Search

Knowledge management (KM) has emerged as an operational and strategic organisational tool. However, the influence of recent cyber regulations (CR) and security policies (SP) on the usefulness of KM, are absent from the literature. This study focuses on the intersection of knowledge management and knowledge fortification. The study employs survey data from a sample of firms and utilises partial least squares (PLS) with extensive post hoc analyses, to examine the influence of CR and SP on KM core processes (acquisition, sharing, and utilisation) and subsequently on the operational effectiveness and strategic performance of firms. Contrary to prior research, we found that external knowledge sharing negatively affected performance. These findings support our assertion that KM processes are tied to contingencies that change the relationship between KM outcomes. [ABSTRACT FROM AUTHOR]

The formation and management of academic e-journals are examined by using the literature on industry life cycle framework. The e-journals are found to be functionally and economically superior to paper journals, which relies on the existing expertise of professional publishers and the journal's ability to support the social and cultural needs of academia.

As organizational reliance on technology increases, cybersecurity attacks become more attractive to attackers and increasingly devastating to organizations. Due to lacking knowledge and skills, humans are often considered the most susceptible threat vector for cyber attacks. Previous studies in information systems (IS) literature have confirmed awareness techniques to be the first step in increasing employee cybersecurity-related knowledge, promoting securityconscious decision-making, and the prevention of naive IS security behaviors. While training initiatives exist within many organizations, there appears to be a limited number of empirical research studies that focus on what security education, training, and awareness (SETA) programs should encompass. This includes topics to be covered, the most valuable method for delivery, and to what degree these factors play a part in the IS security practice of employees. The aim of this study was to use subject-matter experts (SMEs) to validate: 1) the key topics needed for two SETA program types (typical & socio-technical), 2) the measurement criteria for employees' cybersecurity countermeasures awareness (CCA), 3) weights for the three CCA categories (awareness of policy, SETA, & monitoring) in the overall CCA measure, and 4) two SETA programs content with integrated vignette-based assessments for CCA. A Delphi methodology was utilized to gather feedback from 21 SMEs regarding cybersecurity topics for organizational SETA programs, validation of SETA training content, and to develop a vignettebased measure of CCA. Results show that awareness of the organizational cybersecurity policy was the most important category for the overall CCA measure with 41%, followed by awareness of SETA program content, with 34%, while awareness of monitoring was 25%. The paper concludes with discussions and future research agenda. [ABSTRACT FROM AUTHOR]

This study analyzes the determinants of information security that influence the adoption of Web-based integrated information systems (IIS) by government agencies in Peru. The study introduces Web-based information systems designed to formulate strategic plans for the Peruvian government. A theoretical model is proposed to test the impact of organizational factors such as deterrent efforts, severity efforts, and preventive efforts and individual factors such as perceived information security threats and security awareness on intentions to use Web-based IIS. The empirical results indicate that deterrent efforts and deterrent severity have no significant influence on use intentions of IIS, whereas preventive efforts play an important role in such intentions. Information security awareness and perceived information security threats as individual factors have a significant effect on intentions to use the system. This suggests that organizations should implement preventive efforts by introducing various information security solutions, and improve information security awareness while reducing perceived information security threats. [ABSTRACT FROM PUBLISHER]

Agriculture is behind in the adoption of information technology. Precision agriculture provides means for obtaining desirable business goals like product quality, reduced labor cost, and balanced product mix. This study describes the use of a dairy management information system implemented by S.A.E. Afikim to illustrate the applicability of systems in precision agriculture. Findings suggest that the adoption of Six Sigma-based dairy management information system supports four of five propositions: reduced product defect, optimal product mix, quality, and efficiencies. [ABSTRACT FROM AUTHOR]

Intentional insider misuse of information systems resources (i.e., IS misuse) represents a significant threat to organizations. For example, industry statistics suggest that between 50%-75% of security incidents originate from within an organization. Because of the large number of misuse incidents, it has become important to understand how to reduce such behavior. General deterrence theory suggests that certain controls can serve as deterrent mechanisms by increasing the perceived threat of punishment for IS misuse. This paper presents an extended deterrence theory model that combines work from criminology, social psychology, and information systems. The model posits that user awareness of security countermeasures directly influences the perceived certainty and severity of organizational sanctions associated with IS misuse, which leads to reduced IS misuse intention. The model is then tested on 269 computer users from eight different companies. The results suggest that three practices deter IS misuse: user awareness of security policies; security education, training, and awareness (SETA) programs; and computer monitoring. The results also suggest that perceived severity of sanctions is more effective in reducing IS misuse than certainty of sanctions. Further, there is evidence that the impact of sanction perceptions vary based on one's level of morality. Implications for the research and practice of IS security are discussed. [ABSTRACT FROM AUTHOR]

The Internet presents a unique environment in which to study adoption. This is because of its composition of autonomous entities that are otherwise strongly interrelated. Our model of Internet standards adoption (ISA) combines diffusion of innovation and economics of adoption literature to present an integrative model. This model proposes that the adoption of Internet-based standards is dependent upon two dimensions: the usefulness of the features to the potential adopter, and the conduciveness of the environment to adoption of the standard. This model accounts for not only the traditional dichotomous view of adoption, but also includes the notion of ‘partial adoption’, where both old and new standards can coexist for extended periods of time. As a demonstration, we apply the ISA model to the next generation Internet protocol Internet Protocol version 6 (IPv6). Despite its ostensible superiority, IPv6 has not been widely adopted. In this paper we discuss the reasons why this might be the case. Our analysis also draws wider conclusions about the adoption of Internet standards: in particular, the importance of transitional technologies between the old and new standards and the need for co-ordinated government polices which encourage adoption. Our analysis also indicates that geopolitical boundaries may have a considerable impact on the adoption of Internet standards. [ABSTRACT FROM AUTHOR]

The increase in security breaches in the last few years and the need to insure information assets has created an intensified interest in information risk within organizations and for insurance companies. Risk assessment is an important component in the establishment of security policies. However, very little is known of the financial impact and the risk associated with security breaches. This article reports the impact of Denial-of-Service (DOS) attack announcements on the market over a period of 4.5 years. The study was conducted using event study methodology. The results show that in general the market does not penalize companies that experience such an attack. However, there is an indication that the market penalizes “Internet-specific” companies more than other companies. Our results indicate that large companies who are not “Internet-specific” might be overreacting to the media hype and may be investing resources to prevent a problem that has marginal impact on their shareholder value. [ABSTRACT FROM AUTHOR]