price management high-performance computing

Methods: computational algorithm experiment literature study simulation

Where was COVID-19 first discovered? Designing a question-answering system for pandemic situations

2022 | European Conference On Information Systems | Citations: 0

Authors: Graf, Johannes; Lancho, Gino; Zschech, Patrick; Heinrich, Kai

Abstract: The COVID-19 pandemic is accompanied by a massive "infodemic" that makes it har ... Expand

Abstract: The COVID-19 pandemic is accompanied by a massive "infodemic" that makes it hard to identify concise and credible information for COVID-19-related questions, like incubation time, infection rates, or the effectiveness of vaccines. As a novel solution, our paper is concerned with designing a question-answering system based on modern technologies from natural language processing to overcome information overload and misinformation in pandemic situations. To carry out our research, we followed a design science research approach and applied Ingwersen's cognitive model of information retrieval interaction to inform our design process from a socio-technical lens. On this basis, we derived prescriptive design knowledge in terms of design requirements and design principles, which we translated into the construction of a prototypical instantiation. Our implementation is based on the comprehensive CORD-19 dataset, and we demonstrate our artifact's usefulness by evaluating its answer quality based on a sample of COVID-19 questions labeled by biomedical experts. Collapse

Topics: knowledge base pandemic covid 19 database system Elasticsearch

Methods: design artifact design principle design science question answering design requirement

Designing Information Security Culture Artifacts to Improve Security Behavior: An Evaluation in SMEs

2022 | DESRIST | Citations: 0

Authors: Ismail, Olfa

Abstract: This article examines the relationship between the information system security c ... Expand

Abstract: This article examines the relationship between the information system security culture and the security behaviors of users of the information system (IS). This research follows the design science in information systems research guidelines proposed by [43] to conceptualize the IS security culture in its context, where we propose a model based on Schein’s three-level culture model (1985) [15], and evaluated at the level of our research context, which is SMEs, through a qualitative study conducted with twenty-two users belonging to eight French small and medium-sized enterprises (SMEs). The results of this study show that there is a strong relationship between IS security culture and user behaviors related to IS security, in the sense that a positive security culture is conducive to the creation of security behaviors. Collapse

Topics: IT security data security password backup cybersecurity behavior

Methods: qualitative interview design science case study design artifact testing conceptual modelling

Theories: organizational behavior theory

Actions Lead to Results: How the Behaviors of Information Systems Professionals Influence the Success of Information Systems Departments

2022 | Communications of the Association for Information Systems | Citations: 0

Authors: Karimikia, Hadi; Maccani, Giovanni; Singh, Harminder; Donnellan, Brian

Abstract: The growing complexity of systems, the increasing intensity of their use, and t ... Expand

Abstract: The growing complexity of systems, the increasing intensity of their use, and the greater prominence of technology in supporting organizational activities has meant that information systems (IS) professionals in organizations have to go beyond offering routine task-related support when working with their non-IS colleagues. For organizations to see IS professionals as effective, they have to carry out empathic behaviors such as sharing their IT knowledge with their non-IS colleagues and taking the initiative to minimize inconveniences during IS projects. Drawing from the organizational citizenship behavior concept, we develop a multilevel research model to examine how behaviors that IS professionals perform influence IS departments' effectiveness. Using data from more than 1,000 respondents working in the global finance industry, we conducted both cross-level and unit-level analyses and found results that support our arguments. Our results deepen the extent to which we understand the role that IS professionals play in supporting post-adoption IS use and digitally empowering business units while also performing their traditional roles. Collapse

Topics: IT workforce data quality system quality service quality IS service quality

Methods: survey statistical hypothesis test SEM tool structural equation modeling literature study

Theories: information systems success model

Designing a Framework for Digital KYC Processes Built on Blockchain-Based Self-Sovereign Identity

2022 | Information & Management | Citations: 0

Authors: Schlatt, Vincent; Sedlmeir, Johannes; Feulner, Simon; Urbach, Nils

Abstract: Know your customer (KYC) processes place a great burden on banks, because they a ... Expand

Abstract: Know your customer (KYC) processes place a great burden on banks, because they are costly, inefficient, and inconvenient for customers. While blockchain technology is often mentioned as a potential solution, it is not clear how to use the technology’s advantages without violating data protection regulations and customer privacy. We demonstrate how blockchain-based self-sovereign identity (SSI) can solve the challenges of KYC. We follow a rigorous design science research approach to create a framework that utilizes SSI in the KYC process, deriving nascent design principles that theorize on blockchain’s role for SSI. Collapse

Topics: blockchain privacy identity management distributed ledger technology electronic authentication

Methods: qualitative interview design artifact design science literature study qualitative coding

A dynamic simulation approach to support the evaluation of cyber risks and security investments in SMEs

2021 | Decision Support Systems | Citations: 1

Authors: Armenia, Stefano; Angelini, Marco; Nonino, Fabio; Palombi, Giulia; Schlitzer, Mario Francesco

Abstract: The growing amount of cyberspace threats highlights the need to evaluate cyberse ... Expand

Abstract: The growing amount of cyberspace threats highlights the need to evaluate cybersecurity risks and to plan for effective investments. One internationally recognized document for cybersecurity risk management is the framework for Improving Critical Infrastructure Cybersecurity by the US National Institute of Standards and Technology (NIST). It provides guidelines, best practices and standards for cybersecurity risk management. Nevertheless, as other self-assessment frameworks, it produces a static view of an organization’s cyber posture and does not capture the dynamics of organizational changes and cyberattacks. Moreover, the current situation sees small and medium enterprises (SMEs) in a critical position since they need to manage their cybersecurity while usually not being skilled or equipped enough to internalize this process. Therefore, there is a need for a practical and easily applicable model able to identify a cybersecurity risk profile and its dynamics. This study proposes a system dynamics methodology and tool (SMECRA - SME Cyber Risk Assessment) for supporting cybersecurity investment decisions for SMEs through the evaluation of cyber risk and previous investments. SMECRA addresses dynamic organizational complexity and can be used to assess cyber risks and related dy­ namics over time. Three case studies demonstrate its capability to assess a SME’s cybersecurity status and to evaluate investments impacts on an organization’s risk profile, raising cybersecurity awareness. This study is important for SMEs wishing to manage their own cybersecurity risk and for insurance companies in their eco­ nomic evaluation of residual risks that SMEs wish to externalize. Collapse

Topics: IT security risk management IT security threat computer crime innovation management

Methods: simulation survey system dynamics case study parametric test