Enterprise IT Systems Research Articles

Keeping the gates closed: the effect of conflict management styles, anxiety, and technical skills on security noncompliance intention among smartphone users

ABSTRACT Using personal mobile phones for work-related purposes is an increasingly common trend in organisations yet adding to cyber security concerns. It is vital to identify employees’ characteristics that impact security noncompliance behaviours when using mobile phones at work, as it could open a channel for cyber-attacks in the enterprise's IT systems. Using the unique context of personal smartphones and building on the theoretical framework of the Dual-Concern Model, this study identifies key characteristics of employees’ intention to engage in security noncompliance activities. Through a scenario-based survey of 391 mobile phone users in the United States, we examined the impact of personal characteristics (specifically conflict management style, context-specific anxiety, and technological skills) in explaining people’s intention to demonstrate security noncompliance behaviours. Younger individuals, those with higher conflict approach tendencies, and those with online communication apprehension tend to show higher noncompliance with information system security policies. Also, technical skills were found to moderate the association of online communication apprehension with increased noncompliance with security policies. The findings offer a range of theoretical implications and practical insights for strengthening organisations’ cyber security.

"A Study On Business In Digital Era"

Management operates at different levels and so it is possible to apply management information systems at these varied levels. Basic examples of management information systems are human resources management systems, financial management information systems and marketing management information systems. Enterprise IT Systems Enterprise IT systems are technologies designed to integrate and manage entire business processes for large organisations. Typically, enterprise application software is hosted on large servers over a computer network. Transmission of information can either be internal or external. Examples of enterprise information systems may be accounting software, health care specific software or electronic data Interchange (EDI). Another example of software within this category is CRM (Customer relationship management software). Information technology plays various roles in business, and provides a huge range of capabilities that enhance management performance. It is therefore important to understand the four major categories of IT systems and their functions in a business environment.

Comprehensive Information Protection at the Manufacturing Plant

The development of an integrated information security system (hereinafter referred to as KSI) reflects a systematic approach to ensuring information security (hereinafter referred to as IS) of the enterprise, preventing theft and leaks of restricted access information, and also optimizes the operation of the enterprise's IT system, reduces capital and operating expenses of the organization. Ensuring information security in production has its own "subtleties" associated with the peculiarity of automated control systems (hereinafter - ACS) of the enterprise and with the specifics of the course of production processes. Setting up an information security system will require high attention, since any error can lead not only to failure, but also to an accident. As a result of the study of complex information protection at a manufacturing enterprise, the following results were obtained: the features of information security at the enterprise were determined, the analysis of current security threats was carried out, the issues of implementing an information protection system at the enterprise were considered.

Cyber security threat modeling based on the MITRE Enterprise ATT&CK Matrix

Enterprise systems are growing in complexity, and the adoption of cloud and mobile services has greatly increased the attack surface. To proactively address these security issues in enterprise systems, this paper proposes a threat modeling language for enterprise security based on the MITRE Enterprise ATT&CK Matrix. It is designed using the Meta Attack Language framework and focuses on describing system assets, attack steps, defenses, and asset associations. The attack steps in the language represent adversary techniques as listed and described by MITRE. This entity-relationship model describes enterprise IT systems as a whole; by using available tools, the proposed language enables attack simulations on its system model instances. These simulations can be used to investigate security settings and architectural changes that might be implemented to secure the system more effectively. Our proposed language is tested with a number of unit and integration tests. This is visualized in the paper with two real cyber attacks modeled and simulated.

Data Analytic Approaches for Mining Process Improvement—Machinery Utilization Use Case

This paper investigates the application of process mining methodology on the processes of a mobile asset in mining operations as a means of identifying opportunities to improve the operational efficiency of such. Industry 4.0 concepts with related extensive digitalization of industrial processes enable the acquisition of a huge amount of data that can and should be used for improving processes and decision-making. Utilizing this data requires appropriate data processing and data analysis schemes. In the processing and analysis stage, most often, a broad spectrum of data mining algorithms is applied. These are data-oriented methods and they are incapable of mapping the cause-effect relationships between process activities. However, in this scope, the importance of process-oriented analytical methods is increasingly emphasized, namely process mining (PM). PM techniques are a relatively new approach, which enable the construction of process models and their analytics based on data from enterprise IT systems (data are provided in the form of so-called event logs). The specific working environment and a multitude of sensors relevant for the working process causes the complexity of mining processes, especially in underground operations. Hence, an individual approach for event log preparation and gathering contextual information to be utilized in process analysis and improvement is mandatory. This paper describes the first application of the concept of PM to investigate the normal working process of a roof bolter, operating in an underground mine. By applying PM, the irregularities of the operational scheme of this mobile asset have been identified. Some irregularities were categorized as inefficiencies that are caused by either failure of machinery or suboptimal utilization of the same. In both cases, the results achieved by applying PM to the activity log of the mobile asset are relevant for identifying the potential for improving the efficiency of the overall working process.

Features of Risk Management and Organization of Internal Audit at Industrial Enterprises

This article is aimed at studying the problem of risk management at industrial corporations. It examines the nature of risk and its impact on the way the modern corporations operate. The main types of risks are analyzed on the example of their classification, developed and applied by the leading German insurance company Allianz. It among them are 10 main types of risks, including risks associated with IT systems in enterprises (in particular, cyber-crimes, failures of IT systems, leakage and loss of data), production and supply chain risks, risks of changes in legislation and regulatory policy (in particular, duties, trade wars, sanctions, protectionism), force majeure and natural disasters, changes in markets (increased competition, new competitors, fluctuations, stagnation and fall of markets), fires and explosions, climate changes, reputational risks, risks of new technologies and macroeconomic factors such as monetary policy, government austerity programs, inflation, changes in resource prices, etc. The examples of occurrence of such risks in real enterprises are given. The role and the importance of risk management at industrial corporations is determined. The model of three "lines of defense" in risk management of industrial enterprises is described, where the "first line" includes operational management and internal control mechanisms, the "second line" – the services of enterprises, responsible for management and control of risks on the ground, in particular, financial control, security service, services of quality control, compliance with standards and others, and the "third line" is internal audit. The practical aspects of its application are defined. The role and function of internal audit in risk management of companies is determined. The differences in scope and goals of internal audit as compared to other corporate compliance and governance functions are highlighted.

Convergence of Enterprise IT and Embedded Systems

Convergence is currently melding entire disciplines to fully new business models and technologies across industries. What used to be embedded systems, on the one hand, with their specific constraints from the physical environments, and IT, on the other hand, are combining.1,2 This will impact education programs as well as classic industry boundaries.

Informatization of enterprises in the light of transaction costs

Abstract The subject of the publication are contracts concluded by enterprises, regarding the implementation and operation of information systems, which support various functional areas. The implementation and operation of IT systems in enterprises is presented as a mechanism of permanent transactions entered in two contracts: the selection and purchase of an IT system, and the operation and service of the system.

Functionality of it financial and accounting systems in the practice of polish enterprises

The development of technologies and innovative solutions in the field of information transfer has a significant impact on the functioning of enterprises. Accounting is treated as an organized system of collecting and processing information affecting the enterprise. The aim of the paper is to indicate the important elements that support the organization of financial and accounting work in the company. The analyses were based on the data and research of IT financial and accounting systems. The analysis of the collected literature on the subject and the synthesis of knowledge included there was helpful in implementing this method. It has been hypothesized that the implemented IT systems in enterprises significantly support accounting and finance and bring potential benefits from the use of such software by enterprises. The paper shows that the role of financial and accounting systems in modern enterprises is becoming more and more important and irreplaceable. Thanks to computer systems it is possible to perform the tasks entrusted to employees quickly and efficiently.

Viable Systems Analysis of the Wardley IT Evolution Framework

AbstractIn enterprise technology a perennial challenge is reconciliation of “Slow” IT with “Fast” IT. Slow IT is focused on an organization's reliability, stability, and control. Fast IT is driven by innovation, exploration, and adaptation. Tension between Slow IT and Fast IT is inherent to technology, but accelerating business disruptions increase that tension and its consequences. This paper leverages the Viable Systems Model (VSM) to evaluate an IT delivery approach for integrating Slow IT with Fast IT: the Wardley Pioneer Settler Town Planner (PST) trimodal structure. This paper first reviews challenges in enterprise technology management, and the effects of current and emerging disruptions. It then reviews the Viable Systems Model as a tool for analysis of enterprise IT models. Potential obstacles to VSM use are considered, specifically regarding the practical application to enterprise IT management. Then Wardley PST is decomposed using VSM and analyzed to assess its impact on enterprise IT system viability. The VSM proves effective for analyzing future organizational health, and enables us to conclude that the Wardley PST trimodal framework is a viable system that can integrate Slow IT with Fast IT.

Supporting the Process of Aircraft Maintenance with Mobile Devices

Abstract Maintenance of aircraft is a complex process and therefore, in order to optimize the process, integrated information systems are increasingly used. Rapid development and wide availability of mobile devices equipped with powerful processors and with a wide range of modern communication connections suggests their high usability for enterprise IT systems. In the Department of Avionics and Air Armament of the Military University of Technology (WAT) an ERP-class (Enterprise Resource Planning) system, intended to support aircraft maintenance [4] has been designed and developed. The main concept of the system is to store the aircraft related and maintenance information in a central repository, i.e. in databases hosted on a central database server. This solution ensures concurrent availability of the data to a large group of authorized users. The key components of the system include the database server and client applications, which ensure access to centralized information resources, according to assigned user rights. The project involves development of client applications using three technologies: web, desktop and mobile one. Developed client applications have successfully passed integration tests perfomed using sample maintenance data. Currently works on user authorization security and wireless data security are under way.

The San Diego City Schools: Enterprise Resource Planning Return on Investment

This case focuses on the challenge of quantifying the return on investment (ROI) of a large technology project, enterprise resource planning (ERP), in the nonprofit environment of the San Diego City Schools. The school district does not generate a profit, so traditional revenue enhancement arguments do not work. Instead, the case discusses the internal processes re-design and system consolidation enabled by the new ERP system. The system ROI is composed of two major components: cost savings from removal of legacy applications and productivity improvements. The cost containment benefits are relatively straightforward to quantify, but do not justify the system. The productivity improvements are harder to quantify, and many can be categorized as soft benefits. Furthermore, many of the productivity and cost-saving benefits will not be realized without personnel reductions, which are especially difficult in school districts and government agencies. The case debrief therefore discusses the tradeoffs quantifying soft benefits and productivity improvements, best practices for management decision making, and the organizational change necessary to realize the ROI.The case teaches students how to analyze ROI for a large enterprise IT system in nonprofit or government organizations. Financial ROI is applicable for the hard cost benefits but some benefits are more difficult to quantify, and students learn how to factor these into the decision making as well. In addition, organizational change can be particularly challenging in the government or nonprofit context; the case enables a discussion of strategies for workforce re-deployment in these settings.

기준정보 관리와 과제관리 및 품질관리 중심의 플랜트 PLM 혁신전략

PLM system has been widely used in whole industry. Specially, in case of the company that constructs the engineering plant, PLM can be a key success tool for the innovation with ERP and Enterprise IT Systems. This paper describes the innovation strategy for engineering plant PLM including Master Data management, EPC project management, full 3D modeling and quality management.

Modeling Information System Availability by using Bayesian Belief Network Approach

Modern information systems are expected to be always-on by providing services to end-users, regardless of time and location. This is particularly important for organizations and industries where information systems support real-time operations and mission-critical applications that need to be available on 24 x 7 x 365 basis.Examples of such entities include process industries, telecommunications, healthcare, energy, banking, electronic commerce and a variety of cloud services. This article presents a modified Bayesian Belief Network model for predicting information systemavailability, introduced initially by Franke, U. and Johnson, P.(in article “Availability of enterprise IT systems –an expert-basedBayesian model”. Software Quality Journal 20(2), 369-394, 2012)based on a thorough review of several dimensions of the information system availability, we proposed a modified set of determinants. The model is parameterized by using probability elicitation process with the participation of experts from thefinancial sectorof Bosnia and Herzegovina. The model validation was performed using Monte-Carlo simulation.

Holistic Performance Monitoring of Hybrid Clouds: Complexities and Future Directions

Effective monitoring solutions are critical to the smooth running of enterprise systems. However, real-world constraints present several challenges in designing such solutions. With the increasing scale and complexity of today's enterprise IT systems and their increasing use for business-critical applications, traditional approaches to monitoring must be reconsidered. This article stresses the need for a paradigm-shift from manual intuition-led approaches to an automated analytics-driven approach to monitor the IT systems. The authors propose that analytics-led solutions can provide powerful levers to design monitoring and event management solutions for next-generation enterprise IT systems.

Integration of System Modeling and Design Processes, Data and Technology for Streamlining Enterprise Integration

Complex systems, Pattern-based Systems Engineering, and Model-based Systems Engineering are approaches to model system lifecycles and address engineered systems complexity. Each approach advocates languages, tools, and processes as supplements to traditional engineering processes; however, these approaches are not readily adopted. The challenge for these system modeling approaches is they are not linked to traditional engineering processes and require unique tools and languages independent of traditional engineering domains. Furthermore, the knowledge of the external standards and specifications used in traditional processes are not available to users of system modeling technology, and those who have knowledge of external standards and specifications do not have knowledge of system modeling technology. Moreover, embedding intelligence of external standards and specifications is available within traditional system modeling applications. The research goal is integrating the technology and processes employed by system modeling and traditional engineering to automate data creation, flow and validation through removal of barriers to rule-driven technology adoption. Rule-driven technology adoption should lead to efficiencies in creating and managing extremely large datasets through automation. The results project significant improvement to data quality and enterprise IT systems integration while reducing labor costs to; validate data, avoid and correct errors, and eliminate data omissions.

Rule Construction and Execution for Root Cause Analysis

SUMMARYWe developed a root cause analysis (RCA) system for an enterprise IT system environment. In this paper, we propose a rule‐construction method that builds analysis rule data objects from general analysis rules and the topology information of the actual target IT environment. Using this method, the IT administrator can use the RCA system without any manual rule modifications. For the execution of the analysis, we introduce the certainty factor to realize robust analysis when the order and reachability of a fault event cannot be guaranteed.

Bioanalytical laboratory automation development: why should we and how could we collaborate?

Bioanalytical laboratory automation development: why should we and how could we collaborate?

Optimizing Operational and Strategic IT

The authors explore seven operational and strategic technology capabilities and management practices, which are shaping today's enterprise IT systems and applications: cloud computing, BYOD, big data analytics, social business analytics, location awareness, crowdsourcing, and governance federation.

IT Applications, Financial Analyst Recommendations, and Firm Stock Market Value

This paper examines the mediating role of analyst recommendations in the effect of annual IT investment on annual abnormal stock returns. While the influence of IT on stock market value has been studied in prior literature, there is a need to better understand how stock market investors come to know about intangible assets represented by firms’ IT capabilities. In theory, since IT investments contribute to firm productivity and profitability, it could be that the stock market valuations reflect IT investments indirectly only after IT assets generate tangible performance effects. But that wouldn’t explain the immediacy of the observed relationships between IT and firm market value, nor would it explain the fact that the relationships appear even after controlling for tangible performance factors. Thus, advancing prior research on the internal perspectives of IT value creation, we take an external view and investigate the role of stock analysts in facilitating the market evaluation of firms’ IT applications. Stock analysts collect information about firms’ IT applications and provide informed recommendations to investors in the financial market. As IT applications are known for their complexity and inherent risks, stock analysts can reduce information asymmetry between the firm and investors in the financial markets, thus helping discovering the business value of IT applications. On the basis of Fortune 1000 firms between 1996 and 2007, our analysis suggests that stock analysts play an intricate mediating role in the stock market evaluation of IT applications. Analyst recommendations have a strong mediating role in the effects of enterprise IT systems (ERP and CRM) on firm market value, but a weak to insignificant mediating role in the effects of function IT systems (DSS, HR and AIS). In addition, we find that the mediating role of financial analysts for IT applications is more salient when the firm’s market environments are more uncertain and unpredictable. These findings suggest that analyst recommendations play a critical role in the stock market valuation of firms’ IT applications in situations where the value of such investments is difficult to assess.