Third-party Vendors Research Articles

Finding Ourselves Anew in the Emptiness of Third-Party Vendors: Over Promises and Under Delivery

ABSTRACT College counseling centers’ increasing use of third party vendors has happened so quickly that there has been little time to explore the reasons for this development and what it means for our centers. To address this lacuna, we propose four key “myths” that drive dependence on these vendors: 1) It is too expensive to staff counseling centers. 2) Something is better than nothing. 3) There are not enough counselors. And 4) students want on-demand services. Using information gathered from a survey sent to the AUCCCD list server and discussions with representatives of third-party vendors we explore the pros and cons of these services and offer thoughts on how counseling centers can engage with them thoughtfully.

Enhancing Vendor Management for Successful IT Project Delivery

Effective vendor management plays a critical role in ensuring the successful delivery of IT projects. In today’s complex business environment, organizations often rely on third-party vendors for specialized services, technology, and support. However, the collaboration between organizations and vendors presents challenges related to communication, quality control, cost management, and timely delivery. Enhancing vendor management practices can address these issues and lead to improved project outcomes. This paper explores strategies to optimize vendor management for IT project delivery. Key areas of focus include establishing clear contractual agreements, fostering transparent communication, and aligning vendor performance with project goals. Additionally, it examines the role of relationship building and regular performance evaluations to maintain high standards throughout the project lifecycle. By implementing risk management techniques and utilizing performance metrics, organizations can mitigate potential issues and ensure vendors meet their deliverables on time and within budget. The study also highlights the growing importance of technology in vendor management, such as the use of automated tools for monitoring vendor performance and improving collaboration. In conclusion, strengthening vendor management practices can lead to increased efficiency, reduced project delays, and enhanced overall success in IT projects, making it a crucial aspect for organizations aiming to deliver high-quality outcomes in today’s technology-driven landscape.

An Iterative Approach to Usability Evaluation: A Workplace Wellness Mobile Application Example.

Without a gold standard for mobile app usability testing, this paper outlines a case study of how a not-for-profit organization tested the usability of a public-facing mobile app designed to promote the health and wellbeing of workers in Canada by offering accessible resources conveniently through one's mobile phone. Although the app was developed by a third-party vendor, usability testing and refinement was left to the organization due to budgetary and time constraints. The app underwent three rounds of iterative usability testing. The first phase consisted of observing participants using the app followed by an interview. The second and third phases involved participants following task-based instructions and answering survey questions. All phases uncovered issues which helped to improve and refine the usability of the app before the launch to the public. This work offers a case study example of how low-cost in-house usability testing could be employed.

Enhancing financial security in Fintech: Advanced network protocols for modern inter-bank infrastructure

As financial technology (fintech) continues to evolve, ensuring robust security within inter-bank infrastructure has become increasingly critical. This review paper explores advanced network protocols for safeguarding financial transactions and data against modern cyber threats. The study examines key protocols such as Multiprotocol Label Switching (MPLS), Segment Routing, and Internet Protocol Security (IPSEC), highlighting their roles in enhancing the performance and security of financial networks. It addresses current security challenges, including sophisticated cyber-attacks, insider threats, and vulnerabilities associated with cloud services and third-party vendors. Furthermore, the paper outlines the steps for integrating these advanced protocols into existing systems, provides best practices for optimal performance and security, and discusses emerging trends and future directions in financial network security. Recommendations for fintech companies and financial institutions are provided to help them navigate the evolving security landscape effectively. The paper concludes with potential areas for future research, emphasizing the need for ongoing innovation in network security to address emerging threats. Keywords: Financial Security, Advanced Network Protocols, MPLS, Segment Routing, IPSEC.

Hyperspectral image construction in different spectral bands of tea leafs for identifying the tea type using O-ConvNet-RF model

Tea, a commonly consumed beverage, is susceptible to being sold in adulterated or expired forms by third-party vendors. Hyperspectral imaging across different wavelength bands has proven to precisely assess the diverse types of tea and their corresponding financial gains. This study aims to employ a deep learning methodology in conjunction with hyperspectral imaging for efficiently classifying tea leaves. A novel approach is proposed, wherein a waveband convolutional neural network is utilized to generate hyper spectral images of tea leaf samples with enhanced resolution. The model known as optimized-convolutional neural network-random forest O- (ConvNet-RF) demonstrated exceptional performance, achieving high accuracy, impressive recall, F1 score, and notable sensitivity rate, outperforming existing alternative methods. The tea leaf types, namely green, yellow, and black, were accurately identified using a combination of the random forest (RF) model and the O-ConvNet-RF model. The tree-based classification method for the identification of tea leaves demonstrated superior performance as compared to alternative machine learning models. In general, this study presents a successful methodology for the classification of tea leaves, with potential implications for consumer processing and distributor profit analysis.

Third-party vendor risks in IT security: A comprehensive audit review and mitigation strategies

Third-party vendor risks in IT security: A comprehensive audit review and mitigation strategies

Availability of Cranial Prostheses for Black Patients at Comprehensive Cancer Centers.

For patients who seek to camouflage cancer-related hair loss, cranial prostheses such as wigs and hair pieces exist. We sought to determine the availability of yaki-textured, type IV curls, and afro wigs at boutiques in Comprehensive Cancer Centers (CCCs). The 56 CCCs in the United States were surveyed to see whether they had an affiliated wig boutique for patients experiencing hair loss. Boutique workers were then asked a series of seven questions regarding cranial prostheses options for patients seeking yaki-textured, type IV curls, and afro wigs. The availability of wigs was compared with US Census data on population size and density of Black residents. Of the 56 CCCs, 27 (46%) institutions had active affiliated hair boutiques. We were able to reach 19 (70%) of the 27 boutiques, of which 53% (n = 10) offered yaki-textured wigs, 37% (n = 7) offered type IV curls or afro wigs, and 47% (n = 9) offered neither. Two additional boutiques offered in-store catalogs for Black patients who were interested in naturally appearing wigs. Although two institutions offered a wig bank that was free to all patients, neither had yaki-textured or afro wigs in stock. There was no significant relationship between population size or density of Black residents and availability of these wigs. Many Black patients undergoing cancer treatment interested in cranial prosthesis do not have consistent access to wigs with textures comparable with type IV hair at CCCs. With increased inventory of racially inclusive wigs, partnerships with third-party vendors, and support for the previous authorization process, we can better support Black patients experiencing cancer-related hair loss.

Availability of cranial prostheses for Black patients at comprehensive cancer centers.

e13681 Background: For patients who seek to camouflage cancer-related hair loss, cranial prostheses such as wigs and hair pieces exist. We sought to determine the availability of yaki-textured, type IV curls, and afro wigs at boutiques in Comprehensive Cancer Centers (CCCs). Methods: The 56 CCCs in the United States were surveyed to see if they had an affiliated wig boutique or shop for patients experiencing hair loss. Boutique workers were then asked a series of seven questions regarding cranial prostheses options for patients seeking yaki-textured, type IV curls, and afro wigs. The availability of these wigs was compared to US Census data on population size and density of Black residents. Results: Of the 56 CCCs, 26 (46%) institutions had active affiliated hair boutiques, of which 27% (n=7) offered yaki-textured wigs, type IV curls, or afro wigs. Two additional boutiques offered in-store catalogues for Black patients who were interested in naturally appearing wigs. Though two institutions offered a wig bank that was free to all patients, neither had yaki-textured or afro wigs in stock. There was no significant relationship between population or density of Black residents and availability of these wigs. Therefore, most Black patients with cancer who are seeking cranial prostheses will not have access to racially inclusive wigs where they are receiving treatment. Conclusions: Not being able to purchase wigs at CCCs poses potential financial challenges when seeking insurance coverage or reimbursement. Thus, Black patients may disproportionately experience emotional and financial hardships secondary to cancer-related hair loss. With increased inventory of racially inclusive wigs, partnerships with third-party vendors, and support for the prior authorization process, we can better support Black patients experiencing cancer-related hair loss. [Table: see text]

A Novel Approach to Managing System-on-Chip Sub-Blocks Using a 16-Bit Real-Time Operating System

Embedded computers are ubiquitous in products across various industries, including the automotive and medical industries, and in consumer goods such as appliances and entertainment devices. These specialized computing systems utilize Systems on Chips (SoCs), devices that are made up of one or more main microprocessor cores. SoCs are augmented with sub-blocks that perform dedicated tasks to support the system. Sub-blocks contain custom logic or small-footprint microprocessors, depending upon their complexity, and perform support functions such as clock generation, device testing, phase-locked loop synchronization and peripheral management for interfaces such as a Universal Serial Bus (USB) or Serial Peripheral Interface (SPI). SoC designers have traditionally obtained sub-blocks from commercial vendors. While these sub-blocks have well-defined interfaces, their internal implementations are opaque. Without visibility of the specifics of the implementation, SoC designers are limited to the degree to which they can optimize these off-the-shelf sub-blocks. The result is that power and area constraints are dictated by the design of a third-party vendor. This work introduces a novel idea: using an open-source, small, multitasking, real-time operating system inside an SoC sub-block to manage multiple processes, thereby conserving code space. This OS is TurbOS, a new operating system whose primary goal is to provide the highest performance using the least amount of space. It is written in the assembly language of a new pipelined 16-bit microprocessor developed at the University of Florida, the Turbo9. TurbOS is derived from and incorporates the design benefits of an existing operating system called NitrOS-9, and reduces the code size from its progenitor by nearly 20%. Furthermore, it is over 80% smaller than the popular FreeRTOS operating system. TurbOS delivers a rich feature set for managing memory and process resources that are useful in SoC sub-block applications in an extremely small footprint of only 3 kilobytes.

Strategies for protecting IT supply chains against cybersecurity threats

This review paper explores the multifaceted realm of cybersecurity within IT supply chains, addressing the intricate challenges posed by digital vulnerabilities, high-profile cyber incidents, and emerging threats. It highlights the criticality of continuous risk assessment, the implementation of international security standards, and the necessity for enhanced management of third-party vendors. The paper also delves into advanced technological solutions like blockchain, AI, and machine learning for bolstering security, advocating for best practices including the zero-trust model, regular employee training, and secure software development. Emphasizing a proactive over a reactive approach, the paper underscores the evolving nature of cyber threats and the imperative for adaptive strategies. It calls for concerted efforts from businesses, policymakers, and IT professionals to prioritize and continuously refine cybersecurity measures in safeguarding IT supply chains against future threats. Keywords: IT Supply Chain, Cybersecurity, Risk Management, Blockchain, Zero-Trust Model, Artificial Intelligence.

DHRCA: A Design of Security Architecture Based on Dynamic Heterogeneous Redundant for System on Wafer

System on Wafer (SoW) based on chiplets may be implanted with hardware Trojans (HTs) by untrustworthy third-party chiplet vendors. However, traditional HTs protection techniques cannot guarantee complete protection against HTs, which poses a great challenge to the hardware security of SoW. In this paper, we propose a computing architecture based on endogenous security theory—dynamic heterogeneous redundant computing architecture (DHRCA) that can tolerate and detect HTs at runtime. The security of our approach is analyzed by building a generalized stochastic coloring petri net (GSCPN) model of DHRCA. The simulation results based on the GSCPN model show that our method can improve the system security probability to 0.8690 and the system availability probability to 0.9750 in the steady state compared with typical triple-mode redundancy and runtime monitoring methods. Furthermore, the impact of different attack and defense strategies on system security of different methods is simulated and analyzed in this paper.

Devon Energy and Software Partners Enable Automatic Bottomhole Pressure Calculations

_ More than a decade ago, Devon Energy made it a priority to enhance its digital infrastructure which has led to a step change in internal data access along with how the company securely works with its third-party vendors. Easy access to relevant, trustworthy, and value-adding data has become the norm, not the exception, for the US oil and gas producer’s subsurface engineering teams. The upside extends beyond mere convenience, however, and translates directly into faster decision making which is one of the keys to success in the dynamic landscape of unconventional developments. When data is seamlessly connected for daily consumption, engineers engage with it regularly, integrating it into their daily workflows. Additionally, we see that the frequency of use is directly correlated with accessibility. The emphasis on accessibility reflects Devon’s proactive efforts to treat its data more and more as a valuable asset. By democratizing data and analysis tools, business-impacting insights are more readily available to engineers and decision-makers throughout the organization. This case study outlines one of the most recent and tangible outcomes of this collaborative philosophy: automatic calculation of bottomhole pressure (BHP). Solving for Bottomhole Pressures As shown in Fig. 1, accurate and reliable flowing BHP data is a critical input for a number of important engineering applications in both conventional and unconventional settings: reservoir simulation, production diagnostics, nodal analysis, rate transient analysis, pressure transient analysis, and material balance. The list goes on, but the overarching point is that BHP data allows engineers to make informed decisions, i.e., high-confidence estimations on future well production, reservoir management, and optimization strategies. The rub is that acquiring accurate BHP measurements has historically been a luxury service that is too costly to scale up beyond a few science projects. Operators that desire such critical data often turn to BHP gauges, which are positioned down in the wellbore to measure pressure at a specific depth. But given an average cost of $50,000 per installation, it is estimated that less than 5% of all horizontal wells drilled during the North American shale revolution have benefited from the use of downhole gauges. Without a downhole gauge, operators must calculate the pressures from surface pressure. The problem here is again one of scale. Using surface pressure has traditionally required the manual gathering of the proper data sets and calculating BHP. From there, the process is not only time consuming but considered to be error prone. Applying any of the published methods may take a reasonably experienced engineer half an hour to complete a BHP calculation and the odds of a miscalculation rise as the data set grows in size and complexity.

TROP: TRust-aware OPportunistic Routing in NoC with Hardware Trojans

Multiple software and hardware intellectual property (IP) components are combined on a single chip to form Multi-Processor Systems-on-Chips (MPSoCs). Due to the rigid time-to-market constraints, some of the IPs are from outsourced third parties. Due to the supply-chain management of IP blocks being handled by unreliable third-party vendors, security has grown as a crucial design concern in the MPSoC. These IPs may get exposed to certain unwanted practises like the insertion of malicious circuits called Hardware Trojan (HT) leading to security threats and attacks, including sensitive data leakage or integrity violations. A Network-on-Chip (NoC) connects various units of an MPSoC. Since it serves as the interface between various units in an MPSoC, it has complete access to all the data flowing through the system. This makes NoC security a paramount design issue. Our research focuses on a threat model where the NoC is infiltrated by multiple HTs that can corrupt packets. Data integrity verified at the destination’s network interface (NI) triggers re-transmissions of packets if the verification results in an error. In this article, we propose an opportunistic trust-aware routing strategy that efficiently avoids HT while ensuring that the packets arrive at their destination unaltered. Experimental results demonstrate the successful movement of packets through opportunistically selected neighbours along a trust-aware path free from the HT effect. We also observe a significant reduction in the rate of packet re-transmissions and latency at the expense of incurring minimum area and power overhead.

REVIEWING THIRD-PARTY RISK MANAGEMENT: BEST PRACTICES IN ACCOUNTING AND CYBERSECURITY FOR SUPERANNUATION ORGANIZATIONS

This paper conducts a comprehensive review of third-party risk management practices tailored to the unique context of superannuation organizations, with a specific focus on accounting and cybersecurity domains. Recognizing the critical role of third-party relationships in the operational landscape of superannuation entities, the review explores best practices aimed at mitigating risks associated with outsourcing accounting functions and fortifying cybersecurity defenses. In the accounting realm, the paper delves into the challenges and opportunities posed by third-party engagements, emphasizing the importance of thorough due diligence, contractual clarity, and continuous monitoring. Drawing insights from industry cases and proven methodologies, the review outlines strategies to enhance transparency, accountability, and compliance when outsourcing accounting services. Simultaneously, the paper addresses the burgeoning cybersecurity risks faced by superannuation organizations in an increasingly digital landscape. It investigates the role of third-party vendors in introducing potential vulnerabilities and advocates for a proactive approach to cybersecurity risk management. The review scrutinizes best practices in vetting, monitoring, and collaborating with third-party vendors to fortify cybersecurity protocols, emphasizing the need for alignment with regulatory standards. Ultimately, the paper provides superannuation organizations with a comprehensive guide to navigating the intricate terrain of third-party risk management. By synthesizing insights from accounting and cybersecurity perspectives, the review equips organizations with actionable strategies to cultivate resilience, safeguard member interests, and contribute to the long-term stability of the financial sector.
 Keywords: Third-Party, Risk Management, Superannuation, Cybersecurity, Accounting

Blockchain-Based Secure Distributed File Storage for Community Cloud Computing

Cloud storage is the most used option for storing and sharing files. However, cloud storage has issues like lack of transparency, privacy, security, and trust. On the other hand, local file storage is always faster and more secure than public cloud storage. Besides, a community cloud is more economical and scalable than private storage. However, due to the ad-hoc nature of community users, developing such a community cloud storage has always been a challenge due to data privacy, security, and availability concerns. Recent developments in blockchain technology and computer security are promising to resolve most of these challenges. Thus, in this research, we are presenting blockchain-based, distributed file storage for community cloud computing. This research, which focuses on local communities, allows them to securely share the excessive storage with the locals to earn something while gaining access to faster, more reliable large-scale local storage. By replacing the central authority of third-party storage vendors and migrating to distributed file storage, local communities will achieve greater security, reliability, and control over their data while reducing the risks of data failures and interruptions. Due to symmetric encryption, data privacy would be 100% assured even though they are stored in other peoples' computers. Moreover, this system uses Reed Solomon. Using the Reed Solomon algorithm, the system can retrieve files even when users holding 33.33% of the files are not present. Besides, it allows local communities to make effective use of their idle and unallocated computer resources transparently.

A Qualitative Study of Emergency Medicaid Programs From the Perspective of Hospital Stakeholders

IntroductionUninsured patients often have poor clinical outcomes associated with lower access to care. Hospital Presumptive Eligibility (HPE) provides up to 60-d emergency Medicaid coverage for uninsured, low-income patients. After obtaining 60-d HPE, patients must file for ongoing Medicaid to sustain coverage; however, navigating HPE approval is complex. We conducted a qualitative study to understand (1) stakeholder perspectives on the application process and workflow and (2) facilitators and barriers to HPE approval to understand process improvement opportunities. Material and MethodsWe conducted semi-structured interviews between September-December 2021 with key stakeholders (social workers, financial counselors, case managers, and private third-party vendor representatives) involved in HPE coverage determination, screening, approval, and Medicaid sustainment at our institution. We performed a team-based thematic analysis to elicit factors influencing HPE screening and approval, and recommendations for process improvement. ResultsStudy participants described the HPE application and Medicaid approval processes. Patient-level barriers included information disclosure and immigration status, inability to contact patients or next-of-kin, and knowledge gaps about insurance acquisition and sustainment. System-level barriers included technical challenges with the state HPE application portal, inadequate staffing for patient screening, and short emergency department stays that limited opportunities to initiate HPE. Stakeholders proposed improvements in education, patient outreach, and logistics. ConclusionsThis qualitative study reveals the process of HPE approval and outlines barriers within HPE and Medicaid processing from the perspective of direct hospital stakeholders. We identified opportunities at the patient, hospital, and policy levels that could improve successful HPE application and approval rates.

Emerging Digital Technologies in Healthcare with a Spotlight on Cybersecurity: A Narrative Review

Emerging digital technologies, such as telemedicine, artificial intelligence, the Internet of Medical Things, blockchain, and visual and augmented reality, have revolutionized the delivery of and access to healthcare services. Such technologies allow for real-time health monitoring, disease diagnosis, chronic disease management, outbreak surveillance, and rehabilitation. They help personalize treatment plans, identify trends, contribute to drug development, and enhance public health management. While emerging digital technologies have numerous benefits, they may also introduce new risks and vulnerabilities that can compromise the confidentiality, integrity, and availability of sensitive healthcare information. This review article discussed, in brief, the key emerging digital technologies in the health sector and the unique threats introduced by these technologies. We also highlighted the risks relevant to digital health cybersecurity, such as data breaches, medical device vulnerabilities, phishing, insider and third-party risks, and ransomware attacks. We suggest that the cybersecurity framework should include developing a comprehensive cybersecurity strategy, conducting regular risk assessments, implementing strong access control, encrypting data, educating staff, implementing secure network segmentation, backing up data regularly, monitoring and detecting anomalies, establishing an incident response plan, sharing threat intelligence, and auditing third-party vendors.

1410. Improved Disinfection in the Operating Room through Hydrogen Peroxide Fogging

Abstract Background Hospital acquired infections (HAIs), including surgical site infections (SSIs), are a major contributor to morbidity. Environmental exposure is a contributing factor to HAIs. Environmental decontamination with hydrogen peroxide fogging has proven to reduce bacterial growth and bioburden in the hospital setting. We sought to 1) implement and test feasibility of an operating room (OR)-based hybrid hydrogen peroxide fogging program and 2) assess the impact of hydrogen peroxide fogging on SSIs. Methods At a large freestanding midwestern Children's Hospital with a surgical volume of over 17,000 annual surgeries, a hybrid hydrogen peroxide fogging program was implemented in a risk-stratified fashion. Baseline fogging was completed to establish a post-fogging time series for bacterial regrowth (measured by culture and bioburden) and to guide the implementation schedule. Based on time-series results, room-specific fogging parameters were established. ORs received fogging either every 2 weeks (neurosurgical, cardiac and spine ORs) or every 4 weeks (all other ORs). The fogging program was administered using a third-party vendor beginning in September 2022. The feasibility assessment was designed to identify any safety events, interruptions in care or access to the ORs due to fogging. The time series outcomes were bioburden and bacterial cultures. The primary patient outcome measure was the rate of SSIs. This is depicted in both a P chart, showing a monthly rate, and a T-chart, showing days between events. SSIs for orthopedic, spine and neurosurgeries were tracked from January 2021 to present. Results After implementation of the program there was a significant decrease in SSI rates from 3.38% to 0.68% and is represented by a center-line shift in the P chart. The days between SSIs moved in a favorable direction, increasing to 238 days, the longest since January 2021. The time series evaluation indicated return to baseline bacterial bioburden between 3 and 4 weeks post-fogging. The feasibility assessment identified no safety events, delays, interruptions or decreases in OR utilization. Surgical Site Infections (Spine, Cardiac, Neurosurgical) Since fogging began in September of 2022, we have experienced a centerline shift demonstrating a reduced rate of surgical site infections from 3.38% to 0.68%, the longest stretch between surgical site infections since January 2021. Days Between Surgical Site Infections Since fogging began in September of 2022, we have experienced the longest stretch between surgical site infections since January 2021 Conclusion Hydrogen peroxide fogging is a feasible form of disinfection and reduces SSI rates when applied in the OR of a Children’s Hospital with a moderate to large surgical volume. Disclosures Michael Bigham, MD, ForTec Medical: Advisor/Consultant

An Exploratory Study to Evaluate the Technological Barriers and Facilitators for Pediatric Behavioral Healthcare in Emergency Departments

The objective of this study was to identify the technological barriers and facilitators of safe and effective pediatric mental and behavioral health care in emergency departments. The study, which involved a total of 4 participants, employed observational studies and semi-structured interviews to gather data from medical professionals across two hospitals. The data collected from the interviews were analyzed for themes relating to the use of technology, including factors that enable or impede safe and effective care for pediatric mental and behavioral health patients. Barriers included challenges related to software usability, inadequate training on newer software features, and concerns regarding the quality of service delivered by third-party vendors. Facilitators comprised the accessibility of clinician's notes, effective tools and technologies for clinician and patient safety, and efficient communication tools.

Community Perceptions, Concerns for Privacy, and Support for Law Enforcement Use of Aerial Surveillance in Baltimore

In 2020, the Baltimore Police Department implemented the Aerial Investigation Research (AIR) surveillance program, partnering with a third-party vendor that took video surveillance of the city to supporting investigations for four violent offenses: murders, non-fatal shootings, armed robberies, and carjacking. This study examined which factors shape community support for the program. Survey data was collected from Baltimore city residents online and over the phone ( N = 769). Results indicate that fear of crime and perceptions of police legitimacy and bias effect support for the AIR program. Importantly, residents who were more concerned about privacy violations were less likely to support the program and viewed it as less effective. Findings emphasize the need for police to examine public support prior to program implementation.