Thesis (PhD)--AUT University, 2009. / Includes bibliographical references. Also held in print ([15], 222 leaves : ill. ; 30 cm.) in the Archive at the City Campus (T 303.4833082 HAM)

Thesis (M.Phil.)--University of Hong Kong, 2003. / Includes bibliographical references (leaves 131-144) Also available in print.

Thesis (Ph. D.)--University of Stellenbosch, 2005. / Includes bibliographical references. Also available via the Internet.

<p> Information security capability maturity (ISCM) is a journey towards accurate alignment of business and security objectives, security systems, processes, and tasks integrated with business-enabled IT systems, security enabled organizational culture and decision making, and measurements and continuous improvements of controls and governance comprising security policies, processes, operating procedures, tasks, monitoring, and reporting. Information security capability maturity may be achieved in five levels: performing but ad-hoc, managed, defined, quantitatively governed, and optimized. These five levels need to be achieved in the capability areas of information integrity, information systems assurance, business enablement, security processes, security program management, competency of security team, security consciousness in employees, and security leadership. These areas of capabilities lead to achievement of technology trustworthiness of security controls, integrated security, and security guardianship throughout the enterprise, which are primary capability domains for achieving maturity of information security capability in an organization. There are many factors influencing the areas of capabilities and the capability domains for achieving information security capability maturity. However, there is little existing study done on identifying the factors that contribute to achievement of the highest level of information security capability maturity (optimized) in an organization. </p><p> This research was designed to contribute to this area of research gap by identifying the factors contributing to the areas of capabilities for achieving the highest level of information security capability maturity. The factors were grouped under the eight capability areas and the three capability domains in the form of an initial structural construct. This research was designed to collect data on all the factors using an online structured questionnaire and analyzing the reliability and validity of the initial structural construct following the methods of principal components analysis (PCA), Cronbach Alpha reliability analysis, confirmatory factor analysis (CFA), and structural equation modeling. A number of multivariate statistical tests were conducted on the data collected regarding the factors to achieve an optimal model reflecting statistical significance, reliability, and validity. The research was conducted in four phases: expert panel and pilot study (first phase), principal component analysis (PCA) and reliability analysis (RA) of the factor scales (second phase), confirmatory factor analysis (CFA) using LISREL (third phase), and structural equation modeling (SEM) using LISREL (fourth phase). The final model subsequent to completing the four phases reflected acceptance or rejection of the eleven hypotheses defined in the initial structural construct of this study. </p><p> The final optimized model was obtained with the most significant factors loading on the capability areas of information integrity, information security assurance, business enablement, security process maturity, security program management, competency of security team, security conscious employees, and security leadership, including the most significant factors loading the three capability domains of security technology trustworthiness, security integration, and security guardianship. All the eleven hypotheses were accepted as part of the optimal structural construct of the final model. The model provides a complex integrated framework of information security maturity requiring multi-functional advancements and maturity in processes, people, and technology, and organized security program management and communications fully integrated with the business programs and communications. Information security maturity is concluded as a complex function of multiple maturity programs in an organization leading to organized governance structures, multiple maturity programs, leadership, security consciousness, and risk-aware culture of employees.</p><p>

Thesis (M.B.A.)--University of Hong Kong, 1997. / Includes bibliographical references.

Thesis (Ph. D.)--University of Texas at Austin, 2004. / Supervisor: Philip Doty. Vita. Includes bibliographical references.

Esta dissertação é fruto de uma pesquisa exploratória no âmbito da Seleção de Fornecedores de Serviços de Tecnologia da Informação (TI) e pretende identificar os principais procedimentos de avaliação e critérios de seleção utilizados para a escolha de empresas fornecedoras deste tipo de serviço. A pesquisa empírica contempla duas empresas multinacionais, dois grandes bancos e duas pequenas e médias empresas. O trabalho realiza uma revisão da bibliografia existente sobre o tema e questões a ele associadas. A partir desta revisão foi possível desenvolver o modelo de pesquisa. A metodologia de pesquisa utilizada foi o Estudo de Casos Múltiplos, o que permitiu ao pesquisador o aprofundamento em alguns aspectos do processo de seleção adotado pelas empresas para a escolha de fornecedores de serviços de TI. A pesquisa foi realizada com base em entrevistas feitas junto aos executivos ou gerentes de TI que atuam no processo de seleção, em seis empresas que já possuem contratos com fornecedores de serviços de TI. As entrevistas foram conduzidas segundo o roteiro elaborado a partir do modelo de pesquisa. / This theory accomplishes an exploratory research in the extent of the Selection of Suppliers of Services of Technology of the Information (IT) and it intends to identify the main evaluation procedures and selection criteria used for the choice of supplying companies of this service type. The empiric research contemplates two multinational companies, two great banks and two small and medium companies. The work accomplishes a revision of the existent bibliography on the theme and subjects to him associated. Starting from this revision it was possible to develop a research model. The methodology of used research was the Study of Multiple Cases, that allowed to the researcher go deeply in some aspects of the selection process adopted by the companies for the choice of suppliers of services of IT. The research was accomplished with base in interviews done with the executives or managers of IT that act in the selection process, in six companies that already possess contracts with suppliers of services of IT. The interviews were driven according to the guide elaborated from the research model.

Este trabalho de dissertação é um estudo sobre os aspectos relevantes tanto das tecnologias da informação quanto das estratégias na competitividade do sistema agroindustrial do leite, tendo como objetivo central, diagnosticar as barreiras e os fluxos de informações estratégicas existentes neste setor para uma avaliação nos micros, pequenos e médios laticínios para que estes se tornem mais competitivos. Inicialmente, é realizada uma breve descrição e caracterização de como se encontra o sistema agroindustrial do leite no âmbito econômico nacional, tornando assim, mais claro as razões pelas quais se torna necessário este estudo. O tema é, então, enfocado através da sistematização dos principais conceitos sobre estratégia e tecnologia da informação citados na literatura. Após, é enfocado de um modo geral, o cenário industrial brasileiro. Com isto, o suporte para um levantamento de dados específico sobre o sistema agroindustrial do leite está configurado; através de figuras e tabelas são mostrados dados estatísticos do mercado nacional e internacional e os motivos pelos quais o Brasil não é o primeiro no ranking mundial. Dados esses extraídos de autores. De posse desses dados, para a realização da pesquisa, caracterizou-se como sendo exploratória na consecução de seus objetivos e qualitativa para os procedimentos de coleta de dados. Com a aplicação de entrevistas estruturadas, através de um roteiro de perguntas elaboradas (utilizando-se do recurso das variáveis ambientais) chegou-se a um resultado. Com estes resultados obtidos pôde-se fazer uma comparação entre os autores pesquisados, e percebeu-se que, na pesquisa empírica, a caracterização dos laticínios se apresentam semelhantes a estes autores, ou seja, a ausência de uma fiscalização mais rígida compromete toda a cadeia produtiva do leite. O fator tecnologia da informação é essencial como estratégia competitiva, pois pôde-se notar nos médios laticínios ) a sua utilização em todos os departamentos, inclusive com ambientes intranet e extranet. Sendo considerada as restrições existentes na pesquisa, pode ser contatado que as estratégias e as tecnologias da informação dependem de outros fatores para impulsionar os micros e pequenos laticínios. / This dissertation work is a study on the important aspects so much of the technologies of the information as of the strategies in the competitiveness of the system agroindustrial of the milk, tends as central objective, to diagnose the barriers and the flows of existent strategic information in this section for an evaluation in the micro, small and medium dairy products for these they become more competitive. Initially, it is accomplished an abbreviation description and characterization of as is the system approach of the milk in the national economical ambit, turning like this, clearer the reasons for the which becomes necessary this study. The theme is, then, focused through the systematization of the principal concepts on strategy and technology of the information mentioned in the literature. After, it is focused in a general way, the Brazilian industrial scenery. With this, the support for a rising of data specific on the system approach of the milk is configured; through illustrations and tables are shown data statisticians of the national and international market and the reasons by the which Brazil is not the first in the world ranking. Data those extracted of authors. Of ownership of those data, for the accomplishment of the research, it was characterized as being exploratory in the attainment of your objectives and qualitative for the procedures of collection of data. With the application of structured interviews, through a route of elaborated questions (being used of the resource of the environmental variables) it was arrived to a result. With these obtained results it could be made a comparison among the researched authors, and it was noticed that, in the empiric research, the characterization of the dairy products comes similar to these authors, in other words, the absence of a more rigid fiscalization commits the whole productive chain of the milk. The factor technology of the information is essential as competitive strategy, because it could be noticed in the medium dairy products your use in all the departments, besides with atmospheres intranet and extranet. Being considered the existent restrictions in the research, it can be verified that the strategies and the technologies of the information depend on other factors to impel the micro and small dairy products.

Made available in DSpace on 2016-04-28T20:19:13Z (GMT). No. of bitstreams: 1 2007-Marco Antonio Goncalves Delgado.pdf: 491540 bytes, checksum: 2d942512e528ae62a25d15872df9be1e (MD5) Previous issue date: 2007-08-21 / This study focuses mainly on explaining the practices of large assembly companies in the control of information, purchases, development of relationships with suppliers and logistical raw material operations in the manufacture of vehicles. This subject is justified because of the major challenges in identifying the best processes, improving and discussing the technologies that contribute to the productivity and value added of the businesses. Theoretically, it is based on works of distinguished authors who have studied the subject, analyzing knowledge as applied to the most current information technology. This has been an ideal source for the collection of necessary data in the development of this research project. The research methodology was used to to analyze exploratory and investigative objectives using the case study method. This methodology permitted the comparison of the realty of the company with the theoretical knowledge from the specialized literature. During this comparative study, it was perceived that the same concepts are applied, with the appropriate technology, to the internal processes of each company in relation to the culture, tradition, geographic location, origin and other factors as well. It was concluded that the development of information technology is a very important factor in the creation of new work processes directed toward improved efficiency and effectiveness. The choice of objectives, the theoretical reference and research within the companies, provided a glimpse of the predominant practices and a comparison of the different applications of work methodologies in the internal and external processes in the companies. / Constituiu o foco deste trabalho a elucida??o das pr?ticas reinantes nas grandes empresas montadoras no controle de informa??es, compras, identifica??o, desenvolvimento e rela??es com fornecedores e a opera??o log?stica de mat?rias-primas para a fabrica??o de ve?culos automotores. Este tema se justifica pelo grande desafio em identificar os melhores processos, melhorar e discutir tecnologias de forma a contribuir para a produtividade das empresas agregando valor aos neg?cios. O referencial te?rico est? baseado em autores mais destacados na explora??o do tema, tratando o conhecimento e aplica??o da Tecnologia da Informa??o mais atual, consistindo em fonte ideal de coleta de dados necess?ria ao desenvolvimento da atividade de pesquisa. A metodologia usada foi a pesquisa com fins explorat?rio/investigativo atrav?s de estudo de caso. Essa metodologia permitiu comparar a realidade de cada empresa pesquisada e o conhecimento te?rico da literatura especializada sobre o assunto. Durante o estudo comparativo, percebeu-se que s?o usados os mesmos conceitos havendo uma adequa??o da tecnologia dispon?vel aos processos internos empregados em cada empresa em fun??o da cultura, tradi??o, localiza??o geogr?fica, origem e outros fatores. Foi conclu?do que a Tecnologia da Informa??o contribui estrategicamente para o aprimoramento e a cria??o de novos processos de trabalho voltados para a efici?ncia e a efic?cia. A escolha dos objetivos, o referencial te?rico e as pesquisas nas empresas permitiram vislumbrar as pr?ticas reinantes e comparar as diferentes aplica??es de metodologias de trabalho nos processos internos e externos ?s empresas.

User groups have been recognised as one of the most important coupling mechanisms between users and vendors. There are hundreds of such groups around the world attached to complex technological artefacts and systems. Innovation scholars have referred to these groups as the new sites of innovation and gone as far to suggest that vendors may struggle to survive without the user-led innovation that derives from these forums (von Hippel, 2005). This is particularly the case for software products. However, despite their growing academic and policy importance, and notwithstanding the fact these communities have been in existence for more than three decades, the Information Systems literature has not yet explained the complex workings of such groups. This study produces one of the first ethnographic studies of a major software user group linked to a complex packaged enterprise system. It describes and characterises the range of functions carried out by this group, which includes their internal workings and organisation, how members relate to each other, how the group links to the vendor and other intermediaries, and the group’s attempts to shape the development of its technology. A key focus of the work is the various tensions and barriers found in these communities. To analyse this group the study adopts and extends the Social Shaping of Technology (SST) and its recent offshoot, the ‘Biography of Artefact’ (BoA) framework. This thesis contributes to these approaches by showing the importance of multifaceted time dimensions and heterogeneity of spaces in examining users groups. Whilst existing studies using these approaches have looked at the evolution of technology over extended periods, this thesis contributes by considering the coevolution of the technology and the community attached at the same time. This allows us not only to gain a better conceptualisation of the user group but as a result see new forms of innovation invisible to more dominant perspectives. It challenges economist led understandings of user-led innovation which tend to give only a rather superficial understanding of the process by which users create new innovation. In particular, and through arguing for the need to take into account both ‘success’ and ‘failure’ in the process of user-led innovation, the thesis offers the concept of ‘artification’ to explain further complex outputs originating from the interaction of these actors in multiple spaces and over long periods of time. The thesis also extends theories of the Social Shaping of Technology by depicting innovation as an arena where different actor spaces act collectively, but also compete, and as a result wield influence on different stages of the technology lifecycle. This leads to a further contribution of this thesis in the field of Information Systems research by suggesting that enterprise software innovation is a community achievement. In particular, the research proposes the concept of ‘unification’ to show the collective acts of users in aggregating their needs to participate in the development of technology. The study concludes by offering insights and recommendation to practitioners and policy makers for deploying user communities for better technological outcomes, both in terms of design and development as well as implementation and use.