Audits in Cybersecurity

The objective of this chapter is to provision a comprehensive literature review of the most relevant approaches for conducting cybersecurity audits. The study includes auditing perspectives for specific scopes and the best practices that many leading organizations are providing for security and auditing professionals to follow. The chapter reviews relevant features for auditing approaches in the following order: ISO/IEC 27001:2013, ISO/IEC 27002:2013, Control Objectives for Information and Related Technology (COBIT) 2019, Information Technology Infrastructure Library (ITIL) 4, AICPA, ISACA, NIST SP 800-53, NIST CSF v1.1, IIA, PCI DSS, ITAF, COSO, ENISA, NERC CIP, and CSAM.

Cognitive Distractions During Sonographic Procedures: Reducing Noise-Based and Light-Based Interruptions in Hospital Rooms

Sonographers experience a high cognitive load in hospital-based care. High ambient noise and frequent noise-based interruptions include knocking on the room door, questions from others in the room or through communication technology, alarms, alerts from personal devices, and carts and people passing in the hallway. In addition, other providers turning on the overhead light is distracting for exams that need to be conducted in reduced lighting conditions. This article suggests strategies to improve working conditions for sonographers conducting exams on a patient in the hospital room. Our strategies emerge from human factors methods and principles, which derive from communication principles and theory. These strategies are organized by reducing noise-based and light-based interruptions in the hospital room and hallway, primarily through changes to the built environment and communication technology settings and reducing the use of speech during cognitively challenging time periods through training. Most of the strategies are low-cost and can be implemented within the current built environment and communication technology infrastructure. We anticipate that these strategies could enhance patient outcomes, increase patient satisfaction, improve sonographers’ job satisfaction, protect provider health, and increase procedural efficiency.

Exploring the Barriers to online Learning During the COVID-19 Pandemic. A case of Pakistani Students from HEIs [Higher Education Institutions]

The main objective of this study is to explore various barriers that are preventing Pakistani HEIs (universities) students from learning online in this COVID-19 pandemic. Applying a qualitative research design, twelve (12) in-depth interviews were conducted with individual business school participants (students), selected at undergraduate and graduate levels to participate. Data were collected from six (06) universities in Islamabad, Pakistan. After collecting the data using a self-developed questionnaire, a thematic analysis method within the qualitative research was applied to uncover several barriers relating to the objective of this study. Eight themes emerged from the interview data: internet technology access, the content of digital slides, student’s perception towards online learning, power outages during COVID-19 pandemic, students’ fear of losing marks and impact on employment, faculty skills in using technology to teach online, student’s stress and health in the COVID-19 pandemic and student skills to use distance learning tools. Based on the findings, students who live in rural areas are more affected by online learning during the COVID-19 pandemic than students in urban areas due to identified barriers and, most importantly, lack of technology infrastructure. Opportunities and future recommendations have been provided to the relevant authorities to conduct and deliver smooth online education in the country during pandemic.

Deepfakes, misinformation and disinformation and authenticity infrastructure responses: Impacts on frontline witnessing, distant witnessing, and civic journalism

Frontline witnessing and civic journalism are impacted by the rhetoric and the reality of misinformation and disinformation. This essay highlights key insights from activities of the human rights and civic journalism network WITNESS, as they seek to prepare for new forms of media manipulation, such as deepfakes, and to ensure that an emergent “authenticity infrastructure” is in place to respond to global needs for reliable information without creating additional harms. Based on global consultations on perceived threats and prioritized solutions, their efforts are primarily targeted towards synthetic media and deepfakes, which not only facilitate audiovisual falsification (including non-consensual sexual images) but also, by being embedded in societal dynamics of surveillance and civil society suppression, they challenge real footage and so undermine the credibility of civic media and frontline witnessing (also known as “liar’s dividend”). They do this within a global context where journalists and some distant witness investigators self-identify as lacking relevant skills and capacity, and face inequity in access to detection technologies. Within this context, “authenticity infrastructure” tracks media provenance, integrity, and manipulation from camera to edit to distribution, and so comes to provide “verification subsidies” that enable distant witnesses to properly interpret eye-witness footage. This “authenticity infrastructure” and related tools are rapidly moving from niche to mainstream in the form of initiatives the Content Authenticity Initiative and Coalition for Content Authenticity and Provenance, raising key questions about who participates in the production and dissemination of audiovisual information, under what circumstances and to which effect for whom. Provenance risks being weaponized unless key concerns are integrated into infrastructure proposals and implementation. Data may be used against vulnerable witnesses, or the absence of a trail, for legitimate privacy and technological access reasons, used to undermine credibility. Regulatory and extra-legal co-option are also a fear as securitized “fake news” laws proliferate. The investigation of both phenomena, deepfakes and emergent authenticity infrastructure(s), this paper argues, is important as it highlights the risks related both to the “information disorder” of deepfakes as they challenge the credibility and safety of frontline witnesses and to responses to such “disorder,” as they risk worsening inequities in access to tools for mitigation or increasing exposure to harms from technology infrastructure.

ANALISIS LAYANAN TI PADA DOMAIN SERVICE OPERATION DENGAN MENGGUNAKAN FRAMEWORK ITIL V3

Operasional bisnis PT. PLN (Persero) ULP sudah memanfaatkan TI dalam meberikan pelayanannya yang berupa sistem informasi berbasis website, layanan yang diberikannya seperti pelayanan online pemasangan listrik baru, penambahan daya listrik dan penyambungan sementara. Namun dalam penerapan operasional layanan TI yang berjalan belum sepenuhnya mengarah pada satu pengelolaan yang mengacu pada pedoman manajemen TI. Untuk memaksimalkan kinerja layanan TI, implementasi dari manajemen insiden dan masalah dengan kerangka kerja Information Technology Infrastructure Library (ITIL) merupakan salah satu solusi yang dibutuhkan untuk meningkatkan kualitas layanan TI di PT. PLN (Persero) ULP Lubuklinggau. Domian pada framerwork ITIL V3 yang digunakan dalam penelitian ini adalah domain service operation. Hasil yang didapatkan menunjukkan bahwa tingkat kematangan dari proses event management, incident management, dan problem management berada pada level 3 atau Defined serta request fulfillment berada pada level 2 atau Repeatable. Dengan nilai 3,06 untuk event management, nilai 3,12 untuk incident management, nilai 2,54 untuk request fulfillment, nilai 3,24 untuk problem management.

Organizational Cost and Complexity Saving Opportunities via the Development, Deployment, and Implementation of Blockchain Networks

Blockchain is being promoted as the platform to disrupt business as usual in many transaction-heavy sectors. Questions remain about the future standards of blockchain, their feature set, functionality, and the willingness of organisations to disrupt their existing revenue streams via blockchain. The most significant near-term promise that affords industry is the cost and complexity savings via the standardization of their technology infrastructure stacks. This paper explores the benefits available of reduced costs and complexity via the adoption of blockchain.

The Applicability of Internet Voting in Africa

The covid-19 pandemic has brought about new ways of conducting business through the use of Information Communication Technologies and elections have not been spared either. Internet voting is another form of strengthening democracy through the use of Information Communication Technologies. Africa lags in the implementation of electronic voting, especially Internet voting. This chapter applied a critical socio-technical analysis that analyses factors that influence the applicability of Internet voting within the African context. The researcher applied desktop research which included 30 journals to gather data from the Internet and other documentation sources. The findings reveal that decision-makers can partially implement Internet voting in some of the countries in Africa like Kenya, Libya, Nigeria, Morocco, Mauritius, Tunisia, and Seychelles. To successfully implement Internet voting, the decision-makers in African nations have to fully invest in the Information Communication Technology infrastructure, provide the necessary security, legislation and carry out intensive voter education to build trust among voters.

Financial Inclusion: Globally Important Determinants

This paper highlights the globally-important determinants of financial inclusion. The determi-nants identified in this paper are formal account ownership; demand for formal savings; demand for formal borrowing; financial literacy and education; debit and credit card usage; the need to receive remittances from family and friends; size of the financial system; number of automated teller machines (ATMs); number of bank branches; proximity to a bank; availability and access to mobile phones; availability of digital financial products and services; technology infrastructure; government policy; culture and traditional belief systems; national financial inclusion strategy and implementation; and direct legislation.

Improving services in a hybrid academic library system

Purpose This paper aims to describe a hybrid academic library system and to draw up a model of this system suggesting strategies and scenarios for achieving optimum performance of the system in a technology changing world. Design/methodology/approach The mixture of traditional or manual ways of carrying out library operations with new, modern, automated systems often brings about several problems. The problems are ones that can be tackled within the framework of having appropriate systems dynamics routines applied and also making use of personnel skilled in strategic management of hybrid library systems. Findings A system dynamics model for the management of the system is developed around the issues of personnel management, collection management, capacity building and provision of access to research materials, information technology infrastructure, forming of consortia and security in the system. Originality/value Recommendations are made as to which strategy/scenario or combinations of scenarios will provide lasting solutions to the problems recurring or likely to reoccur in a hybrid academic library system.

UTILIZATION OF INFORMATION AND COMMUNICATION TECHNOLOGY (ICT) IN ACADEMIC SUPERVISION DURING THE COVID-19 PANDEMIC

This study aims to determine the use of information and communication technology (ICT) in academic supervision during the Covid-19 pandemic, its effectiveness, and the obstacles faced. The research method used is a qualitative research method with a descriptive approach. Data was collected using Google Forms. The study results found that academic supervision was implemented by utilizing technology in the form of video call Zoom and Google meet applications. Other applications are also used to conduct discussions without video calls, such as WhatsApp and Telegram. The exciting thing is that school supervisors have used media questions in academic supervision activities. Constraints and solutions are also discussed to find the best solution in the future if academic supervision is still carried out online. The use of technology also has a positive impact in increasing the ability of school supervisors to use technology. Infrastructure improvements in rural areas are needed to ensure signal availability.