Organizational Information Systems Research Articles

Discovering System Dynamics Simulation Models Using Process Mining

Process mining techniques are able to describe and model real processes using historic event data extracted from the information systems of organizations. Later, these insights are used for process improvement. For instance, Discrete Event Simulation (DES) uses process models that are able to mimic real-world events. However, the aggregated performance status of processes over time reveals various hidden relationships between process variables. Coarse-grained process logs are sets of performance variables over steps of time, generated using event data from processes. The coarse-grained process logs describe processes at higher levels. <i>System Dynamics</i> completes process mining by capturing the relationships between various process variables at a higher level of abstraction. In this paper, we propose a new framework for capturing conceptual models of processes using transformed event data. The main idea is to automatically discover the underlying relations as equations. This allows us to generate system dynamics simulations of processes. We employ a variety of statistical and machine learning techniques to discover the hidden relationships between process variables. The framework supports the simulation modeling task in the context of system dynamics simulations. The experiments using real event logs demonstrate that our approach is able to generate valid models and capture the underlying relationships.

The Strategic Impact of Information Systems in Organizations: An Empirical Study

The Strategic Impact of Information Systems in Organizations: An Empirical Study

Relevance and prospects of the development of Privileged Access Management solutions

The subject matter of the article is cyber security incidents related to the violation of the rights of privileged users and the development of the market of PAM solutions over the past five years — 2017–2022. And there is also a process of safe and secure granting of access permissions to the organization's information systems with the provision and tracking of secure user activity in the company's business network and cloud environment. The goal and tasks are: determining the relevance and need for management and administrator access control tools, as well as studying the growth trends of the PAM service market. Determination of prospects for the development of a strategy for the implementation of PAM solutions for or in cloud environments. The methods used are: forecasting methods based on market analysis and conclusions from the presented reports of international companies regarding the development of PAM solutions and increasing demand for system data in the future, as well as observing trends in the transition of organizations' activities to the cloud environment with the development of cloud services: IaaS, PaaS, SaaS. The following results were obtained: the reports of CIS Controls, OWASP, Balabit, Gartner, Allied Marked Research and studies of global vendors: Heimdal security, Microsoft, IBM were considered, which made it possible to draw the necessary conclusions and prove the feasibility of using and increasing demand for PAM systems in the next ten years and prove the prospects and the need to implement a new PAM development strategy in the cloud through integration and blurring the boundaries with IAM. Conclusions. The scientific novelty of the obtained market research results indicates that the interest of PAM solutions on the part of customers, who will be aware of the need for access control tools for administrators, determines the further development and competitiveness of these systems. Increasing attack surfaces, increased security risks, the need to keep up with modern business processes — all this requires the implementation of new PAM solutions with an increased level of security, automation, as well as integration to ensure comprehensive information protection, which will become an integral part of the overall strategy information and cyber security of both enterprises and state institutions.

Wrongdoing Monitor: A Graph-Based Behavioral Anomaly Detection in Cyber Security

The so-called <i>behavioral anomaly detection</i> (BAD) is expected to solve effectively a variety of security issues by detecting the deviances from normal behavioral patterns of protected agents. We propose a new graph-based behavioral modeling paradigm for BAD problem, named <i>behavioral identification graph</i> (BIG), which has distinct advantages over existing methods by mining deeply the <i>property-level</i> (as an enhancement to the <i>event-level</i>) associations in behavioral data. Under BIG, the behavioral properties and their co-occurrence associations in behavioral data are modeled as the entities and relationships of graph, respectively; furthermore, behavioral properties and events are both vectorized by a devised event-property composite model, and the behavioral patterns of agents are finally represented as a multidimensional spatial distribution of behavioral properties. Consequently, for a behavior, the intensity of its behavioral anomaly can be transformed into the spatial decentrality of its behavioral agent and properties which contain both fine-grained information between behavioral properties and coarse-grained information between behavioral events. To the best of our knowledge, this is the first work to improve behavioral modeling for anomaly detection by integrating <i>inter</i> (event-level) and <i>intra</i> (property-level) associations of behaviors into a unified graph and space. Our method is validated by four representative security issues, i.e., <i>fraud detection</i> in online payment services (by transaction behaviors), <i>intrusion detection</i> in network communication services (by traffic behaviors), <i>insider threat detection</i> in organizational information systems (by system behaviors), and <i>compromise detection</i> in social networking services (by trajectory behaviors).

The use of trust systems in order to ensure information security and restrict unauthorized access to information systems of financial organizations

The use of trust systems in order to ensure information security and restrict unauthorized access to information systems of financial organizations

Developing a model for the success of information systems in sports organisations

Developing a model for the success of information systems in sports organisations

ФОРМИРОВАНИЕ МОДЕЛИ СИСТЕМЫ БУХГАЛТЕРСКОГО УЧЕТА ЗАТРАТ ДЛЯ СТРОИТЕЛЬНЫХ ОРГАНИЗАЦИЙ

The article discusses the concept and model of the accounting system, as well as its place in the information system of a modern organization. Based on this, a model of the accounting system was developed in relation to cost accounting in construction organizations, as well as specific features of this system were presented. Based on the principles of a general systematic approach, the principles of forming information about costs in the accounting of organizations in the construction industry are determined. The author comes to the conclusion that the cost accounting system of organizations in the construction industry differs from the standard one. These features are due to the need to compile specific documentation, the presence of specific cost items, as well as a clear justification of their volumes in the established norms.

Analyzing appropriate autonomous vessel for South-East Asian route: from the view of seafarers

The development of autonomous vessel has achieved tremendous interest across the world for the safe navigation and economic benefits. Numerous alternatives are constructed in the autonomous vessel development projects, the alternatives of MUNIN and NYK project are combined for this study; these are - Manned autonomous vessel, Remotely controlled vessel, Autonomous and Partially remote-controlled vessel, and Full autonomous vessel. As the statistics of UNCTAD shows that South-East Asia is a highly dense region and has the busiest international maritime connectivity, this research tried to select the appropriate autonomous vessels from the four alternatives to ensure safe navigation in this traffic congested maritime route. For this study, 311 accident reports are investigated to find out the most frequent casualty and its cause. The data are collected from the global integrated shipping information system of the international maritime organization's website. The decision tree of R-studio demonstrates that the most frequent accidents are- Collision, Grounding, Fire, and listing. Afterwards a survey was made on 65 experienced seafarers to determine which autonomous vessel criteria would be compatible to avoid the casualty. This research adopts AHP (analytical hierarchy process) to conduct the analysis. AHP is a multi-criteria decision analysis method for solving any decision problem. The research shows that ‘Manned autonomous vessel’ and ‘Autonomous and Partially remote-controlled vessel’ are the appropriate alternatives for safe navigation in the South-East Asian region. This study will help the researcher who is working in autonomous vessel development, mainly working for Asian water.

Determinants of Information Security Awareness and Behaviour Strategies in Public Sector Organizations among Employees

In this digital era, protecting an organisation's sensitive information system assets against cyberattacks is challenging. Globally, organisations spend heavily on information security (InfoSec) technological countermeasures. Public and private sectors often fail to secure their information assets because they depend primarily on technical solutions. Human components create the bulk of cybersecurity incidents directly or indirectly, causing many organisational information security breaches. Employees' information security awareness (ISA) is crucial to preventing poor information security behaviours. Until recently, there was little combined information on how to improve ISA and how investigated factors influencing employees' ISA levels were. This paper proposed a comprehensive theoretical model based on the Protection Motivation Theory, the Theory of Planned Behaviour, the General Deterrence Theory, and Facilitating Conditions for assessing public sector employees' ISA intentions for information security behaviour. Using a survey and the structural equation modelling (SEM) method, this research reveals that the utilised factors are positively associated with actual information security behaviour adoption, except for perceived sanction certainty. The findings suggest that the three theories and facilitating conditions provide the most influential theoretical framework for explaining public sector employees' information security adoption behaviour. These findings support previous empirical research on why employees' information on security behaviours vary. Consistent with earlier research, these psychological factors are just as critical as facilitating conditions in ensuring more significant behavioural intention to engage in ISA activities, ensuring information security behaviour. The study recommends that public-sector organisations invest in their employees' applied information security training.

К вопросу о содержании понятия «управление документами»

The article discusses theoretical approaches to the concept “records management” accepted in the national document science. The concept emerged in the 1970s-80s in the works of A. N. Sokova. She drew attention to the fact that records management as a field of activity was not identical to national office work and included a greater range of issues and functions. She made attempts to use records management in the development of the Unified State System of Record Keeping, trying to integrate it into the national terminology of working with documents. At the next stage in the development of the theory and practice of working with documents, the concept “records management” received support in the scientific works of M. V. Larin. Considering records management in organizations, he came to the necessity to revise the concept of the organization's information and documentation system drawing on scientific approaches including widespread use of new information technologies. M. V. Larin was the first to define the difference between the concepts “record keeping,” “document support of management,” and “records management,” defining the latter as a certain independent management function. This concept was supported by T. A. Selezneva. Her position was determined by the fact that “records management” was a borrowed term and concept, and, therefore, reflected the Western management model and provided quality management in relation to the organization's documentation as full value management resource. In 2007, the term was formally consolidated, tested in the meaning used in the national standard 15489, and compared with other concepts in the field of working with documents (“office work” and “document support of management”), thus overcoming the use of the concept of “records management” in scientific theoretical discourse as equivalent to the latter. The subject area of the field of records management was analyzed by E. S. Belous in order to formulate its main features that distinguish records management from office work and document support of management. She did not consider the hierarchy of concepts, but stated that the term “records management” meant not only work with documents, but also its requirements, and also indicated that the purpose of this activity was associated with the possibility of using records as evidence of activity.

INSTITUTIONAL PRINCIPLES OF FORMATION OF PUBLIC CONTROL MECHANISMS IN THE ACTIVITIES OF STATE AUTHORITY BODIES

The target orientation of the study of the problem of public control is determined by the need to form the theoretical and methodological foundations of public administration in the context of the modern paradigm of social development – the systemic reboot of power and, accordingly, the forms and methods of public control. The increasing complexity and dynamism of the political changes taking place in Ukraine, the influence of the external environment, which increases the level of competition in the markets of goods, services, capital and labor, require efforts to create an effective state mechanism for development, analysis, implementation, and control. The success of public administration is determined by the intensity of application of the latest approaches and methods of analysis, planning and control of public administration activities, as well as organizational structures and information systems. In modern conditions, the essence and content of public control is changing, which requires a fundamentally new approach to the implementation of functions, powers of both general and special competence. It has been proven that the implementation of public control is one of the necessary conditions for the establishment of a democratic, legal state and the development of civil society in accordance with European values. The article focuses on forms of public control and features of modern scientific approaches to the rationalization of public control mechanisms. It has been established that public control is an integrative concept that combines state, public, non-governmental, civil, political and other forms of controlling influence on the system of social relations. It is proposed to define the mission of public control in the context of the unwavering provision by the authorities of the constitutional rights and duties of citizens, the powers of management institutions, and the implementation of the constitutional principles of the functioning of the state. The expediency of introducing special mechanisms for ensuring public control is considered, both in the system of a stable state of the system of public administration, and in special conditions, in particular, in the conditions of martial law.

Tecnologia e Organização da Informação VII TOI 2021 - Transformação Digital Contribuições da Ciência da Informação

The TOI -7th International Conference on Technology and Information Organization is an initiative of the Observatory of the Labor Market in Information and Documentation research group (OMTID -CNPq) of the School of Communications and Arts of the University of Sao Paulo. In academic and scientific collaboration with CITCEM -Center for Transdisciplinary Research Culture, Space and Memory, based at the Faculty of Arts of the University of Porto, and LTi -Laboratory of Intellectual Technologies of the Federal University of Paraiba. The TOI -7th International Conference on Information Technology and Organization is focused on bringing together researchers, students, and professionals in the field of Information Science: Librarianship, Archival Science and Museology, and related, with the goal of promoting reflection and dialogue about relevant topics for the information society and sharing knowledge about the most innovative practices in this area. The program of this event covers the following fields of knowledge: Information Management, Technology and Information Systems, Digital Libraries, Information and Knowledge Organization, Collection Conservation and Preservation, Digital Curation; Information Ethics, Digital Humanities, Information Retrieval on the Data Web, Data Science, Internet of Things, Artificial Intelligence, Computational Culture, Information Professional Job Market and Data Engineering. The event is completely free and broadcast online through YouTube channel, areas such as interface design, education and business.

ANALISIS HAMBATAN KUALITAS SISTEM INFORMASI AKUNTANSI PERBANKAN DI ERA INDUSTRI 4.0

The fourth Industrial Revolution significantly changed banking products and services. The bank needs relevant and quality accounting information to support them in providing products and services to customers. The required accounting information is generated from an accounting information system owned by each bank. The purpose of this research is to determine how much the independent variables can influence the successful implementation of the accounting information system in banking. There are three independent variables analyzed, namely personality characteristics, organizational structure and quality of business processes. The results of this study are expected to be useful for banks in implementing strategies when managing the quality of accounting information systems that will produce quality accounting information. The type of data used in this study is primary data obtained through distributing questionnaires to 46 banking companies in Indonesia. Verification analysis was performed using the SEM-PLS test tool. The results showed that problems in the quality of accounting information were caused by the application of accounting information systems that were not maximally integrated. Furthermore, it was found that the application of accounting information systems in banking organizations must be able to accommodate personality characteristics, organizational structure and quality of business processes.

COMPETENCE APPROACH TO ACADEMIC AND PROFESSIONAL TRAINING OF AUDITORS OF INFORMATION SYSTEMS AND TECHNOLOGIES

An analysis of the specifics of the formation of a set of of competencies formation for the system of academic and professional training of specialists in audit and monitoring of information systems and technologies is carried out. It is determined that the training system should be formed in accordance with the global system of service industry standardization and international requirements and standards. The essence of the competencies formation on the basis of American and European standards in the field of information systems and technologies is revealed. The hierarchical sequence of the implementation of the world system of standardization for audit and quality control of information systems and technologies functioning in order to determine requirements to competences of the auditor of information technologies is defined. Practical tasks of the process of obtaining objective, qualitative and quantitative assessments of the current state of information infrastructure in accordance with the defined criteria, requirements and quality indicators are highlighted. The main features of competencies, skills, knowledge of specialists in audit and monitoring of information systems and technologies formation are identified. Formation of basic academic and professional competencies of specialists in the audit of information systems and technologies on the basis of the domain educational model Competency Model Clearinghouse is presented. It has been created the competence model for formation of the set of knowledge, skills and abilities during organization and support of information systems and technologies audit, control and monitoring. Tasks and concept of specialists’ integral competence are defined. The list of academic and professional competences is formed, basic abilities and skills of specialists in information systems and technologies audit are defined as well. Classes and levels of competencies are determined, as well as correspondent to them positions in the field of audit of information systems and information technologies of the industry sector. Special attention is paid to the international generally oriented approaches to standardization of educational services and competencies levels in accordance with professional requirements to specialists in the field of information technology audit system. Basic levels of professional certification of information systems auditors, which should provide a high quality level of a wide range of services in the field of information technologies and information security, have been determined.

FORMATION OF CONDITIONS FOR INCREASING THE EFFICIENCY OF ACCOUNTING AND ANALYTICAL SUPPORT OF LEASE RELATIONS OF AGRICULTURAL ENTERPRISES

Introduction. The development of lease relations of agricultural enterprises determines the need to form appropriate information support for the company's management, which is the basis for making managerial decisions on the means of forming the resource base of economic activity. Therefore, appropriate accounting and analytical support is needed that meets the requirements and requests of various users of economic information. Therefore, it is necessary to take into account the conditions for the formation and use of information to form its value, which determines the relevance of this study. Purpose. Determine the prerequisites for increasing the efficiency of accounting and analytical support for development in the context of the development of lease relations of agricultural enterprises and the formation of appropriate proposals for technical regulation of the functional load of the information base of an agricultural enterprise. Methods. The research was conducted on the basis of the use of monographic, historical, abstract and logical methods. The methodological basis for the study of the material was the dialectical method of cognition of social and economic phenomena. Results. Based on the results, a technical (component) contradiction of the accounting and analytical functions that form its basis is revealed. This contradiction is determined by a significant difference in approaches to obtaining results: high-quality performance of the accounting function requires strict adherence to regulated rules and standards, while high-quality analytical support is based on original solutions that reflect the essential features of doing agricultural business in certain conditions. Given the likely sanctions from regulatory authorities for non-compliance with the rules of accounting procedures, we believe that it can become a significant obstacle to the formation of high-quality analytical support due to the risk of going beyond the regulated rules. This potentially reduces the effectiveness of analytical support for enterprise management. Discussion. Potentially, this contradiction can be resolved by providing appropriate technical conditions in accounting automation systems by combining information accumulation tools: separating accounting and analytical functions at the accounting stage and combining them at the level of analytical functions. The technical prerequisites for this process are presented by OLAP, which is a concept for organizing information systems for accounting and analytical support of an agricultural enterprise in general, and lease relations in particular. This technology allows you to organize the structure of economic information obtained from different sources according to a single typology. Keywords: accounting, lease relations, accounting and analytical support, economic information, accounting automation.

Legal bases of automation of Federal Treasury activities in the field of state financial control: problems of using information systems

The strategy of economic security of the Russian Federation for the period up to 2030 defines various directions of ensuring economic security, one of which is to improve the activities of control bodies, including the Federal Treasury, which, in turn, is carried out through the application of various measures, in particular, information, which includes the creation and organization of information systems aimed at automating control activities. The presented research is devoted directly to the analysis of the legal regulation of these information systems. The article discusses the legal foundations of the organization and functioning of information systems specified in the Letter of the Ministry of Finance of the Russian Federation No. 02-10-07/74315, namely the GIS of public Finance management “Electronic Budget”, GIS “Official website of the Russian Federation in the information and telecommunications network “Internet” for posting information on the implementation of state (municipal) financial audit (control) in the field of budgetary legal relations” and GIS “Unified Information System in the field of procurement”. In addition, a study of the legal regulation of systems not mentioned by the Ministry of Finance of the Russian Federation among those contributing to the conduct of state financial control is presented — an automated system for planning control and supervisory activities of the Federal Service for Financial and Budgetary Supervision in executable modules and GIS “Standard cloud solution for automation of control (supervisory) activities”. The impossibility of using the second of these systems when carrying out state financial control measures has been established. In conclusion, the specific directions of the use of the considered information systems in carrying out control measures by the Treasury of Russia are presented.

Development of a model of selecting cloud software for a road construction organization under interval information

The object of research is the management processes of a road construction organization. The research is based on the principles of systems analysis for structuring design processes; methods of mathematical modeling, fuzzy mathematics, discrete programming, multicriteria assessment and optimization for the selection of cloud software for road construction organizations in terms of interval information. The information system of a road construction organization includes planning, reporting, regulatory and technical documentation that characterizes the state and movement of information in the enterprise. It is important to use systems that speed up the generation, processing and preparation of documents, as well as improve the storage and retrieval of information. The introduction of cloud technologies has become a necessary condition for increasing the mobility, flexibility and efficiency of the management system of a road construction organization. Formalized processes of information collection and internal distribution can better predict the dynamics of market trends and act more quickly, make decisions confidently and reasonably. In the final stages of selection for assessment, it is convenient to apply the criteria in conditions of interval uncertainty. The study was aimed at improving the efficiency of transport management by developing a model for choosing the cloud software of a road construction organization in terms of interval information. The following criteria of partial optimization were used in the developed model: maximum speed of execution of functions by cloud software; minimum cloud software requirements for internet connection speed; minimum cost of cloud software. The scope of permissible solutions is determined by restrictions:&#x0D; – execution of all functions must be provided by cloud software;&#x0D; – the minimum speed of execution of functions by the cloud software should be not lower than set;&#x0D; – cloud software requirements for Internet connection speed should not exceed the specified;&#x0D; – the cost of cloud software should be no more than specified.&#x0D; The developed model will reduce the cost of purchasing cloud software and increase the efficiency of transport management of a road construction organization.

Antecedent factors of violation of information security rules

Purpose This paper aims to investigate the influence of moral disengagement, perceived penalty, negative experiences and turnover intention on the intention to violate the established security rules. Design/methodology/approach The method used involves two stages of analysis, using techniques of structural equation modeling and artificial intelligence with neural networks, based on information collected from 318 workers of organizational information systems. Findings The model provides a reasonable prediction regarding the intention to violate information security policies (ISP). The results revealed that the relationships of moral disengagement and perceived penalty significantly influence such an intention. Research limitations/implications This research presents a multi-analytical approach that expands the robustness of the results by the complementarity of each analysis technique. In addition, it offers scientific evidence of the factors that reinforce the cognitive processes that involve workers’ decision-making in security breaches. Practical implications The practical recommendation is to improve organizational communication to mitigate information security vulnerabilities in several ways, namely, training actions that simulate daily work routines; exposing the consequences of policy violations; disseminating internal newsletters with examples of inappropriate behavior. Social implications Results indicate that information security does not depend on the employees’ commitment to the organization; system vulnerabilities can be explored even by employees committed to the companies. Originality/value The study expands the knowledge about the individual factors that make information security in companies vulnerable, one of the few in the literature which aims to offer an in-depth perspective on which individual antecedent factors affect the violation of ISP.

The Role of Organizational Commitment and Information System towards the Employees Performance

This research is conducted to find out the role of organizational commitment and information system in improving the employees performance in Sekretariat Dewan Perwakilan Rakyat Daerah (DPRD) Kabupaten Bandung Barat. Descriptive analysis method is used by collecting various data from human resource department as well as conducting interview with the employees of Sekretariat Dewan Perwakilan Rakyat Daerah. The result shows that the implementatiom of information system results in the improvement of employees performance. Moreover, the organizational commitment has also met the organizational needs. Therefore, the implementation of informatiom system and organizational commitment affect the improvement of employees performance of Sekretariat DPRD Kabupaten Bandung Barat

Information technologies’ role in optimizing the application of drugs in clinical practice: a view of a clinical pharmacologist

Currently, the development and implementation of computerized medical decision support systems (CMDSS) is an effective tool aimed at optimizing drug therapy in clinical practice. It has been proven in clinical studies their use can increase the efficacy and safety of pharmacotherapy for a number of socially significant diseases. An active integration of CMDSS into medical information systems of medical organizations is required.