Ensuring privacy and confidentiality concerns of data owners is an important aspect of a secured information system. This is particularly important for integrated systems, which allow data exchange across organizations. Governments, regulatory bodies and organizations provide legislations, regulations and guidelines for information privacy and security to ensure proper data handling. These are usually specified in natural language formats, contain default requirements and exceptions, and are often ambiguous. In addition, interacting concerns, which are often multilayered and from different stakeholders, e.g., jurisdictions, need to be considered in software development. Similar to other security concerns, analysis of confidentiality concerns should be integrated into the early phase of software development in order to facilitate early identification of defects - incompleteness and inconsistencies, in the requirements. This dissertation presents research conducted to develop a method to detect these defects using goal models which support defaults and exceptions. The goal models are derived from annotations of the natural language sources. A prototype tool is also developed to support the method. The evaluations conducted indicate the method and tool provide benefits, including distinguishing requirement interferences and conflicts, exception handling, and navigation between annotated documents and the goal models. Although current limitations of the method include a manual user driven annotation step, the method provides features that assist in early analysis of confidentiality requirements from natural language sources.

This dissertation addresses the confidentiality aspect of the information security problem from the viewpoint of the software architecture. It presents a new approach to secure system design in which the desired security properties, in particular, confidentiality, of the system are proven to hold at the architectural level. The architecture description language Wright is extended so that confidentiality authorizations can be specified. An architectural description in Wright/c, the extended language, assigns clearance to the ports of the components and treats security labels as a part of data type information. The security labels are declared along with clearance assignments in an access control lattice model, also expressed in Wright/c. This enables the static analysis of data flow over the architecture subject to confidentiality requirements as per Bell-LaPadula principles. An algorithm takes the Wright/c description and the lattice model as inputs, and checks if there is a potential violation of the Bell-LaPadula principles. The algorithm also detects excess privileges. A software tool, which features an XML-based front-end to the algorithm is constructed. Finally, the algorithm is analyzed for its soundness, completeness and computational complexity.

Bakgrund: Personcentrerad vård blir allt viktigare i dagens sjukvård. Avsikten med det är att patienten ska inkluderas som en del av teamet. Patientens rätt till delaktighet står reglerat i patientlagen som anger att vården ska utformas i samråd med patienten. Informationsöverföringsprocessen är en kritisk del i vården som ofta ligger till grund för de patientskador som uppstår. Bedsiderapportering är en relativt ny form av överrapportering där målet är att göra patienten delaktig genom att överrapporteringen sker vid patientens säng. Sjukvårdspersonalen ska förvissa sig om att adekvat information nått fram och uppfattats av patienten och eventuella närstående. Syfte: Syftet var att beskriva vuxna patienters erfarenheter av bedsiderapportering. Metod: En litteraturöversikt har utförts enligt Fribergs metod. Till resultatet har sex kvalitativa, två kvantitativa och två artiklar med mixad metod använts. Dorothea Orems omvårdnadsteori har använts som teoretisk referensram. Resultat: I resultatet framkom tre teman om patienternas erfarenheter och upplevelser av bedsiderapportering: patientens önskan om delaktighet, att känna sig informerad, och hantering av känslig information. Diskussion: Resultatet diskuterades utifrån Orems omvårdnadsteori och adekvat litteratur. Orem belyser vikten av att sjuksköterskan med hjälp av patientens delaktighet och engagemang skapar en god vårdrelation, vilket är avgörande för att sjuksköterskan ska kunna göra en korrekt bedömning av patientens aktuella status. Vidare beskrivs patient empowerment som ett förhållningssätt som sjuksköterskan bör använda sig av i omvårdanden av patienten. Det här bör göras med avsikt att stärka patientens möjlighet till egenvård. / Background: In today's healthcare, person-centered care becomes increasingly important with the intention of including the patient as part of the team. The patient's right to participation is regulated in the law, which states that care should be designed in consultation with the patient. A critical part of the care is the communication between health care professionals about the patients’ condition. Bedside shift reports is a relatively new concept in healthcare with the purpose to make the patient involved in the care. Healthcare professionals must ensure that adequate information has been identified and perceived by the patient and any related persons. Aim: The aim was to describe adult patients’ experiences of bedside shift reports. Method: A literature review was performed according to Friberg's method. A total of ten scientific articles were included in the review, of which six were qualitative, two were quantitative and two articles used a mixed method. Dorothea Orem’s nursing theory has been used as a theoretical frame of reference. Results: The results revealed three themes about patients’ experiences of bedside shift reports: the patient's desire for participation, to feel informed, and handling of sensitive information. Discussion: The result were discussed based on Orem's nursing theory and adequate literature. Orem illuminates that the nurse, with help from the patients’ participation and commitment create a good healthcare relationship, which is crucial for the nurse to be able to make a proper assessment of the patient current status. Furthermore, patient empowerment is described as an approach that the nurse should use in the care of the patient. This should be done with the intention to strengthen the patient's ability to selfcare.

Department of Criminal Justice and Procedure / Money laundering (ML) evolves in tandem with global technological advancement. This phenomenon calls for multi-faceted responsive measures at national and international levels to combat this nefarious crime.1 Today, combating ML requires co-operation among, inter alia, financial intelligence units (FIUs), reporting institutions, law enforcement agencies, the judiciary, as well as inter-state co-operation. In response to the ML threat, Kenya has adopted comprehensive anti-money laundering (AML) laws, such as the Proceeds of Crime and Anti- Money Laundering Act No. 9 of 2009 (POCAMLA) and the Prevention of Terrorism Act No. 30 of 2012. These, among other statutes, constitute the principal arsenal of the AML legal framework.

O presente estudo pretende construir uma reflexão sobre a função da confidencialidade para os profissionais de saúde que lidam com pessoas envolvidas em casos de incesto, na tentativa de avaliar os limites éticos destas intervenções. A metodologia utilizada constituiu-se por uma reflexão teórica baseada na experiência de trabalho da autora no CEARAS, referendada pela Bioética e pela Psicanálise e ilustrada por uma pesquisa realizada com os profissionais de saúde, incluindo os médicos, enfermeiras, técnicas e auxiliares de enfermagem e assistentes sociais do Pronto-Atendimento Pediátrico do Hospital Universitário da Faculdade de Medicina da Universidade de São Paulo. Entrevistas livres de exploração sobre a possibilidade de atendimento a crianças e adolescentes com suspeitas de abuso sexual e o modo de lidar com estas questões foram realizadas com os profissionais. As entrevistas foram gravadas e transcritas para serem analisadas através do método de análise de conteúdo. O atendimento de pacientes envolvidos em situações de abuso sexual é considerado pelos profissionais de saúde como um problema de difícil abordagem. A ausência do conflito entre a quebra do segredo profissional e a manutenção do vínculo de confiança entre profissional de Saúde e paciente em situações de incesto demonstra a dificuldade de os profissionais lidarem com tais casos e discriminarem a função de um profissional de saúde, pelo incesto se tratar justamente do tabu estruturante do ser humano. / This work intends to build up considerations about the confidentiality function for health professionals who deal with people involved in cases of incest, trying to evaluate the ethical limits of these interventions. The methodology used was a theoretical reflection based on Bioethics and Psychoanalyses and was illustrated by research with health professionals, including doctors, nurses, social workers and nurse assistants from Pediatric Emergency Room at University Hospital of São Paulo University. Free exploring interviews about the possibility of attending children and adolescents with suspects of sexual abuse and the way to deal professionally with such situation were conducted with those professionals. The interviews were recorded and transcribed for analysis through content analysis technique. The attendance of patients involved in sexual abuse situations is considered by health professionals as a difficult problem to approach. The absence of conflict between breaking professional secrecy and the maintenance of the reliance bond between the health professional and the patient on incest situations, shows the difficulties for the professionals to deal with people involved in those cases and, to discriminate the function of a health professional, by considering incest as a structuralizing taboo from the essence of human being.

Étant le mode naturel de règlement des litiges dans le commerce international, l’arbitrage a pour avantage de maintenir le secret des affaires. D’abord, les débats arbitraux sont tenus à huis clos. La contractualisation de l’arbitrage traduit la volonté des parties d’un débat privé. Ensuite, les éléments produits au cours du procès sont couverts par la confidentialité. Enfin, la sentence arbitrale ne doit être publique qu’avec le consentement des parties. La confidentialité s’oppose notamment à un principe fondamental du droit processuel : la publicité des débats. La confidentialité, pourtant enracinée dans l’esprit des acteurs de l’arbitrage, est aujourd’hui remise en cause par des préconisations qui élèvent la voix pour ouvrir les portes des tribunaux arbitraux afin de répondre aux besoins de transparence jaillie de l’ordre public, et pour s’harmoniser avec l’époque de mondialisation et de technologie omniprésente. Compte tenu de la judiciarisation, juridictionnalisation, et la marchandisation auxquelles s’expose l’arbitrage actuel, la pondération entre ces impératifs enchevêtrés est-elle possible ? A la lumière de tous ces défis, nous mènerons l’étude sur la confidentialité d’un arbitrage de nature mixte (juridictionnelle et contractuelle), afin de savoir si cette confidentialité est l’essence même de ce mode si particulier de résolution des litiges / Arbitration is the natural dispute settlement mechanism of the international business as it presents the advantage of binding commercial secrecy. The contractualisation of the Arbitration reflects the parties’ willingness to keep the proceedings private. Firstly, arbitral discussions are heard in closed session. Then, any evidences produced during the trial are covered by the confidentiality. At last, the arbitral award may not be public without the consent of the parties. The confidentiality goes against the open-court principle which is a basic rule of Procedural law. Confidentialy is deeply rooted in the Arbitration community. However, this principle is nowadays questioned. Some are raising their voice to open the doors of the Arbitration Courts to submit those jurisdictions to transparency, globalization and ubiquous technology. Considering that modern Arbitration is going through judicialisation, jurisdictionalisation and commoditisation, the question is now raised of a balance between those new tangled and inter-related imperatives. In the context of all these challenges, we are going to undertake a study on the confidentialy of an Arbitration having a hybrid nature (jurisdictional and contractual) in order to know if that confidentialy is the very essence of that peculiar dispute settlement mechanism

Magister Public Health - MPH / Globally, approximately 600,000 infants each year are born with HIV infection in Sub-Saharan Africa as a result of mother to child transmission (MTCT) (UNAIDS, 2001). Whereas there is significant progress in reduction of mother to child transmission of HIV in Uganda, the Western Region of Uganda has low rates of PMTCT service utilization. The progress has been hampered by many factors including low male involvement (MOH, 2005). The main objective of this study was therefore to identify some of the factors that discourage men from participating in PMCT services in this region. The study was conducted in Kibaale District in the Western Region of Uganda for a period of one month in mid 2009. Data was collected using a qualitative methodology. The tools that were used for data collection were key informant in-depth interviews and focus group discussions (FGDs) guides. Data was collected from PMTCT service providers, women of reproductive age group and men whose partners had given birth during the last year (2008). For the focus groups, a purposive sample of men and women who had some children born in 2008, followed by random sampling from the list of potential subjects was used to select participants. The study sample comprised of three FGDs of women who had given birth in year 2008 and male partners of women who had also given birth in 2008. Each FGD consisted of eight participants. One FGD was with women only, the other with men only, while the third was with both men and women.

Statistical data, such as in the form of microdata, is used by different organisations as a basis for creating knowledge to assist in their planning and decision-making activities. However, before microdata can be made available for analysis, it needs to be anonymised in order to protect the privacy of the individuals whose data is released. The protection of privacy requires us to hide or obscure the released data. On the other hand, making data useful for its users implies that we should provide data that is accurate, complete and precise. Ideally, we should maximise both the level of privacy and the level of information utility of a released microdata set. However, as we increase the level of privacy, the level of information utility decreases. Without guidelines to guide the selection of the optimum levels of privacy and information utility, it is difficult to determine the optimum balance between the two goals. The objective and constraints of this optimisation problem can be captured naturally with concepts from Economic Price Theory. In this thesis, we present an approach based on Economic Price Theory for guiding the process of microdata anonymisation such that optimum levels of privacy and information utility are achieved. / Thesis (PhD)--University of Pretoria, 2010. / Computer Science / unrestricted

Bakgrund: Överrapportering mellan sjuksköterskor vid skiftbyte är en stor och viktig del av sjuksköterskans arbete, och dess innehåll påverkar det resterade arbetsskiftets sysslor. Rapporteringen kan ske på flertalet sätt, exempelvis traditionell rapportering som sker avsides från patienten, eller så kallad bedsiderapportering som sker i patientsalen tillsammans med patienten. Syfte: Denna litteraturstudies syfte var att undersöka evidensen för vilket av de två mest frekvent använda rapporteringssätten som är att föredra: traditionell rapportering eller bedsiderapportering. Vid jämförelsen mellan de båda fanns både sjuksköterskans uppfattning samt patientens uppfattning i åtanke. Metod: En litteraturöversikt utfördes. 12 originalartiklar valdes från databaser för vetenskapliga artiklar, CINAHL och Pubmed. Dessa lästes, analyserades och ledde fram till framställandet av fem resultatkategorier. Hildegard E. Peplau och hennes relationsteori kring omvårdnad bidrog som teoretiskt ramverk. Resultat: Fem teman identifierades ur studiens artiklar: främjande av relation mellan patient och sjuksköterska, ökad vårdsäkerhet för patienterna, involvering av patienten i vården, tidsåtgång för rapportprocessen samt påverkan på patientsekretessen. Resultatet visar att bedsiderapportering föredras av både patient och sjuksköterska, dock gärna en modifierad sådan där känslig information delges utom hörhåll för att bevara sekretessen. Slutsats: Bedsiderapportering föredras av både sjuksköterskor och patienter och är ett steg i rätt riktning mot en patientcentrerad vård. Trots att studier gjorts som bevisar detta är bedsiderapportering inte standard inom vården, något som bör ändras genom fortsatta studier för en säkrare och mer delaktig vård för patienter och ett bättre och effektivare arbetssätt för sjuksköterskor. / Background: Change of shift report between nurses is a big and important part of a nurse’s tasks, and its content and quality affects the coming shift’s tasks. The change of shift report can be carried out in multiple ways, for example traditional report which is conducted away from the patient, or bedside report which is located in the patient’s room with the patient. Purpose: The purpose of this literature review was to investigate the evidence for which of the two most commonly used methods of report is preferable: traditional report or bedside report. The comparison between the two methods of reporting addressed both the nurse’s opinion as well as the patient’s. Methods: The method used was literature review. 12 original articles were selected from databases for scientific articles, CINAHL and Pubmed. They were read and analyzed and resulted in five themes of results. Hildegard E. Peplau and her theory about relations in caring contributed as a theoretical framework. Results: Five themes were identified in the articles of the review: promoting of relationship between patient and nurse, safer care for patients, involving patient in care, time used for report and impact on patient’s confidentiality. The results showed that bedside report is preferred by both the patient and the nurse, preferably a modified version where sensitive information is handled away from the patient to keep the patient’s confidentiality. Conclusion: Bedside report is preferred by both nurses and patients and is a step towards a more patient centered care. Despite previous studies having shown this same result, bedside report is not yet implemented as standard report within the health care system. The conclusion of this review is that this should change and continuous studies should be conducted with an aim of safer care for patients with more patient participation, as well as better and more efficient way of work for nurses.

Tystnadsplikten och upplysningsplikten är två väsentliga plikter som en revisor måste förhålla sig till i sin yrkesroll. Eftersom dessa två plikter kan komma i konflikt med varandra är det viktigt för revisorerna att finna en balansgång genom att veta i vilka situationer som de ska förhålla sig till respektive plikt. Tidigare forskning inom fältet revision har fokuserat på andra forskningsfrågor eller undersökt plikterna var för sig. Syftet med den här studien är att bidra till ökad förståelse för hur revisorn balanserar mellan tystnadsplikt och upplysningsplikt, samt hur dessa plikter påverkar revisorn i sitt arbete. För att utforska studiens syfte på ett nyanserat sätt har kvalitativa forksningsmetoder tillämpats bestående av intervjuer och dokumentanalyser. Intervjuerna var semistrukturerade och genomfördes med fem auktoriserade revisorer från revisionsbyråer av varierande storlek. Balansgången mellan tystnadsplikt och upplysningsplikt och plikternas påverkan i arbetet har studerats utifrån centrala begrepp och teorin personal construct theory för att förstå revisorernas tankemönster.  Resultatet tyder på att revisorer för flera olika resonemang vid beslutsfattande som rör tystnadsplikten och upplysningsplikten. Revisorernas balansering mellan plikterna är därmed ett svårbedömt dilemma eftersom plikternas kontraster kan påverka revisorerna i sitt arbete på olika vis. Det framkom meningsskiljaktigheter kring huruvuda balansgången utgör ett hinder i arbetet, men även kring revisorernas upplevda trygghet i situationer när tystnadsplikten och upplysningsplikten ställs mot varandra. En slutsats som kan dras av studien är att etiska dilemman är komplexa och att revisorer gör egna bedömningar utifrån sina erfarenheter och moraliska principer. / The duty of confidentiality and the duty of disclosure are two essential duties an auditor must comply with in one's professional role. Since these two duties may conflict with each other, it is important for the auditors to find a balance by knowing in which situations they should relate to each duty. Previous research in the field of auditing has focused in other research issues or examined the duties separately.  The purpose of this study is to contribute to an increased understanding of how the auditor balances between the duty of confidentiality and the duty of disclosure, as well as how these duties affect the auditors's work. To explore this purpose in an nuanced way, qualitative research methods have been applied consisting of semi-structured interviews and document analyzes. Five authorized auditors from auditing firms of varying sizes were interviewed. Key concepts and the personal construct theory have been used in order to understand thought patterns of auditors.  The results indicate that audtitors have several different reasonings when making decisions concerning the two duties. Thus is the auditors' balancing between duties a difficult dilemma to assess, as the contrasts of the duties can affect the auditors' work in different ways. Disagreements arose as to whether the balancing act constitutes an obstacle in the work, but also as to the auditors's perceived security in situations when the duties are set against each other. A conslusion drawn is that ethical dilemmas are complex and that auditors make their own assessments based in their experiences and moral principles.