Chief Information Officer Research Articles

Effectiveness Measurement of Digital Library in Higher Education

The purpose of this research is to fill the gap between the student expectation and service provided by the digital library in terms of the service quality offering in the library. The user satisfaction of digital library was measured quantitatively through online questionnaire and analysed to establish relationship between the user satisfaction and its antecedents in order to identify critical factors so that suggestions could be made for the Chief Information Officers to enhance the user satisfaction. Keywords: Technology acceptance model, Perceived ease of use, Perceived usefulness, Intention to use, User satisfaction, Digital library. DOI: 10.7176/IKM/12-2-03 Publication date: February 28 th 2022

Relativism in the Cloud: Cloud Sourcing in virtue of IS Development Outsourcing - A literature review

Nowadays Cloud Computing and Cloud Sourcing is on the agenda in many organizations. Many Chief Information Officers (CIOs) that urge for alternatives to traditional outsourcing are interested in how they can take advantage from Cloud Computing, by sourcing Information Technology (IT) from the cloud. This paper provides an overview of the research direction of Cloud Sourcing in the IS field. A literature review based on selected papers from top Information Systems (IS) journals and conferences were conducted. Findings from the review indicate that the attention of Cloud Sourcing in IS literature has mainly been directed towards security and risk as well as adoption issues, and that Cloud Sourcing is claimed to be the next generation of outsourcing. Unfortunately, this is where this strong claim ends without any further evidence, which indicate that there is a need for more research on Cloud Sourcing, especially in the direction of investigating relationships and implications when organizations start using Cloud Sourcing.

When and why technology leadership enters the C-suite: An antecedents perspective on CIO presence

Building on the concept of dynamic managerial capabilities, we set out to advance scholarly understanding of the antecedents of the presence of technology leadership in the form of the chief information officer (CIO) in the top management team. We derive a holistic framework from the literature of dynamic capabilities and introduce into that literature the concept of adaptation pressures. We suggest that external and internal dimensions that pertain to information technology, comprising an environmental, structural, and strategic dimension, intensify the pressure on a firm to adapt. The pressure to adapt increases the likelihood that the firm will add a CIO to its top management team. In turn, the presence of a CIO can direct a firm toward exploration as a way to relieve the adaptation pressure. Results from regression analyses of a longitudinal data set covering 503 large U.S. firms from 2006 to 2017 confirm our hypotheses. This study contributes to the literature of both information systems and strategy by clarifying the antecedents of technology leadership in the C-suite and explicating how environmental, structural, and strategic factors can act as such antecedents. Moreover, this study reinforces the notion that IT leadership can induce strategic change.

Triggering disruptive technology absorptive capacity by CIOs. Explorative research on a micro-foundation lens

• Insights on CIOs’ involvement at the micro and meso firms’ level are offered. • The paper emphasizes the openness to disruptive technologies within SMEs. • An empirical analysis on a large-scale sample of 754 CIOs was performed. • Individual TAC is triggering the use of disruptive technologies. • Solutions for leveraging of disruptive technologies in SMEs The pervasive dissemination of disruptive technologies such as Artificial Intelligences (AI) is rapidly changing the way small to medium-sized enterprises (SMEs) are evolving and becoming more innovative. Individual technology absorptive capacity (TAC) is triggering the use of such technologies in a more effective, efficient, and easy mode by Chief Information Officers (CIOs). The CIO, albeit involved in the firm's micro level, encourages firms’ TAC at meso level. Although the CIO encourages the use of disruptive technologies, studies on this field are still scarce. This research bridges the gap in the literature, offering an empirical analysis of a large-scale sample of 754 CIOs from knowledge-intensive SMEs to evaluate TAC under a micro-foundation lens. The analysis provides detailed stimuli in rethinking the enhancement of CIOs, emphasizing the effect of the micro level in intercepting disruptive technologies, and optimizing investments in research and development in SMEs. The paper is part of a research line that highlights the relevant role of CIOs and the ability of firms’ TAC in Industry 4.0 at micro and meso levels. The study contributes to expanding solutions in the leveraging of disruptive technologies in the digital transformation era.

The influence of cloud computing on the healthcare industry: a review of applications, opportunities, and challenges for the CIO

The provision of health care is an area that is excessively dependent on the access, processing, analysis, sharing, and storage of data between different stakeholders. Consequently, cloud computing has been adopted in the most diverse areas (e.g., telemedicine, information management, bioinformatics) as a promising model in responding to this need, offering numerous advantages and opportunities. However, the massive migration of the sector to this new paradigm remains far from being achieved. Essential questions and challenges remain unanswered, and the Chief Information Officer (CIO) proves to be a fundamental agent for change to happen. This paper describes a literature review based on 17 survey and systematic review articles published between 2010 and 2021 on the applications, opportunities, and challenges of adopting cloud computing in the health sector. The results discussed may imply different strategies in CIOs' decision-making and contribute to organizational success in this context.

A Graphical Toolkit for Longitudinal Dataset Maintenance and Predictive Model Training in Health Care.

Predictive analytic models, including machine learning (ML) models, are increasingly integrated into electronic health record (EHR)-based decision support tools for clinicians. These models have the potential to improve care, but are challenging to internally validate, implement, and maintain over the long term. Principles of ML operations (MLOps) may inform development of infrastructure to support the entire ML lifecycle, from feature selection to long-term model deployment and retraining. This study aimed to present the conceptual prototypes for a novel predictive model management system and to evaluate the acceptability of the system among three groups of end users. Based on principles of user-centered software design, human-computer interaction, and ethical design, we created graphical prototypes of a web-based MLOps interface to support the construction, deployment, and maintenance of models using EHR data. To assess the acceptability of the interface, we conducted semistructured user interviews with three groups of users (health informaticians, clinical and data stakeholders, chief information officers) and evaluated preliminary usability using the System Usability Scale (SUS). We subsequently revised prototypes based on user input and developed user case studies. Our prototypes include design frameworks for feature selection, model training, deployment, long-term maintenance, visualization over time, and cross-functional collaboration. Users were able to complete 71% of prompted tasks without assistance. The average SUS score of the initial prototype was 75.8 out of 100, translating to a percentile range of 70 to 79, a letter grade of B, and an adjective rating of "good." We reviewed persona-based case studies that illustrate functionalities of this novel prototype. The initial graphical prototypes of this MLOps system are preliminarily usable and demonstrate an unmet need within the clinical informatics landscape.

Empirical Evaluation of Iranian CIO Perspective with Adoption of Green Information Technology

In recent decades, green aspects became a key priority for governments worldwide, as sustainable policies are able to promote a more equitable society and a healthier economy from the social, economic, and environmental perspectives, in addition to preserving natural resources for future generations. As an essential context in information technology management, green information technology (GIT) has been developed to cope with the existing environmental problems through organizations. The present study is aimed at identifying the influential factors of decision‐making on the adoption of GIT. To collect the required data, interviews were performed along with a structured survey. A total of 112 questionnaires were delivered to chief information officers (CIOs), 99 of which underwent the analysis. The structural equation and partial least square approaches were adopted for data analysis. GIT driver (G‐driver) was found to be an intermediary parameter. Findings revealed the GIT readiness (G‐readiness) and GIT context (G‐context) result in in GIT adoption whenever there was a G‐driver indicator (i.e., ethical driver, economic driver, response driver, or regulatory driver). The present study found the significance of all the variables to be above 1.96 except G‐context −> green intention to adoption path and G‐readiness −> green intention to adoption. Considering that the determination of coefficients and the analysis of relationships between factors directly depends on the opinion of experts and if the opinion of expert’s changes, the results will also change; this can be mentioned as the most important limitation of the research. Therefore, it should be noted that the largest impact was identified to be posed by the economical driver.

Migration of government records from on-premises to cloud computing storage in South Africa

The purpose of this study was to investigate the public sector's willingness to entrust their records to cloud computing technology with the view to propose potential strategies to encourage cloud migration. This qualitative study, utilised interviews, and document analysis to collect data. The target population consisted of purposively chosen chief information officers and records practitioners from the national government departments in South Africa. A total of ten participants were interviewed and data were analysed thematically. The study made several findings such as that the government was hesitant to subscribe to the privately-owned cloud due to security concerns such as attack of a physical host, bankruptcy, cross-border jurisdiction, sovereignty, access to information, and data loss, as well as the absence of legislation on cloud storage. The study recommends for the enactment of cloud storage legislation and encourage the storage of digital records on a cloud within the borders of South African virtual space.

The Implementation of Strategic Threat Intelligence for Business Organization

Nowadays strategic threat intelligence is very important to all the organization. Strategic cyber threat intelligence can determine who and why to provide key insights to the organization. It purpose is to determine who is behind a particular threat or threat family and addressing to evolving trends. The strategic level of cyber threat intelligence also included and explains about why. Why makes a company or an organization a target? Strategic Threat Intelligence offer the overview of the threat status of the organization. Therefore, the C-Suite include chief executive officer (CEO), chief financial officer (CFO), chief operating officer (COO) and chief information officer (CIO) of the organization use cyber threat intelligence data to understand the high-level trends and threats to the company or the organization. The C-Suite of the organization also need to know how to implement the strategic threat intelligence to prevent unexpected things happen. This research paper aims to discuss about the importance of the strategic threat intelligence to the company or organization and how to implement it. After knowing and understanding the implementation of strategic threat intelligence to the company or organization, this research paper also will discuss about the when of using strategic threat intelligence. The issue and challenges is also discussed in the article.

A CIO-centric local government data-sharing leadership ecosystem in China

The digital transformation of local government brings about massive change in IT leadership. As the strategic designer and process developer for government data sharing, the Chief Information Officer (CIO) needs to build self-centered leadership systems with strong coordination capabilities and adaptable mechanisms. Through a qualitative multi-case comparative study of three provinces in China, we applied IS innovation ecosystem theory to construct a CIO-centric local government data-sharing leadership ecosystem. The competencies, behaviors, and mechanisms of leadership roles are analyzed in five dimensions (personal, interpersonal, organizational, inter-organizational, and socio-economic and generation). Results show that a CIO-centric local government data sharing ecosystem can be resilient to administrative structure change, facilitating data sharing across levels, regions, and departments through collaborative networks and rotation approach. It provides useful insights into similar practices for constructing data sharing leadership ecosystem in local government, and can bring public value to citizens.

A Review of the Cybersecurity Programs in the United States Army

Cybersecurity is very complex, and as such, decisions regarding cybersecurity are highly intertwined with the functionality and application of systems. The threat to cybersecurity is, however, ever-evolving and decisions regarding cybersecurity, therefore, need to be made with this in mind. Cybersecurity systems, therefore, need to be tailored to individual systems, be adaptive, have the ability to evolve with the threat as well as be highly integrated with the system designs and the mission these systems support . In the military, it is critical to develop systems that maintain the expected level of confidentiality, non-repudiation, authentication, integrity, and availability that aids towards the collective goal of cybersecurity. In the military there are several stakeholders that play a key part in cybersecurity with the main ones being; the ones commanding or using the military system, the ones involved in the acquisition, life-cycle management and testing, the authorizing officials, the Chief Information Officer (CIO) and the intelligence and the counterintelligence officers. Accountability and control is, therefore spread out throughout the organization. This, however, leads to the blurring of roles and responsibilities. In conclusion, therefore, even though militaries exist for the purpose of combat most of the time, they operate in relatively peaceful conditions. During these peaceful times, they imagine and manufacture wartime conditions to determine their preparedness and the chances of a victory with the current conditions and resources. A communication plan approach will be able to tear down the expected natural resistance since the leaders will support the proposed changes and even devote resources to see that they are successful. The purpose of the communication plan is to, therefore, make the leaders the advocates for change. This is based on the understanding that in this environment, change is not possible without support from the leadership. Keywords: Cybersecurity, Intelligence, Communication & United States Army

The spillover effect of focal firms’ cybersecurity breaches on rivals and the role of the CIO: Evidence from stock trading volume

This study investigates whether there is any spillover uncertainty regarding a rival firm’s future operations upon a focal firm’s announcement of cybersecurity breaches and whether the existence of a chief information officer (CIO) in rival firms can reduce this spillover uncertainty. Using abnormal trading volume to capture the change in investors’ expectations, we show that compared with the focal firms, rival firms experience an increase in abnormal trading volume following the focal firm’s announcement of a security breach. The findings suggest that the spillover effect generates even more uncertainties toward these nonbreached rival firms regarding the impact of the focal firm’s security breach. However, CIOs in nonbreached rival firms can play a shielding role in mitigating such effects. Our study contributes to the literature on the impact of cybersecurity and has policy implications for encouraging a strategic perspective when managing cybersecurity risks.

The impact of CIO characteristics on data breaches

The exponential rate of increase in IT security breach incidents has led governments, regulators, and practitioners to respond by introducing standards and frameworks for the disclosure and management of organizational cybersecurity risk exposure. Cybersecurity, which is a part of IT risk management, is affected by the capability and the ability of senior leadership responsible for IT-related decisions. This paper uses hand-collected data related to the Chief Information Officer (CIO) for S&P 500 firms and explores whether the presence of a CIO role, human capital characteristics of the CIO, and structural capital characteristics of the firm and the CIO are related to a firm’s cybersecurity risk exposure. This study finds that firms disclosing the presence of a CIO are more likely to be breached, even after matching on the likelihood of a breach and controlling for the likelihood that a firm would choose to disclose a CIO. This study also finds predictable variations in the likelihood of a breach among CIOs based on various human capital dimensions (including past technology experience, external board memberships, firm tenure, and CIO tenure) and structural capital dimensions (including a recognized commitment to IT and charging the CIO with multiple responsibilities). Finally, this study finds evidence that the observed associations depend on both the source of the breach (external vs. internal) as well as the type of data compromised by the breach (e.g. financial, personal, etc.). The results of this study contribute to the growing body of academic breach literature, while also informing practitioners as they evaluate the costs and benefits of various methods for combating breaches.

Strategic Directions for AI: The Role of CIOs and Boards of Directors

This paper applies upper echelons theory to investigate whether chief information officers (CIOs) and boards of directors affect the development of AI orientation, which represents firms’ overall strategic direction and goals regarding the introduction and application of artificial intelligence (AI)technology. We tested our model using a dataset drawn from 1,454 publicly listed firms in China. Our findings show that the presence of a CIO positively influences AI orientation and that board educational diversity, R&D experience, and AI experience positively moderate the CIO’s effect on AI orientation. Our post hoc analysis further demonstrates that these board characteristics represent contingencies that impact AI orientation but not conventional IT orientation. This paper contributes to the upper echelons literature and IT management research by offering contextualized arguments that explain new business and IT strategies such as AI orientation. Further, our findings suggest important implications about how to build top management teams and boards capable of effectively developing AI orientations

Control Systems Cyber Security Reference Architecture (RA) for Critical Infrastructure: Healthcare and Hospital Vertical Example

A reference architecture (RA) provides a common frame of reference with a common vocabulary, reusable designs, and principles that may be applied to future architectures. It can promote re‐use of best practices, improve interoperability, and improve awareness of a system under development of the same mindset. The next version of the Department of Defense (DoD) Chief Information Officer (CIO) Cyber Security Reference Architecture (CSRA) will include an appendix for control systems. It provides a frame of reference for cybersecurity implementations based on generalizations of common principles that can provide a starting point for an organization's architecture effort, inform decision‐making, suggest governance, and help define future policy decisions for control systems. The appendix is based on the outcome of the MOSIACS Joint Capability Technology Demonstration (JCTD), which provides the initial cyber defensive capability framework for integrations of Commercial‐Off‐The‐Shelf (COTS) and Government‐Off‐The‐Shelf (GOTS) components to form a control system cyber defensive solution. The MOSAICS capability was successfully demonstrated in the energy sector critical infrastructure vertical on a power system in August 2021. Its applicability embodied delivery methods for technologies in other essential infrastructure sectors, repeatable playbooks for automated Courses of Action (COA), best practices, and templates for cyber security requirements for control systems. The advantages of the RA are to enable better decision‐making and policy‐making support about cybersecurity for control systems. This paper demonstrates the RA used in the Healthcare and Public Health sector's critical infrastructure vertical to evaluate concepts such as Zero Trust (ZT) and Defense‐in‐Depth (DiD) architecture principles related to policymaking.

Evaluating ERP systems success: evidence from Jordanian firms in the age of the digital business

PurposeThis paper aims to propose a theoretical extension of the information system success model (ISSM) to evaluate enterprise resource planning (ERP) success at an organizational level in Jordan. It explores whether information quality, system quality and service quality have a positive impact on both perceived usefulness and user satisfaction as antecedents of organizational impact.Design/methodology/approachA questionnaire was undertaken to gather data from chief information officers among Jordanian firms, with a total of 134 valid returns tested via partial least squares structural equation modeling.FindingsThe results showed that most of the research hypotheses proposed are empirically supported, with the exception of the influence of service quality on user satisfaction which was extremely low.Originality/valueTo the best of the authors’ knowledge, this is the first empirical work that measured ERP success from an organizational perspective in Jordan. It also provides insight into how the factor of perceived usefulness is incorporated into ISSM in the mandatory system case and its influences on organizational benefits.

Effect of IT Personnel Capability on Performance of Manufacturing Firms in Nairobi City County, Kenya

Manufacturing firms have reported dismal performance even after heavily investing in information technology (IT). Notably, this sector plays an important role in driving economic development by stimulating and sustaining high productive growth boosting employment opportunities for semi-skilled labour and building the country’s’ competitiveness. The manufacturing sector, respond to the surrounding conditions through deployment of appropriate strategic capabilities to overcome challenges, enhance their competitive position and sustain higher performance. Firms respond to the surrounding conditions by adjusting their purpose and shape through deployment of appropriate strategic capabilities to overcome the challenges enhance competitiveness and sustain superior performance. Several firms have made a huge investment in information technology (IT) to obtain economic value and to cope up with the ever-changing business environment. However, the economic value has not been attributed to IT personnel capability although IT personnel capability is one of the main drivers of sustainable firm performance. This paper applied cross sectional survey in collecting data from IT managers/ Chief Information Officers/ ICT directors drawn from manufacturing firms within Nairobi City County. The researcher used multistage sampling to identify regions where manufacturing firms are concentrated. A questionnaire was administered to 222 firms. A total of 140 valid responses were obtained.

Making Digital Innovation Happen: A Chief Information Officer Issue Selling Perspective

We encourage chief information officers (CIOs) to play more active roles in organizational level strategy making in the digital era and examine how CIOs could lead their organizations’ digital innovation initiatives. We propose that it is the CIO’s effectiveness in issue selling (i.e., the acts that are directed toward affecting top management teams’ (TMT) attention to and understanding of strategic issues), rather than his or her structural position, that directly influences the level of organizational digital innovation success. Nevertheless, CIO structural power should not be overlooked because it could amplify (i.e., positively moderate) the impact of CIO issue selling to digital innovation outcomes. In addition, we identify four enabling forces of CIO issue selling effectiveness: (1) CIO strategic decision-making authority, (2) CIO/TMT partnership, (3) CIO information technologies (IT)–related strategic knowledge, and (4) CIO political savvy. Matched-pair survey data collected from senior business and IT executives of 179 organizations largely support the research hypotheses.

The Value of the Structural Power of the Chief Information Officer in Enhancing Forward-Looking Firm Performance*

ABSTRACT Drawing on the resource-based view (RBV) of the firm and the top management team (TMT) structural power framework, we investigate the relationship between Chief Information Officer (CIO) structural power and forward-looking firm performance. In addition, we examine the contingency roles of market turbulence, industry IT intensity, and operating efficiency in shaping the above relationship. Using a sample of 7,185 firm-year observations and a panel fixed-effects model, we find that CIO structural power is positively associated with forward-looking firm performance (proxied by Tobin’s q). Further, our results suggest that the benefits of CIO structural power are higher under greater market turbulence, higher industry IT intensity, and greater operating efficiency. Our empirical results imply that the board of directors should consider endowing CIOs with a higher structural power, especially when an organization faces greater volatility in industry sales, competes in a more IT-intensive industry, and operates at a more efficient level. This research contributes to the RBV literature and integrates RBV and structural power frameworks to offer newer insights into the contemporary role of an important TMT member, the CIO.

Hunch Mining

Intuition and hunches are important tools for experts who make time-critical highly complex decisions in turbulent environments. However, hunches are also elusive and exist below the surface when not being used for immediate decision making. These latent hunches are valuable and can lead to creative solutions outside of a crisis. This paper uses a demonstration experiment to show how hunches can be “mined” using revealed causal mapping techniques. Fifty chief information officers and 88 programmer/analysts were interviewed during a very turbulent time in their organizations. The hunch mining results indicate that hunches can be found throughout experts' communications and can serve as valuable insights into strategic and tactical decision making. This research serves as the first manual step in developing natural language processing artificial intelligence tools for automated hunch mining in expert communications.