1.
2.
Andersson, Annika, 1968-, et al.
(författare)
Consensus versus warfare – unveiling discourses in de jure information security standard development
2020
Ingår i: Computers & security (Print). - : Elsevier. - 0167-4048 .- 1872-6208. ; 99
Tidskriftsartikel (refereegranskat) abstract
Information security standards are influential tools in society today. The validity claim of standards is based on what is considered “best practice.” We unveil the negotiations that take place when “best practice” is constructed during standard development. By using dis- course analysis, we investigate how power operates in national and international contexts of de jure information security standard development work. As members of a standard- ization committee, we analyzed the language used by this committee. The results showed two discourses at play: the consensus discourse and the warfare discourse. We conclude by proposing six theoretical propositions on how power operates in the above-mentioned contexts of de jure standard development.
3.
4.
Bergström, Erik, 1976-, et al.
(författare)
Developing an information classification method
2021
Ingår i: Information and Computer Security. - : Emerald Group Publishing Limited. - 2056-4961. ; 29:2, s. 209-239
Tidskriftsartikel (refereegranskat) abstract
Purpose: The purpose of this paper is to develop a method for information classification. The proposed method draws on established standards, such as the ISO/IEC 27002 and information classification practices. The long-term goal of the method is to decrease the subjective judgement in the implementation of information classification in organisations, which can lead to information security breaches because the information is under- or over-classified. Design/methodology/approach: The results are based on a design science research approach, implemented as five iterations spanning the years 2013 to 2019. Findings: The paper presents a method for information classification and the design principles underpinning the method. The empirical demonstration shows that senior and novice information security managers perceive the method as a useful tool for classifying information assets in an organisation. Research limitations/implications: Existing research has, to a limited extent, provided extensive advice on how to approach information classification in organisations systematically. The method presented in this paper can act as a starting point for further research in this area, aiming at decreasing subjectivity in the information classification process. Additional research is needed to fully validate the proposed method for information classification and its potential to reduce the subjective judgement. Practical implications: The research contributes to practice by offering a method for information classification. It provides a hands-on-tool for how to implement an information classification process. Besides, this research proves that it is possible to devise a method to support information classification. This is important, because, even if an organisation chooses not to adopt the proposed method, the very fact that this method has proved useful should encourage any similar endeavour. Originality/value: The proposed method offers a detailed and well-elaborated tool for information classification. The method is generic and adaptable, depending on organisational needs.
5.
Denk, Thomas, 1971-, et al.
(författare)
Medborgarnas inställning till automatiserat beslutsfattande
2020
Ingår i: Digitala är vi allihopa?. - Göteborg : SOM-institutet, Göteborgs universitet. - 9789189673489 ; , s. 78-89
Bokkapitel (populärvet., debatt m.m.) abstract
Alltfler myndigheter inför automatiserat beslutsfattande, vilket innebär att en dator fattar beslut istället för handläggare och utredare. Detta kapitel undersöker med- borgarnas inställning till att öka det automatiserade beslutsfattandet i myndigheter. Kapitlets analyser visar att en majoritet (64 procent) anser att det är ett mycket dåligt eller ganska dåligt förslag att datorer ska få ta över fler beslut i myndigheter. Analyserna indikerar också att inställningen har samband med socio-demografisk bakgrund, politiska förhållningssätt och framtidsoro för AI, automatisering och robotisering. Den negativa inställningen återfinns i samtliga grupper. Det är dessutom så att det snarare är graden av negativ inställning som varierar mellan grupper än inställningen som sådan. Med dessa resultat framträder en möjlig spänning mellan utvecklingen inom myndigheter och medborgarnas inställning till automatiserat beslutsfattande.
6.
7.
Goldkuhl, Göran, et al.
(författare)
Method Engineering as Design Science
2020
Ingår i: Journal of the Association for Information Systems. - : Baylor University. - 1536-9323. ; 21:5, s. 1237-1278
Tidskriftsartikel (refereegranskat) abstract
In this paper, we motivate, devise, demonstrate, and evaluate an approach for the research-based development of information systems development methods (ISDMs). This approach, termed "method engineering as design science" (ME-DS), emerged from the identified need for scholars to develop ISDMs using proper research methods that meet the standards of both rigor and relevance. ISDMs occupy a position of central importance to information systems development and scholars have therefore invested extensive resources over the years in developing such methods. The method engineering (ME) discipline has developed different frameworks and methods to guide such development work and, for that purpose, they are well-suited. Still, there remains a need for applications and evaluations of ISDMs based on the demands for knowledge justification. Unfortunately, in many cases, scholars come up short with regard to how ISDMs are generated and empirically validated. While design science (DS) stresses knowledge justification, prominent DS approaches seem to be biased toward the development of IT artifacts, making this approach ill-suited for the development of method artifacts. We therefore propose eight principles that marry ME and DS, resulting in a process model with six activities to support research-based development of ISDMs. We demonstrate and evaluate ME-DS by assessing three existing research papers that propose ISDMs. These retrospectives show how ME-DS directs attention to certain aspects of the research process and provides support for future ISDM development.
8.
9.
Havstorm, Tanja Elina, 1991-
(författare)
Cargo Cult in Agile Software Development
2023
Doktorsavhandling (övrigt vetenskapligt/konstnärligt) abstract
Software development (SD) projects are complex endeavors, and organizations employ software development methods (SDMs) both to add structure and to propel their projects. Nowadays, agile SDMs are the most used methods. Still, inefficient and ineffective use of SDMs is a challenge, and existing research shows cases of SD teams failing in their use of SDMs due to deviations made. Of course, methods should not be used in rigorous and textbook-like ways. Among practitioners, some of these deviations are referred to as cargo cult behavior; without, however, providing much of theoretical depth or any analytical tools to identify and characterize such behaviors. Although existing research has investigated SDM deviations, they have not been investigated as cargo cult behavior.Against this backdrop, the aim of this thesis is to understand the challenges in succeeding with SDM use by developing a theory called SDM cargo cult theory (SDMCCT), to identify, analyze, and describe the cargo cult phenomenon in agile SDM use. The journey of this thesis takes its starting point in practitioners’ use of the buzzwords “cargo cult” when referring to flawed SDM use. By returning to the field of social anthropology and its studies of cargo cult, a definition of SDM cargo cult and an analytical framework are iteratively crafted through a longitudinal ethnographic study to constitute the SDMCCT. The research approach has been abductive and the SDMCCT builds on social action theory and work motivation theory.The ethnographical study took place at an international industrial manufacturing company in Sweden that is using agile SDMs. This study includes three years of data collection, which includes observations, interviews, and gathering of business documents. The ethnographic study focused on three SD teams and their daily work using agile SDMs. The analysis using the analytical framework includes four agile SDM practices: daily scrum meeting, sprint demo, continuous integration, and visualization. In total, the analysis uncovered 36 deviations in the SD teams’ use of these practices, structured into 30 SDM cargo cult categories. In addition, this study shows that the framework is applicable to analyze and characterize effective SDM use as well, although it is not its main focus. The framework can be used by researchers to make similar analysis of cargo cult situations in other organizations, and the catalogue of cargo cult situations can serve as background knowledge for other organizations to study and improve their SD teams’ use of agile SDM practices.
10.
Havstorm, Tanja Elina, 1991-, et al.
(författare)
Uncovering Situations of Cargo Cult Behavior in Agile Software Development Method Use
2023
Ingår i: Proceedings of the 56th Hawaii International Conference on System Sciences. - : University of Hawai'i at Manoa. - 9780998133164 ; , s. 6486-6495
Konferensbidrag (refereegranskat) abstract
Misinterpretations and faulty use of Software Development Method (SDM) practices and principles are identified pitfalls in Software Development (SD). Previous research indicates cases with method adoption and use failures; one reason could be the SDM Cargo Cult (CC) behavior, where SD organizations claim to be agile but not doing agile. Previous research has suggested the SDM CC framework as an analytical tool. The aim of this paper is to refine the SDM CC framework and empirically test this version of the framework. We use data from an ethnographical study on three SD teams’ Daily Scrum Meetings (DSM). The empirical material was collected through observations, interviews, and the organization’s business documents. We uncovered twelve CC situations in the SD teams’ use of the DSM practice, structured into seven categories of SDM deviations: bringing irrelevant information, canceling meetings, disturbing the team, receiving unclear information, bringing new requirements, problemsolving, and task distribution.
