Assessing Current Vulnerability Management Processes

2021 ◽  
pp. 13-20
2020 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Bharadwaj R.K. Mantha ◽  
Borja García de Soto

PurposeThe aim of this study is o examine the advantages and disadvantages of different existing scoring systems in the cybersecurity domain and their applicability to the AEC industry and to systematically apply a scoring system to determine scores for some of the most significant construction participants.Design/methodology/approachThis study proposes a methodology that uses the Common Vulnerability Scoring System (CVSS) to calculate scores and the likelihood of occurrence based on communication frequencies to ultimately determine risk categories for different paths in a construction network. As a proof of concept, the proposed methodology is implemented in a construction network from a real project found in the literature.FindingsResults show that the proposed methodology could provide valuable information to assist project participants to assess the overall cybersecurity vulnerability of construction and assist during the vulnerability-management processes. For example, a project owner can use this information to get a better understanding of what to do to limit its vulnerability, which will lead to the overall improvement of the security of the construction network.Research limitations/implicationsIt has to be noted that the scoring systems, the scores and categories adopted in the study need not necessarily be an exact representation of all the construction participants or networks. Therefore, caution should be exercised to avoid generalizing the results of this study.Practical implicationsThe proposed methodology can provide valuable information and assist project participants to assess the overall cyber-vulnerability of construction projects and support the vulnerability-management processes. For example, a project owner can use this approach to get a better understanding of what to do to limit its cyber-vulnerability exposure, which will ultimately lead to the overall improvement of the construction network's security. This study will also help raise more awareness about the cybersecurity implications of the digitalization and automation of the AEC industry among practitioners and construction researchers.Social implicationsGiven the amount of digitized services and tools used in the AEC industry, cybersecurity is increasingly becoming critical for society in general. In some cases, (e.g. critical infrastructure) incidents could have significant economic and societal or public safety implications. Therefore, proper consideration and action from the AEC research community and industry are needed.Originality/valueTo the authors' knowledge, this is the first attempt to measure and assess the cybersecurity of individual participants and the construction network as a whole by using the Common Vulnerability Scoring System.


Author(s):  
Leonard Reinecke ◽  
Sabine Trepte

Abstract. This quasi-experimental study examined the effects of exposure to a computer game on arousal and subsequent task performance. After inducing a state of low arousal, participants were assigned to experimental or control conditions via self-selection. Members of the experimental group played a computer game for five minutes; subjects in the control group spent the same amount of time awaiting further instructions. Participants who were exposed to the computer game showed significantly higher levels of arousal and performed significantly better on a subsequent cognitive task. The pattern of results was not influenced by the participants' prior experience with the game. The findings indicate that mood-management processes associated with personal media use at the workplace go beyond the alteration of arousal and affect subsequent cognitive performance.


2013 ◽  
Vol 1 (1) ◽  
pp. 83
Author(s):  
Ozan Büyükyılmaz

The development and expansion of knowledge management as an important management philosophy has a significant impact on human resources management as well as on organization as a whole. In this context, knowledge management processes have been used as a strategic tool within human resources management.Therefore, functions of human resources management must adapt itself to this change. The purpose of this study is to determine the role of human resources management in the management of knowledge and to reveal the effects of knowledge management practices on the functions of human resources byexamining the relationship between human resources and knowledge management. In this context, a theoretical investigation was conducted. It has been determined that significant changes occurred on the functions of human resources management such as selection and recruitment, performance management, remuneration and reward, training and development within the framework of the knowledge management strategies.


1970 ◽  
Vol 15 (1) ◽  
Author(s):  
José Javier González Millán ◽  
Miryam Teresa Rodríguez Díaz ◽  
Oscar Ulises González Millán

To characterize the change management processes, barriers, policies and factors that currently favor medium and large companies of the Sugamuxi Valley. The type and method of study was descriptive – explanatory. The statistical technique used was descriptive analysis using 561 surveys in medium (22) and large (18) Sugamuxi Valley companies. The biggest barriers were: adherence to rules (51.2%), multidisciplinary professions (51%), imposing the criteria of the oldest workers (47.4%) and organizational structure (43.9 %). The stimuli were: support for patents and innovations (93%), support for artistic activities (90%) and scholarships for study (90%), event registration training (79.7%) and transportation to events (82.4%). The research reveals a low culture of change, with a lack of incentives and business forms of adaptability and flexibility.Este artículo muestra la carácterización de los procesos de gestión del cambio, barreras, políticas y factores que actualmente favorecen a las medianas y grandes empresas del Valle de Sugamuxi. El tipo y método de estudio utilizado fue descriptivo - explicativo. La técnica estadística utilizada fue el análisis descriptivo mediante 561 encuestas en medianas (22) y grandes (18) empresas del Valle de Sugamuxi. Los mayores obstáculos fueron: la adhesión a las normas (51,2 %), profesiones multidisciplinares (51 %), imposición de los criterios de los trabajadores más antiguos (47,4 %) y la estructura organizacional (43,9 %). Los estímulos fueron: el apoyo a las patentes e innovaciones (93%), apoyo a las actividades artísticas (90%) y becas de estudio (90 %), registro en eventos de capacitación (79,7 %) y transporte a los eventos (82.4 %). La investigación revela una baja cultura de cambio, con falta de incentivos y formas de negocio de adaptabilidad y flexibilidad.Este artigo apresenta a caracterização dos processos de gestão de mudança, barreiras, políticas e fatores que atualmente favorecem às médias e grandes empresas do Valle de Sugamuxl. O tipo e método de estudo utilizado foi o descritivo – explicativo. A técnica estatística utilizada foi a análise descritiva mediante 561 enquetes em médias (22) e grandes (18) empresas no Valle de Sugamuxl. Os maiores obstáculos foram: a adesão às normas (51,2 %), profissões multidisciplinares (51 %), imposição dos critérios dos trabalhadores mais antigos (47,4 %), e a estrutura organizacional (43,9 %). Os estímulos foram: o apoio às patentes e inovações (93%), apoio às atividades artísticas (90%), bolsas de estudo (90%), registro em eventos de treinamento (79,7%), e transporte aos eventos (82,4%). A pesquisa revela uma cultura com poucos índices de mudança, com falta de incentivos e formas de negócios de adaptabilidade e flexibilidade.


2020 ◽  
Vol 36 (2) ◽  
pp. 279-291
Author(s):  
Aicha A. Teyeb

  تهدف هذه الورقة لتقديم قراءة أولية في مسارات إدارة أزمة جائحة (19-COVID)، لا سيَّما في مجتمعاتنا العربية، وما أنتجته مجريات الانتشار السريع للفيروس من توسُّع أفقي في مفهوم الأمن وتعدُّد فاعليه وتجدُّد أساليبه وإستراتيجياته. وتطرح إشكاليةً تتساءل عن المستويات الجديدة التي برزت في مفهوم الأمن المجتمعي خلال يوميات الجائحة على مستوى الإدارة الرسميَّة من جهة، وعلى مستوى المكافحة المجتمعية غير الرسمية من جهة أخرى. واعتمدت الورقة على منهجيَّة وصفيَّة تحليليَّة حاولت تعقُّب أحداث الجائحة وتلمُّس صداها في وسائل الإعلام وفي مواقع التواصل الاجتماعي، واقتفاء أثر ما يصدر يوميًّا حتى تاريخ كتابة الورقة من الجهات والأجهزة الرسمية من بيانات ومعلومات وإحصاءات. ومن أهم النتائج المتوصل إليها نذكر بيان أهمية الدور الذي لعبته الشرائح الاجتماعية المختلفة في المجتمعات العربية في إنجاح إدارة الأزمة بإسهاماتها النوعيَّة في المكافحة المجتمعيَّة للفيروس، ودورها في معاضدة الجهود الرسميَّة في توفير الأمن الصحِّي والمجتمعي. كما تمّ الوقوف على دور الجائحة في مساعدة المجتمعات العربية على استعادة ثقتها بنفسها وكوادرها الأمنية والطبية، ودورها في إعادة اكتشاف تلك المجتمعات لأعماقها، وكسَّر أوهام الاعتماد المطلق على الغرب المتقدم، والعجز عن التصنيع. وتضمنت الورقة جملة من التوصيات منها عمل الجهات المختصة وطنيًّا وإقليميًّا على مزيد تثمين نتائج البحوث والدراسات العلمية والرفع من ميزانيات البحث العلمي وإعادة الاعتبار للعلماء والباحثين في مختلف الحقول والتخصُّصات. وأهمية الاعتماد على الكفاءات العلميَّة المتميزة في التخصُّصات العلمية والإنسانية والاجتماعية لمراجعة الخيارات الاقتصادية والإستراتيجية الكبرى في مجال التصنيع والغذاء والدواء والبحث العلمي. والعمل على تعزيز دور المنظمات الإقليمية العربية وتحفيزها على القيام بأدوار أكثر فاعلية في حماية المصالح المشتركة في ظل التهديدات المتنامية لمجتمع المخاطر العالمي.


Sign in / Sign up

Export Citation Format

Share Document