Towards a Framework to Improve IT Security and IT Risk Management in Small and Medium Enterprises

2017 ◽  
Vol 4 (2) ◽  
pp. 44-56 ◽  
Author(s):  
Stephan Mühe ◽  
Andreas Drechsler
Keyword(s):  
Risk Management ◽  
Small And Medium Enterprises ◽  
Design Science ◽  
Science Research ◽  
Essential Elements ◽  
It Risk Management ◽  
Current State ◽  
The Social ◽  
Medium Enterprises ◽  
It Risk

In this article, an IT risk management (ITRM) framework for small and medium enterprises (SMEs) is designed and evaluated. The framework's objective is to provide an uncomplicated and accessible ITRM approach primarily aimed at SMEs without a dedicated ITRM. The framework combines essential elements from three leading (IT) risk management frameworks: COBIT 5 for Risk, ISO/IEC 27005:2011 and M_o_R. The framework was developed by employing a design science research methodology for social artefacts and evaluated in two healthcare SMEs. The ITRM framework itself was assessed as comprehensible and potentially useful. Simultaneously, over-arching IT governance issues prevented the immediate framework implementation in the two cases. IT management researchers can draw on this article's findings to better understand the role of the social context in SMEs to achieve an effective practical impact. Practitioners in SMEs can draw on the current state of the framework for an initial ITRM implementation or to increase their current ITRM approaches' maturity.

Towards a Framework to Improve IT Security and IT Risk Management in Small and Medium Enterprises

2020 ◽  
pp. 341-355
Author(s):  
Stephan Mühe ◽  
Andreas Drechsler
Keyword(s):  
Risk Management ◽  
Small And Medium Enterprises ◽  
Design Science ◽  
Science Research ◽  
Essential Elements ◽  
It Risk Management ◽  
The Social ◽  
Medium Enterprises ◽  
It Risk

In this article, an IT risk management (ITRM) framework for small and medium enterprises (SMEs) is designed and evaluated. The framework's objective is to provide an uncomplicated and accessible ITRM approach primarily aimed at SMEs without a dedicated ITRM. The framework combines essential elements from three leading (IT) risk management frameworks: COBIT 5 for Risk, ISO/IEC 27005:2011 and M_o_R. The framework was developed by employing a design science research methodology for social artefacts and evaluated in two healthcare SMEs. The ITRM framework itself was assessed as comprehensible and potentially useful. Simultaneously, over-arching IT governance issues prevented the immediate framework implementation in the two cases. IT management researchers can draw on this article's findings to better understand the role of the social context in SMEs to achieve an effective practical impact. Practitioners in SMEs can draw on the current state of the framework for an initial ITRM implementation or to increase their current ITRM approaches' maturity.

scholarly journals An IT strategy development framework for small and medium enterprises

2020 ◽  
Author(s):  
Andreas Drechsler ◽  
S Weissschaedel
Keyword(s):  
Small And Medium Enterprises ◽  
Design Science ◽  
Science Research ◽  
Strategy Development ◽  
It Strategy ◽  
Development Framework ◽  
Strategy Process ◽  
Value Contribution ◽  
Sales Industry ◽  
Medium Enterprises

© 2017, Springer-Verlag Berlin Heidelberg. We design and evaluate an IT strategy development framework for small and medium enterprises (SMEs). The framework’s objective is to provide a theoretically grounded, empirically validated, uncomplicated, and accessible framework to develop an IT strategy for an SME. The framework is a social artifact whose purpose is to guide the design of two other artifacts: an IT strategy process and an IT strategy plan. We rely on design science research, combined with action research, to design, apply, evaluate, and refine the framework in a specific SME in the sales industry. People responsible for managing the IT in an SME can use the framework to design or refine their IT strategy, in order to make better-informed IT strategy decisions, to improve the utilization of their SME’s usually scarce IT resources, and ultimately increase their IT’s business value contribution. We also gain an enhanced understanding of IT strategies’ role in SMEs and provide methodological implications for social artifact design.

Design Science Research Roadmap Model for Information Systems Projects

2018 ◽  
Vol 9 (3) ◽  
pp. 1-19
Author(s):  
Nadhmi Gazem ◽  
Azizah Abdul Rahman ◽  
Faisal Saeed ◽  
Noorminshah A. Iahad
Keyword(s):  
Information Systems ◽  
Small And Medium Enterprises ◽  
Design Science ◽  
Science Research ◽  
Design Science Research ◽  
Is Research ◽  
Research Activities ◽  
Medium Enterprises ◽  
Almost All

This article contends that design science research (DSR) has emerged as an important approach in information systems (IS) research. The design science research roadmap (DSRR) model describes the process of using the DSR in IS in great detail. Unfortunately, the existing literature does not address the task of demonstrating the use of the DSRR in detail by conducting a real case study. This article aims to examine the implementation of the DSRR with real IS research activities. The construction of a systematic innovation framework to solve problems for small and medium enterprises (SMEs) is used as a case study for demonstration purposes. This article shows that the DSRR provides very useful guidance, since it covers almost all the necessary steps to conduct DSR in the information systems field. The illustrations provided with each step of the DSRR in this article will help other researchers, especially novice researchers, to gain a comprehensive understanding of the use of the DSRR model.

scholarly journals An IT strategy development framework for small and medium enterprises

2020 ◽  
Author(s):  
Andreas Drechsler ◽  
S Weissschaedel
Keyword(s):  
Small And Medium Enterprises ◽  
Design Science ◽  
Science Research ◽  
Strategy Development ◽  
It Strategy ◽  
Development Framework ◽  
Strategy Process ◽  
Value Contribution ◽  
Sales Industry ◽  
Medium Enterprises

© 2017, Springer-Verlag Berlin Heidelberg. We design and evaluate an IT strategy development framework for small and medium enterprises (SMEs). The framework’s objective is to provide a theoretically grounded, empirically validated, uncomplicated, and accessible framework to develop an IT strategy for an SME. The framework is a social artifact whose purpose is to guide the design of two other artifacts: an IT strategy process and an IT strategy plan. We rely on design science research, combined with action research, to design, apply, evaluate, and refine the framework in a specific SME in the sales industry. People responsible for managing the IT in an SME can use the framework to design or refine their IT strategy, in order to make better-informed IT strategy decisions, to improve the utilization of their SME’s usually scarce IT resources, and ultimately increase their IT’s business value contribution. We also gain an enhanced understanding of IT strategies’ role in SMEs and provide methodological implications for social artifact design.

scholarly journals Carving out New Business Models in a Small Company through Contextual Ambidexterity: The Case of a Sustainable Company

2020 ◽  
Vol 12 (6) ◽  
pp. 2337 ◽  
Author(s):  
Vinicius Minatogawa ◽  
Matheus Franco ◽  
Orlando Durán ◽  
Ruy Quadros ◽  
Maria Holgado ◽  
...  
Keyword(s):  
Business Model ◽  
Business Models ◽  
Small And Medium Enterprises ◽  
Design Science ◽  
Science Research ◽  
Business Model Innovation ◽  
Organizational Ambidexterity ◽  
New Business ◽  
Medium Enterprises

Business model innovation (BMI) and organizational ambidexterity have been pointed out as mechanisms for companies achieving sustainability. However, especially considering small and medium enterprises (SMEs), there is a lack of studies demonstrating how to combine these mechanisms. Tackling such a gap, this study seeks to understand how SMEs can ambidextrously manage BMI. Our aim is to provide a practical artifact, accessible to SMEs, to operationalize BMI through organizational ambidexterity. To this end, we conducted our study under the design science research to, first, build an artifact for operationalizing contextual ambidexterity for business model innovation. Then, we used an in-depth case study with a vegan fashion small e-commerce to evaluate the practical outcomes of the artifact. Our findings show that the company improves its business model while, at the same time, designs a new business model and monetizes it. Thus, our approach was able to take the first steps in the direction of operationalizing contextual ambidexterity for business model innovation in small and medium enterprises, democratizing the concept. We contribute to theory by connecting different literature strands and to practice by creating an artifact to assist management.

scholarly journals Pemanfaatan Pelepah Pisang Menjadi Produk Inovatif sebagai Upaya Peningkatan Pendapatan Ekonomi Keluarga di Desa Jamberejo Kecamatan Kedungadem Kabupaten Bojonegoro

2019 ◽  
Vol 3 (1) ◽  
pp. 21-31
Author(s):  
Nur Laila Rahmawati ◽  
Indah Fajrotuz Zahro ◽  
Asnawi ◽  
Nurul Fitriandari ◽  
Eryul Mufidah
Keyword(s):  
Higher Education ◽  
Small And Medium Enterprises ◽  
Economic Value ◽  
Business Community ◽  
Participatory Action ◽  
Economic Competition ◽  
Social Community ◽  
The Social ◽  
Asean Countries ◽  
Medium Enterprises

The economic challenge in the era of ASEAN Economic Community (MEA) is economic competition in the ASEAN countries. Consequently, efforts to improve Small and Medium Enterprises (SMEs) must be sustainable and should be done by synergizing among the social community, higher education, and the business community. To implement it, Jamberejo village of Kedungadem Sub-district, Bojonegoro developed assets that the social community has, that is banana bark which was able to be used as crafts that have economic value. By using Participatory Action Research (PAR) method, 57 women and higher education were invited to make crafts from banana bark to be used as a home industry business. Based on 6 samples of product, the business got a profit of Rp. 2,100,000. Return of Investment (ROI) is about 2.2 months. Then the average income level of the Jamberejo people has increased by 42.9% or equivalent to Rp. 900,000 per month. It happened after they got a mentoring program for the innovation of banana bark

scholarly journals Model for assessing the success of SMEs in the internacionali­zation process

2010 ◽  
Vol 58 (6) ◽  
pp. 245-252
Author(s):  
Lea Kubíčková ◽  
Aleš Peprný ◽  
Šárka Nováková
Keyword(s):  
Risk Management ◽  
Success Factors ◽  
Small And Medium Enterprises ◽  
Evaluation Model ◽  
Internationalization Process ◽  
Key Factors ◽  
Simple Method ◽  
Key Success Factors ◽  
Simple Evaluation ◽  
Medium Enterprises

The paper deals with evaluating the success of small and medium-sized companies in in­ter­na­tio­na­li­za­tion process. The process of internationalization is defined in the literature in a many ways; there is a countless variety of different approaches and models of internationalization process of firms. Like all processes in the firm also the internationalization process is accompanied by risks. For risk management it is important to know what the key factors of success are in the international arena. In this article is presented a simple evaluation model that could be used by SMEs to determine not only how strong are they compared to competitors, but also at what level are their key success factors in the process of internationalization. The aim was to find a simple method to help small and medium enterprises to assess their situation in the field of internationalization and to help them identify their strengths and weaknesses in this area. Proposed simple evaluation model has the graphic output from which it can be seen in which areas the company is doing well in internationalization process and in what areas is doing badly – then there is room for further improvement. Creating the model it was essential to divide the various factors into several groups and further evaluation to determine the range by which SMEs can quantify the level of success in internationalization process. Before the model was constructed it was necessary to collect data among small and mid-sized firms, and to process the outputs of the survey. After confirmation or to rejection of the certain hypotheses key success factors of SMEs in the internationalization process were selected and these factors were then aggregated into 4 groups. The model was then applied to data obtained from a survey of 40 SMEs and in the paper there are presented specific examples of graphical output of the model for the best and worst rated company. Authors are aware that the model is simple and has its limits, there is the need of much more work and the authors foresee further modifications of this model.

Sign in / Sign up

Export Citation Format

Share Document