A taxonomy of data governance decision domains in data marketplaces

2023 | Electronic Markets | Citations: 0

Authors: Abraham, Rene; Schneider, Johannes; vom Brocke, Jan

Abstract: Commercializing data and data-related services has gained in importance in recen ... Expand

Abstract: Commercializing data and data-related services has gained in importance in recent years. Driven by digitalization and the Internet-of-Things (IoT), companies and individuals continuously generate vast amounts of data. Data marketplaces have emerged to support these data providers in selling their data to different data consumers. However, data marketplaces face challenges in different data governance decision domains that inhibit their adoption. To get a better understanding of how data marketplaces counteract these challenges, this paper develops a taxonomy of data governance decision domains in data marketplaces. We used a taxonomy development method to inspect 13 data marketplaces from eight countries. The resulting taxonomy shows an overview of mechanisms concerning data quality, data security, data architecture, metadata, data lifecycle, data storage, and data pricing. We discuss common instantiation patterns, highlight gaps, and propose possible solutions. The taxonomy sets a foundation for further research and theory-building on data marketplaces. Practitioners can use the taxonomy to develop customized data governance strategies for data marketplaces. Collapse

Topics: data governance price management system development method computer data storage website

Methods: design artifact data modeling design methodology design science company material

Shaping the attitude towards information security- a social influence approach

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Agrawal, Deepti; Davis, Joshua; Singh, Kulraj

Abstract: Employees play a vital role in organizational information security posture. Mos ... Expand

Abstract: Employees play a vital role in organizational information security posture. Most security breaches involve human elements such as stolen credentials, phishing scams, misuse, or simple errors from employees. As the threat landscape continues to put pressure on this aspect of organizational information security, there is an increasing need to effectively motivate employees towards desirable security attitudes and outcomes. Social influence has been found to help shape employees' information security attitudes. However, there is limited understanding of the roles different motivational processes can play in this context -which may have differential effect of employee attitudes towards security. In this study we use Kelman's social influence theory which proposes that an individual's attitudes are influenced by referent others through three processes -compliance, identification, and internalization. The study aims to provide valuable insights for researchers and practitioners alike. Collapse

Topics: social influence data security organizational value

Methods: survey conceptual modelling partial least squares path modeling PLS tool

Theories: social influence theory

Blockchain Use Case in Ballistics and Crime Gun Tracing and Intelligence: Toward Overcoming Gun Violence

2023 | ACM Transactions on Management Information Systems | Citations: 0

Authors: Akello, Patricia; Vemprala, Naga; Lang Beebe, Nicole; Raymond Choo, Kim-Kwang

Abstract: In the United States and around the world, gun violence has become a long-standi ... Expand

Abstract: In the United States and around the world, gun violence has become a long-standing public safety concern and a security threat, due to violent gun-related crimes, injuries, and fatalities. Although legislators and lawmakers have attempted to mitigate its threats through legislation, research on gun violence confirms the need for a comprehensive approach to gun violence prevention. This entails addressing the problem in as many ways as possible, such as through legislation, new technological advancements, re-engineering supply, and administrative protocols, among others. The research focuses on the technological, supply, and administrative aspects, in which we propose a manner of managing gun-related data efficiently from the point of manufacture/sale, as well as at points of transfers between secondary sellers for the improvement of criminal investigation processes. Making data more readily available with greater integrity will facilitate successful investigations and prosecutions of gun crimes. Currently, there is no single and uniform platform for firearm manufacturers, dealers, and other stakeholders involved in firearm sales, dissemination, management, and investigation. With the help of Blockchain technology, gun registry, ownership, transfers, and, most importantly, investigations, when crimes occur, can all be managed efficiently, breaking the cycle of gun violence. The identification of guns, gun tracing, and identification of gun owners/possessors rely on accuracy, integrity, and consistency in related systems to influence gun crime investigation processes. Blockchain technology, which uses a consensus-based approach to improve processes and transactions, is demonstrated in this study as a way to enhance these procedures. To the best of our knowledge, this is the first study to explore and demonstrate the utility of Blockchain for gun-related criminal investigations using a design science approach. Collapse

Topics: blockchain criminality smart contract Ethereum access control

Methods: design artifact design science design process case study simulation

Managing compliance with privacy regulations through translation guardrails: A health information exchange case study

2023 | Information and Organization | Citations: 0

Authors: Anderson, Chad; Baskerville, Richard; Kaul, Mala

Abstract: Information privacy is increasingly important in our digitally connected world, ... Expand

Abstract: Information privacy is increasingly important in our digitally connected world, particularly in healthcare, and privacy regulations are ramping up to promote appropriate privacy practices. As a digital platform that enables healthcare providers to exchange protected health information (PHI), a health information exchange (HIE) is governed by health information privacy regula­ tions. The challenge for HIEs is to operate in a way that will maximize information exchange while maintaining compliance with regulations that may constrain the sharing of PHI. Regula­ tions impose a measure of universality through compliance requirements, while being flexible to allow adaptation to the local context. However, our longitudinal case study into the privacy policies of an HIE, demonstrates that the journey of privacy ideas from their original formulation in regulations, to their ultimate enactment in an organizational setting, is accompanied by translations, such that the final implementation may vary extensively from its original form. Such variability often results in interpretations that differ from what the regulators intended. Conse­ quently, translation guardrails are necessary to protect against problematic translations of reg­ ulatory ideas which could lead to compliance issues and loss of platform participation. Our findings offer two contributions. First, we contribute to the compliance literature by explaining how guardrails can balance the use of permission and obligation schemas which are necessary to translate regulations into effective organizational policies for the success of HIEs and other in­ formation exchange platforms. Second, we contribute to extending translation theory by explaining how pragmatic reasoning schemas function as the mechanism through which trans­ lation of regulations occurs. Collapse

Topics: privacy information privacy law data security information exchange legal context

Methods: qualitative interview longitudinal research case study longitudinal case study literature study

Theories: organizational behavior theory

ICT-Based Country-Level Determinants of Social Media Diffusion

2023 | Information Systems Frontiers | Citations: 0

Authors: Arayankalam, Jithesh; Krishnan, Satish

Abstract: There is a broad consensus that social media platforms have become critical tool ... Expand

Abstract: There is a broad consensus that social media platforms have become critical tools for policymakers in achieving various policy objectives in a country. Therefore, an in-depth understanding of the ICT-based country-level determinants of social media diffusion has become necessary. To this end, we propose a government-people-technology (GTP) framework for categorizing the ICT-based country-level determinants of social media diffusion into three dimensions. Using this framework and utilizing archival data from 107 countries, we examine the roles of ICT in the government's vision, ICT law maturity, Internet bandwidth, ICT cost, ICT skill, and capacity to own ICT in influencing social media diffusion. A quantile panel data regression results reveal that ICT in the government's vision, ICT law maturity, Internet bandwidth, and capacity to own ICT were positively associated with social media diffusion. In contrast, ICT cost was negatively associated with it. Thus, by offering a new framework, we contribute to the technology diffusion literature by emphasizing the role of government, people, and supportive technologies in driving social media diffusion at the country level. Collapse

Topics: social media IT investment internet technology IT skill technology diffusion

Methods: longitudinal research regression analysis method post-hoc analysis cross sectional research archival research

Theories: theory of everything

The Interplay of InfoSec Mindfulness and Sanctions on Extra Role Security Behaviors: A Trait Activation Perspective

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Austin, Rebekah

Abstract: Organizational information security performance is inextricably tied to the sec ... Expand

Abstract: Organizational information security performance is inextricably tied to the security behavior of employees. While employee behavior has long been considered a challenge to information security, recent shifts to a more remote work force have amplified organizational focus on employees to protect information assets. Under these conditions, InfoSec Extra Role Behaviors (ERBs) have become increasingly important to mitigating security threats. The literature suggests that mindfulness is an important human factor that may lead to InfoSec ERBs. We examine mindfulness through the lens of trait activation theory. Trait activation theory (TAT) explicitly ties individual traits to situational features of the environment to predict trait related behavior. In TAT, a relevant feature of the organizational environment is situation strength which constrains behavioral variance through trait expression. Thus, we operationalize sanctions as a measure for situation strength in the InfoSec context and propose a model that examines the interplay between a relevant human factor, mindfulness, and a common organizational intervention, sanctions, and the impact that interplay has on InfoSec ERB enactment. Collapse

Topics: mindfulness ergonomics data security

Methods: survey

An Adversarial Dance: Toward an Understanding of Insiders’ Responses to Organizational Information Security Measures

2023 | Journal of the Association for Information Systems | Citations: 0

Authors: Balozian, Puzant; Burns, A.; Leidner, Dorothy

Abstract: Despite the increased focus on organizational security policies and programs, s ... Expand

Abstract: Despite the increased focus on organizational security policies and programs, some employees continue to engage in maladaptive responses to security measures (i.e., behaviors other than those recommended, intended, or prescribed). To help shed light on insiders' adaptive and maladaptive responses to IS security measures, we conducted a case study of an organization at the forefront of security policy initiatives. Drawing on the beliefs-actions-outcomes (BAO) model to analyze our case data, we uncover a potentially nonvirtuous cycle consisting of security-related beliefs, actions, and outcomes, which we refer to as an "adversarial dance." Explaining our results, we describe a novel belief framework that identifies four security belief profiles and uncovers an underexplored outcome of IS security: insiders' lived security experiences. We find that individuals' unfavorable lived security experiences produce counterproductive security-related beliefs that, in turn, lead to maladaptive behaviors. Maladaptive behaviors create new potential for security risk, leading to increased organizational security measures to counter them. Thus, the adversarial dance continues, as the new security measures have the potential to reinforce counterproductive security-related beliefs about the importance and risk of IS security and lead to new maladaptive behaviors. To help situate our findings within the current security literature, we integrate the results with prior research based on extant theories. While this paper is not the first to suggest that security measures can elicit maladaptive behaviors, the emergent belief framework and expanded BAO model of IS security constitute an important contribution to the behavioral IS security literature.Puzant Balozian is an assistant professor of computer information systems at James Madison University. His research focus is primarily on the impacts of organizational factors on individual user behaviors in the context of information security and privacy and addressing security policy compliance and violation. Collapse

Topics: IT security IT security defense productivity IT security threat anonymity

Methods: case study qualitative interview personal interview theory development survey

Theories: information systems theory neutralization theory behavioral theory

Internalization of Gender Roles: Challenges for Female CIOs in Ensuring IT Security Compliance

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Bansal, Gaurav; Axelton, Zhuoli

Abstract: IT security compliance is critical to the organization's success, and such comp ... Expand

Abstract: IT security compliance is critical to the organization's success, and such compliance depends largely on IT leadership. Despite the growing female leadership and the prevalence of unconscious gender bias and stereotyping in IT, there is little research that examines gender stereotypes and internalization factors in the context of IT leadership and security compliance. The evidence from our experiment using data from MTurk suggests that gender -both CIOs' and employees', plays an important role in how IT leadership characteristics -perceived expertise and leadership style influences the employees' intentions and reactance to comply with CIO's security recommendations. The study informs IT literature on the role of the security message sender's characteristics and guides CIOs, particularly women, on how they can tailor their leadership style to increase security compliance. Our research provides several theoretical, managerial and social implications while responding to the calls for increased attention to social inclusion issues in IT. Collapse

Topics: Chief Information Officer security policy information security policy compliance IT leadership data security

Methods: Student's t-test experiment parametric test survey

The Interplay of Information Processing, Mindfulness, and Affective State in Phishing Detection

2023 | International Conference on Information Systems | Citations: 0

Authors: Bera, Debalina; Kim, Dan

Abstract: This study investigates the effect of individuals' information processing modes ... Expand

Abstract: This study investigates the effect of individuals' information processing modes on phishing email detection mechanisms and accuracy. Drawing on the heuristic-systematic model of processing, mindful decision-making, and affect-and-persuasion literature, this study examines the antecedents (i.e., heuristic, systematic processing, general and domain mindfulness, and affective state) and behavioral consequences (i.e., detection accuracy) in phishing identification. Using a scenario-based survey experiment this study shows mindfulness and affectivity navigate information processing mechanisms, thus influence phishing detection accuracy. It aims to contribute to information security literature by examining novel associations between general, domain mindfulness and its effect on online users' information processing strategy and phishing detection accuracy. Furthermore, this study contributes to phishing training and awareness by identifying the function of cognitive-affective (affective states, trait mindfulness) and cognitive-behavioral (domain mindfulness) factors on the choice of information processing modes and phishing detection accuracy. Finally, the affective states might help improve the efficacy of automatic filters. Collapse

Topics: phishing mindfulness electronic mail email phishing data security

Methods: experiment survey partial least squares regression machine learning laboratory experiment

Theories: protection motivation theory

Introduction to the Minitrack on The Digital Supply Chain of the Future: Applications, Implications, Business Models

2023 | HICSS | Citations: 0

Authors: Bodendorf, Freimut; Chen, Haozhe; Pflaum, Alexander; Prockl, Günter

Abstract: The following text sections provide an overview to the minitrack on the digital ... Expand

Abstract: The following text sections provide an overview to the minitrack on the digital supply chain of the future. The minitrack addresses research questions concerning drivers and challenges of digital transformation, basic technologies, applications and services, digital platforms as well as cultural and organizational change etc. After a short introduction the different papers of the mini track are described and embedded into an overall context. Towards the end of our contribution, we added some recommendations concerning future research on digitalization of firms, business models and supply chains. Collapse

Topics: supply chain management artificial intelligence digital transformation smart device internet of things

Methods: case study