IT risk management is an important challenge for businesses and software vulnerabilities are a major source of IT risks, as the 2006 CSI/FBI Computer Crime and Security Survey [GLLR06] demonstrates. According to the survey, many companies consider it important to quantify the losses attacks against their IT systems cause but are unable to do so. In service-oriented architectures, we see a promi...

The use of Information Technology (IT) in organizations is subject to various kinds of potential risks. Risk management is a key component of project management enables an organization to accomplish its mission(s). However, IT projects have often been found to be complex and risky to implement in organizations. The organizational relevance and risk of IT projects make it important for organizat...

Exploring further the properties of ITRM -recognizable reals started in [Ca], we provide a detailed analysis of recognizable reals and their distribution in Gödels constructible universe L. In particular, we show that new unrecognizables are generated at every index γ ≥ ω ω . We give a machine-independent characterization of recognizability by proving that a real r is recognizable iff it is Σ1-...

Phytoextraction may be applied at field scale when the removal of bioavailable metals is the specific target of the technology. Residual metals in soil can be considered substantially inert or to be evaluated by site specific risk analysis.

Employees increasingly use cloud services of third party providers to efficiently perform their job. Interestingly, the majority adopts the cloud without approval of the organization. IT resources like that are commonly referred to as shadow IT. Although widespread in practice, the present literature on shadow IT is scarce lacking a clear definition of the phenomenon and exclusively focusing on...

It is very difficult to get a realistic picture of organizational activity. Yet without such a picture it is well nigh impossible to design Information Technology (IT) systems to properly support the work of the healthcare professional. This article reports on a study undertaken in conjunction with Mancunian Community Health Trust to model certain Trust processes. A number of different professi...

When two groups of market actors differ in how to interpret a common label, each can make claims over the label. One categorical interpretation and the group that supports it risk disappearance if the rival interpretation gains ground. We argue that when members of the endangered category become partial defectors that span categories, their history presents challenges to the identity of nondefe...

Creating effective global eLearning initiatives requires strategic planning and process development to avoid mistakes that can turn off global learners. In order to successfully implement a global training program in a cost effective, efficient way, corporations must consider budget, timing, design, and content relevancy. These factors become more complex when considering lingual, regional and ...

The conventional wisdom is that security priorities should be set by risk analysis. However, reality is subtly different: many computer security systems are at least as much about shedding liability as about minimising risk. Banks use computer security mechanisms to transfer liability to their customers; companies use them to transfer liability to their insurers, or (via the public prosecutor) ...

(IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." To learn the ...