In an increasingly digital world, the accessibility of digital services is an important question of inclusion. Despite judicial requirements for accessibility of digital public services, the inclusion of accessibility into design practices is a new research area.   This research project explores how to facilitate the inclusion of accessibility into design practices by creating a methodology that centres around an accessibility maturity assessment. The result of the assessment forms the basis for the selection of design methods that are mapped to the attributes of the model.   Preliminary research consists of an interview study, desk research and unorganized research activities. A case study is conducted at the Swedish Tax Agency, the result of which form the basis of the design intervention. Case study data is analysed with the help of an accessibility maturity model, which also serves as the core of the design intervention. For the intervention, adapted, proven design methods are connected to the attributes of the accessibility maturity model. A proof of concept is created in the form of a handbook and validated with designers and employees at the Tax Agency. The validation shows that there is promise in the proposed methodology, as the use of the design practices ensure that accessibility is a part of the entire design process. Further research should investigate the use of the handbook in a case study in order to consolidate the practicalities of the methodology, as well as validate the utility of the methodology in a practical application.   Keywords: digital accessibility, digital public service, maturity model, accessibility maturity assessment, UX practices, universal design, disability   Contact: linneamichel@gmail.com

El texto completo de este trabajo no está disponible en el Repositorio Académico UPC por restricciones de la casa editorial donde ha sido publicado. / In this article, we propose a reference model to identify the maturity level of the cyber intelligence threat process. This proposal considers the dark web as an important source of cyber threats causing a latent risk that organizations do not consider in their cybersecurity strategies. The proposed model aims to increase the maturity level of the process through a set of proposed controls according to the information found on the dark web. The model consists of three phases: (1) Identification of information assets using cyber threat intelligence tools. (2) Diagnosis of the exposure of information assets. (3) Proposal of controls according to the proposed categories and criteria. The validation of the proposal was carried out in an insurance institution in Lima, Peru, with data obtained by the institution. The measurement was made with artifacts that allowed to obtain an initial value of the current panorama of the company. Preliminary results showed 196 emails and passwords exposed on the dark web of which one corresponded to the technology manager of the company under evaluation. With this identification, it was diagnosed that the institution was at a “Normal” maturity level, and from the implementation of the proposed controls, the “Advanced” level was reached. / Revisión por pares

BIM är ett arbetssätt som bygger på användandet av en virtuell 3D-modell som lagrar all information om objektet. Arbetssättet har växt fram för att underlätta informationshanteringen i byggbranschen och har ansetts vara verktyget för att effektivisera processerna och med det öka produktiviteten. Drivkrafterna för BIM är många men ett hinder som ofta påpekas stå i vägen för implementeringen av BIM är kompetensbrist. I och med de olika kunskapsnivåerna har begreppet BIM-mognad växt fram där olika modeller finns för att fastställa BIM-mognad hos företag och organisationer. Hindret som gör BIM-implementeringen svår är att företag arbetar utifrån olika arbetssätt vilket gör att BIM-mognad varierar både inom och mellan företagen. Nyttan av BIM erhålls inte till den grad som önskas och aktörer med hög BIM-mognad påpekar att andra aktörer brister i sitt användande. Syftet med studien är att undersöka vad begreppet hög BIM-mognad innebär och hur hög BIM-mognad påverkar aktörers upplevelser av hinder och drivkrafter med BIM. Genom att erhålla praktiska kunskaper kan studien förmedla vilka hinder som kan överbryggas med hjälp av hög BIM-mognad och belysa vilka drivkrafter som är viktiga. Studien är uppdelad i två delar där första delen undersöker begreppet hög BIM-mognad för att se hur begreppet beskrivs och används i branschen. Denna delen besvaras genom data erhållen från befintlig forskning om mognadsnivåer inom BIM-implementering och djupgående semistrukturerade intervjuer med tre svenska BIM-experter. Andra delen studerar hur aktörers upplevelser av hinder och drivkrafter påverkas av hög BIM-mognad. Detta besvaras genom data erhållen från befintlig forskning om hinder och drivkrafter förknippade med BIM och från ett fallstudieprojekt med hög BIM-mognad. Från djupgående semistrukturerade intervjuer med åtta aktörer i olika roller i samma projekt erhölls praktiska erfarenheter om hur hinder hade överbryggats och hur nyttor skapats i projektet genom olika drivande krafter. Utifrån teorin och empirins resultat gavs ingen entydig bild av vad hög (eller låg) BIM-mognad innebär och experterna som intervjuats ställer sig kritiska till mognadsmodellen som mätmetod. Den studerade mognadstrappan togs inte fram för att mäta BIM-mognad utan skulle vara ett implementeringsverktyg men förefaller har fått en ny tillämpning med åren. Bilden som växer fram är att BIM-mognad är ett fragmenterat och tidsberoende begrepp utan någon entydighet kring vad som kan betraktas som låg eller hög mognadsgrad. När teorin jämförs med empirin väcks frågan kring vad BIM-mognad har för innebörd och betydelse för olika samverkande projektörer men även för byggbranschen och BIM-utvecklingen i stort. Experterna relaterar bedömningen av BIM-mognad till vad som krävs för att flera nyttor som följer av BIM-användning ska erhållas. Utifrån detta perspektiv anser de att BIM-mognad motsvarar nivå 2 utifrån mognadsmodellen. Experterna anser dock att branschen generellt ligger på en låg nivå vad gäller BIM-mognad. Studiens resultat öppnar upp för en fortsatt forskning inom BIM-mognad. I fallstudieprojektet upplevdes hindren som låga där det funnits specifika drivkrafter som möjliggjort implementeringen. Slutsatsen drogs även att projektet erhållit stora nyttor utifrån arbetssättet med BIM. De drivkrafter som har haft störst betydelse för implementeringen av BIM var den tydliga kravställningen från beställaren, den gemensamma plattformen och engagemanget från projektorganisationen. Nyttor projektet upplevde var bättre kommunikations- och samarbetsklimat, bra informationsflöden, ekonomi- och tidsbesparingar, visualisering, kollisionskontroller, kunskapsberikning och processeffektivitet. Hindren som fallstudieprojektet upplevde var negativa attityder, kompetensbrist, juridiska förändringar och problem med programvarorna i form av otillräckliga BIM-bibliotek och att programvarorna inte lever upp till sin marknadsföring. Både de negativa attityderna och kompetensbristen kunde överbryggas under projektet gång medan de juridiska förändringarna inte ansågs utgöra ett hinder för arbetssättet utan upplevdes mer som ett problem. / BIM is a working method based on the use of a virtual 3D model that stores all information about the object. This approach has been developed to facilitate information management in the construction industry and has been regarded as the tool to increase the efficiency and productivity. The driving forces for BIM are many, but one often mentioned obstacle for BIM implementation is the lack of competence. With the different levels of knowledge, the concept of BIM maturity has emerged where different models exist to determine BIM maturity in companies and organizations. An obstacle that makes BIM implementation difficult is the different ways of working used in the industry which makes BIM maturity varies both within and between companies. The benefits of BIM are not obtained to the extent that is desired and actors with high BIM maturity point out that the other actors are lacking in competence. The purpose of this paper is to investigate what the concept of high BIM maturity means and how high BIM maturity affects the actors' perception of obstacles and driving forces with BIM. By gaining practical knowledge, the study can convey which obstacles that can be overcome with the help of high BIM maturity and highlight which driving forces that are important.  The study is divided into two parts where the first part examines the concept of high BIM maturity to see how the concept is described and used in the industry. This part is answered through data obtained from existing research on BIM maturity levels and in-depth semi-structured interviews with three Swedish BIM experts. The second part examine how the perception of obstacles and driving forces is affected by high BIM maturity. This is answered through data obtained from existing research on obstacles and driving forces associated with BIM and from a case study project with high BIM maturity. From in-depth semi-structured interviews with eight actors in different roles in the same project, practical experience was gained on how obstacles were overcome and how benefits were created in the project through different driving forces. Based on theory and empirical results, no clear picture was given of what high (or low) BIM maturity means and the interviewed experts were critical of the maturity model as a measurement method. The maturity model was developed as an implementation tool and not as a tool to measure BIM maturity, but it seems to have gained a different roll over the years. The picture that emerges is that BIM maturity is a fragmented and time-dependent concept with no clarity about what can be regarded as low or high degrees of maturity. When the theoretical results are compared with the empirical, the question of what significance BIM maturity has for various collaborating actor’s is raised, but also for the construction industry and BIM development as a whole. The experts relate the assessment of BIM maturity to what is needed to obtain several benefits that result from using BIM. From this perspective, they believe that BIM maturity corresponds to level 2 based on the studied maturity model, but the experts generally believe that the industry is at low levels in terms of BIM maturity. The results of the study open up for further research in BIM maturity. In the studied project, the obstacles were perceived to be low where specific driving forces had enabled the implementation. It was also concluded that the project received great benefits based on the working method with BIM. The most important driving forces for the implementation of BIM were the clear requirements from the client, the platform used and the commitment from the project organization. The benefits of the project were a better communication and collaboration climate, good information flows, financial and time savings, visualization, collision controls, knowledge enrichment and process efficiency. The obstacles that the case study project experienced were negative attitudes, lack of competence, legal changes and problems with the software in the form of inadequate BIM libraries and that the software did not live up to its marketing. Both negative attitudes and the lack of competence could be overcome during the project. The legal changes were not considered as an obstacle but more experienced as a problem.

Business-IT alignment (BITA) has clearly become more important over the last decade. However, considerable difficulties remain when attempting to achieve a mature level of BITA. Therefore, research efforts which have resulted in a number of theoretical models have been able to help in devising and applying supportive tools for assessing different components of BITA. However, most of these efforts have either been produced in Anglo-Saxon countries or have been based on specific experiences in those countries. Consequently, they have tended to ignore a number of factors which differ in nature due to variations in cultural contexts. However, organisational culture has been given little consideration. Societal and organisational cultural aspects of BITA are particularly important because the majority of BITA models tend to focus more on the efficiency and effectiveness of BITA components rather than on trying to create ways in which how BITA can be achieved or maintained in different contexts. Therefore, the purpose of this thesis is to investigate the impact of societal and organisational culture on achieving BITA and influencing its maturity. The main result is an extended BITA model developed originally by Luftman, known as; Luftman’s Strategic Alignment Maturity Model (SAM), which is influenced by the organisational culture perspective. The research method and process advocated by Peffers et al. (2007) is used in the thesis to design the extended-SAM, consisting of six activities. The first of these activities involves identifying specific problems. This is achieved by an extensive literature survey of theories related to BITA, an explorative study of the impact of organisational culture on BITA and a classification of the general limitations of BITA. The second activity concerns the requirement for definitions of the designed artifact. The third activity is then specified in terms of designing the artifact; i.e. an extended-SAM. The design is based on constructed hypotheses of the potential impact of organisational culture elements (based on Smit et al.’s model (2008) on BITA attributes (based on SAM), and followed by an empirical study of 6 multinational organisations, for testing the hypotheses. Following that, in the fourth activity, various processes for extending SAM are demonstrated in different seminars within the IT management group at DSV, in conference papers and in different seminars of the Swedish research School of Management and Information Technology (MIT) (Forskarskolan Management och IT. In the fifth activity, the extended-SAM model is evaluated in 5 multinational organisations to test its practicality and utility. In the last activity, a journal paper (Paper III in the thesis) is presented to summarise all the processes. The communication is also carried out through pre-licentiate and the licentiate seminars. The extended-SAM shows in the result of the thesis that organisational culture is a clear factor that should be considered while assessing and studying BITA maturity. In addition, by considering organisational culture, assessing BITA is clearly shown as being more accurate and as reflecting a more detailed picture of the organisation’s BITA.

Western countries' information technology and software intensive firms are increasingly producing software and IT services in developing countries. With this swift advancement in offshoring, there are many issues that can be investigated which will enable companies to maximize their benefits from offshoring. However, significant challenges can occur throughout the lifecycle of offshoring IT service projects that turn the potential benefits into losses. This research investigated CMM/CMMI best practices and their effects on managing and mitigating critical issues associated with offshore development. Using a web based survey, data was collected from 451 Information Technology and software development firms in the US. The survey instrument was validated by an expert panel which included practitioners and researchers. The survey population consisted of Information Technology and software engineering managers who work on offshore IT and software development projects. Statistical methods including Chi Square and Cramer's V were used to test the research hypotheses. The results of the analysis show that IT companies applying CMM/CMMI models have fewer issues associated with IT offshoring. When US IT companies utilize and incorporate different practices from TSP and People CMM into CMMI for DEV/SVC and CMMI for ACQ, they have fewer offshoring issues related to language barriers and cultural differences. The results of this research contribute to the existing body of knowledge on the offshoring of IT services from the client management perspective and provide practitioners with increased knowledge regarding IT offshoring decisions.

Abstract Purpose Changing processes and an organization quickly and successfully is a challenging task. Thus, standardization of the process of making changes as well can be useful to reach the goal of increased performance. Many different aspects can be considered when investigating the critical factors that lead to a successful change. Assessing whether these critical factors can be utilized to formulate standards is, therefore, an interesting topic to delve deeper into. Thus, the purpose is “Explore how change management processes in the pulp and paper industry can be standardized, and how the change management process can be improved.” and the research questions (RQ):  RQ1. What are the critical factors of the change management processes in the pulp and paper industry?  RQ2. How can standardization of change management processes be achieved in the pulp and paper industry? Method This is a qualitative study where information has been gathered through a literature review and a multiple case study. The empirical data was primary data gathered through interviews. Theoretical information was gathered based on keywords selected through brainstorming sessions and found in articles. A data analysis model was used when analysing the empirical data.  Findings Six critical factors were found as an answer to RQ1. These six critical factors for pulp and paper industries were found within broader studies on change management factors as well. Standardization of change management processes on a general level was deemed possible. However, when investigating detailed levels of change management processes there are indications that it is possible to some degree, but it is more difficult to transfer a standardized process between different types of changes. Future Research More research can be beneficial in change management on more detailed levels and how standards can be transferred between types of change, and if this is only applicable to pulp and paper industries or to 24-hour continuous production processes. The conceptual maturity model presented in this report could be explored further and has the potential to be modified further to fit the needs of different organizations and industries. The conceptual guideline that was presented in the report needs to be tested and verified. Limitations This project has excluded international factories from its studied area. This project also scopes in toward the pulp and paper industry as its focus and did not analyse if its result is applicable to other industries or not. Additionally, this project did not verify if the implementation of the resulting guidelines yields a positive or negative outcome, further study is required.

En kvalitativ studie med syfte att undersöka hur mognadsmodeller kan stödja verksamheter vid verksamhetsutveckling. I studien genomfördes en fallstudie, med tillhörande intervjuer. I fallstudierna gjordes en mätning med hjälp av en mognadsmodell. Mätningen kartlade två avdelningars beteenden och preferens som hindrar eller stödjer utveckling inom processorientering. Resultatet från mätningen användes som underlag för två intervjuer, genomförd med chefen för respektive fallstudie. Den insamlade empirin kompletterades med en intervju av en forskningsledare på SIQ (Sveriges institut för kvalitet) som även varit med och tagit fram den mognadsmodell som används i mätningen. I resultatet studien framkom att mognadmodeller kan vara bidragande vid verksamhetsutveckling, när de används på det sätt de är utformade att användas. fyra olika teman, kultur, kunskap, basera beslut på fakta och processorientering med nio olika subteman framkom där mognadsmodeller kan bidra till verksamhetsutveckling. Kulturen i en verksamhet spelar en central roll för att lyckas i arbete med mognadsmodeller. En viktig förutsättning för verksamheten är en kultur som bidrar till processorientering bland medarbetarna. Det framkom även att brist på kunskap inom systemteori kan medföra vissa risker och hinder för användandet av mognadsmodeller. Vilket lätt kan uteslutas/övervinnas med ökad kunskap. / A qualitative study aimed at investigating how maturity models can support organizations in their operational development. A case study was carried out, along with corresponding interviews. In these case studies a mature model was used for measurement. The measurement assessed two department’s behaviors and preferences, which either hinder or support development within process orientation. The measurement results were then used as the basis for two interviews conducted with the respective case study managers. Additional empirical data was collected through an interview with a research leader at SIQ (Swedish Institute for Quality) who was also involved in developing the maturity model used for measurement. The results of the study indicated that maturity models can play a contributing role in operational development when used in their intended manner. Four distinct themes, namely culture, knowledge, evidence-based decision making and process orientation with nine subthemes were identified where maturity models can have a positive impact on operational development. The culture within an organization plays a central role in the successful implementation of maturity models with process orientation among employees being a vital precondition. It was also found that a lack of knowledge in systems theory could pose certain risks and obstacles for the use of maturity models. This effectively can be overcome through increased knowledge

Ett problem då en akademisk uppsats skall vetenskapligt utvärderas är att examinatorn måste kunna, på ett så objektivt sätt som möjligt, utreda om uppsatsen uppfyller krav på vetenskaplig sannolikhet. Allt för att arbetet skall tillåtas nå den praktiska tillämpningen hos allmänheten. Med vetenskaplig sannolikhet menas alltså den grad som en teori kan användas i verkligheten med lyckat resultat. Detta kräver mer utveckling och anpassning av verktyg att fylla ett gap i den akademiska världens förbättringsarbete. Att släppa en uppsats som ligger långt från sanningen kan vara både farligt och ekonomiskt förödande. Därmed är syftet och målsättningen med denna uppsats att utvärdera hjälpmedel som ger forskare (deltagare) i den akademiska världen (miljö) möjlighet att bedöma (fenomen) eget och andras akademiska vetenskapliga arbeten. Hjälpmedlen (undersökningsobjekten) som används i denna fallstudie är dels en matris och som byggts för ändamålet, dels en klassisk mognadsmodell. För att uppnå syftet genomförs en kvalitativ undersökning med observationsschema och innehållsanalys på verktygen som jämförs i en analys, då denna metod fungerar med vald design (fallstudie, tvärsnittsdesign och komparativ jämförelse). Resultatet av studien visar att förbättringsverktyg kan användas till att utvärdera uppsatser processinriktat med tillägg av etiska ställningstagande. Uppsatsgranskaren påverkar i detta analysen av uppsatsen genom val av strategi, där varje valmöjlighet utgår från samma vision. Det är i detta centralt att välja rätt strategi så att uppsatsförfattarna påverkas positivt. Centralt är också antalet subjektiva beslut, vilket påverkar objektivitetsgraden. Styrkan i slutsatsen är att den behandlar flera dimensioner av uppsatsgranskningen. Dock kan slutresultatet påverkats av det engagemang uppsatsförfattaren, till denna uppsats, känner för innovationen av det nya matrisverktyget. Detta är ett etiskt dilemma. / This thesis raises a problem when an academic paper is to be scientifically evaluated. The examiner must be able to see, in the most objective way possible, whether the thesis meets the requirements of scientific probability, for the work to be allowed to reach the practical application of the public. This requires more development and adaptation of tools to fill a gap in the academic world's improvement work. Releasing an essay that is far from the truth can be both dangerous and financially devastating. Thus, the purpose and goal of this thesis is to evaluate aids that give researchers (participants) in academia (environment) the opportunity to assess (phenomena) own and others' academic scientific work. The means (study objects) used in this case study are partly a matrix and built for the purpose, and partly a classic maturation model. To achieve this purpose, a qualitative survey with observation scheme and content analysis is carried out on the tools, as this method works with the selected design (case study, cross-sectional design, and comparative comparison). The results of the study show that improvement tools can be used to evaluate essays process-oriented with the addition of ethical stances. In this essay, the essay reviewer influences the analysis of the thesis by choosing a strategy, where each choice is based on the same vision. It is central to choose the right strategy so that the essay authors are positively affected. Also central is the number of subjective decisions, which affects the degree of objectivity. The strength of the conclusion is that it deals with several dimensions of the essay review. However, the result may be influenced by the commitment the essay author of this paper feels to the innovation of the new matrix tool, which is an ethical dilemma. / <p>2022-06-05</p>

This work presents an overview of preliminary stages taken towards proper establishment ofan Information Security Management System (ISMS) for Sri Lankan Higher EducationInstitutes (HEIs) based on ISO/IEC 27001:2013 standard. This study consists with a gapanalysis conducted on selected HEIs within Sri Lanka to evaluate their compliance withISO/IEC 27001:2013 standards. This analysis aimed at identifying gaps in existing informationsecurity practices and assess associated risks to Sri Lankan HEIs. To provide a more tailoredapproach, Management, Technical, and Operational (MTO) model was introduced, aligningwith institute’s structure and responsibilities. This research also emphasizes on criticality ofprotecting information assets and the need for comprehensive controls to ensureconfidentiality, integrity, and availability. Additionally, the study investigates the level ofinformation security compliance with ISO/IEC 27001:2013 among the selected HEIs. Theresults reveal a maturity level of 2, indicating numerous control weaknesses and highlightingthe need for developing security policies, procedures, and implementing a securitymanagement system and security culture. The research concludes with detailed benchmarkingresults, maturity level measurements for each security control domain, and recommendationsfor improvement.

Background: The administrators, managers, and leaders of criminal justice organizations experience a plethora of processes that impact the strategic, tactical, and operational facets of their respective organizations. Sound processes are central to effectively and efficiently managing criminal justice organizations and for facilitating the optimal operations of the organization. Such management characteristics are necessary to render public services towards the goals of deterring crime and maintaining societal order. Administrating and managing criminal justice organizations involves paradigms that favor process improvement and quality of processes. Existing methods include the Compstat paradigm Total Quality Management, business process management, business process improvement, business process reengineering, standards, legislation, policy, and Six Sigma. However, such paradigms not approach process improvement from the unique perspective of process maturity as a foundational basis. Additionally, no solitary foundational basis exists that uniquely addresses organizational process improvement issues, regarding criminal justice entities, from the perspective of evolutionary process maturation through time. This research examines the potential of adapting the Capability Maturity Model Integrated (CMMi) as a foundational process improvement framework among criminal justice organizations. Within the CMMi framework, process improvement begins from a state of random, ad hoc processes and culminates in a state of highly optimized processes. Through time, process maturation occurs through five primary stages sequentially: 1) random, 2) managed, 3) defined/specific, 4) quantitatively managed, and 5) optimized. This research explores the potential of leveraging the CMMi paradigm as a form of organizational process improvement within the criminal justice domain. Scope of the Study: This research investigated the potential for adapting the Capability Maturity Model (Integrated) (CMMi) within the criminal justice domain. A derivative maturity model framework, the Criminal Justice Maturity Model (CJMM), was crafted using the CMMi concept as its foundational premise. A Likert scale survey was implemented to investigate the perceptions of personnel regarding process improvement initiatives and their work settings. This study was constrained to the criminal justice domains of the states of Alabama and Mississippi. Data processing encompassed demographic descriptions of the survey instrument and the received responses, ANOVA, Chi-Square analysis, and the Cronbach Method. Stratifications involved separating the survey responses into classifications of Alabama versus Mississippi entities, urban versus rural entities, and management versus non-management entities. Findings and Conclusions: The conclusions of this research failed to show that all five levels of the maturity model framework appear to be separately perceived among the respondents. Therefore, per each individual stage of the maturity model framework, this research failed to show conclusively that the complete maturity model framework is adaptable among administrative settings in the criminal justice domain and that process maturity issues among respondent settings are addressed via a process maturity framework. Because this research failed to show the perceived characteristics of all five maturity levels of the maturity model framework separately, it is concluded that the criminal justice administrative settings of the respondents do not conform completely to the tenets of the CMMi paradigm. Future studies were recommended to pursue additional approaches of this research project. This study represents an initial starting point from which several future endeavors may be initiated. / Criminology and Security Science / D.Litt. et Phil. (Police Science)