Insights from Y2K and 9/11 for Enhancing IT Security

2008 ◽  
pp. 3419-3432
Author(s):  
Laura Lally

In the post-9/11 environment, there has been an increasing awareness of the need for information security. This chapter presents an analysis of the Y2K problem and 9/11 disaster from the perspective of Lally’s extension of Perrow’s Normal Accident Theory and the Theory of High Reliability Organizations. Insights into: 1) how characteristics of current IT infrastructures and organizational cultures make disasters more likely, 2) how organizations can respond to potential threats and mitigate the damage of those that do materialize, and 3) how IT can be used to identify future threats and mitigate their impact in the future, emerge from the analysis.

Author(s):  
Laura Lally

In the post-9/11 environment, there has been an increasing awareness of the need for information security. This chapter presents an analysis of the Y2K problem and 9/11 disaster from the perspective of Lally’s extension of Perrow’s Normal Accident Theory and the Theory of High Reliability Organizations. Insights into: 1) how characteristics of current IT infrastructures and organizational cultures make disasters more likely, 2) how organizations can respond to potential threats and mitigate the damage of those that do materialize, and 3) how IT can be used to identify future threats and mitigate their impact in the future, emerge from the analysis.


2020 ◽  
Vol 1 (1) ◽  
Author(s):  
Wolfgang Seibel

This article addresses the question of to what extent conventional theories of high reliability organizations and normal accidents theory are applicable to public bureaucracy. Empirical evidence suggests precisely this. Relevant cases are, for instance, collapsing buildings and bridges due to insufficient supervision of engineering by the relevant authorities, infants dying at the hands of their own parents due to misperceptions and neglect on the part of child protection agencies, uninterrupted serial killings due to a lack of coordination among police services, or improper planning and risk assessment in the preparation of mass events such as soccer games or street parades. The basic argument is that conceptualizing distinct and differentiated causal mechanisms is useful for developing more fine-grained variants of both normal accident theory and high reliability organization theory that take into account standard pathologies of public bureaucracies and inevitable trade-offs connected to their political embeddedness in democratic and rule-of-law-based systems to which belong the tensions between responsiveness and responsibility and between goal attainment and system maintenance. This, the article argues, makes it possible to identify distinct points of intervention at which permissive conditions with the potential to trigger risk-generating human action can be neutralized while the threshold that separates risk-generating human action from actual disaster can be raised to a level that makes disastrous outcomes less probable.


Author(s):  
Michèle Rieth ◽  
Vera Hagemann

ZusammenfassungBasierend auf einer Arbeitsfeldbetrachtung im Bereich der Flugsicherung in Österreich und der Schweiz liefert dieser Artikel der Zeitschrift Gruppe. Interaktion. Organisation. (GIO) einen Überblick über automatisierungsbedingte Veränderungen und die daraus resultierenden neuen Kompetenzanforderungen an die Beschäftigten im Hochverantwortungsbereich. Bestehende Tätigkeitsstrukturen und Arbeitsrollen verändern sich infolge zunehmender Automatisierung grundlegend, sodass Organisationen neuen Herausforderungen gegenüberstehen und sich neue Kompetenzanforderungen an Mitarbeitende ergeben. Auf Grundlage von 9 problemzentrierten Interviews mit Fluglotsen sowie 4 problemzentrierten Interviews mit Piloten werden die Veränderungen infolge zunehmender Automatisierung und die daraus resultierenden neuen Kompetenzanforderungen an die Beschäftigten in einer High Reliability Organization dargestellt. Dieser Organisationskontext blieb bisher in der wissenschaftlichen Debatte um neue Kompetenzen infolge von Automatisierung weitestgehend unberücksichtigt. Die Ergebnisse deuten darauf hin, dass der Mensch in High Reliability Organizations durch Technik zwar entlastet und unterstützt werden kann, aber nicht zu ersetzen ist. Die Rolle des Menschen wird im Sinne eines Systemüberwachenden passiver, wodurch die Gefahr eines Fähigkeitsverlustes resultiert und der eigene Einfluss der Beschäftigten abnimmt. Ferner scheinen die Anforderungen, denen sie sich infolge zunehmender Automatisierung gegenüberstehen sehen, zuzunehmen, was in einem Spannungsfeld zu ihrer passiven Rolle zu stehen scheint. Die Erkenntnisse werden diskutiert und praktische Implikationen für das Kompetenzmanagement und die Arbeitsgestaltung zur Minimierung der identifizierten restriktiven Arbeitsbedingungen abgeleitet.


Author(s):  
Christopher Nemeth ◽  
Richard Cook

System performance in healthcare pivots on the ability to match demand for care with the resources that are needed to provide it. High reliability is desirable in organizations that perform inherently hazardous, highly technical tasks. However, healthcare's high variability, diversity, partition between workers and managers, and production pressure make it difficult to employ essential aspects of high reliability organizations (HROs) such as redundancy and extensive training. A different approach is needed to understand the nature of healthcare systems and their ability to perform and survive under duress; in other words, to be resilient. The recent evolution of resilience engineering affords the opportunity to configure healthcare systems so that they are adaptable and can foresee challenges that threaten their mission. Information technology (IT) in particular can enable healthcare, as a service sector, to adapt successfully, as long as it is based on cognitive systems engineering approaches to achieve resilient performance.


Sign in / Sign up

Export Citation Format

Share Document