From Challenges to Solution Pathways for Industrial Data Ecosystems - A Socio-Technical Perspective

2023 | International Conference on Business Informatics | Citations: 0

Authors: Brechtel, Marc; Petrik, Dimitri; Hölzle, Katharina

Abstract: Many industrial firms know that inter-firm data sharing holds tremendous potent ... Expand

Abstract: Many industrial firms know that inter-firm data sharing holds tremendous potential for the creation of new economic value. However, most of them are not yet willing to share data multilaterally for joint value creation. Consequently, they do not participate in so-called data ecosystems. In our study, we address this issue from a socio-technical perspective and apply a two-step qualitative-empirical research design composed of a problem-centered interview study followed by solution-oriented workshops. We have identified and prioritized the perceived challenges and present first solution pathways. We were able to assign respective responsibilities for needed actions to major roles in data ecosystems. Among others, we can show that the core participants, i.e., data owner and data user, and the governance body need to resolve key challenges mostly in a separate but complementary manner to help industrial data ecosystems emerge. Collapse

Topics: digital ecosystem top management support technology adoption cloud computing supply chain management

Methods: qualitative interview case study qualitative coding group interview

Theories: socio technical theory sociotechnical systems theory

A Sociotechnical Perspective on Predictive Analytics Implementation

2023 | HICSS | Citations: 0

Authors: Chen, Leida; Nath, Ravi; Rocco, Nevina; Lidster, Carolyn

Abstract: Developing an effective business analytics function within a company has become ... Expand

Abstract: Developing an effective business analytics function within a company has become a crucial component to an organization’s competitive advantage today. Predictive analytics enables an organization to make proactive, knowledge-driven decisions. While companies are increasing their investments in data and analytics technologies, little research effort has been devoted to understanding how to best convert analytics assets into positive business performance. This issue can be best studied from the socio-technical perspective in order to gain a holistic understanding of the key factors relevant to implementing predictive analytics. Based upon information from structured interviews with information technology and analytics executives of 11 organizations, this study identifies the socio-technical components that are key to organizations’ implementation of predictive analytics. Collapse

Topics: organization structure computer hardware IS management organizational culture systems development

Methods: machine learning qualitative interview grounded theory

Theories: socio technical theory organizational behavior theory

Barking Up the Wrong Tree? Reconsidering Policy Compliance as a Dependent Variable within Behavioral Cybersecurity Research

2023 | HICSS | Citations: 0

Authors: Cram, W. Alec; D'Arcy, John

Abstract: A rich body of research examines the cybersecurity behavior of employees, with a ... Expand

Abstract: A rich body of research examines the cybersecurity behavior of employees, with a particular focus on explaining the reasons why employees comply with (or violate) organizational cybersecurity policies. However, we posit that this emphasis on policy compliance is susceptible to several notable limitations that could lead to inaccurate research conclusions. In this commentary, we examine the limitations of using cybersecurity policy compliance as a dependent variable by presenting three assertions: (1) the link between policy compliance and organizational-level outcomes is ambiguous; (2) policies vary widely in terms of their clarity and completeness; and (3) employees have an inconsistent familiarity with their own organization’s cybersecurity policies. Taken together, we suggest that studying compliance with cybersecurity policies reveals only a partial picture of employee behavior. In response, we offer recommendations for future research. Collapse

Topics: IT security data breach computer data storage cybersecurity behavior top management support

Methods: survey linguistic analysis company material

‘What a waste of time’: An examination of cybersecurity legitimacy

2023 | Information Systems Journal | Citations: 0

Authors: Cram, W. Alec; D'Arcy, John

Abstract: Managers who oversee cybersecurity policies commonly rely on managerial encourag ... Expand

Abstract: Managers who oversee cybersecurity policies commonly rely on managerial encouragement (e.g., rewards) and employee characteristics (e.g., attitude) to drive compliant behaviour. However, whereas some cybersecurity initiatives are perceived as reasonable by employees, others are viewed as a ‘waste of time’. This research introduces employee judgements of cybersecurity legitimacy as a new angle for understanding employee compliance with cybersecurity policies over time. Drawing on theory from the organisational legitimacy and cybersecurity literature, we conduct a three-wave survey of 529 employees and find that, for each separate wave, negative legitimacy judgements mediate the relationship between management support and compliance, as well as between cybersecurity inconvenience and compliance. Our results provide support for cybersecurity legitimacy as an important influence on employee compliance with cybersecurity initiatives. This is significant because it highlights to managers the importance of not simply expecting compliant employee behaviour to follow from the introduction of cybersecurity initiatives, but that employees need to be convinced that the initiatives are fair and reasonable. Interestingly, we did not find sufficient support for our expectation that the increased likelihood of a cybersecurity incident will moderate the legitimacy-policy compliance relationship. This result suggests that the legitimacy perceptions of employees are unyielding to differences in the risk characteristics of the cybersecurity incidents facing organisations. Collapse

Topics: IT security top management support cybersecurity behavior pandemic privacy

Methods: survey SEM tool structural equation modeling survey design confirmatory factor analysis

Theories: fairness theory organizational behavior theory

Assessing Process Mining Use Cases: A Taxonomy of Antecedents and Value Potentials of Process Mining

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Eggers, Julia; Häge, Marie-Christin; Zimmermann, Sina; Gewald, Heiko

Abstract: Process mining (PM) has gained traction as a Big Data Analytics technique to di ... Expand

Abstract: Process mining (PM) has gained traction as a Big Data Analytics technique to discover, monitor, and improve business processes based on event data that are available in organizations' information systems. However, despite high expectations and widespread use in practice, organizations still struggle to implement and realize value from PM. In particular, organizations, first, are challenged to identify and establish the antecedents necessary for implementing PM use cases, and second, lack guidance in identifying and assessing valuable PM use cases. Even though initial studies investigated sociotechnical factors influencing the adoption, implementation, and value of PM on the organizational level, knowledge in the field is still fragmented, and we lack a systematic understanding of how organizations can assess antecedents for and value potentials of PM to identify valuable use cases. Thus, building on a design science research approach, we address this research gap by developing and evaluating a structured framework drawing on the taxonomy development method of Nickerson et al. (2013) for assessing PM use cases based on their antecedents and expected value potentials. We iteratively develop and evaluate the taxonomy grounded in theory by drawing on PM literature and related research fields and practice by conducting twelve semi-structured interviews at a German manufacturing corporation to apply and evaluate the taxonomy. Consequently, our study contributes to research on the organizational implementation and use of PM and enables researchers and practitioners to understand, operationalize, and assess the factors influencing the selection of PM use cases. Collapse

Topics: system development method process mining usage intention usability data quality

Methods: qualitative interview design science design methodology personal interview literature sample

Responsible Artificial Intelligence as a Secret Ingredient for Digital Health: Bibliometric Analysis, Insights, and Research Directions

2023 | Information Systems Frontiers | Citations: 0

Authors: Fosso Wamba, Samuel; Queiroz, Maciel M.

Abstract: With the unparallel advance of leading-edge technologies like artificial intelli ... Expand

Abstract: With the unparallel advance of leading-edge technologies like artificial intelligence (AI), the healthcare systems are transforming and shifting for more digital health. In recent years, scientific productions have reached unprecedented levels. However, a holistic view of how AI is being used for digital health remains scarce. Besides, there is a considerable lack of studies on responsible AI and ethical issues that identify and suggest practitioners’ essential insights towards the digital health domain. Therefore, we aim to rely on a bibliometric approach to explore the dynamics of the interplay between AI and digital health approaches, considering the responsible AI and ethical aspects of scientific production over the years. We found four distinct periods in the publication dynamics and the most popular approaches of AI in the healthcare field. Also, we highlighted the main trends and insightful directions for scholars and practitioners. In terms of contributions, this work provides a framework integrating AI technologies approaches and applications while discussing several barriers and benefits of AI-based health. In addition, five insightful propositions emerged as a result of the main findings. Thus, this study’s originality is regarding the new framework and the propositions considering responsible AI and ethical issues on digital health. Collapse

Topics: health information system artificial intelligence responsible artificial intelligence robotic big data

Methods: bibliometric analysis deep learning machine learning literature sample literature study

Digital nudging for technical debt management at Credit Suisse

2023 | European Journal of Information Systems | Citations: 0

Authors: Haki, Kazem; Rieder, Annamina; Buchmann, Lorena; W.Schneider, Alexander

Abstract: Technical debt (TD) is a technical compromise wherein the ability to maintain in ... Expand

Abstract: Technical debt (TD) is a technical compromise wherein the ability to maintain information technology (IT) applications over the long term is sacrificed for short-term goals. TD occurs when software development teams undergo constant pressure to release applications swiftly, on a tight schedule. The accumulation of TD, which often leads to a significant cost surplus, presents a ubiquitous challenge in technology-driven organisations. To keep TD levels under control, many organisations implement top-down mechanisms that impose enterprise-wide principles on software development teams. This clinical research presents a complementary but distinct approach to managing TD. A digital nudge was introduced at Credit Suisse, a global financial services company, to help raise awareness and understanding, and stimulate actions related to TD decision-making in software development teams. This paper reports on the nudge’s clinical design, implementation, impact, and evaluation. As the nudge was effective in reducing TD in IT applications after one year of use, we demonstrate that digital nudges are viable means for guiding collective decisions in complex decision environments like that of TD management. Our findings have several implications for research and practice. Collapse

Topics: systems development decision making software developer IT manager agile software development

Methods: survey qualitative interview focus group personal interview design methodology

Theories: boundary objects theory nudge theory

Peering through the lens of high-reliability theory: A competencies driven security culture model of high-reliability organisations

2023 | Information Systems Journal | Citations: 0

Authors: Hassandoust, Farkhondeh; Johnston, Allen C.

Abstract: To improve organisational safety and enhance security efficiency, organisations ... Expand

Abstract: To improve organisational safety and enhance security efficiency, organisations seek to establish a culture of security that provides a foundation for how employees should approach security. There are several frameworks and models that provide a set of requirements for forming security cultures; however, for many organisations, the requirements of the frameworks are difficult to meet, if not impossible. In this research, we take a different perspective and focus on the core underlying competencies that high-reliability organisations (HROs) have shown to be effective in achieving levels of risk tolerance consistent with the goals of a security culture. In doing so we draw on high-reliability theory to develop a Security Culture Model that explains how a firm's supportive and practical competencies form its organisational security culture. To refine and test the model, we conducted a developmental mixed-method study using interviews and survey data with professional managers involved in the information security (InfoSec) programs within their respective HROs. Our findings emphasise the importance of an organisation's supportive and practical competencies for developing a culture of security. Our results suggest that organisations' security cultures are a product of their InfoSec practices and that organisational mindfulness, top management involvement and organisational structure are key to the development of those practices. Collapse

Topics: mindfulness organization structure IT security absorptive capacity top management support

Methods: qualitative interview survey mixed method statistical hypothesis test conceptual modelling

An Information Security Performance Measurement Tool for Senior Managers: Balanced Scorecard Integration for Security Governance and Control Frameworks

2023 | Information Systems Frontiers | Citations: 0

Authors: Herath, Tejaswini C.; Herath, Hemantha S. B.; Cullum, David

Abstract: As organizations have become increasingly reliant on information systems, senior ... Expand

Abstract: As organizations have become increasingly reliant on information systems, senior managers are keen in assessing the progress of implemented information security strategies. Although the balanced scorecard approach has been suggested for security governance, a critical issue affecting information security practitioners is complexity, as there are many standards and frameworks, with duplication and overlaps to adhere to when organizing the data. Consequently, the article attempts to develop a more inclusive framework for information security governance, a research gap recently identified in the literature. The article maps five governance and control frameworks (COBIT, SABSA, ISG, ITIL, and ISO 27000) to the information security balanced scorecard (InfoSec BSC) to develop a conceptual design of an effective information security performance measurement tool that can be used by senior managers. Using a real-life case application and interviews with a panel of experts, the article identifies IS initiatives, performance measures for each of the mapped objectives derived from governance and control frameworks that may provide guidance for practitioners. Collapse

Topics: data security COBIT IT security ITIL information security management

Methods: qualitative interview case study personal interview survey delphi study

Theories: theory of everything

How Sociotechnical Realignment and Sentiments Concerning Remote Work are Related – Insights from the COVID-19 Pandemic

2023 | Business & Information Systems Engineering | Citations: 0

Authors: Kohn, Vanessa; Frank, Muriel; Holten, Roland

Abstract: The COVID-19 pandemic forced sociotechnical systems (STS) to highly integrate re ... Expand

Abstract: The COVID-19 pandemic forced sociotechnical systems (STS) to highly integrate remote work. Large-scale analyses show that the positivity of tweets about work from home decreased until COVID-19 was declared a pandemic by the WHO and re-increased in the weeks that followed. Nevertheless, it is unclear if this reaction is due to personal and organizational developments or if it mirrors the realignment of entire STS. The present study uses Q methodology to identify differences in how STS realign to the externally enforced integration of remote work. Only STS that reach a state of high alignment to remote work conditions by successfully shifting communication and procedures to digital spheres can be considered resilient. The results show that employees describe their personal experiences with remote work as more positive the higher their level of sociotechnical realignment. Furthermore, personal digital resilience is correlated to successful STS realignment as well. The results confirm the importance of realigning not only the technical and social components of STS but above all their sociotechnical interaction. Negative sentiments relate in particular to the low realization of humanistic objectives in STS. Collapse

Topics: remote work IT supported collaboration pandemic productivity privacy

Methods: sentiment analysis Q methodology qualitative interview linear regression analysis Mann Whitney U test

Theories: sociotechnical systems theory socio technical theory