Many companies are more and more interested in using IoT devices, either to optimize their processes or due to the lack of alternatives. The situation is similar to some years ago, when cameras were banned on company premises for security considerations, but all modern cell phones had cameras. Observations have shown, that the security properties of IoT devices with a similar functionality might differ significantly. This makes it challenging for a company to identify IoT devices that match its security policy. In order to make it possible for companies to assess the level of security of IoT devices before buying them, we introduce INFINITE, our 3-dimensional INternet oF thINgs maturITy modEl. INFINITE can be used at procurement-time, to find out to which degree an IoT device meets the requirements of the company’s security policy. This simplifies the procurement process, prevents the introduction of IoT devices that cannot be integrated into an enterprise-wide security strategy, and ultimately saves costs. To this end, INFINITE allows us to considers both the software and the hardware life cycle of an IoT device.:1. Introduction 2. Related Work 3. Defining INFINITE 4. Evaluation 5. Conclusion

Thesis (M.Com. (Business Management)) -- University of Limpopo, 2020 / This research focuses on the evaluation of the project management maturity at Eskom. The problem is that Eskom struggled with delivery of projects as planned. The main objective of this research was to identify an applicable PMMM to assess the project management maturity level of Eskom’s core business units, namely Transmission, Distribution and Generation, by assessing its capability to undertake projects effectively in order to provide electricity to the Southern Africa communities. A quantitative research methodology was selected. A survey was conducted with a closed-ended questionnaire made up of three parts (Applicable project management maturity model, project management culture and project management organisation strategy maturity). The population consisted of senior project managers, project managers, and related project management personnel from Eskom in MegaWatt Park Johannesburg. 200 questionnaires were distributed to the Eskom business units, namely Distribution, Generation and Transmission project management employees, selected purely on their experience and knowledge, hence purposive sampling was used. Surveys were emailed to the respective project management personnel with the help of the senior manager. 133 were returned. This is a response rate of 66 %, which was deemed acceptable. Descriptive statistics was utilised to assess the project management maturity level of Eskom business units. Statistical Package for Social Sciences version 24 (SPSS) was utilised for the purpose of data and reliability analysis. Correlation and linear regression analysis were undertaken to evaluate influence of maturity levels of organisational strategy and culture on the project management maturity level. A Cronbach’s Alpha was utilised to measure the reliability of the data. It was concluded there were project management process areas, not performing well. Namely: project time management, project cost management and project procurement management. The assessment of project management organisational factors indicated that project management culture maturity did not perform well. It performed under the project management maturity level of Eskom. The recommendations of this study are that the applicable project management maturity model proposed should be continuously utilised to evaluate the project management maturity of Eskom on an ongoing basis; there should be a significant cultural change and a project management office should be established.

The manufacturing industry stands before the fourth industrial revolution, Industry 4.0, caused by fast-changing technology and implementation of digitalization. Manufacturing companies need to realize and adapt to these changes to maintain their competitive advantage. Many of the companies in the industry struggle to understand how to start their transformation and what benefits are connected to their workshops. To aid in this complex situation there are maturity models developed to assist companies in this transformation.Sandvik Coromant are one of the biggest companies within the metal cutting manufacturing industry and they want to aid their customers on the digitalization transformation journey by developing a maturity evaluation model. There is currently no model on the market aimed at the CNC manufacturing industry and earlier research have identified that existing models are ill-fitting towards small and medium enterprises. Therefore, this thesis aimed at investigating how the CNC manufacturing industry can benefit from digitalization and to develop a maturity model by answering the following research question, “How should a maturity model be structured in order to provide companies of all scales and in all segments within CNC manufacturing with information regarding how to move forward on their digitalization journey?”The maturity model was developed through an extensive literature search and an iterative process with focus on the users of the model. A total of 28 initial interviews were performed that lead up to six concept iterations assessed by 27 concept tests. The finalized maturity model evaluates a company through questions regarding the current and future target state within 4 dimensions, Data collection, Data analysis, Software and Employees & Competences. By answering these questions, the company is provided with a radar chart displaying their current and future state in relation to each other and to a benchmark company. They are further provided with stories from similar companies aimed at contributing with suggestions for how to move forward in their transformation. The model structure and questions are developed to suit companies of all scales and within all segments of the CNC manufacturing industry. / Tillverkningsindustrin står inför den fjärde industriella revolutionen, Industri 4.0, orsakad av snabb utveckling av teknik och implementering av digitalisering. Tillverkande företag måste skapa förståelse för och anpassa sig till dessa förändringar för att bibehålla sin konkurrenskraft. Många företag inom industrin har svårt att förstå hur de ska starta sin förändring och vilka fördelar som finns i anslutning till deras verkstäder. För att underlätta den komplicerade situationen finns idag mognadsmodeller utvecklade för att hjälpa företag i deras digitala förändringsarbete.Sandvik Coromant är ett av de största företagen inom metallbearbetnings industrin och de vill hjälpa sina kunder genom att utveckla en utvärderingsmodell för digital mognad. I dagsläget finns det ingen modell på marknaden riktad mot CNC-tillverkningsindustrin och tidigare forskning har identifierat de existerande modellernas dåliga anpassning mot små- och medelstora företag. Därav är syftet med detta arbeta att undersöka vilka fördelar CNC-tillverkningsindustrin kan se genom digitalisering samt att utveckla en mognadsmodell genom att svara på följande forskningsfråga, “Hur ska en mognadsmodell vara uppbyggd för att förse företag av alla storlekar och inom alla segment av CNC-tillverkningsindustrin med information kring hur de ska fortsätta framåt i sitt digitala förändringsarbete?”Den digitala mognadsmodellen utvecklades genom en grundlig litteraturstudie och en iterativ process med fokus på användaren av modellen. 28 inledande intervjuer hölls vilket ledde till sex konceptiterationer utvärderade genom 27 koncept test. Den slutgiltiga mognadsmodellen utvärderar ett företag genom frågor kring nuvarande situation samt framtida målbild inom 4 dimensioner, Datainsamling, Dataanalys, Mjukvaror och Anställda & kompetenser. Genom att besvara frågorna blir företaget försett med ett radardiagram vilket visar nuvarande och framtida situation i relation till varandra samt ett benchmark företag. De blir vidare försedda med historier från liknande företag med målet att föreslå sätt att ta sig framåt i deras förändringsarbete. Modellens struktur och frågor är skapade för att passa alla storlekar av företag inom alla segment av CNC-tillverkningsindustrin.

Manufacturing companies are undergoing a digital transformation as the fourth industrial revolution progresses. These companies strive to track their progress in the transformation, understand the affecting factors, and formulate an effective strategy for the transformation. Studies that have been conducted to date have explored various factors that can influence the transformation process in a range of fields, however, there is a lack of research in the manufacturing industry. Hence, the purpose of this research is to explore the enablers and barriers to digital transformation using the maturity model and the importance of having a comprehensive strategy for digital transformation in manufacturing companies. To accomplish this, empirical data is collected through a survey based on a maturity model and combined with interviews. The data collection is done at a case company that is currently undergoing a digital transformation and is facing challenges in further development. The main factors that enable the transformation is leadership support, knowledge creation, having relevant skills, employee involvement and continuous improvement culture. While the barriers to transformation are lack of top management commitment, absence of strategy, lack of financial investments, knowledge ambiguity, poor data management and highly customized products. Many of these factors are consequences of other factors, such as lack of investment which was found to be a consequence of a lack of top management commitment and strategy. Further, the lack of strategy is seen as a root cause leading to insufficient budget, employee resistance, discrepancies in perception among managers, and problems in prioritization of projects. The main takeaways for manufacturing companies from this report are to ensure top management commitment, continuous improvement, and formulation of a comprehensive strategy to succeed with digital transformation.

Hållbarhet värderas allt högre utav konsumenter och allt fler företag satsar på ett utökat hållbarhetsarbete. Detta innebär att företag borde utveckla sitt hållbarhetsarbete för att bli eller fortsätta att vara konkurrenskraftiga. Konsumtionen av livsmedel står för 25 % av hushållens klimatpåverkan. Inom dagligvaruindustrin finns därmed en stor potential för förbättring. För ett utvecklat hållbarhetsarbete krävs innovativa lösningar. Design som process har visat sig kunnabidra med detta. Dock har studier visat på att trots att företag värderar design högt så implementeras det inte i samma utsträckning. Potentialen som design innehar riskerar därmed att gå förlorad av aktörerna på marknaden. Uppsatsen ämnar till att undersöka vilka faktorer som är viktiga för att design skall implementeras för att utveckla hållbara produkter inom dagligvaruindustrin. Studien är en multipel fallstudie med en kvalitativ ansats. Tre intervjuer har genomförts med europeiska företag som verkar på den svenska dagligvaru- och livsmedelsmarknaden. Studien visade på vikten av att företag genomsyras av hållbarhet och har en hög förståelse fördesign. Det är av vikt att såväl design som hållbarhet implementeras i början av produktutvecklingsprocessen som även kallas för Front-End. / Sustainability is increasingly valued by consumers and more companies are expanding the incorporation of sustainability in their work. This means companies should develop the incorporation of sustainability in their work to stay or become competitive on the market. The consuming of groceries accounts for 25 % of the households climate influence. Within the fast moving consumer goods industry there is therefore a potential of improvement. To develop the incorporation of sustainability in a company requires innovative solutions. Design as a process has been able to contribute with exactly this. Although, studies have shown that even though companies value design highly it is not implemented to the same extent. The potential that design possesses is therefore at risk of being lost by the actors of the market. The thesis intends to explore which factors that are important for design to be implemented to develop sustainable products in the fast moving consumer goods industry. The study is a multiple case study with a qualitative approach. Three interviews have beenmade with european companies that are active on the swedish fast moving consumer goodsindustry market. The study showed that it is of importance for a company to be permeated by sustainability andto have a high understanding of design. Furthermore, it is of importance that design as well assustainability is implemented in the beginning of the product development process that is also known as Front-End.

The aim of this thesis is to improve the reliability and quality of new requested functionality, and existing modules, at Fortum HR System Solutions. This was conducted through an evaluation of the test processes by implementing principles of Software Testing and Test Management. For the study to successfully improve the testing performed at HR System Solutions, existing test processes were analyzed. The analysis was conducted by evaluating the current test processes using theoretical test evaluation styles called maturity models. The methodology of choice was the Testing Maturity Model (TMM), which was adapted to the nature of HR System Solutions requirements, experience and needs. The evaluation used qualitative methods together with pedagogical principles to conduct interviews and workshops to consolidate the theoretical evaluation. Interviews and workshops were conducted within the team of HR System Solutions, where all members of them team contributed to the thesis at some point. An external interview also took place for comparative study. Results of the evaluation, interviews and workshop were compiled and analyzed accordingly. With the analyzed results in place, flaws in the testing processes were apparent. A generalization of the flaws led to the conclusion in the form of a suggestion. The conclusive suggestion was for Fortum HR System Solutions to establish a test committee/group role within the team. Considering the current economical and organizational situation this job role would be a divided job role appointed to current members of the HR System Solutions team. The research creates a walkthrough on a potential method on understanding inefficiencies within testing processes of a company and providing a cause-based solution. / Undersökningen är inriktad på att förbättra tillförlitligheten och kvalitén på ny begärd funktionalitet, och befintliga moduler, på Fortum HR System Solutions. Detta genomfördes genom en utvärdering av testprocesser genom implementation av principer inom Software Testing samt Test Management. För att förbättra testningen som utförs på HR System Solutions var det nödvändigt att analysera de befintliga testprocesserna. Analysen genomfördes genom att utvärdera de nuvarande testprocesserna med hjälp av teoretiska utvärderingsmetoder som kallas Maturity Models. Den valda metoden var Testing Maturity Model (TMM) som tillämpades med avseende på HR System Solutions förutsättningar, erfarenheter och behov. Utvärderingen använder sig av kvalitativa metoder samt pedagogiska principer för att genomföra intervjuer och workshops stärka den teoretiska utvärderingen från TMM. Intervjuer och workshops genomfördes inom HR System Solutions arbetslag, där alla medlemmar bidrog till examensarbetet. Även en extern intervju gjordes i jämförande syfte. Resultatet av utvärderingen sammanställdes och analyserades i enlighet med de förnämnda teoretiska ramvärken. Med hjälp av analyserna visade sig bristerna hos HR System Solutions testprocesser. En generalisering av bristerna gjordes, vilket ledde till slutsatsen i form av ett förslag. Det slutliga förslaget innebar att Fortum HR System Solutions behöver upprätta en testkommitté/grupp inom arbetslaget. Undersökningen visar en potentiell metod för att förstå ineffektiviteten inom testprocesser i ett företag, och tillhandahålla en orsaks-baserad lösning.

With the help of Green IT and Green Information Systems(Green IS), organizations can improve their sustainabilitywork with the help of technology. Previous research indicatesthat IT governance through frameworks contributes to moresuccessful implementations, and that one should study theindividual to a greater extent to find out their needs. Thepurpose of the study was to identify, prioritize and present tothe individual important social and individual influencingfactors in Green IS introduction into an organization. Thestudy was thus expected to contribute with the addition ofinfluencing factors to the future creation of frameworks forgovernance.A qualitative study was conducted where respondents invarying roles within an organization initially participated insemi-structured interviews. Interview data was designedbased on the social / individual influencing factors found inthe ISO / IEC 33000-based maturity model manage knowledgeand manage acceptance of change and development. Whatbecame the areas that formed the basis for future dataanalysis. Data were also analyzed based on previouslyidentified important influencing factors for the individualwhich were perceived usability, computer experience, usersupport and behavioral intent. As a final step in the study,they participated together in a workshop where the resultsobtained were discussed and prioritized according to thechosen model.Results and conclusions show that the most important factorsfor the participants in the introduction of Green IS aregovernance and support from management, throughincreased communication in the event of changed workroutines. It was also perceived as important to have a goodstructure for implementation and the right support, whichaccording to participants is assess to increase a perceivedusefulness. An indication was also made about ambassadorsfor cross-unit work for increased user support. Importantsystem properties were assessed to be harmonization in, forexample, reporting on environmental statistics and feedbackon sustainability work / Med hjälp av Grön IT och gröna informationssystem (Gröna IS) kanorganisationer förbättra sitt hållbarhetsarbete med hjälp av teknik.Tidigare forskning indikerar att styrning genom ramverk bidrar tillfler lyckade införanden, och att individen i högre grad bör studerasför att ta reda på deras behov. Syftet med studien var att identifiera,prioritera och presentera för individen viktiga sociala ochindividuella påverkansfaktorer vid Gröna IS införande i enorganisation. Studien förväntades därmed bidra med tillskott avpåverkansfaktorer till framtida skapande av ramverk för styrning.En kvalitativ studie genomfördes där respondenter i varieranderoller inom en organisation initialt deltog i semistruktureradeintervjuer. Intervjuunderlag utformades utifrån modellen ISO/IEC33000-based maturity model identifierade sociala och individuellapåverkansfaktorer hantera kunskap samt hantera acceptans tillförändring och utveckling. Dessa områden lade sedan grunden till förkommande dataanalys. Data analyserades också utifrån tidigarepåvisade viktiga påverkansfaktorer för individen vilka var upplevdanvändbarhet, datorerfarenhet, användarsupport och beteendeavsikt. Somsista steg i studien deltog respondenterna tillsammans i enworkshop där uppkommet resultat diskuterades och prioriteradesenligt vald modell.Resultat och slutsats visar på att de viktigaste faktorerna fördeltagarna vid Gröna IS införande är styrning och stöd från ledning,genom ökad kommunikation vid förändrade arbetsrutiner. Detupplevdes också som viktigt med en god struktur vid införande ochrätt support vilket enligt deltagare bedöms öka en upplevdanvändbarhet. Förslag gavs också om ambassadörer förenhetsöverskridande arbete för ökad användarsupport. Viktigasystemegenskaper bedömdes vara harmonisering vid exempelvisrapportering kring miljöstatistik och återkoppling kringhållbarhetsarbetet.

Abstract (english) Objectives The main objective of this work is to design methods and proceadures enhancing effectiveness and efficiency of IT audit in banks with the accent given to their use by the supervisory authorities. Another objective of the work (and an essential starting point at the same time) is a summary and assesment of methods and proceadures developed and implemented into the CNB practice with regard to banking supervision in the area of information systems. Objectives Achievement From the methodological point of view the esential starting point of the work was represented by above mentioned objectives that were used for elaboration of a set of questions. Questions enabled to set up the hypotheses. (Another more particular hypotheses were defined in order to design the particular solutions in chapter 5.) Futhermore, the critical factors (problems) were defined in the process of the questions analyses. Subsequently, the solutions were specified. The solutions confirmed the hypotheses which reflected the achievement of the objectives. Description, categorisation, analyses, screening, modelling, comparative analyses and sample testing were used to achieve the objectives. In particular, the solutions that were elaborated, making use of methods described above, enhance effectiveness and efficiency of IT audit in banks. Moreover, the CNB's proceadures and methods were introduced and assesed within the work. Scientific Contribution The work brings an evidence of correlation between the quality of IT audit in banks and their economical performance. With this regard the work contributes with original conclusions, benchmarks and proceadures that may be used by banks, supervisory authorities and IT auditors. These conclusions are achieved by description, categorisation, analyses, modelling and screening research highlighting the role of the rentability, the productivity, the risks, the inovations and the economical value of information. Furthermore, the IT audit and IT supervision in banks are specified. They are also compared and contrast to the other audit cathegories. The work presents important peaces of evidence regarding the role of IT audit in this context. This is made by description, cathegorisation and analyses. Another contribution represents proceadures and methods developed and implemented (to the large extend by author) in the field od IT banking supervision in the Czech Republic. This delivers valuable outputs for foreign supervision authorities, banks and auditors. The work lead to original solutions of critical factors. These solutions are to use by IT audit and IT supervision (and also in audit work generally). The solutions make use of ceartain atributes of Capability Maturity Model (CMM) and were elaborated in the proces of decsription, cathegorisation, screening research, comparative analyses, hypotheses seting and testing. The solutions enhances acuracy and objectiveness of assesment done by IT auditors. The solutions lead to better comparativeness of audit outputs on both national and international level, give better preconditions for risk assesment and capital adequacy evaluation within BASEL II and enhance the information value of audit ouptuts. The structure (content) of the work reflects the above mentioned articles that give a brief description of the main four parts (chapters) of the work.

Maturity models have become a widely used framework for assessing various capabilities and technologies among businesses. This thesis develops a maturity model for assessing Business Analytics (BA) in Swedish e-commerce firms. Business Analytics has become an increasingly important part of modern businesses, and firms are continuously looking for new ways to perform analysis of the data available to them. The prominent previous maturity models within BA have mainly been developed by IT-consultancy firms with the underlying intent of selling their IT services. Consequently, these models have a primary focus on the technical factors towards Business Analytics maturity, partly neglecting the importance of organisational factors. This thesis develops a Business Analytic Maturity Model (BAMM) which fills an identified research gap of academic maturity models with emphasis on the organisational factors of BA maturity. Using a qualitative research design, the BAMM is adapted to the Swedish e-commerce industry through two sequential evaluation stages. The study finds that organisational factors have a greater impact on BA maturity than previous research suggests. The BAMM and the study's results contribute with knowledge of Business Analytics, as well as providing e-commerce firms with insights into how to leverage their data.

O gerenciamento de aquisições vem se tornando um dos aspectos mais importantes do gerenciamento de projetos, acompanhando a tendência das organizações de se dedicarem mais à sua vocação competitiva e passarem a adquirir de fontes externas os recursos, materiais, equipamentos, sistemas, soluções e serviços necessários à realização de seus projetos. Esta tendência tem feito com que, num número cada vez maior de projetos, a organização empreendedora realize grande parte e, às vezes todo o projeto, através de organizações externas. Neste contexto, a equipe do projeto gerencia, na verdade, um portfolio de fornecimentos aos quais tem que aplicar metodologias, técnicas e ferramentas de todas as demais áreas de conhecimento do gerenciamento de projetos. Não obstante sua crescente importância, o gerenciamento de aquisições em projetos é um tema relativamente pouco coberto pela bibliografia de gerenciamento de projetos e sua terminologia é pouco consensual. Este trabalho destaca a crescente importância do gerenciamento de aquisições em projetos, sintetizando os processos, técnicas e ferramentas reconhecidas atualmente como as melhores práticas nesta área de conhecimento. Foi desenvolvido um modelo de maturidade específico para gerenciamento de aquisições em projetos, com o objetivo de aferir o alinhamento entre o que é praticado nas empresas e as melhores práticas apresentadas nas principais referências bibliográficas. Através do estudo de casos de três empresas com forte atuação em projetos, foi possível aferir o alinhamento de suas práticas com um padrão previamente estabelecido, aplicando e validando o modelo desenvolvido. A pesquisa permitiu, também, avaliar o reconhecimento da importância do gerenciamento de aquisições nas empresas pesquisadas, bem como o grau de consenso na terminologia utilizada em seus processos de aquisições. / Procurement management has became one of the most important aspects in project management, accompanying the trend to focus organizations in their core business, and therefore contracting resources, materials, equipments, systems, solutions and services from external sources, to have their projects accomplished. This trend results that in a crescent number of projects, the performing organization gets a considerable part of the project, and sometimes the whole project, done by external sources. In this context, the project team manages, in fact, a portfolio of sourcing projects, to which it is necessary to apply methodology, tools and techniques from all others knowledge areas of project management. Nevertheless its increasing importance, project procurement management is a subject poor covered by project management references and its terminology is not consensual. This work emphasizes the growing importance of project procurement management and synthesizes the processes, tools and techniques actually recognized as best practices in this knowledge area. A maturity model specifically to project procurement management has been developed to evaluate the alignment level of what is being done in real world companies with the best practices presented by the most representative references. Through case studies of three companies that perform projects consistently, it was possible to evaluate the alignment of their practices with a standard previously set, applying and validating the model. The research also has allowed gauging the recognition of the procurement management importance within the researched companies, as well as the grade of consensus on the terminology used in their acquisition processes.