The aim of the thesis is to evaluate the preparedness of an information security management system (ISMS) in a logistic company JASA s.r.o. for a certification by standard ISO/IEC 27001:2013. This enterprise oscillates between small and medium enterprise. It has already implemented the certificate on quality management ISO 9001:2008. For this reason, in the thesis there are presented advantages for a company that already has implemented one of ISO standards and decides to implement another. First of all, the present state of information security management system in Jasa s.r.o was compared to other businesses functioning in the Czech and European market. Then the company control environment was evaluated accordingly to the requirements of standard ISO/IEC 27001:2013. Furthermore, a scheme was created in order to evaluate specific controls based on the impact risk that could arise in case of ignoring the suggested recommendations. In the last part, the controls were evaluated accordingly to difficulty, so that the company can find cheap and fast solutions with adequate impact. The main contribution of the thesis is the evaluation of the approach to solve information security in one of many enterprises that are afraid or are starting to notice the increasing amount of security threats. This approach may be chosen by other companies that decide to go the similar way.

Employer brand establishes a firms’ identity as an employer. It distinguishes one firm from others, creating an identity that gives a competitive advantage in the search for skilled workforce. This identity is becoming harder to establish for each day and is said to be just as important as retaining loyal customers. A strong employer brand can lead to a better pool of applicants in the recruitment process and many other returns, both financial and other. In the real estate sector in Sweden there is currently an excess demand for competent employees and this problem is growing for each day. Hence the matter of employer branding becomes of utter most important to this sector. Due to the importance of the matter in this market, we have come to realise that the market lacks a tool that makes the subject of employer branding more applicable and measurable. This study presents an index and complementing results that makes the matter more hands on and applicable in practice. Through a large quantitative study with questionnaires and through studying previous research on the subject, the main factors that affect employer branding have been distinguished and enquired about in the survey. The results from the study show that there is a correlation between how well known the companies are and how attractive they are as employers to current and potential employees. It also shows that the results on an average are rather low and that there is a lack of investments in companies employer brands, both in a financial terms and in a time perspective.

This work presents an overview of preliminary stages taken towards proper establishment ofan Information Security Management System (ISMS) for Sri Lankan Higher EducationInstitutes (HEIs) based on ISO/IEC 27001:2013 standard. This study consists with a gapanalysis conducted on selected HEIs within Sri Lanka to evaluate their compliance withISO/IEC 27001:2013 standards. This analysis aimed at identifying gaps in existing informationsecurity practices and assess associated risks to Sri Lankan HEIs. To provide a more tailoredapproach, Management, Technical, and Operational (MTO) model was introduced, aligningwith institute’s structure and responsibilities. This research also emphasizes on criticality ofprotecting information assets and the need for comprehensive controls to ensureconfidentiality, integrity, and availability. Additionally, the study investigates the level ofinformation security compliance with ISO/IEC 27001:2013 among the selected HEIs. Theresults reveal a maturity level of 2, indicating numerous control weaknesses and highlightingthe need for developing security policies, procedures, and implementing a securitymanagement system and security culture. The research concludes with detailed benchmarkingresults, maturity level measurements for each security control domain, and recommendationsfor improvement.

No description available.

Background: Efficient national health research systems (NHRS) generate knowledge to improve health outcomes while accounting for local health system specificities. African NHRS have a limited capacity to generate such knowledge; and rely on global or external sources of evidence which require adaptation. However, systematic, timely and comprehensive identification of local evidence needed for adaptation is challenging. Thus, the objectives of this study are to develop a centralized database of health research from Cameroon and test its applicability for informing future research production and use. Methods: We used an evidence mapping design. From October 2018 to May 2019, we searched 10 electronic databases and hand searched the archives of non-indexed African and Cameroonian journals. We screened titles, abstracts, and full texts based on these criteria: peer reviewed journal articles; published between 1999 and 2019; in English or French; investigating health-related outcomes in Cameroon. We extracted relevant study characteristics using a pre-established guide. We developed a coding scheme to label studies and ease searches on the database. Studies were coded independently by two reviewers and discrepancies resolved by consensus. We used the database to create evidence maps and identify knowledge gaps on sexual and reproductive health (SRH) priorities. Results: We included 4384 studies. Most were open access (76.3%); published in English (79.7%); conducted in the Centre region (45%) with an observational design (71.6%). The domains with the highest frequency were medical specialties (89.0%), and diseases (80.4%). The most researched specialty, diseases and population were infectiology, infectious diseases, and children respectively. Our gap maps revealed: (1) geographic and demographic disparities in the local evidence on adolescents’ contraceptive use (2) gaps in the type of local evidence needed for contextualisation and policymaking on obstetric fistula. Conclusion: Local evidence mapping and gap analysis can contribute to improving national research production and use in decision-making. / Thesis / Master of Science (MSc) / National health research systems answer questions about individuals’ health and the health care system they use. To do this, it is important to determine what we already know, which questions have not been answered and where resources should be directed in the future. Cameroon’s health research system needs to improve its research production capacity. It needs to produce answers which can be used to improve the health of Cameroonians and the decisions which are made about their health care system. As a first step towards achieving these goals, we created a database of health research from Cameroon. We used the database to create maps of what we know and don’t know about health topics such as adolescents’ use of contraception. We also made recommendations for future research in this field. The database will be useful for researchers, students, health professionals, funders and stakeholders involved with health research in Cameroon

This study investigated how a QMS that is compliant with the Medical Device Regulation (MDR) can be constructed and what the most important aspects are when creating a functional QMS at a Swedish hospital. QMS:s are a fundamental part of a healthcare organization and are used to ensure safe and secure patient care. To establish qualitative healthcare, the Swedish National Board of Health and Welfare has created regulations for hospitals to construct their QMS concerning care processes and handling of medical devices. In addition to these, there are also regulations within the European Union, including the MDR. To facilitate QMS:s work, hospitals can also follow international standards created for quality work. The most common for medical device departments is ISO 13485. Regulations are often perceived as difficult to follow and can be hard to interpret. Swedish regulations mention that a hospital should have a “suitable” QMS based on the organization’s areas of activity. But what is considered appropriate is up to the organization to decide on, which to some extent has been difficult for Swedish hospitals. Furthermore, several studies depict challenges with hospital QMS implementation and getting the QMS to work functionally. A qualitative method has been used to answer the research question where the main source of data gathering has been semi-structured interviews. The interviews have been conducted with quality managers and with experts in regulations and standards for hospitals. The questions were mainly focused on how QMS:s that follow regulations should be constructed and how to effectively implement them in a hospital organization. The study concludes that it basically is impossible to construct a general QMS suitable for every hospital without having to adjust it to the hospital's different and specific work areas, which can look very different from hospital to hospital. Regardless, since ISO 13485 is harmonized with the QMS part of the MDR, it can be helpful for a medical technology department. The authors constructed a gap analysis tool to facilitate the development and implementation process for hospital QMS:s. When it comes to aspects that constitute a successful QMS implementation, the study found the most important aspects being culture, value creation, simplicity, and leadership. / Denna studie har undersökt hur ett kvalitetsledningssystem (KLS) som uppfyller kraven från Medical Device Regulation (MDR) ska konstrueras och implementeras i svenska sjukhus. KLS är en väsentlig del för att säkerhetsställa en säker och trygg patientvård. För att säkerhetsställa en kvalitativ vård har Socialstyrelsen upprättat föreskrifter för sjukhus att basera sina KLS på samt gällande hantering av medicintekniska produkter. Utöver dessa föreskrifter finns också regelverk gemensamma för Europeiska unionen bland vilket bland andra inkluderar MDR. För att underlätta arbetet med kvalitetsledningssystemet utnyttjar sjukhus i hög grad också standarder för sitt kvalitetsledningssystem. Den vanligaste är ISO 13485 för en medicinteknisk avdelning. Föreskrifterna som svenska sjukhus ska efterfölja kan ibland anses svårtolkade. Svenska föreskrifter nämner bland annat att svenska sjukhus ska ha ett “lämpligt” KLS utefter organisationens verksamhetsområden. Vad som anses lämpligt är upp till organisationen att definiera, vilket till viss del varit en svårighet för svenska sjukhus. Speciellt gällande medicintekniska produkter och hur dessa bör och ska hanteras. Hanteringen av medicintekniska produkter är en viktig faktor när KLS ska upprättas, vilket i vissa fall missats i svenska sjukhus. Utöver detta påpekar flera litterära studier på svårigheterna med implementeringen av KLS på sjukhus samt hur man får dessa att fungera optimalt i organisationen. För att besvara frågeställningen har en kvalitativ metod använts där främsta datainsamlingsmetoden varit semi-strukturerade intervjuer. Intervjuerna har genomförts med kvalitetsansvariga, samt med personer kunniga inom föreskrifter och standarder. Frågorna rörde i huvudsak hur ett föreskrifts efterföljande KLS ska konstrueras samt hur detta på ett effektivt sätt ska implementeras i organisationen. Studien kommer fram till att det i princip inte går att konstruera ett generellt KLS utan att detta måste anpassat till sjukhusets specifika arbetsområde vilket också kan skilja sig markant mellan olika avdelningar på sjukhuset. Oavsett så kan ISO 13485, som är harmoniserad mot KLS avsnittet i MDR, vara till hjälp för en medicinteknisk avdelning. Författarna konstruerade ett “gap-analysis tool” för att underlätta en första gapanalys som i studien visat sig vara ett första steg när KLS ska konstrueras. Gällande implementationen finner studien att viktigaste faktorerna är kultur, värdeskapande och enkelhet, samt ledarskap.

South African home users of the Internet use the Internet to perform various everyday functions. These functions include, but are not limited to, online shopping, online gaming, social networking and online banking. Home users of online banking face multiple threats, such as phishing and social engineering. These threats come from hackers attempting to obtain confidential information, such as online banking authentication credentials, from home users. It is, thus, essential that home users of online banking be made aware of these threats, how to identify them and what countermeasures to implement to protect themselves from hackers. In this respect, information security awareness (ISA) programmes are an effective way of making the home users of online banking aware of both the threats they face and the countermeasures available to protect themselves from these threats. There are certain legal requirements with which South African banks have to comply when implementing ISA initiatives. Non-compliance or failure to demonstrate due care and due diligence should a security incident occur will result in financial penalties for the bank as well as possible brand damage and loss of customers. Banks implement international best practice recommendations in an effort to comply with legislation. These include recommendations for information security awareness. This research investigated both information security best practice recommendations and information security legal requirements for information security awareness. A selected list of information security best practices was investigated for best practice recommendations while a selected list of information security legislation was investigated for legal requirements imposed on South African banks. A gap analysis was performed on both these recommendations and requirements to determine whether the implementation of best practice recommendations resulted in compliance with legal requirements. The gap analysis found that the implementation of best practice recommendations does not result in compliance with legal requirements. Accordingly, the outcome of this research highlighted the importance of understanding the legal requirements and ensuring that adequate controls are in place with which to achieve compliance. / Business Information systems / Msc. (Information systems)

International Telemetering Conference Proceedings / October 26-29, 1998 / Town & Country Resort Hotel and Convention Center, San Diego, California / More and more companies and organizations are recognizing the benefits to be gained by achieving ISO 9000 registration. An effort is underway at JPL to become ISO 9001 registered. To facilitate this activity, the entire laboratory has been divided into processes, each one having a designated process owner. This paper concentrates more specifically on one of these processes, namely, the Packaging and Fabrication of Electronic Hardware (PAFEH), and the effort being undertaken to ensure that this process will successfully pass registration. A comprehensive approach is being utilized by the Electronic Packaging and Fabrication Section to bring this about.

All big and important decisions come through analysis. The main aim of the analysis is to examine or investigate more complicated problems by decomposing them into simpler ones whereas we come to certain conclusions on the basis of a detailed recognition of particularities. This diploma thesis is dedicated to analytic tasks solving techniques in Business Intelligence which would describe and support the whole process of analysis, its needs and premises in real surrounding environment. During the project I cooperated with Clever Decision company and took part in the real project. This company deals with Business Intelligence solutions/applications development and this project is meant to set the method of how to treat the development of the solutions. My work consists in designing a template of BI analysis method which is a part of a complex technique. The aim of this diploma thesis is to introduce my own method of Business Intelligence solution analysis, to introduce its basic components and common work instructions for this method. I reached my aim by analyzing documents and reports provided by Clever Decision company and other methods and suggestions. The main contribution of my diploma thesis is that the method works as a draft for assistance and standardizing the process of Business Intelligence solution analysis in Clever Decision company. This draft can nevertheless work as a basis for creating a wholly new method. My work consists of three parts. The first part, a theoretical one, deals with recapitulation of basic terms and methods I worked with. The second part represents properties, components and general working instructions for this method. It moreover presents main outputs, more precisely documents that are practical attachments to the method itself. The third part introduces the method itself including presentation of outputs/document drafts designed by me.

<p>The manufacturing industry is currently in a short-term downturn while the competition is increasing. The result of this is that companies must find new ways to bring out their products. Traditional competitive strategies, such as low pricing, is not sufficient today as the customer is inquiring something more than just a good product. Higher demands are presented on an accurate, well functional, communication between customer and companies, as this has become an important strategic factor in achieving long-term profitability.</p><p><p><p>The aim of this independent project was to analyze and evaluate the communication process between a company and its sales companies.</p><p>In order to illustrate this process, a case study was carried out at Alfa Laval, their sales companies and employees at their distribution center in Tumba. In order to see the differences in attitudes between the management, the sales companies and the employees regarding communication and involvement a gap analysis were used.</p><p>The theoretical part of the study considers theories about business mission, communication, involvement, quality and creating value.</p><p>The result showed that a smaller gap exists between the sales companies and the management while a slightly larger one exists between the employees and the management. The internal communication is presently inadequate in the sense that separate opinions exist on whether a one- or two-way communication should be used. This causes the interactive communication, between employees and sales companies, to suffer as well since the employees do not know what to communicate.</p><p>A long-term profitability can only be achieved when the internal and interactive communication is working correctly, something that it presently does not do. The conclusion of this independent project shows that communication must be correctly shaped and that all parties should embrace the degree of involvement in the same way. These are the two factors that are strategically important to the communication process.</p></p></p> / <p>Verkstadsindustrin är nere i en svacka samtidigt som konkurrensen hårdnar vilket medför att företag måste hitta nya sätt att framhäva sina produkter på. Traditionella konkurrensstrategier, som prispress, är inte tillräckliga idag då kunden kräver något mer än endast en bra produkt. Högre krav ställs på att kommunikationen mellan kund och företag måste vara korrekt utformad och väl fungerande då denna blivit en viktig strategisk faktor för långsiktig lönsamhet.</p><p>Syftet med rapporten är att analysera och utvärdera kommunikationsprocessen mellan ett företag och deras säljbolag.</p><p>För att belysa denna kommunikationsprocess genomfördes en fallstudie på Alfa Laval och deras säljbolag samt anställda på deras distributionscentrum i Tumba. För att se till skillnader i attityd mellan ledningen, säljbolagen samt de anställda, avseende kommunikation och involvering, genomfördes en gap-analys.</p><p>De teoriområden som användes för att genomföra rapporten behandlade bland annat affärsidé, kommunikation, involvering, kvalitet och värdeskapande.</p><p>Resultatet visade att det föreligger ett mindre gap mellan säljbolag och ledning medan ett något större gap föreligger mellan de anställda och ledning. Den interna kommunikationen är idag bristande i den bemärkelsen att det råder skilda meningar om huruvida den ska vara enkel- eller dubbelriktad. Som ett led av detta blir även den interaktiva kommunikationen, mellan anställda och säljbolag, lidande då de anställda inte vet vad de ska kommunicera ut. En långsiktig lönsamhet kan endast uppnås om den interna och den interaktiva kommunikationen fungerar korrekt, något som den i dagsläget inte gör. Rapportens slutsats visar att kommunikationen ska vara utformad på korrekt sätt och att graden av involvering ska omfattas på samma sätt av alla parter. Det är dessa två faktorer som är strategiskt viktiga för kommunikationsprocessen.</p>