Search

International audience; The transport of dangerous goods consists of the carriage of goods presenting potential risks to the people, living organisms, the environment, and materials (public or private property) and therefore necessitates dedicated and specially reinforced security measures. According to global statistics, dangerous goods may constitute about fifty percent of global transportation in the following years, whether by road, railway, air, or seas. Compared to traditional transportation e.g., general supply chains, the TDG is a particular class of transportation that is subject to specific requirements among which the human and environmental safety. It also incorporates rigorous information immutability and the traceability of the DG movement [2], as indicated in the "Agreement concerning the International Carriage of Dangerous Goods by Road" [3] applicable since 1 January 2021. In this context, this chapter aims to propose a platform to support the verification of the stakeholders' identity, the history of transportation, including environmental data, and the location overtime of the dangerous good employing the blockchain-based digital certificate. Using blockchain technology (jointly use) of two concepts/technologies such as blockchain and digital certificate has for purpose to ensure transaction transparency, easy access to the transportation information, less paperwork, and strong stakeholder identification. Finally, besides proposing a blockchain-based digital certificate for the TDG, our approach also analyzes the extent to which the blockchain may be specified to integrate and be compatible with the Internet of Things (IoT) technology and specifications.

Risk management is today a major steering tool for any organization wanting to deal with Information System (IS) security. However, IS Security Risk Management (ISSRM) remains difficult to establish and maintain, mainly in a context of multi-regulations with complex and inter-connected IS. We claim that a connection with Enterprise Architecture Management (EAM) contributes to deal with these issues. A first step towards a better integration of both domains is to define an integrated EAM-ISSRM conceptual model. Among the steps of the research method followed to define such an integrated EAM-ISSRM conceptual, this technical report presents the whole outputs (through alignment tables) of the conceptual alignment between concepts used to model EA (based on ArchiMate, TOGAF, IAF and DoDAF) and concepts of the ISSRM domain model.

Current insecure economic context and ongoing needs for more insurance between business partners advocate for a better alignment of the company with newly arising principles of corporate governance of IT. To contribute to that alignment, this paper first of all presents our generic responsibility model built on the concepts of Accountability, Capability and Commitment and combines that model with the CIMOSA framework. This CIMOSA enhancement enables the modeler to define easily usable and deployable enterprise policies throughout the company as well as throughout extended enterprises. Secondly, the paper permits to validate our responsibility model by analyzing and confronting it against the CIMOSA framework. Its advantages are illustrated with a model of the Supplier Tendering Process, a procurement process from the automotive industry.

These days, it is remarkable to note the growing of interest in professional responsibility. Specifically, the responsibility a person commits to when he or she performs a task. Based on a review of research currently performed in the field of policy (from corporate to technical ones), we observe that the perception of responsibility has often been limited to a combination of rights and obligations. In addition, we are seeing a re-emergence in business (for example, in the financial sector) of a belief that business ethics foundation can be improved and that a renewed focus in this area would help to prevent future breakdowns in the system. With regard to improving business/IT alignment and corporate ICT governance, it becomes increasingly important to define a commonly accepted personal responsibility model that embodies important and well-known concepts like accountability, capability and commitment. Moreover, because responsibility constitutes a fundamental notion of management theory, it is likewise identified as a meaningful bridge toward organizational artifacts. Exploiting process-based approach to define policy seems to offer new research opportunities since process-based organization becomes a continuous widely spread structure.

This paper relates to the development and the experimentation of an IT process assessment methodology especially designed to be used in very small enterprises (VSEs). This methodology, called NOEMI , has been developed as a critical part of a public research project of the Centre de Recherche Public Henri Tudor (Luxembourg). Initially the main objective of the NOEMI process assessment methodology was to contribute directly to the implementation of a collaborative IT-sourcing model, developed in the same re-search project. The process portfolio aims at a whole coverage of the usual IT-practices in VSEs. It is business value-driven and designed in five process areas: infrastructure, service support, management, security, and documentation. The processes themselves are based on a combined approach of ISO/IEC 15504 and the IT Infrastructure Library. The capability model defined in the NOEMI methodology explores the gap between level 0 and level 1 of ISO/IEC 15504 in order to match in a more accurate manner with the reality of VSEs. The capability profile has four levels and is performed for the process areas and not for the processes themselves, so allowing easy comparison between VSEs. We are now performing the seventh experimentation of the NOEMI assessment methodology. Each case has been a success according to the feedback of the VSEs. And we are considering the transfer of our methodology to French and Belgian partners through dissemination projects. It leads us to promote the NOEMI assessment methodology as a public package tool especially designed for use in a VSE context, which aims to enhance business value through IT. This paper introduces the methodology and considerations based on case studies.

This paper relates to the experimental draft of the model of collaborative management of ICT practices for use in SME, developed as part of a project of the Centre de Recherche Public Henri Tudor. This model aims to propose to SME an optimized management of their respective information system in terms of quality, reliability and cost. It is currently being experimented with SME partners. The results are promising and should allow at the end of the project to validate the model in its final release.

This paper relates to the development and the experimentation of an IT process assessment methodology especially designed to be used in very small enterprises (VSEs). This methodology, called NOEMI , has been developed as a critical part of a public research project of the Centre de Recherche Public Henri Tudor (Luxembourg). Initially the main objective of the NOEMI process assessment methodology was to contribute directly to the implementation of a collaborative IT-sourcing model, developed in the same research project. The process portfolio aims at a whole coverage of the usual IT-practices in VSEs. It is business value-driven and designed in five process areas: infrastructure, service support, management, security, and documentation. The processes themselves are based on a combined approach of ISO/IEC 15504 and the IT Infrastructure Library. The capability model defined in the NOEMI methodology explores the gap between level 0 and level 1 of ISO/IEC 15504 in order to match in a more accurate manner with the reality of VSEs. The capability profile has four levels and is performed for the process areas and not for the processes themselves, so allowing easy comparison between VSEs. We are now performing the seventh experimentation of the NOEMI assessment methodology. Each case has been a success according to the feedback of the VSEs. And we are considering the transfer of our methodology to French and Belgian partners through dissemination projects. It leads us to promote the NOEMI assessment methodology as a public package tool especially designed for use in a VSE context, which aims to enhance business value through IT. This paper introduces the methodology and considerations based on case studies.