Corporate Information Systems Research Articles

A collaborative cyber incident management system for European interconnected critical infrastructures

Today's Industrial Control Systems (ICSs) operating in critical infrastructures (CIs) are becoming increasingly complex; moreover, they are extensively interconnected with corporate information systems for cost-efficient monitoring, management and maintenance. This exposes ICSs to modern advanced cyber threats. Existing security solutions try to prevent, detect, and react to cyber threats by employing security measures that typically do not cross the organization's boundaries. However, novel targeted multi-stage attacks such as Advanced Persistent Threats (APTs) take advantage of the interdependency between organizations. By exploiting vulnerabilities of various systems, APT campaigns intrude several organizations using them as stepping stones to reach the target infrastructure. A coordinated effort to timely reveal such attacks, and promptly deploy mitigation measures is therefore required. Organizations need to cooperatively exchange security-relevant information to obtain a broader knowledge on the current cyber threat landscape and subsequently obtain new insight into their infrastructures and timely react if necessary. Cyber security operation centers (SOCs), as proposed by the European NIS directive, are being established worldwide to achieve this goal. CI providers are asked to report to the responsible SOCs about security issues revealed in their networks. National SOCs correlate all the gathered data, analyze it and eventually provide support and mitigation strategies to the affiliated organizations. Although many of these tasks can be automated, human involvement is still necessary to enable SOCs to adequately take decisions on occurring incidents and quickly implement counteractions. In this paper we present a collaborative approach to cyber incident information management for gaining situational awareness on interconnected European CIs. We provide a scenario and an illustrative use-case for our approach; we propose a system architecture for a National SOC, defining the functional components and interfaces it comprises. We further describe the functionalities provided by the different system components to support SOC operators in performing incident management tasks.

КОНЦЕПЦИЯ ОЦЕНКИ ЭФФЕКТИВНОСТИ ПРОЦЕССОВ УПРАВЛЕНИЯ В КОРПОРАТИВНЫХ ИНФОРМАЦИОННЫХ СИСТЕМАХ ПРЕДПРИЯТИЙ

The investigation concept of organization effectiveness in processes of a corporate information system (CIS) based on a simulation model of the abstract presentation of an industrial enterprise as an object of management, at the level of business-processes, an industrial process and computer network is offered

부가가치세 환급정보시스템 구현 - K사 사례연구

Tax-Refund System for foreign tourists is constantly increasing trend because of the discount effect of product. However, in order to get Tax-Refund, foreign tourists are supposed to keep a refund statement of paper issued after the purchases and the existing refund windows involve complicated procedure and poor accessibility, which causes the inconvenience. After recognizing the problems, K company has implemented information systems to relieve the discomfort of the Tax-Refund service by streamlining and reforming complex and inconvenient procedures of the Tax-Refund service so that it is able to plan the shopping convenience of foreign tourists. The K`s information system is considered good practice to show that they can play a key role under the competitive environment with the corporate information system that is an essential element in achieving a competitive advantage.

The Quality of Automotive Industry: The Remote Monitoring Complex of the Quality of Enterprises Activity of Company Car Service System

The development of the automotive industry is inextricably linked with the development of the ensuring operational effectiveness of the industry production sector, namely service maintenance. Today the car service is an important element at ensuring the competitiveness of products and a tool of improving the customer loyalty. Despite the fact that there is no direct connection between the ensuring car quality in production and the quality of service in exploitation, it is obviously that the first and the second directions definitely influence on the perceived by a consumer quality of products and services and so they form an attitude of consumer community to the brand maker. That is why the measurement of service maintenance quality is equally important for automaker as the monitoring of the quality of production processes. At the present time, in the course of solving problems on measuring quality of service maintenance, there has been found a spectrum of methods and techniques allowing to conduct quantitative (the service provider is estimated on a grade scale), qualitative (the quality of customer service is estimated by people responses) and comprehensive quantitative and qualitative researches (they include the above-described estimates). The aim of this paper is the development and implementation of corporate service quality monitoring system with using internal information of automakers enterprises which in the future, in conjunction with results of the research of the perceived quality service maintenance, will provide the most complete quality assessment covering the corporate environment of automaker and consumer environment. The development of information and computer technologies has had a beneficial impact on improving monitoring technologies of product and service quality. Development and implementation of information analysis algorithms of service quality allows getting a balanced assessment of consumers reflecting the quantitative and qualitative research area of satisfaction. However, the implementation of service quality researches based on data received by corporate information systems from proprietary service network enterprises to analytical quality services of automakers enterprises about the results of the maintenance and the elimination of defects and failures of cars are not widely represented in the literature, apart from a small group of sources. That is why this theme in the presented work is the main.

Corporate center of the integrated structure in modern conditions model

The article considers the topical problem associated with the need to ensure the successful operation of enterprises through the development and implementation of the development strategy of enterprises of enterprises included in the integrated structure. Such a strategy can only be successful if they are coordinated with corporate strategy, integrated structure, and they will establish mechanisms for the implementation of linkages between enterprises, enterprises and the parent company. These mechanisms should be specially created in the parent company division (corporate center), endowed with appropriate powers. The article suggests the model of the corporate centre, adapted to the conditions of Russian integrated structures. As shown by the results of the study, among the analyzed companies belonging to JSC “Concern Sozvezdie”, only one has a strategy for the development, although it was designed for operation in stand-alone mode without integration with overall corporate strategy. In the electronics industry to coordinate the development and implementation of strategies for the development of enterprises, as a rule, the most commonly used structures for the integrated model “strategic controller”, however, to implement this model in relation to the activities of the corporate center with a positive effect appears to be doubtful by reason of the presence of “centrifugal process” in the mood of most business leaders, the absence of all shared corporate culture and information systems to provide control and centralization of part of the centralized functions, etc. In this regard, the authors proposed a new model for the corporate centre on the transition period of 2–3 years, which reduces the interference of the center in the work of enterprises of the integrated structure and to reduce the flow of accounting documents, requiring considerable effort and time of personnel.

Information infrastructure development in NRU «MPEI»

The article describes the work on support and development of information infrastructure NRU «MPEI». Information infrastructure have different approaches to the defi nition. The authors defi ne the information infrastructure as a set of basic information services, computing, storage and data transmission systems that provide user access to information resources. New conditions dictate new approaches to building the education system in general and the educational process in each educational institution. NRU «MPEI» working to create a modern information infrastructure, including automated control systems, information resources and services, modular systems disciplines. This article describes the requirements for a modern information infrastructure of the NRU «MPEI», that provides students and teachers with the necessary services. Information infrastructure includes a set of software and hardware to ensure interaction between the participants of the educational process. All services and NRU «MPEI» system included in the unifi ed information educational environment (UIEE). Architecture UIEE NRU «MPEI» is displayed in the article. UIEE NRU «MPEI» is deployed on the basis of information network NRU «MPEI» and enables a comprehensive optimization of university management in various areas. Information and Computing Center supporting information and computer network NRU «MPEI», bought more than 4800 licenses in 43 different license versions of the software manufacturers. The server segment information network NRU «MPEI» contains a complex infrastructure and application servers for processing and storing information. The segment there are 20 high-performance server and storage system capacity of over 30 TB. In the server segment deployed complex systems to meet the needs in the various fi elds of activity NRU «MPEI», and the educational system to support the economic , scientifi c and human complex. Currently, ICC also pays great attention to the development of educational and innovation center, the initiative is aimed at improving the qualifi cations of teaching staff and training of students. For example, SAP technology are in fact the standard of corporate information systems for large enterprises, it is about 49.9% of the worldmarket. Therefore, every year, since 2008, the SAP Training Center - MPEI produces 40-45 graduates to work in energy companies and other industries. The preparation of an engineer is a challenge and a decision it is not possible without the widespread introduction of information and communication technologies in all spheres of activity of the university: teaching, research , management of the various spheres of activity . According to the authors , the use of modern information infrastructure for Engineering Education will allow to solve this problem effectively.

INFORMATION-ANALYTICAL LEARNING MANAGEMENT SYSTEM OF UNIVERSITIES

We consider conceptual approaches to creation of information systems, learning management school, which uses modern methods of decision-making and simulational modeling,web-technologies. The main criteria for the selection of development tools of the system are:openness, free of charge, easy to use and independence from system software and hardware. The chosen technology and the system itself satisfies such requirements as: focus on national and international standards in the field of higher education, adherence to service-oriented architecture,ensuring stable operation with a large number of users, support for a clear division of user rights to obtain and change information resources, software modularity the final product and its ability to integrate into the corporate information system of the university.

(Information Revolutions and the Introduction of Information Technologies in the Management of Modern Companies)

Bulgarian Abstract: Настоящата статия изследва взаимовръзкатата и взаимозависимостта между т.нар. революции и процесите на информатизация на съвременния бизнес. Особено внимание е отделено на изясняване на характеристиките на модерните корпоративни информационни системи и моделите, обясняващи тяхната дифузия във фирмените дейности. English Abstract: This article aims to explore the relationship and interdependence between the so-called IT revolution and the processes of informatization of modern business. Particular attention is paid to clarify the characteristics of modern corporate information systems and models explaining their diffusion in the activities of the company

ОСОБЛИВОСТІ УДОСКОНАЛЕННЯ КОРПОРАТИВНОЇ ІНФОРМАЦІЙНОЇ СИСТЕМИ НА ЗАЛІЗНИЧНОМУ ТРАНСПОРТІ

The article proves the necessity and importance of corporate information systems in the enterprise in the conditions of a dynamic market economy. It is proved that the corporate information system on transport should be viewed as a set of elements of the information system and its organizational, informational and legal support, by taking into account features of the organizational structure and the degree of centralization of management of its structural units. Considering the specificity of rail transport management offered at PJSC Ukrainian railway to distinguish 3 levels of formation of corporate information systems: a senior management level; the regional level of management of structural subdivisions, industrial transport enterprises and other enterprises and organizations; the level of separate departments and structural units within strategic business units.

Optimizing of Information Systems in Companies: Support of Sustainable Performance

The company's strategic management should be able to identify areas of its activities with the lowest efficiency and look for ways of correcting these and of keeping the company sustainably successful. In practice, this issue is very often supported by optimizing the corporate information system. Therefore, the strategic management of a company should devote considerable attention to the implementation, expert guidance and development of its information system in a broader context, especially in terms of supporting its sustainable corporate performance. Currently these questions are coming to the forefront and are being widely discussed. This paper points out the possibilities of identifying information system weaknesses and the assessment of its balance as a whole. This has proven to be an important source of the measurement of its effectiveness and efficiency. Furthermore, the paper presents the distribution of the balance levels of the company's information systems measured by the HOS method, due to their number of employees, and it presents a comparison of this distribution in two time periods. The results are the currently selected outputs of a research sample of companies acquired through the Zefis portal.

Методологічні аспекти вибору компонентів корпоративної інформаційно-аналітичної системи з урахуванням критерію живучості

The approaches regarding the creation and selection of the components of corporate information and analytical system, taking into account many of the requirements and criterion of survivability have been considered. Refs: 7 titles.

Developing new categories of knowledge acquisition, translation and dissemination by technological gatekeepers

The role played by gatekeepers who acquire external technical knowledge, translate that knowledge so as to contextualise it for their companies needs and disseminate it to key organisational personnel is of increasing importance and value to firms. This study uses a single case study to extend the existing literature on technological gatekeepers through helping to fill two theoretical gaps. Firstly, by examining how gatekeepers operate in a new functional area: a technical hardware and software product support department. Secondly, by focusing on a site where corporate information systems and repositories were used to support gatekeeping activities. This focus on new organisational and systems contexts enabled the development of new categorisations within each phase of gatekeeping activity, resulting in a revised model of gatekeeper behaviour. Two new and distinct modes of knowledge acquisition were identified: reactive acquisition to solve immediate problems and proactive acquisition that was related to emerging technologies. Whether knowledge had been validated or was provisional was identified as a new concept to be considered during the acquisition phase. The systems focus enabled a number of new forms of knowledge translation and dissemination to be categorised. Rationalised translation involved clarifying and elaborating on translations held in the corporate repository while tiered translations enabled versions of translations to be electronically available to different levels of users. While interpersonal dissemination was present the increasing reliance on information systems for dissemination diminished the traditional need for gatekeepers to expended time and energy developing social networks.

Reducing Lead Times in a Two-process Cell Using Lean and Simulation

An existing power system production process includes two operations and produces twelve different part types. The first operation fills WIP carts used by the second operation. A combined lean and discrete event simulation study supported by the analysis of order history information stored in a corporate information system is presented. The goal was to identify operations alternatives that could be used to reduce customer lead time from the current 3 to 3 days to 1 to 3 days. The application of lean methods included the examination of the order history data that showed that 80% of parts ship to a single primary customer and 20% to many secondary customers. The lean part of the study further concluded that the number of WIP carts should equal the number of different products, that each WIP cart should be associated with one and only one product and that each WIP cart should be should refilled daily after orders are processed. Using a discrete event simulation model, four order processing sequencing alternatives for improving on-time delivery were evaluated. The percent of orders delivered in 1 day was maximized, with the lowest variance, by sorting all orders for the primary customer first from smallest in size to largest. The orders for the same product from the remaining customers are processed immediately after the order for the same product from the primary customer. The value of the synergistic effect of combining lean tools with simulation supported by order data extracted from the corporate information system is demonstrated.

ІНТЕЛЕКТУАЛЬНІ ТЕХНОЛОГІЇ УДОСКОНАЛЕННЯ АДАПТИВНОГО УПРАВЛІННЯ НА ЗАЛІЗНИЧНОМУ ТРАНСПОРТІ

The article identifies that the key instruments of adaptive management in railway transport is intellectualization, as rail transport and management processes of its production and business activities, researched intelligent technology for adaptive management at the enterprises of railway transport, it was proved the importance of creating a Clearinghouse, which is based on the corporate information system and ensures performance management at the operational, tactical, and strategic levels of management of railway transport. It is determined that the core of the center are intelligent business technologies that include such tools as servers, relational databases, OLAP servers, data storage, tools for turning data into reporting, mining tools, means of data acquisition, modeling and forecasting, scorecards, portals, dashboards, spreadsheets and other.

EVOLUTIONARY DEVELOPMENT OF INFORMATION TECHNOLOGY IN MANAGEMENT SHIPYARDS

The author explores the issues of improvement of shipyards through information technology. In article the author considered the conditions of establishment and development of corporate information systems for industrial enterprises.

Exploring Big Data's Strategic Consequences

Big data multiplies the potential of organizational data engagement and the shaping of enterprise strategy processes. The paper argues that big data qualitatively alters strategic processes by extending managerial possibilities for acting on both structured and unstructured information because the conceptually presumed linear links between corporate strategy, firm structure and information systems design no longer hold. Big data draws organizational information systems into a shifting dynamic of altered forms of information access and use as part of a wider complex loop of interventions and analyses. Big data analyses are for many firms becoming indispensable strategic ploys which themselves alter strategies that further mobilize big data consequences. The paper also argues that the use of big data for directing enterprise activities effects behavioural and political organizational consequences. The paper concludes

Relationships between need-pull/technology-push and information security management and the moderating role of regulatory pressure

Information security management (ISM) has become more important than ever, as the expansion of corporate information systems and the use of networks continue to increase. Many organizations conside...

An Assessment of Corporate Security Policy Violations Using Live Forensics Analysis

Many more corporate entities today are utilizing ICTs to identify opportunities for innovative and customer-centric, value-added products and services. Indeed, information systems have been key characteristic of any growing and successful businesses, as they utilize ICTs for business value creation. The key motivation for the huge investment in IT infrastructures is to ensure an upsurge in revenue and retention of sizeable market share. Computer Usage policy is a document that provides guidelines that regulates the acceptable usage of these systems by endusers. The provision of these guidelines also serve as benchmark metrics in assessing the abuse or misuse of corporate information systems. These misuse and/or abuse are referred to as violations of computer usage in this study. 10 users, selected randomly from within each unit of a multi-lateral company, were observed for violations. Live computer forensics techniques utilizing EnCase, Microsoft reporting tools, WinHex, etc., were employed to investigate these violations. Notwithstanding the strict corporate policies, the study revealed that end-users virtually violated all computer usage policies. This paper further analyses and addresses the causes, effects and offers measures to mitigate computer usage violations.

Performance Analysis of Clustering using Partitioning and Hierarchical Clustering Techniques

Text clustering is the method of combining text or documents which are similar and dissimilar to one another. In several text tasks, this text mining is used such as extraction of information and concept/entity, summarization of documents, modeling of relation with entity, categorization/classification and clustering. This text mining categorizes only digital documents or text and it is a method of data mining. It is the method of combining text document into category and applied in various applications such as retrieval of information, web or corporate information systems. Clustering is also called unsupervised learning because like other document classification, no labeled documents are providing in clustering; hence, clustering is also known as unsupervised learning. A new method called Hierarchical Agglomerative Clustering (HAC) which manages clusters as tree like structure that make possible for browsing. In this HAC method, the nodes in the tree can be viewed as parent-child relationship i.e. topic-subtopic relationship in a hierarchy. HAC method starts with each example in its own cluster and iteratively combines them to form larger and larger clusters. The main focus of this work is to present a performance analysis of various techniques available for document clustering.

Usability for Internal Systems: What's the Payoff?

The high quality of consumer Web experiences has raised the bar in terms of user expectations for accessing internal corporate information systems. IT organizations must embrace techniques for creating a high-quality experience and justify the related investments. Many times, investments in high-quality user experience development for information systems are justified through direct linkage to ROI. External websites focused on transactions, demand generation, and brand identity receive funding because the results can be realized in short order and measured in hard dollars. Justifying investments in internal systems requires a broader view of the customer journey and a deeper understanding of the linkages to internal processes that are less readily apparent.