scholarly journals Analysing information security in a bank using soft systems methodology

2017 ◽  
Vol 25 (3) ◽  
pp. 240-258 ◽  
Author(s):  
Temesgen Kitaw Damenu ◽  
Chris Beaumont

Purpose This paper aims to explore the use of soft systems methodology (SSM) to analyse the socio-technical information security issues in a major bank. Design/methodology/approach Case study research was conducted on a major bank. Semi-structured interviews with a purposive sample of key stakeholders in the business, comprising senior managers, security professionals and branch employees were conducted. Findings SSM was particularly useful for exploring the holistic information security issues, enabling models to be constructed which were valuable analytical tools and easily understood by stakeholders, which increased the receptiveness of the bank, and assisted with member validation. Significant risks were apparent from internal sources with weaknesses in aspects of governance and security culture. Research limitations/implications This research uses a single case study and whilst it cannot be generalised, it identifies potential security issues others may face and solutions they may apply. Practical implications Information security is complex and addresses technical, governance, management and cultural risks. Banking attacks are changing, with greater focus on employees and customers. A systemic approach is required for full consideration. SSM is a suitable approach for such analysis within large organisations. Originality/value This study demonstrates how important benefits can be obtained by using SSM alongside traditional risk assessment approaches to identify holistic security issues. A holistic approach is particularly important given the increasing complexity of the security threat surface. Banking was selected as a case study because it is both critical to society and is a prime target for attack. Furthermore, developing economies are under-represented in information security research, this paper adds to the evidence base. As global finance is highly interconnected, it is important that banks in such economies do not comprise a weak link, and hence, results from this case have value for the industry as a whole.

2018 ◽  
Vol 11 (4) ◽  
pp. 1086-1104 ◽  
Author(s):  
Peter Sjögren ◽  
Björn Fagerström ◽  
Martin Kurdve ◽  
Magnus Callavik

Purpose The purpose of this paper is to explore how emergent changes are handled in research and development (R&D) projects. R&D projects’ business potential lies in their exploration of the unknown; conversely, this makes them uncertain endeavours, prone to emergent changes. Design/methodology/approach Uses a single-case-study design, based on a projects-as-practice perspective and a soft systems methodology (SSM) analysis, to map how ad hoc R&D teams handle emergent changes, specifically the solution identification and assessment phase and the implementation plan. An R&D project in the power industry, involving over 250 engineers, was analysed. Findings This paper shows how emergent changes are handled differently from initiated changes during the decision-making phase. The system analysis shows that the most critical factors for managing these changes are: collective reflection between project parties; and including experienced engineers in implementation-plan reviews. Practical implications The results are of relevance both to R&D managers aiming to improve team performance and to general project management. Informal notions of emergent changes can be formalised in the change request process. Weaknesses in the project team’s organisation are highlighted, and details of how of how to mitigate these are provided. Originality/value Combines engineering-design and project-management research on emergent changes, adding to the former regarding people–organisational and strategic issues. Furthers understanding of the projects-as-practice approach and emergent change (deviations) handling by ad hoc teams in a project environment. SSM has not previously been used to explore aspects of projects-as-practice, and this is a novel way of adding to the body of knowledge on project praxis and practise.


2008 ◽  
Vol 29 (6/7) ◽  
pp. 538-555 ◽  
Author(s):  
Rachel Delbridge

PurposeThe purpose of this paper is to provide an illustration of the methodological processes and resultant outcomes relating to one theme investigated during an application of soft systems methodology (SSM) in a library and information service (LIS) context, in order to contribute to the explication of the methodology to LIS professionals.Design/methodology/approachA selective but detailed description of the use of SSM is provided in relation to case study research undertaken at a UK law firm, which included, within the framework of SSM, the conduct of interviews with 42 legal and information practitioners.FindingsThe described application of SSM is a demonstration of its use for structuring learning in situations: in this instance, of a developed understanding of stakeholders' views of appropriate LIS activity in a law firm.Research limitations/implicationsThe paper is a selective representation of the first use of SSM by a researcher and demonstrates the methodology's applicability to any situation about which learning is considered to be desirable.Practical implicationsThe paper provides an illustrative application of SSM which may prompt the use of, or may contribute to understanding of, the methodology by LIS practitioners, researchers and educators.Originality/valueThe paper provides an in‐depth illustration of the SSM‐informed processes and outcomes in a novel application area.


Author(s):  
Kerstin Grundén

In this chapter, internal digital divide problems in organizations are identified and discussed. A longitudinal case study focusing on the implementation of e-Government at a public organization in Sweden is used as a starting-point for the discussion. Although the general use of information and communication technology is very high in Sweden there are still problems with digital divide. Such problems could hamper the implementation process of e-Government. In the case study the older employees were especially stressed and had problems to renewing their competencies and adapting to new working situations due to the implementation of e-Government. Internal digital divide is, however, a complex phenomenon, and involves aspects of learning, motivation, professionalization, management strategies, and organizational culture. Some ways of bridging internal digital divide problems are discussed. Soft systems methodology could be used for analysis and change of internal digital divide aspects involving a discussion with the concerned communities.


2019 ◽  
Vol 6 (1) ◽  
pp. 1-16
Author(s):  
Junkang Feng

Chinese higher education has moved into a popularized and internationalization stage, which makes the traditional learning, teaching and assessment (LTA) management challenging and sometimes problematical. This paper introduces how to approach complex problematical situations in LTA management by using Checkland's Soft Systems Methodology (SSM) at the Business College of the Beijing Union University (BCBUU) in China. Through this case study of seven years, the author made sense of and improved the problematical situations. It is found that SSM provides LTA managers with an innovative and fundamental methodology to appreciate otherwise seemingly unapproachable and unmanageable complex and ill-structured problem situations that they face. It is also proven that the case study of SSM in the context of LTA management in a Chinese college is practically effective.


Author(s):  
Lynda Holland ◽  
Joy Garfield

This paper links research and teaching through an applied Soft Systems Methodology case study. The case study focuses on the redevelopment of a Research and Professional Skills module to provide support for international postgraduate students through the use of formative feedback with the aim of increasing academic research skills and confidence. The stages of the Soft Systems Methodology were used as a structure for the redevelopment of module content and assessment. It proved to be a valuable tool for identifying complex issues, a basis for discussion and debate from which an enhanced understanding was gained and a successful solution implemented together with a case study that could be utilised for teaching Soft Systems Methodology concepts. Changes to the module were very successful and resulted in significantly higher grades and a higher pass rate.


Sign in / Sign up

Export Citation Format

Share Document