Audits in Cybersecurity

The objective of this chapter is to provision a comprehensive literature review of the most relevant approaches for conducting cybersecurity audits. The study includes auditing perspectives for specific scopes and the best practices that many leading organizations are providing for security and auditing professionals to follow. The chapter reviews relevant features for auditing approaches in the following order: ISO/IEC 27001:2013, ISO/IEC 27002:2013, Control Objectives for Information and Related Technology (COBIT) 2019, Information Technology Infrastructure Library (ITIL) 4, AICPA, ISACA, NIST SP 800-53, NIST CSF v1.1, IIA, PCI DSS, ITAF, COSO, ENISA, NERC CIP, and CSAM.

ANALISIS LAYANAN TI PADA DOMAIN SERVICE OPERATION DENGAN MENGGUNAKAN FRAMEWORK ITIL V3

Operasional bisnis PT. PLN (Persero) ULP sudah memanfaatkan TI dalam meberikan pelayanannya yang berupa sistem informasi berbasis website, layanan yang diberikannya seperti pelayanan online pemasangan listrik baru, penambahan daya listrik dan penyambungan sementara. Namun dalam penerapan operasional layanan TI yang berjalan belum sepenuhnya mengarah pada satu pengelolaan yang mengacu pada pedoman manajemen TI. Untuk memaksimalkan kinerja layanan TI, implementasi dari manajemen insiden dan masalah dengan kerangka kerja Information Technology Infrastructure Library (ITIL) merupakan salah satu solusi yang dibutuhkan untuk meningkatkan kualitas layanan TI di PT. PLN (Persero) ULP Lubuklinggau. Domian pada framerwork ITIL V3 yang digunakan dalam penelitian ini adalah domain service operation. Hasil yang didapatkan menunjukkan bahwa tingkat kematangan dari proses event management, incident management, dan problem management berada pada level 3 atau Defined serta request fulfillment berada pada level 2 atau Repeatable. Dengan nilai 3,06 untuk event management, nilai 3,12 untuk incident management, nilai 2,54 untuk request fulfillment, nilai 3,24 untuk problem management.

Improving services in a hybrid academic library system

Purpose This paper aims to describe a hybrid academic library system and to draw up a model of this system suggesting strategies and scenarios for achieving optimum performance of the system in a technology changing world. Design/methodology/approach The mixture of traditional or manual ways of carrying out library operations with new, modern, automated systems often brings about several problems. The problems are ones that can be tackled within the framework of having appropriate systems dynamics routines applied and also making use of personnel skilled in strategic management of hybrid library systems. Findings A system dynamics model for the management of the system is developed around the issues of personnel management, collection management, capacity building and provision of access to research materials, information technology infrastructure, forming of consortia and security in the system. Originality/value Recommendations are made as to which strategy/scenario or combinations of scenarios will provide lasting solutions to the problems recurring or likely to reoccur in a hybrid academic library system.

The Challenges of Implementing the ITIL Problem Management Process in IT Support Organisations

<p>Information Technology Infrastructure Library (ITIL) is a framework and an integrated set of process orientated best practices for providing IT infrastructure support, managing and delivering IT services. As organisations in the digital age rely on Information Technology for their daily operations as well as future growth and success, the ITIL framework is widely adopted. The Problem Management process is one of the Service Operation processes defined by the ITIL framework. Whilst the adoption of the ITIL framework is often for the benefit of both the organisations that provide IT support and services and the organisations which consume them, the challenges of implementing this framework and its processes is often left to the IT support organisations. This paper focuses on the ITIL Problem Management process; it reviews the principles and objectives of this IT Service Management process from an IT Governance stand point, and its implementation in the context of organisational IT services and operations. This paper collects and presents the views and insights from IT professionals who routinely worked with ITIL processes. As empirical research, this paper seeks to identify and prioritize the challenges associated with implementing the ITIL Problem Management process by the IT support organisations; it also seeks to understand the ways and methods to overcome these challenges. This paper identifies 23 unique challenges in 6 categories including “the understanding”, “the buy-in”, “the investment”, “the interrelation”, the “execution” and “the organisational factors” which are associated with implementing the ITIL Problem Management process. The ranking of these challenges is also finalized. This paper further offers suggestions for IT support organisations to overcome these challenges. It suggests that IT support organisations may first address and overcome the challenges associated with the understanding and the buy-in of the ITIL Problem Management process, and use an overall top-down approach and effective organisational communication as they try to implement the ITIL Problem Management process.</p>

The Challenges of Implementing the ITIL Problem Management Process in IT Support Organisations

<p>Information Technology Infrastructure Library (ITIL) is a framework and an integrated set of process orientated best practices for providing IT infrastructure support, managing and delivering IT services. As organisations in the digital age rely on Information Technology for their daily operations as well as future growth and success, the ITIL framework is widely adopted. The Problem Management process is one of the Service Operation processes defined by the ITIL framework. Whilst the adoption of the ITIL framework is often for the benefit of both the organisations that provide IT support and services and the organisations which consume them, the challenges of implementing this framework and its processes is often left to the IT support organisations. This paper focuses on the ITIL Problem Management process; it reviews the principles and objectives of this IT Service Management process from an IT Governance stand point, and its implementation in the context of organisational IT services and operations. This paper collects and presents the views and insights from IT professionals who routinely worked with ITIL processes. As empirical research, this paper seeks to identify and prioritize the challenges associated with implementing the ITIL Problem Management process by the IT support organisations; it also seeks to understand the ways and methods to overcome these challenges. This paper identifies 23 unique challenges in 6 categories including “the understanding”, “the buy-in”, “the investment”, “the interrelation”, the “execution” and “the organisational factors” which are associated with implementing the ITIL Problem Management process. The ranking of these challenges is also finalized. This paper further offers suggestions for IT support organisations to overcome these challenges. It suggests that IT support organisations may first address and overcome the challenges associated with the understanding and the buy-in of the ITIL Problem Management process, and use an overall top-down approach and effective organisational communication as they try to implement the ITIL Problem Management process.</p>

Modelling the blockchain adoption barriers in the AEC industry

PurposeIn the era of digitalisation, blockchain has the potential to fundamentally change the architecture, engineering and construction (AEC) industry's workflow, trust and procurement environments. However, few studies have investigated blockchain adoption barriers in the AEC industry in detail. Therefore, the study aims to provide a comprehensive understanding of these barriers and their interdependent relationships in the context of the AEC industry.Design/methodology/approachBased on a review of the literature, industry reports and expert feedback, 11 barriers towards adopting the blockchain were identified. Then, the authors investigated the interdependencies amongst the factors by adopting a two-stage integrated interpretive structural modelling (ISM) and decision-making trial and evaluation laboratory (DEMATEL) method.FindingsThe findings show that the lack of information technology infrastructure (BC4) and legal and regulatory uncertainty (BC11) are the most prominent barriers towards blockchain adoption in the AEC industry.Practical implicationsThe research contributes in providing a clearer understanding of related barriers and potential solutions for practitioners in this area. Subsequently, the identification of adoption barriers can enable an important knowledge foundation and suggest possible solutions for adopting blockchain techniques successfully and effectively in the AEC industry.Originality/valueThe study lays an essential research foundation for the effective adoption and use of blockchain in the AEC industry.

Change Management Perceptions in Portuguese Hospital Institutions Through ITIL

Organizations function in complex, dynamic and unpredictable environments. Implementing changes must therefore be well planned, managed, and evaluated as such ongoing efforts link organizational performance to peer competitiveness and sustainability. In an era challenged with technological innovations, it is crucial to understand how new changes can leverage traditional methodologies and services supported by information and technology systems. As information-intensive organizations such as hospitals are highly dependent on changing information and technological systems, this understanding is key to evolve next generation hospitals. Specifically, this study analyzes how hospital managers in Portugal relate change to information systems’ management based on Information Technology Infrastructure Library methodology. The relationship between change and information technologies services is not sufficiently clarified and constitutes an excellent opportunity to increase knowledge in the field of information systems.

Application of Artificial Intelligence to Clinical Practice in Inflammatory Bowel Disease – What the Clinician Needs to Know

Artificial intelligence (AI) techniques are quickly spreading across medicine as an analytical method to tackle challenging clinical questions. What were previously thought of as highly complex data sources, such as images or free text, are now becoming manageable. Novel analytical methods merge the latest developments in information technology infrastructure with advances in computer science. Once primarily associated with Silicon Valley, AI techniques are now making their way into medicine, including in the field of inflammatory bowel diseases (IBD). Understanding potential applications and limitations of these techniques can be difficult, in particular for busy clinicians. In this article, we explain the basic terminologies and provide particular focus on the foundations behind state-of-the-art AI methodologies in both imaging and text. We explore the growing applications of AI in medicine, with a specific focus on IBD to inform the practicing gastroenterologist and IBD specialist. Finally, we outline possible future uses of these technologies in daily clinical practice.