How do organizations rapidly assess command-level effects of cyber attacks? Leaders need a way of assuring themselves that their organization, people, and information technology can continue their missions in a contested cyber environment. To do this, leaders should: 1) require assessments be more than analogical, anecdotal or simplistic snapshots in time; 2) demand the ability to rapidly model their organizations; 3) identify their organization’s structural vulnerabilities; and 4) have the ability to forecast mission assurance scenarios. Using text mining to build agent based dynamic network models of information processing organizations, I examine impacts of contested cyber environments on three common focus areas of information assurance—confidentiality, integrity, and availability. I find that assessing impacts of cyber attacks is a nuanced affair dependent on the nature of the attack, the nature of the organization and its missions, and the nature of the measurements. For well-manned information processing organizations, many attacks are in the nuisance range and that only multipronged or severe attacks cause meaningful failure. I also find that such organizations can design for resiliency and provide guidelines in how to do so.

Nonprofits are primarily dependent upon external sources for funding and other critical resources; therefore during recessionary periods the nonprofit sector faces a crisis of its own as crucial resources become scarce. The Great Recession of 2007-2009 had widespread adverse impact on the nonprofit sector yet, some nonprofit organizations managed to not only restore their finances and operations to their pre-recession state, but also capitalize on the economic conditions and emerge stronger and more prosperous than before the recession began. Specifically, these organizations embody resiliency by realizing positive outcomes or exhibiting optimal performance during and after tough economic times. In the face of increasing demands, shifting funding streams, and operational challenges, organizational resilience is more important than ever for the sector. The purpose of this research was to develop a better understanding of the nature of organizational resiliency as it relates to nonprofits impacted by economic recession. The primary research question that directed this research was: What attributes are exhibited by resilient nonprofit organizations? Using a multiple case study approach, this study explored the essence and meaning of resilience through the experiences of seven nonprofit organizations in Virginia during and after the recession. Data were collected from pertinent organizational documents and semi-structured interviews with the executive director of each organization. Nine themes emerged from the data. Conclusions drawn from the findings suggest that resilient nonprofit organizations exhibit: positive disposition toward change; flexibility; timely and responsive decision making; deep social capital; intra and inter-organizational relationships; effective leadership; diverse revenue streams; sufficient assets, systems and infrastructure; and shared mission, goals and strategy. / Ph. D.

How do organizations rapidly assess command-level effects of cyber attacks? Leaders need a way of assuring themselves that their organization, people, and information technology can continue their missions in a contested cyber environment. To do this, leaders should: 1) require assessments be more than analogical, anecdotal or simplistic snapshots in time; 2) demand the ability to rapidly model their organizations; 3) identify their organization’s structural vulnerabilities; and 4) have the ability to forecast mission assurance scenarios. Using text mining to build agent based dynamic network models of information processing organizations, I examine impacts of contested cyber environments on three common focus areas of information assurance—confidentiality, integrity, and availability. I find that assessing impacts of cyber attacks is a nuanced affair dependent on the nature of the attack, the nature of the organization and its missions, and the nature of the measurements. For well-manned information processing organizations, many attacks are in the nuisance range and that only multipronged or severe attacks cause meaningful failure. I also find that such organizations can design for resiliency and provide guidelines in how to do so.

京都大学 / 0048 / 新制・課程博士 / 博士(経済学) / 甲第22717号 / 経博第620号 / 新制||経||294(附属図書館) / 京都大学大学院経済学研究科経済学専攻 / (主査)教授 関口 倫紀, 教授 若林 直樹, 教授 椙山 泰生 / 学位規則第4条第1項該当 / Doctor of Economics / Kyoto University / DGAM