Information Assets Research Articles

A documentary analysis of Victorian Government health information assets' websites to identify availability of documentation for data sharing and reuse in Australia.

This content has been temporarily removed for correction.

INFORMATION SECURITY RISK MANAGEMENT USING OCTAVE ALLEGRO METHOD AT UNIVERSITY

Information is one of the important and valuable assets for the life of an organization's business. Information management is needed to maintain the confidentiality, integrity, and availability of the information from cyber attacks. These cyber attacks can be in form of viruses, malware, phishing, Distributed Denial-of-service (DoS), fraud, and Ransomware.The education sector is a significant contributor to the increase in cyber attacks during the COVID-19 pandemic. The use of ICT in higher education must have right information securityThis study aims to Analysis the risks of information security in higher education. Identification of information security risks necessary for the organization to take appropriate preventive and mitigating actions.OCTAVE Allegro is the framework used to perform risk management in this research. This framework focuses on the information assets owned by the organization. How the asset is used, stored, transferred, occurs and how threats (threats), vulnerabilities (vulnerabilities) and disturbances can be on the asset. The results of this study are recommendations for mitigating approach for identified risks.

Analysis and Design of Asset and Non-Asset Lending Information Systems in the Informatics Engineering Service Unit at Astra Polytechnic

The development of information technology is developing rapidly and has a positive impact on organizational, one of which is Astra Polytechnic, especially at UPT Informatics, which supports the operational activities of inventory lending in the form of assets and non-assets which are considered inefficient. The process of recording, submitting, and approving inventory loans is still done manually, so it takes a lot of time and is prone to errors. The process of recording inventory data is still using excel, loan applications are still made using hardcopy forms and there are no asset and non-asset reports. The aim of research is to analyze needs and design of a system for lending assets and non-assets at UPT Informatics based on Web Applications in order to overcome these problems. The design uses System Development Life Cycle (SDLC) based on Prototyping methodology until design stage. The process of analysis and design is explained using Unified Modeling Language (UML) approach. Analysis of system requirements is carried out on ongoing business processes, which are then outlined in design of asset and non-asset lending information systems, especially in documentation process to produce reports according to company needs.

Asset Maintenance Monitoring Application: A Case Study of a Government Bank Branch Office

Asset management in a company is essential to do. Asset management may include record keeping, maintenance, and management environment further. Recording information asset owned by a company is the primary and most important thing to do to record data assets owned by the company. The existence of definite information about the asset owned by a company will provide convenience for the company that is and automatically, the company will also easier to carry out the asset management process further. One of the governments in the Jakarta Branch, which has assets, should be maintained. Recording information assets in one of the government banks, Jakarta Branch, is only partially managed with a computerized system. The process of recording data assets is still done manually and also not maximum. This research developed an Asset Monitoring Application Maintenance feature that can do registration detail information about the attributes and Monitoring of existing assets and Online Work Order. The software development model used in this study is the waterfall model. This thesis will explain the activities in each development phase. With this application, all the attributes of data assets owned by the company can be well identified and inventoried so that the process of monitoring assets is more optimum and easier to do

An Innovative Strategy Based on Secure Element for Cyber–Physical Authentication in Safety-Critical Manufacturing Supply Chain

The accurate tracking of every production step and related outcome in a supply chain is a stringent requirement in safety-critical sectors such as civil aviation. In such a framework, trusted traceability and accountability can be reliably and securely managed by means of blockchain-based solutions. Unfortunately, blockchain cannot guarantee the provenance and accuracy of the stored information. To overcome such a limitation, this paper proposes a secure solution to strongly rely on the tracking information of the physical assets in the supply chain. The proposed solution exploits Hardware Security Modules (HSMs) to provide required cryptographic primitives through a Near-Field Communication (NFC) connection. In our approach, each transfer of the assets is authenticated, verified, and recorded in the blockchain through the HSM. Transaction entries are signed, thus providing a guarantee of ownership and authenticity. The proposed infrastructure has been subject of an exhaustive security analysis and proved resilient against counterfeiting attempts, stakeholder repudiations, and misleading information.

Critical assessment of medical devices on reliability, replacement prioritization and maintenance strategy criterion: Case study of Malaysian hospitals

AbstractThe Biomedical Engineering Maintenance Services (BEMS) is a comprehensive maintenance program that ensures the safety and reliability of medical devices. Significant and crucial devices are identified and prioritized for best practice prior to the equipment life cycle to mitigate functional problems, alarmed by the Fourth Industrial Revolution (4IR) underlying the modernization agenda. A model of multi‐criteria decision‐making (MCDM) to prioritize medical devices according to their criticality is presented in this paper, with the utilization of quality function deployment (QFD) and fuzzy logic in the development of the model through a quantitative survey of experts from all regions in Malaysia. As a result, a customized version of the Asset Criticality Assessment (ACA) is developed and is recommended for use in more than 144 Ministry of Health (MOH) hospitals. Subsequently, real data of four selected devices are pulled from the Asset and Services Information System (ASIS) to demonstrate a relevant and comparable end‐result using the QFD and fuzzy logic. In essence, the key contribution of the customized ACA model is that it assesses a promising evaluation with a broader range on both the performance of medical devices and the appropriate asset replacement choices. This leads to an effective maintenance strategy for each device and the modernization of reliability computation metrics.

Implementing asset information requirement templates for corporate real estate management: A study in the chemical industry

Research on building information modelling (BIM) for corporate real estate management (CREM) in the chemical industry remains limited. This is largely due to a lack of documents supporting BIM adoption and implementation. The present study identifies, compares, and applies different approaches to the definition of asset information requirements (AIR) templates for facility services in the chemical industry. It subsequently translates the results into recommendations for AIR template implementation and formalises them into implementation steps. The results indicate that process diagrams are an expedient approach to the definition of AIR templates. Recommendations for their implementation concern information management software, static data prioritisation, accuracy limitations, asset types and sub-types, and stakeholder involvement. The present study contributes to the body of knowledge by identifying an expedient approach to the definition of AIR templates, providing AIR for four BIM Uses, and proposing an AIR template implementation framework for CREM in the chemical industry.

Awareness Level of Information Security Managers in Small Enterprises in Poland

The security of information assets largely depends on the real level of knowledge of those managing the information system. Particularly important is the knowledge acquired on an ongoing basis through reading and analysing: new reports published by specialised intelligence services worldwide, thematic portals, industry and scientific publications. Today's rapid pace of development of information, communication systems means that knowledge of digital information security acquired a year or more ago becomes partly outdated. Although there are specific, unchangeable canons of behaviour, proceedings in the processes of information protection - they are only a foundation for building an effective system of protecting intangible resources. Special attention should be paid to the fact that information protection is not an individual activity - it is a process running parallel to all processes operating in enterprises. The global pandemic situation has had an irreversible impact on the perception of information asset security. The situation in which most business entities were forced to work remotely necessitated a new approach to information security among its managers. The relatively stable environment of business entities until the pandemic suddenly forced the use of new techniques and technologies enabling work from private, home networks. Have such conditions changed the attitudes of security managers to the need for continuous education, to expand their knowledge in this area? Did those responsible for the security of intangible assets gain more experience with information security during the pandemic? The aim of this article is to present research on the knowledge and awareness of information security managers conducted before the pandemic in 2018 and 2019 among small businesses in Poland on the real perceptions of those responsible for information security and to compare them with the same research conducted in 2022 after the pandemic.

Impact of the Solar Activity on the Propagation of ICMEs: Simulations of Hydro, Magnetic and Median ICMEs at the Minimum and Maximum of Activity

The propagation of interplanetary coronal mass ejections (ICMEs) in the heliosphere is influenced by many physical phenomena, related to the internal structure of the ICME and its interaction with the ambient solar wind and magnetic field. As the solar magnetic field is modulated by the 11 yr dynamo cycle, our goal is to perform a theoretical exploratory study to assess the difference of propagation of an ICME in typical minimum and maximum activity backgrounds. We define a median representative CME at 0.1 au, using both observations and numerical simulations, and describe it using a spheromak model. We use the heliospheric propagator EUropean Heliospheric FORecasting Information Asset to inject the same ICME in two different background wind environments. We then study how the environment and the internal CME structure impact the propagation of the ICME toward Earth, by comparison with an unmagnetized CME. At minimum of activity, the structure of the heliosphere around the ecliptic causes the ICME to slow down, creating a delay with the polar parts of the ejecta. This delay is more important if the ICME is faster. At maximum of activity, a southern coronal hole causes a northward deflection. For these cases, we always find that the ICME at the maximum of activity arrives first, while the ICME at the minimum of activity is actually more geoeffective. The sign of the helicity of the ICME is also a crucial parameter, but at the minimum of activity only, since it affects the magnetic profile and the arrival time up to 8 hr.

AUCKLAND COUNCIL’S PROGRESS ON SUSTAINABLE SHORELINE ADAPTATION PLANS

Auckland Council is currently developing shoreline adaptation plans across the Auckland region to support the sustainable management of public assets into the future with increasing coastal hazard risks. These build upon the Coastal Management Framework (Carpenter et al. 2017) and are being developed as 20 phased plans. At the time of writing the ‘Whangaparāoa’ and ‘Beachlands and East’ Shoreline Adaptation Plans (SAP) have been completed. The ‘Āwhitu Peninsula’ and ‘Manukau South’ SAPs are well underway, and the remaining SAPs are programmed to be completed over the next 4 years. To inform the development of the adaptation strategies numerous datasets were required. Coastal erosion and coastal flooding predictions have been mapped for the Auckland region to assess the evolving coastal hazards. Up-to-date coastal asset information was gathered through hundreds of coastal asset inspections for each SAP area. This asset data fed into adaptation strategy decisions as well as being incorporated into a regional risk assessment to assess the relative risk across Auckland’s SAP units.

Semantic knowledge models for decision making in asset management: IM‐SAFE Knowledge Base

AbstractAgainst the backdrop of physical ageing, asset management organizations not only struggle with scattered object‐related data across incompatible software and models, but also dispersed, often missing, insights from domain experts. There is a large volume of data already available particularly at National Road Authorities i.e. object characteristics, inspection and measurement results, usage records. Yet this data is distributed, has complex and varying structures, it takes cumbersome effort to find and obtain for a particular asset management decision. Semantic knowledge models aim to capture domain information and represent it via class definitions, their attributes, relationships and in instances. Such models are used to create knowledge bases, where different technologies are utilized. In the IM‐SAFE project, a knowledge base is created based on a Semantic Wiki Platform. It captures asset information concerning their structural analysis and state on 99 civil structures across Europe. In this paper, a step‐by‐step methodology is provided to build the knowledge base. The paper involves knowledge acquisition, data collection, knowledge modelling, populating datasets and quality assurance steps. It will conclude future implications to make the base expandable and widely used for asset management.

Bank crisis resolution in India

PurposeThe academic literature has examined why bank runs happen based on the work of 2022 Nobel Prize-winning economists Diamond and Dybvig. They have found the source of banking/financial crisis in terms of mismatch between liabilities (deposits being short term and savers wanting to short-term access to their money) and assets (long term and illiquid). The Lakshmi Vilas Bank (LVB) crisis intensified when it came under Prompt Corrective Action (PCA) of the Reserve Bank of India (RBI). This situation provides the opportunity to study whether the elements embodied in the theoretical models like Diamond and Dybvig hold true for LVB crisis. This study aims to examine the reasons for the demise of LVB in India using DuPont financial model, peer group analysis and time series structural break in crucial financial parameters.Design/methodology/approachThe study examines the reason for insolvency of LVB using financial ratios, financial models (DuPont), financial distress model (Z-score) and asset-liability management. The study also adopts univariate structural break models using quarterly financial data covering the key financial measures used in the RBI’s PCA framework.FindingsLVB crisis is like Diamond–Dybvig model, in the sense, savers requiring short-term access to their money (liquidity for their deposits) on the information of high non-performing assets, which further deteriorates the illiquid nature of loan portfolio (assets) of banks. The study finds its profit margin (net interest margin and non-interest margin) and managerial efficiency had started deteriorating since 2018. The study finds that LVB’s main weakness lies in its limited credit appraisal ability, its monitoring and weak internal controls. Lending to sensitive sectors (like real estate, capital markets and commodities) and exposure to large business groups also contributed to its weakness. The study also finds huge, elevated asset-liability mismatch, especially in the short-term maturity buckets. Using univariate econometric time series model, the study also confirms financial weakness being evident much earlier than the time when resolution was undertaken by the RBI through PCA.Research limitations/implicationsThe study has implications for analysing and monitoring financial distress of banks. The study also has implications for devising banking regulation and supervision.Originality/valueThe study brings in a perspective of the banking regulations using the application of PCA framework on a listed private sector bank. The authors combine an accounting ratio model and combine risk measures that could identify the incipient risks in a bank. The authors believe this will help in refinement of banking regulations and better monitoring mechanisms.

Review on Clustering and Classification techniques in Intrusion Detection Systems

In the modern cyber world, the proportion of security threats is cumulating every day, and many researchers and security specialists are focusing on IDS (Intrusion Detection Systems) and the patterns in recognizing the alerts / events to detect and prevent them. The researchers and security specialists believe that the IDS is best way to protect the network and information assets. Hence this paper is focused on various threats and potential of IDS with its patterns in detecting the alerts / events. Basically, IDS has three different styles in detection the threats: Signature-based Detection (SD), Anomaly-based Detection (AD), and Stateful Protocol Analysis (SPA). The main area where the researchers and security specialists focusing is on techniques and algorithms used for clustering and classification. This paper mainly supports in understanding and analysing the various patterns on clustering and classifying the previous alerts / events which mainly supports in detection of threats with accuracy. This review will help to increase the detection accuracy of the IDS by enhancing the clustering and classification techniques which supports efficient execution of IDS over the network

Information security objectives and the output legitimacy of ISO/IEC 27001: stakeholders’ perspective on expectations in private organizations in Sweden

Organizations use the ISO/IEC 27001 standard to establish an information security management system (ISMS). This standard outlines specific security measures and requirements that organizations can implement to effectively manage their information assets. However, the effectiveness of the standard’s problem-solving capabilities has raised some questions. Consequently, there is a continuous development of new governance methods that demand fresh approaches to validate security operations and measures. In light of this, research is being conducted to examine the application and impact of ISO/IEC 27001, as well as to analyze the challenges and knowledge gaps through theoretical perspectives. By employing stakeholder theory, the focus shifts towards integrating business and social issues and exploring how non-business pressures can influence stakeholder motivations in implementing standards. Additionally, it investigates the impact of these standards on an organization’s reputation, performance, and operations. Therefore, the objective of this study is to investigate the output legitimacy of ISO/IEC 27001 from the perspective of stakeholder expectations. To accomplish this, an interview-based study was conducted, involving relevant stakeholders engaged in information security management within private organizations in Sweden. The findings reveal eight key information security objectives. The results indicate that the level of output legitimacy of the standard varies across these objectives, ranging from high to medium to low. To achieve a high level of output legitimacy for ISO/IEC 27001, stakeholders must understand that the standard is not solely a technical document. Furthermore, stakeholders need to possess the appropriate knowledge and skills in information security to effectively navigate their work while leveraging the support provided by the standard.

MEASUREMENT OF INFORMATION SECURITY AND PRIVACY AWARENESS USING THE MULTIPLE CRITERIA DECISION ANALYSIS (MCDA) METHOD

Information security is an asset that has value so it must be protected, along with increasing assets it is undeniable that many people wish to gain access and control it so that behind the convenience in the digital world there are many risks to information assets. There are several cases that occur related to information security such as data theft, illegal access, information leakage and vandalism where this becomes the privacy of the user. So it is necessary to do research from the user's perspective to measure the level of information security and privacy awareness of students and lecturers as well as recommendations that will be suggested based on the results of measuring information security and privacy awareness. The objects in this research are students and lecturers at the XYZ University. The method used is Multiple Criteria Decision Analysis (MCDA) by measuring the dimensions of knowledge, attitude, behavior in six areas of information security and three areas of privacy. Data were obtained by distributing questionnaires using a Likert scale of 5. Based on the questionnaire from the respondents, it can be seen students and lecturers have awareness that is at a "good" level of 85% in information security while privacy is at a "good" level with a result of 89% but in the behavior dimension there are several areas that are included in the "average" level including the area passwords by 62%, mobile equipment area by 77% incident area by 70% and on privacy security on the behavior dimension there is one area namely the login activity area by 78% so this needs to be given recommendations for improvement in order to reach a "good" level by providing socialization/ training for students and lecturers

Deep reinforcement learning for portfolio management

Portfolio management facilitates trading off risks against returns for multiple financial assets. Reinforcement Learning (RL) is one of the most promising algorithms for portfolio management. However, these state-of-the-art RL algorithms only complete the task of portfolio management, i.e., acquire the different asset features of portfolio, without considering the global context information from portfolio, which leads to non-optimal portfolio representations; Moreover, the corresponding optimizations are implemented using only the loss function in the viewpoint of RL, without considering the relationships between the local asset information and global context embeddings, which leads to non-optimal portfolio policies. To deal with these issues, this paper proposes a Task-Context Mutual Actor–Critic (TC-MAC) algorithm for portfolio management. Specifically, TC-MAC algorithm is developed based on: (1) representation learning introduces a proposed Task-Context (TC) learning algorithm, which not only encodes the task (i.e., acquire different asset features) of portfolio, but also encodes the global dynamic context of portfolio, thus which helps to learn optimal portfolio embeddings; (2) policy learning introduces a proposed Mutual Actor–Critic (MAC) framework, which can measure the relationships between local embedding of each asset and global context embeddings by maximizing mutual information, the corresponding Mutual-Information loss function combines with RL loss function (i.e., Actor–Critic loss) to collectively optimize the whole algorithm, thus which helps to learn optimal portfolio policies. Experimental results on real-world datasets demonstrate the superior performance of TC-MAC algorithm over the well-known traditional portfolio methods and these state-of-the-art RL algorithms, at the same time, show its advantageous transferability.

A Study of Multifactor Quantitative Stock-Selection Strategies Incorporating Knockoff and Elastic Net-Logistic Regression

In the data-driven era, the mining of financial asset information and the selection of appropriate assets are crucial for stable returns and risk control. Multifactor quantitative models are a common method for stock selection in financial assets, so it is important to select the optimal set of factors. Elastic Net, which combines the benefits of the L1 and L2 penalty terms, performs better at filtering features due to the complexity of the features in high-dimensional datasets than Lasso and Ridge regression. At the same time, the false discovery rate (FDR), which is important for making reliable investment decisions, is not taken into account by the current factor-selection methodologies. Therefore, this paper constructs the Knockoff Logistic regression Elastic Net (KF-LR-Elastic Net): combining Logistic regression with Elastic Net and using Knockoff to control the FDR of variable selection to achieve factor selection. Based on the selected factors, stock returns are predicted under Logistic regression. The overall model is denoted as Knockoff Logistic regression Elastic Net-Logistic regression (KL-LREN-LR). The empirical study is conducted with data on the CSI 300 index constituents in the Chinese market from 2016–2022. KF-LREN-LR is used for factor selection and stock-return forecasting to select the top 10 stocks and establish an investment strategy for daily position changing. According to empirical evidence, KF-LR-Elastic Net can select useful factors and control the FDR, which is helpful for increasing the accuracy of factor selection. The KF-LREN-LR forecast portfolio has the advantages of high return and controlled risk, so it is informative for optimizing asset allocation.

Company profile video design As a starting business introduction media

It would be nice if each company had certain media as open-source information for society and one of them is a company profile. It is regularly used by a company to deliver and spread information for any occasion such as awareness, image/reputation, and promotion. Along with the changing trend within the digital era, recent society is preferred to consume information in audio-visual format. Therefore, the existing company profile should be adjusted to the recent trend and made more interesting. According to the background, this study aimed to create a company profile for a growing start-up business in video format. This study used Research and Development (R & D) method as a way to examine and solve the issue. The process itself contains defining, designing, developing, and disseminating. Those steps then resulted in a company profile video that showed the positive image of the company and could be used for any occasion. Besides, the video created also increases the information asset of the company.

From Building Information Model to Digital Twin: A Framework for Building Thermal Comfort Monitoring, Visualizing, and Assessment

The existing building stock is globally responsible for 17.5% of greenhouse gas emissions due to their operation to achieve occupant satisfaction, thus requiring a vast intervention. However, reducing building stock emissions and optimizing building energy performance cannot be considered independently by the users’ well-being. The thermal comfort conditions and their monitoring represent a central issue that could optimize building energy usage while achieving good indoor environmental conditions. This document describes the first findings of ongoing research focused on the development of a building monitoring system, based on the integration of Building Information Modeling tools and sensor technology through Dynamo Visual Programming. Starting from the development of an Asset Information Model, which represents the virtual replica of a building that currently hosts the administrative offices of the municipality of Cagliari, the first step presented in this contribution shows a thermal comfort monitoring system, scalable and modular, that allows effective gathering and elaboration of data about comfort levels in each of the building’s rooms. The system proves to be a helpful support for facility managers to control building thermal comfort conditions and HVAC systems to assure their best operative status or plan suitable interventions to achieve it.

Analysis of digitalization changes and their impact on enterprise security management under uncertainty

Purpose. To analyze the changes caused by the acceleration of digitalization under conditions of uncertainty and note their impact on enterprise security management in this environment. Methodology. The methodological basis for the study was the theoretical provisions of enterprise security; legal regulations governing security and information protection, scientific works by domestic and foreign scholars on the issues of enterprise security management. The methods of analysis, synthesis, deduction, generalization and cognition were used in the study on the issue. Findings. The conditions of functioning of enterprises are analyzed, in particular, the security of enterprises is considered in conditions of uncertainty caused by the martial law imposed in Ukraine and the acceleration of digitalization of business processes as a result of the emergence of new challenges. Originality. A number of events are traced that preceded the increased interest in electronic services and active investment by enterprises related to e-commerce; artificial intelligence, big data; technology. The basis is investigated for the emergence of new challenges and threats associated with the active use of the Internet, applied solutions, servers, big data, data processing methods, the use of third-party software, i.e. the risks of violating the integrity, reliability, and confidentiality of information. The trends in measuring enterprise security are analyzed and the factors that strengthen the role of protecting information assets of enterprises and organizations are identified. It is proposed to pay more attention to ensuring the security of enterprises, taking into account not only physical but also invisible intrusions, such as: threats to information, the information field of enterprise functioning through a consistent response to cyber incidents/cyber-attacks by providing cybersecurity actors with protective stages: preparation, detection and analysis, deterrence, elimination, recovery, analysis of the efficiency of measures to respond to cyber incidents/cyber attacks. Practical value. The analysis carried out proves the relevance of the issues of enterprise security, the formation of changes in views on enterprise security in accordance with current trends and uncertain conditions. The findings of the study can be taken into account and practically implemented in the formation of the enterprise security policy, regardless of the field of activity.