El avance de la digitalización en distintas industrias trae consigo nuevos riesgos potenciales. Aquellas que pertenecen al sector salud se encuentran entre las que mayores riesgos deben enfrentar. La privacidad de los datos en el sector salud se encuentra regulada y las multas por el incumplimiento de normativas pueden afectar a las compañías, ya que esto indica que ponen en peligro los datos personales de sus clientes. Por ello, las industrias que pertenecen a este sector, necesitan una herramienta que facilite la identificación de capacidades en Ciberseguridad, Privacidad y gestión de datos de salud para cumplir con las normativas vigentes, y reducir los riesgos que comprometan la confidencialidad, integridad y accesibilidad de los datos. En este trabajo se propone un modelo de madurez de capacidades que identifica el grado de fiabilidad de los elementos de Ciberseguridad y Privacidad aplicados al Sector Salud. Esto se realizó mediante la selección de modelos, frameworks y normativas, aumentando su complejidad mediante la integración de capacidades de privacidad y gestión de datos de salud. El modelo se validó en una empresa del sector salud con una herramienta de diagnóstico y se observaron los resultados. Los resultados obtenidos se compararon con los componentes originales del modelo para verificar que los componentes se integraron holísticamente. Además, se entregó un formulario de evaluación del modelo a la empresa cliente para comprobar el nivel de satisfacción con respecto al uso del modelo y sus componentes. / The advancement of digitalization in different sectors brings along with it new potential risks. One of the sectors that have to confront said risks is the health sector. Data privacy in the health sector is heavily regulated and fines for non-compliance can affect the companies since it implies putting the client’s personal data at risk. Because of this, businesses belonging to the health sector need a tool to help with the identification of capabilities in Cybersecurity, Privacy and Health data management to achieve compliance with the current norms and reduce risks that might compromise the Confidentiality, Integrity and Availability of data This work proposes a capability maturity model that can identify the reliability of Cybersecurity and Privacy elements applied to the Health Sector. This was achieved through the use of models, frameworks and norms; allowing us to increase their complexity through the integration of privacy and health information management capacities. The model was validated by using a diagnosis tool in a health sector business and observing the results. The obtained results were compared with the original components of the model to verify the holistic integration of said components. We also used a model evaluation form to measure the satisfaction level of the business regarding the use of the model and its components. / Tesis

Critical infrastructures are vital services, and attacks on such systems affect people's social and economic well-being. Therefore, operators of such services must have appropriate measures in place to handle IT-related incidents. However, reports show that organisations classified as Operators of Essential Services (OES) do not have appropriate measures to handle IT-related incidents. A case study approach is used in this study to test the usability and the applicability of Wahlgren's Escalation Maturity Model level within various public sector organisations in Sweden regarding their escalation and communication of IT-related incidents. A follow-up semi-structured interview is also conducted with employees at the technical level to determine if the current organisation's maturity level shortcomings are known across different organisational levels. The tool's maturity level scaling attributes are difficult to understand because all organisations in this study achieve the same level of maturity, even though there is a wide range of performance regarding the number of questions answered in the affirmative. The data output generated from the testing of the model can assist organisations in improving their incident escalation activities. However, the lack of precision of the model makes it challenging to apply in the public sector. The results reveal that all the five organisations obtained an escalation maturity level of zero (0), non-existent, regarding escalation of IT-related incidents. As a result, with the current model, the participating organisations will have a difficult task complying with the NIS Directive's security and notification requirements.

Inom flera svenska statliga myndigheter har det processbaserade arbetssättet blivit en metod för att öka effektiviteten inom organisationer. Migrationsverket, en myndighet som under mitten av 2010-talet tog emot ett rekordstort antal skyddssökande under den stora flyktingkrisen, har på senare tid börjat att implementera ett nytt processbaserat arbetssätt inom asylprövningen kallat ”Asyl 360”. Denna fallstudie undersöker hur medarbetarna på en av de asylprövningsenheter som implementerat Asyl 360 upplever att det nya processbaserade arbetssättet påverkat dem. Den ämnar också att, med hjälp av en egenutvecklad kontextanpassad processmognadsmodell, undersöka vilken processmognadsnivå den undersökta asylprövningsenheten befinner sig på. Den metodologiska inriktningen av studien är en kvalitativ fallstudie där den insamlade datan har inhämtats genom intervjuer med medarbetare på den undersökta organisationen. Resultatet och analysen av studien visar dels vilken processmognadsnivå organisationen befinner sig på, men även en utvärdering av den egenutvecklade kontextanpassade processmognadsmodellens funktionalitet / Within several Swedish government agencies, the process-based approach has become a method for increasing efficiency within the organizations. The Swedish Migration Agency, an agency that received a record number of refugee applicants during the great refugee crisis in the mid-2010s, has recently begun to implement a new process-based approach in the asylum field called "Asyl 360". This case study examines how the employees at one of the units that implemented Asylum 360 feels that the new process-based working method has affected them. It also intends to investigate what process maturity level the investigated asylum review unit is at, with the help of a self-developed, context-adapted process maturity model. The methodological focus of the study is a qualitative case study where the collected data has been collected through interviews with employees of the researched organization. The result and analysis of the study shows what level of process maturity the studied organization is currently on. It also evaluates the functionality of the self-developed, context-adapted process maturity model / <p>2020-06-26</p>

The problem addressed in this study was the lack of understanding about failures of government leadership in accomplishing complex information technology (IT) projects and the ways such failures can negatively affect organizational performance. The purpose was to query subject matter experts and leaders with the intent to identify methods to reduce complex IT project failure rates in government organizations. This qualitative study drew on the technology acceptance model and the capability maturity model integration framework to evaluate organizations' abilities to manage complex IT projects. The research questions focused on exploring senior managers' experiences, the tacit knowledge of project management methodologies, and IT governance frameworks. The Delphi method was suitable for collecting and analyzing opinions of subject matter experts to help reach group consensus. Qualitative data analysis was used to identify themes, categories, and subcategories for thematic analysis. The result of the study was the identification of critical success factors and leadership attributes to increase the success rate of complex IT projects in federal agencies. This research may be beneficial to federal government program leaders who, as the result of increased insights and knowledge, can more effectively provide online government services using technology-enabled end-users' computing devices in a cost-effective and secure method.

To facilitate a better understanding of the social psychological factors that influence adoption of project management practices, this study draws upon the theory of reasoned action (TRA) and the theory of planned behavior (TPB) from social psychology, and the technology acceptance model (TAM) from information systems research. These models define and relate a number of belief constructs that predict the acceptance of technologies in a variety of settings. In general, the three models each have relatively consistent empirical support, with comparison studies showing mixed support for each of the models being the moderately "better" model. In the current study, the three models are thoroughly integrated using a latent constructs approach and structural equation modeling (SEM) techniques. Overall, constructs from TRA and TAM, but not TPB, predict the use of specific project estimating, plan development, and plan commitment practices defined in the Capability Maturity Models (CMM/I).

[ES] La crisis económica iniciada en España en el año 2007 produjo una importante reducción de la demanda que afectó seriamente a las empresas consultoras de ingeniería españolas. Muchas de ellas optaron por iniciar un proceso de internacionalización que asegurara su continuidad, decisión que adoptaron de forma urgente y sin el tiempo necesario para adquirir conocimiento del mercado exterior y de los riesgos que conlleva la actividad internacional. Esta situación se vio agravada en el caso de las Pymes, que por su naturaleza disponen de menos recursos y capacidades para afrontar una internacionalización con garantías. Con el diseño de un modelo de madurez de internacionalización este trabajo de investigación pretende ofrecer una guía a las empresas consultoras de ingeniería que van a iniciar o han iniciado un proceso de internacionalización. El diseño del modelo está basado en: (1) el conocimiento teórico de las variables que afectan al éxito internacional en el sector de la construcción, validadas mediante entrevistas a diez empresas consultoras de ingeniería internacionalizadas; (2) los aspectos que intervienen en la expansión internacional de las empresas; y (3) los modelos de madurez más relevantes. El diseño del modelo se realiza siguiendo la propuesta del Design Science Research (DSR), en el que se somete a iteraciones de diseño y validación que incrementan su aplicabilidad. En estas iteraciones se aplican diferentes técnicas de investigación: grupo focal, prueba piloto y estudios de caso múltiple; mediante estos estudios de caso se aplica el modelo a ocho empresas consultoras de ingeniería. Estas implementaciones han permitido identificar las fortalezas y debilidades de las empresas, su nivel de madurez de internacionalización y la influencia del tamaño y experiencia internacional de las empresas en su nivel de madurez y en el valor de los índices de internacionalización. / [CA] La crisi econòmica iniciada a Espanya l'any 2007 va produir una important reducció de la demanda que va afectar seriosament les empreses consultores d'enginyeria espanyoles. Moltes d'elles van optar per iniciar un procés d'internacionalització que assegurara la seua continuïtat, decisió que van adoptar de manera urgent i sense el temps necessari per a adquirir coneixement del mercat exterior i dels riscos que comporta l'activitat internacional. Esta situació es va vore agreujada en el cas de les Pimes, que per la seua naturalesa disposen de menys recursos i capacitats per a afrontar una internacionalització amb garanties. Amb el disseny d'un model de maduresa d'internacionalització el treball de recerca pretén oferir una guia a les empreses consultores d'enginyeria que iniciaran o han iniciat un procés d'internacionalització. El disseny del model està basat en: (1) el coneixement teòric de les variables que afecten l'èxit internacional en el sector de la construcció, validades mitjançant entrevistes a deu empreses consultores d'enginyeria internacionalitzades; (2) els aspectes que intervenen en l'expansió internacional de les empreses; i (3) els models de maduresa més rellevants. El disseny del model es realitza seguint la propòsta del Design Science Research (DSR), en el qual se sotmet a iteracions de disseny i validació que incrementen la seua aplicabilitat. En estes iteracions s'apliquen diferents tècniques d'investigació: grup focal, prova pilot i estudi de casos múltiple; mitjançant estos estudis de cas, s'aplica el model a huit empreses consultores d'enginyeria. Estes implementacions han permés identificar les fortaleses i febleses de les empreses, el seu nivell de maduresa d'internacionalització i la influència de la grandària i experiència internacional de les empreses en el seu nivell de maduresa i en el valor dels índexs d'internacionalització. / [EN] The Spanish economic crisis began in 2007 and it produced a significant reduction in demand that affected Spanish engineering companies seriously. Many of them started an internationalization process to ensure their continuity, but this decision was adopted in a hurry and without enough time to acquire knowledge of the foreign market and the risks that international activity entailed. This situation was aggravated in the case of SMEs, which have fewer resources and capacities to face internationalization with guarantees. With the design of an internationalization maturity model, this research aims to offer a guide to engineering companies that are going to start or have started an internationalization process. The design of the model is based on: (1) the theoretical knowledge of the variables that affect international success in the construction sector, validated through interviews with ten internationalized engineering companies; (2) the factors involved in the international expansion of the companies; and (3) the most relevant maturity models. The design of the model is carried out following the Design Science Research (DSR) approach, in which the model is subjected to design and validation iterations that increase its applicability. In these iterations several research techniques are applied: focus group, pilot test and multiple case study; through these case studies the model is applied to eight engineering companies. These implementations have made it possible to identify the strengths and weaknesses of the companies, their level of internationalization maturity and the influence of the size and international experience of the companies on their level of maturity and on the value of the internationalization indices. / Lozano Torró, A. (2022). Modelo de madurez de internacionalización de las empresas consultoras de ingeniería españolas [Tesis doctoral]. Universitat Politècnica de València. https://doi.org/10.4995/Thesis/10251/183870 / TESIS

Industry 4.0 comes with the promise of great benefits and transforming towards a Smart Factory is on the agenda for many organizations. The issue is that there is a lack of knowledge about how to make a successful transformation. The purpose of this research is to develop a framework for how a final assembly plant within the heavy automotive industry should structure a plan in order to accelerate the shift towards a Smart Factory in the context of Industry 4.0. To fulfill the purpose of the research, a case study has been performed. A maturity model has been used to assess the current state of the company and perceived importance of Industry 4.0 capabilities. This has been combined with an importance assessment from experts in the area, as well as literature regarding the subjects of Industry 4.0, Smart Factory and challenges with the transition. Theoretical frameworks have then been used to analyze how to structure a plan for the transition, based on the empirical findings and previous research. The transition towards a Smart Factory should incorporate strategic, organization and technical dimensions. A multilayered roadmap should be utilized as it enables for visualizing simultaneous activities and interconnections between dimensions. As external factors are necessary to be included, triggers points should be visualized as it enables checkpoints to be used. The case company importance weightings and challenges found in literature should mainly guide in the prioritization of needed capabilities. The assessed maturity should guide in choosing the Industry 4.0 capabilities which could reap the most benefits. The use of a vision and current state should guide in how to create activities with the purpose to support the chosen Industry 4.0 capabilities. The value of this research is the combination of maturity assessment with roadmap strategy, enabling for concrete actions to be formulated. Thusly, of value to companies that want to accelerate their transition towards a Smart Factory. The contribution of this research is a foundation for the creation of a tailored roadmap framework towards a Smart Factory. / Industri 4.0 kommer med många fördelar och att transformera mot en smart fabrik är på agendan för många organisationer. Problemet är att det är en brist på kunskap om hur man ska åstadkomma en lyckad transformation. Syftet med studien är att utveckla ett ramverk för hur en slutmonteringsfabrik inom lastbilsindustrin ska strukturera en plan för att accelerera skiftet mot en smart fabrik inom konceptet Industri 4.0. För att uppfylla syftet med studien så har en fallstudie genomförts varav en mognadsmodell har använts för att utvärdera mognadsgraden hos ett företag. Utöver det så har företaget viktat möjliggörare inom Industri 4.0 utifrån hur viktiga dessa anses att vara för en transformation mot en smart fabrik. Empiri har tillsammans med experters viktning och tidigare forskning inom området använts för att analysera hur ett företag ska strukturera en plan för att skifta mot en smart fabrik. En transformation mot en smart fabrik bör ta dimensionerna strategi, organisation och teknik i beaktande när en plan struktureras. Dessa dimensioner bör bilda tre lager i planen eftersom det tillåter aktiviteter att genomföras samtidigt och att det tillåter visualisering av sambanden mellan aktiviteter. Externa faktorer är nödvändiga att inkludera i planen och bör visualiseras genom triggerpunkter. Företagets viktning av möjliggörare inom Industri 4.0 tillsammans med hur väl dessa möjliggör anknyter till de vanligaste utmaningarna i ett skifte mot en smart fabrik bör huvudsakligen styra hur möjliggörarna skall prioriteras emellan varandra. Fortsättningsvis ska den utvärderade mognaden styra mot de möjliggörare som kan skörda de största fördelarna. För att skapa aktiviteter med syftet av öka mognaden av de utvalda möjliggörarna bör en vision ställas mot nuläget, för att vägleda vilka aktiviteter som är lämpliga. Värdet av den här studien är hur kombinationen av en mognadsmodell tillsammans med teoretiska ramverk möjliggör för företag att formulera en konkret plan för att accelerera skiftet mot en smart fabrik. Studien bidrar av den anledningen med en grund och ett ramverk för företag att skapa en skräddarsydd plan med syftet att accelerera skiftet mot en smart fabrik.

Due to advancements in manufacturing digitalization and connectivity; industry 4.0,manufacturing organizations are seeing an increase of data volume, velocity, and variety.Information Systems (IS) such as Enterprise Resource Planning (ERP), Product LifecycleManagement (PLM), and Manufacturing Execution System (MES) are used to handle thesedata compositions within organizations. The IS have different purposes, creating anorganizational, procedural as well as a technical difficulty to capture added value from data.Integrating people, processes, and technology yields a synergetic effect where data value iseffectively harnessed to create business insights and thus enable better decision-making indelivering value to the end-customer. This study sought to examine how a complex manufacturing organization can draw benefitsfrom the synergy effect of integrated IS, and consequently find factors that positively affectthe level of integration. The study evaluates a Swedish manufacturing company's presentintegration maturity and compares it to best practices found in the literature. The analysiscaptures gaps between the current situation and best practices, allowing for the formulationof areas of improvement. The as-is situation of the studied company was assessed with the help of an IS integrationmaturity model. A literature review was conducted to complete the maturity model. Aqualitative data collection was conducted to help both assess current situation and provideappropriate recommendations.  Findings of the study imply that there are different approaches for integrating separate orisolated components. These approaches depend on the interdependence and complexity oftasks. When interdependence is simple, different forms of standardization is most effective.On the other hand, when interdependence is complex, coordination becomes more crucial.Complex tasks require standardization of norms, while simple tasks require standardizationof output. Solutions and future aspects have been provided for collecting data value in a manufacturingenvironment. Mapped out various academic research regarding integrations and comparedit to a real-world case in order to find commonalities and differences. Identified a missingCritical Success Factor in an existing but aged assessment model for IS integrations.

This thesis explores applying DevOps practices to mitigate knowledge loss in project-based environments. In the context of high developer turnover, the study aims to implement a standardised DevOps workflow using automation and knowledge management. The research questions of the thesis are answered by following a method consisting of interviews, requirements gathering, implementation of a DevOps workflow focusing on knowledge management practices and evaluation using a DevOps maturity model. The study finds that explicit knowledge practices, including issue tracking, code reviews, and knowledge repositories, are complemented by developers’ tacit knowledge. Additional practices including testing standards, coding standards, and containerisation also contribute to knowledge retention. Integrating these practices into a DevOps workflow involves automation, tool integration, and continuous workflow through a CI/CD pipeline. The research evaluates the organisation’s initial maturity level at level 1 ("Initial") in technology and process areas. However, implementing the proposed DevOps workflow increases the maturity level to level 3 ("Defined"). This, in turn, indicates that knowledge management practices can be integrated into a DevOps workflow to mitigate knowledge loss further.

El estado actual del conocimiento y el nivel de globalización imperante, hace que las empresas se vean expuestas a competidores más sofisticados. Actualmente, el grado de competitividad, incluso para los commodities, se apoya fuertemente en la potencia impuesta por el conocimiento que posee la organización. Como dicho conocimiento es capaz de brindar valor agregado, e incrementar el valor de la empresa incluyendo los resultados en el “goodwill” surge la necesidad de gestionarlo. La aplicación de tecnología, por sí sola, no asegura la gestión del conocimiento, y por lo tanto, se debe complementar con una clara comprensión de los mecanismos de captura, almacenamiento, recuperación y transferencia. Dicha gestión debe estar basada en un modelo sólido, y acompañada de una adecuada gestión de los recursos humanos y la cultura organizacional. En esta tesis se describen los conceptos de la gestión del conocimiento y la variedad de modelos y aspectos claves mencionados en la literatura. Considerando la heterogeneidad de visiones, se elaboró un modelo y se desarrolló una herramienta de evaluación para establecer el grado de madurez en la gestión del conocimiento. La herramienta se utilizó para evaluar la Gerencia de Operaciones de una organización del sector químico. A partir de los resultados del diagnóstico, se determina el nivel general alcanzado y asimismo para las áreas claves de cultura, procesos y tecnología. Finalmente, se elaboran propuestas que permitirían una mejora en la gestión del conocimiento considerando las necesidades reales de la gerencia. / The current state of knowledge and the level of prevailing globalization, expose companies to more sophisticated competitors. At present, the degree of competitiveness, even for commodities, relies heavily on the power imposed by the company’s knowledge. As this knowledge is able to provide added value, and increase the value of the company including the results in the "goodwill" there is a need to manage it. The simple application of technology does not ensure the management of knowledge, and therefore, it must be complemented with a clear understanding of the mechanisms of capture, storage, retrieval and transfer. Such management should be based on a solid model, and accompanied by a proper management of human resources and organizational culture. This thesis describes the concepts of knowledge management and the variety of models and key aspects mentioned in the literature. Given the heterogeneity of visions, a model was worked out and an assessment tool was developed to establish the degree of knowledge management maturity. The tool was used to assess the operations area of an organization in the chemical sector. Based on the results of the diagnosis, the general maturity level was determined, and also for key areas of culture, processes and technology. Finally, we elaborate a proposal that would enable an improvement in knowledge management considering the real needs of the division.