<p>This report was made for the company HordaGruppen AB to investigate how information security was handled. This report fits in the Master program of Internet Technology at School of Engineering in Jönköping University in Sweden.</p><p>The question at issue was how you protect your information against different threats. One question was how to make an information security policy and which guidelines you can follow in the Swedish Standard, SS-ISO/IEC 17799:2000.</p><p>Another question was to investigate the information sources at the company and which threats there are against it.</p><p>The work begins with a presentation about information security for the chief of information and the chief of quality in the company. The next thing was to do a survey of as thing are at present with a tool from Länsteknikcentrum called “Infosäkpulsen”. After the analysis was made of the survey, two reports were present with action plan for better information security for the company. The most important measures were of administrative kind and consist of a risk analysis of information resources and to make an information security policy with instructions for the users.</p><p>The risk analysis was made with the tool BITS from Krisberedskapsmyndigheten and the consequence was that base level for IT-security was enough for the company.</p><p>To fulfil the demand from the analyses so was an information security policy made and after that so create we information security instructions for the different kind of user group. One instruction was for ordinary users and the other was for management users.</p><p>Besides the part with policy and instructions so recommend the company to initiate incident management and register all kind of changes in their IT-system.</p><p>For further research it suggests to investigate how different standards can integrate to be only one standard that fulfils the goals in quality, environment and security standard</p> / <p>Rapporten var gjord som examensarbete på HordaGruppen AB och ingår i Breddmagisterprogrammet i Internetteknik på Ingenjörshögskolan i Jönköping.</p><p>Problemställningen som rapporten handlar om är hur man skyddar företagets information mot olika sorters hot. Frågeställningen var dels hur man tar fram en informationssäkerhetspolicy och vilka riktlinjer det finns i svensk standard för informationssäkerhet. Frågeställningen skulle också ta reda på företagets informationstillgångar och vilka hot det fanns mot dessa.</p><p>Arbetets inleds med en presentation på företaget om informationssäkerhet för Kvalitetschefen och IT-ansvarig. Därefter görs en nulägesanalys över informationssäkerheten med hjälp av verktyget Infosäkpulsen, en enkätundersökning från Länsteknikcentrum i Jönköping AB. Efter att svaren samlats in så sammanställdes en åtgärdsrapport och presenterades för företaget. De åtgärder som ansågs mest aktuella var av det administrativa slaget och bestod i att riskanalysera informationstillgångarna och att ta fram en informationssäkerhetspolicy med anvisningar för användarna.</p><p>Riskanalysen gjordes med verktyget BITS från Krisberedskapsmyndigheten och resulterade i att basnivå för it säkerhet räckte överlag för företaget.</p><p>För att uppfylla kraven från analyserna så togs en informationssäkerhetspolicy fram och därefter skapades informationssäkerhetsanvisningar till användare och till drift och förvaltning för att kunna uppfölja policyn.</p><p>Förutom att följa policyn och anvisningarna så rekommenderas företaget att införa incidenthantering och öka spårbarheten genom att dokumentera vilka ändringar som görs i IT-systemen. Ett uppslag för fortsatt arbete skulle kunna vara att integrera de olika standarderna till en anvisning som uppfyller målen för både kvalitet, miljön och säkerheten.</p>

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

ABSTRACT This dissertation examines the design and implementation of Malaysia's national Information Technology (IT) policy with a focus on the Multimedia Super Corridor (MSC) project. Qualitative research methods, including in-depth interviews, document analysis and literature analysis, were used to build an understanding of the development of the MSC. The analysis adopts a holistic approach that draws upon the multidisciplinary perspectives of complex adaptive systems in order to understand how social, economic, political and institutional forces interact in a changing environment. This research contributes a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and methods. It is one of the first public studies of the MSC and one of very few complex systems analyses of a socio-economic system in a developing country. It has been argued that many countries around the world are competing rapidly to produce 'visionary' reports and policy statements on the future of their nations and societies in the 'Information Age'. This is due to the belief that IT can play critical role in stimulating the socio-economic growth of the countries. In Malaysia, the government embarked on an ambitious program to establish the MSC as an attempt to achieve Vision 2020, a national vision and Malaysia's statement of national goals that articulates the country's objective for developed-nation status, while moving towards the creation of an information-rich society by the year 2020. Despite the importance of national IT policies and the major commitment of resources to implement them, there are few critical studies of the positive and negative impacts of 'post-industrial' or 'information society' policy, particularly in the developing countries like Malaysia. This study seeks in part to fill this gap by providing a critical assessment of a Malaysian national IT policy. This research argues that IT policy for national development must be viewed holistically, taking into consideration innovations needed in the social, economic, political and institutional spheres, rather than taking limited view of IT as an economic growth engine. This is a paradigm shift that represents a movement from the traditional worldview (TWV), that was based on the Cartesian/Newtonian paradigm into new ways of thinking and action that is labelled here as the emerging worldview (EMV). The EMV is grounded in complexity theory, an interdisciplinary endeavour that draws upon ideas from a number of fields and seeks to understand and model systems with many interacting parts. This approach can help policy makers and analysts to understand, assess and develop a more balanced and comprehensive policy for the evolution of new technology such as IT and to tackle the complexity of socio-economic change of a dynamic real world setting. The data collection method is from in-depth, open-ended interviews and document analysis. This qualitative exploratory approach was chosen to understand and capture the points of view of other people without specifically limiting the lines of inquiry through questionnaires etc. This research was influenced by multiple theoretical frameworks, because taking one framework alone in analysing the complex issues involved in ICT would not provide a comprehensive understanding of the interplay of the socio-technical and techno-economic paradigms. This resulted in the contribution of a policy framework called Goal-Policy-Implementation-Outcome (GPIO), which is used to understand, describe and assess the MSC policy design and method. This research found that the MSC policy plan and process were not working as intended to achieve the goals of Vision 2020. The strategy of clustering businesses in one physical location to establish synergy did not work as anticipated because: (1) Cyberjaya was not yet fully ready with all the necessary people, infrastructure and community since many basic amenities have yet to be competed; (2) The distance of Cyberjaya to key cities were perceived to be too far; (3) Operational costs in Cyberjaya were perceived as high; (4) The Cyberjaya ecosystem lacks attractive incentives; and (5) Most of the current and potential MSC firms, customers and suppliers were already located outside Cyberjaya with existing networks of people and facilities in other locations. (6) The current environment of the MSC was also found not to be conducive to facilitating a self-organizing system due to the lack of a wide consultative and participatory process. Consequently, drastic changes to the organizational structure and behaviour are needed before success can happen. It was found that the key challenges and barriers to the transformation process in and through the MSC lie in the nature of the existing mindset, the operational practice, culture and power structural arrangements within and among the policy, people and institutions of the MSC. Discussion on the MSC tends to be centred on the technological and commercial without recognizing that technological change relies on concomitant social and political shifts. By succumbing to technology driven views and 'information society' rhetoric, policy makers are allowing real economic and social choices to be smothered. This dissertation argues that instead of presenting technology as something which is external to the society, with a dynamics of its own, and to which society must learn to adapt, effective debate about new technology must acknowledge the related political choices, power relationships and value judgments about the shape and direction of the society using the technology. Consequently, there is an urgent need to develop policies to ensure that the economic benefits and social engineering associated with Malaysia’s knowledge economy are managed through participatory and partnership methods at all levels of the country. This research has shown that complex systems analysis can lay the groundwork for a new approach that more accurately represents societal choices and outcomes than past approaches. Few researchers have undertaken complex systems analyses of social systems, with still fewer examining the context of a national public IT policy in a developing country like Malaysia. Further, there are very few thorough public studies done of the MSC itself, with most studies on the MSC either being done in confidence and/or being conducted by foreign consultants appointed by the government or by the Multimedia Development Corporation (MDC). As such, public accessibility to critical studies on the MSC or public documents on them is rarely available. This research, if not the first, is one of the first attempts made to provide a thorough constructive critical study on the MSC policy project since its official launch in 1996. It is also, if not the first, one of the first attempts made to apply the emerging paradigm or the new science of complexity in a real world national policy case study, specifically the MSC policy project. Moreover, there is a huge lacking of research done on behalf of 'marginalized communities'. This research is not carried out on behalf of private enterprise or national governments but rather it is done on behalf of its citizens.

This report was made for the company HordaGruppen AB to investigate how information security was handled. This report fits in the Master program of Internet Technology at School of Engineering in Jönköping University in Sweden. The question at issue was how you protect your information against different threats. One question was how to make an information security policy and which guidelines you can follow in the Swedish Standard, SS-ISO/IEC 17799:2000. Another question was to investigate the information sources at the company and which threats there are against it. The work begins with a presentation about information security for the chief of information and the chief of quality in the company. The next thing was to do a survey of as thing are at present with a tool from Länsteknikcentrum called “Infosäkpulsen”. After the analysis was made of the survey, two reports were present with action plan for better information security for the company. The most important measures were of administrative kind and consist of a risk analysis of information resources and to make an information security policy with instructions for the users. The risk analysis was made with the tool BITS from Krisberedskapsmyndigheten and the consequence was that base level for IT-security was enough for the company. To fulfil the demand from the analyses so was an information security policy made and after that so create we information security instructions for the different kind of user group. One instruction was for ordinary users and the other was for management users. Besides the part with policy and instructions so recommend the company to initiate incident management and register all kind of changes in their IT-system. For further research it suggests to investigate how different standards can integrate to be only one standard that fulfils the goals in quality, environment and security standard / Rapporten var gjord som examensarbete på HordaGruppen AB och ingår i Breddmagisterprogrammet i Internetteknik på Ingenjörshögskolan i Jönköping. Problemställningen som rapporten handlar om är hur man skyddar företagets information mot olika sorters hot. Frågeställningen var dels hur man tar fram en informationssäkerhetspolicy och vilka riktlinjer det finns i svensk standard för informationssäkerhet. Frågeställningen skulle också ta reda på företagets informationstillgångar och vilka hot det fanns mot dessa. Arbetets inleds med en presentation på företaget om informationssäkerhet för Kvalitetschefen och IT-ansvarig. Därefter görs en nulägesanalys över informationssäkerheten med hjälp av verktyget Infosäkpulsen, en enkätundersökning från Länsteknikcentrum i Jönköping AB. Efter att svaren samlats in så sammanställdes en åtgärdsrapport och presenterades för företaget. De åtgärder som ansågs mest aktuella var av det administrativa slaget och bestod i att riskanalysera informationstillgångarna och att ta fram en informationssäkerhetspolicy med anvisningar för användarna. Riskanalysen gjordes med verktyget BITS från Krisberedskapsmyndigheten och resulterade i att basnivå för it säkerhet räckte överlag för företaget. För att uppfylla kraven från analyserna så togs en informationssäkerhetspolicy fram och därefter skapades informationssäkerhetsanvisningar till användare och till drift och förvaltning för att kunna uppfölja policyn. Förutom att följa policyn och anvisningarna så rekommenderas företaget att införa incidenthantering och öka spårbarheten genom att dokumentera vilka ändringar som görs i IT-systemen. Ett uppslag för fortsatt arbete skulle kunna vara att integrera de olika standarderna till en anvisning som uppfyller målen för både kvalitet, miljön och säkerheten.

This study in contemporary history describes the transformation of the public sphere in Sweden during the period 1969-1999, and analyses the role of information technology and politics in the process. The overall aim of the study is to explain how, and why, the public sphere in Jürgen Habermas sense has deteriorated during a period of rapid technological and political change, when increasing attention has been given to information technology as a new tool for improving democracy and empowering citizens. Theoretical inspiration is drawn from two perspectives within the modern history of technology and sociology of technology; the LTS (Large Technical Systems) and STS (Science, Technology and Society) approaches, as well as from the regime theory concept within political science. This multidisciplinary framework provides the theoretical basis for the study, including terms as socio-technical systems, system builder, technification, interpretative flexibility, stabilization, closing and regime change. In addition, the analysis draws upon previous research in economic history, where focus often has been on the important role of institutions. The term path dependence is central in this tradition. The starting point for the study is the process of a mutual legitimization between citizens and political actors that traditionally has taken place within the public sphere. In return for citizens support and trust, political actors have granted format rights to the public space. Two aspects of this interdependence are addressed: Freedom of speech and citizen’s access to public information, and their access to arenas where an exchange of political ideas and opinions is taking place. In the study, the former is a question of the legal system and the limits to freedom of speech in new medias such as the Internet, while the latter concerns citizen’s technical means and possibilities to connect to electronic networks. Research interest is concentrated on the formal political system, focusing both actors and structural factors such as technological development, media convergence, ideological change and international integration in the transformation process. Four case studies of institutional changes during formative moments, within what is defined as the legal and the technical infrastructures, are conducted and represent the empirical base of the thesis. The case studies are centered on Swedish governmental commissions, on the government itself and on proceedings in the parliament, and concerns formation and transformation of computer law, as well as the deregulation and privatization of the technical infrastructure. In the latter process Televerket (Swedish Telecom) has been an influential promoter of competition and institutional separation between tele- and data communications, representing a major regime change in favour of market relations in the technical infrastructure. In the area of computer law, the Swedish regime dominated by SCB (Statistics Sweden) was incorporated into a joint European data protection regime, resulting in limitations of freedom of speech on the Internet. These regime changes have also transformed the role of the state, constituting a “net watchers state”. Another important finding is that promotion of democracy and improvement of access to the public sphere, never was on the agenda in the political transformation processes studied, although a parallel discourse on democracy and information technology existed throughout the period studied.