Given the significant amount of personal information available on the Web, verifying its correct use emerges as an important issue. When personal information is published, it should be later used under a set of usage policies. If these policies are not followed, sensitive data could be exposed and used against its owner. Under these circumstances, processing transparency is desirable since it a...

Proof-checking code for compliance to safety policies potentially enables a product-oriented approach to certain aspects of software certification. To date, previous research has focused on generic, low-level programming-language properties such as memory type safety. In this paper we consider proof-checking higher-level domain-specific properties for compliance to safety policies. The paper fi...

This study examines how a healthcare organization’s security practices (including IT controls, policies, education, and hiring practices) influence their perceived regulatory compliance and security performance. We utilized qualitative and quantitative survey data provided by senior IT managers from 250 healthcare organizations. The data provides a snapshot of patient information security in th...

This paper investigates the effect of managerial flexibility on the choice of capital structure for a firm and the corresponding valuation of its long term debt. We consider a general model in continuous time where the manager (who is not a shareholder) of a firm with long term debt in place may dynamically switch strategies at random times so as to maximize his expected discounted compensation...

AIM This research examined 1) the extent and nature of smokefree outdoor area (SFOA) policies in New Zealand, and 2) the process of developing, implementing and promoting compliance with a SFOA policy. METHOD An online survey was carried out with 43 of the 67 Local and District Councils, supplemented by other means. The survey assessed whether the council had a smokefree policy and if so, wha...

Policy capacity focuses on the managerial and organizational abilities to inform policy decisions with sound research and analysis, and facilitate policy implementation with operational efficiency. It stems from a view of the policy process that is rational and positivistic, in which optimal policy choices can be identified, selected, and implemented with objectivity. By itself, however, policy...

In this paper we introduce a new framework for controlling compliance to discretionary access control policies [9,11]. The framework consists of a simple policy language, modeling ownership of data and administrative policies. Users can create documents, and authorize others to process the documents. To control compliance to the document policies, we define a formal audit procedure by which use...

OBJECTIVE To explore determinants of support for and reported compliance with smoke-free policies in restaurants and bars across the four countries of the International Tobacco Control (ITC) Four Country Survey. DESIGN Separate telephone cross-sectional surveys conducted between October and December 2002 with broadly representative samples of over 2000 adult (>or=18 years) cigarette smokers i...