Strategic alignment of enterprise architecture management – how portfolios of control mechanisms track a decade of enterprise transformation at Commerzbank

2023 | European Journal of Information Systems | Citations: 0

Authors: Beese, Jannis; Haki, Kazem; Schilling, Raphael; Kraus, Martin; Aier, Stephan; Winter, Robert

Abstract: Enterprise architecture management (EAM) is commonly employed by large organisat ... Expand

Abstract: Enterprise architecture management (EAM) is commonly employed by large organisations to coordinate local information system development efforts in line with organisation-wide strategic objectives while simultaneously avoiding redundancies and inconsistencies. Even though EAM tools and processes have become increasingly mature over the past decade, many organisations still struggle to generate impact from their EAM initiatives. To this end, we describe how enterprise architects at Commerzbank, a major international bank, employed a control mechanism portfolio perspective to more effectively anchor EAM within the organisation. This approach allows to purposefully combine a wide range of different formal and informal EAM control mechanisms, thereby going beyond the formal, top-down driven mechanisms predominantly discussed in EAM literature. Furthermore, such EAM control mechanism portfolios provide an effective means to purposefully realign EAM in reaction to major strategic shifts. The application of this perspective is demonstrated by tracing the evolution of EAM at Commerzbank for more than a decade (2008 to 2018) through a turbulent and challenging competitive environment, resulting in several major strategic realignments that required corresponding adjustments in EAM. We believe that such consciously designed and diversified EAM control mechanism portfolios also provide a useful means for other large organisations to more effectively conduct EAM. Collapse

Topics: systems development business process management logistics management IT development project organizational culture

Methods: qualitative interview qualitative coding theory development case study survey

Theories: control theory

Low-Coders, No-Coders, and Citizen Developers in Demand: Examining Knowledge, Skills, and Abilities Through a Job Market Analysis

2023 | International Conference on Business Informatics | Citations: 0

Authors: Binzer, Björn; Winkler, Till J.

Abstract: The emergence of low-code/no-code (LCNC) platform technologies and the resultin ... Expand

Abstract: The emergence of low-code/no-code (LCNC) platform technologies and the resulting increase in citizen development programs are facilitating the democratization of the design, development, and deployment of digital solutions. Citizen developers, non-technical employees who leverage LCNC platforms, are at the heart of this trend. While many firms perceive LCNC and citizen development as a crucial component of their digital transformation strategy, little is known about the evolving roles in this field or the necessary knowledge, skills, and abilities (KSA). To address this knowledge gap, we processed 113,106 job postings published on Indeed.com. Our topic modeling methodology identified 34 KSA topics and classified them into the three domains platform, business, and technology. We contribute to research by empirically demonstrating which competencies are required to successfully work in the LCNC field. Our findings can guide individual professionals and organizations alike. Collapse

Topics: online labor market Indeed.com low code development platform Python project management

Methods: topic model natural language processing computational algorithm latent dirichlet allocation NLTK

Scaling Agility in Incumbent Firms: A Literature Review

2023 | International Conference on Information Systems | Citations: 0

Authors: Frey, Julian

Abstract: Scaling agility as a process of applying agile concepts to more extensive parts ... Expand

Abstract: Scaling agility as a process of applying agile concepts to more extensive parts of the organization promises incumbent firms to achieve the same benefits as their digital competitors. However, copying digital-born companies' approaches seems problematic, as incumbent firms are distinct from their digital competitors. Thus, this research aims to consolidate what we know about scaling agility in incumbent firms. To answer this question, I conduct a structured literature review to understand scaling agility for incumbent firms better, resulting in the four dimensions of structure, methodology, governance, and dependencies with nine themes: coordination, processes, roles, effectiveness, risk management, budgeting, measurement, architecture, and culture/mindset. Moreover, the review develops six avenues for future research. With this, the literature review provides an integrative picture of scaling agility, enhances conceptual clarity, and helps practitioners by providing an overview to use in their efforts to scaling agility in incumbent firms. Collapse

Topics: agile software development systems development business function digital transformation organizational change

Methods: literature study literature sample structured literature research design methodology synthesis

A Total Cost of Ownership Model for Cloud Computing Infrastructure

2023 | HICSS | Citations: 0

Authors: Heinrich, Simon; Schuster, Thomas; Kreft, Nils; Volz, Raphael

Abstract: A holistic cost assessment of cloud computing ar-chitectures is currently hamper ... Expand

Abstract: A holistic cost assessment of cloud computing ar-chitectures is currently hampered by the lack of assessment methods and the absence of a standardized and comprehensive total cost model. This creates uncertainty about cost developments of concrete scenarios and architectural changes. This article proposes a total cost of ownership model for cloud computing, covering the cost of adoption, procurement, migration, operation, usage, and exit. We evaluated our model in multiple application scenarios and against other models. Our model has shown to be substantially more comprehensive and applicable than other available models for cloud computing. Thus, our model can be useful both in practice and in research. We will demonstrate that our model can increase cost transparency and improve decision support. Collapse

Topics: cloud computing usability decision support on-premises software web application

Methods: case study qualitative interview literature study design artifact simulation

Theories: transaction cost economics

An Information Security Performance Measurement Tool for Senior Managers: Balanced Scorecard Integration for Security Governance and Control Frameworks

2023 | Information Systems Frontiers | Citations: 0

Authors: Herath, Tejaswini C.; Herath, Hemantha S. B.; Cullum, David

Abstract: As organizations have become increasingly reliant on information systems, senior ... Expand

Abstract: As organizations have become increasingly reliant on information systems, senior managers are keen in assessing the progress of implemented information security strategies. Although the balanced scorecard approach has been suggested for security governance, a critical issue affecting information security practitioners is complexity, as there are many standards and frameworks, with duplication and overlaps to adhere to when organizing the data. Consequently, the article attempts to develop a more inclusive framework for information security governance, a research gap recently identified in the literature. The article maps five governance and control frameworks (COBIT, SABSA, ISG, ITIL, and ISO 27000) to the information security balanced scorecard (InfoSec BSC) to develop a conceptual design of an effective information security performance measurement tool that can be used by senior managers. Using a real-life case application and interviews with a panel of experts, the article identifies IS initiatives, performance measures for each of the mapped objectives derived from governance and control frameworks that may provide guidance for practitioners. Collapse

Topics: data security COBIT IT security ITIL information security management

Methods: qualitative interview case study personal interview survey delphi study

Theories: theory of everything

Unsupervised Threat Hunting using Continuous Bag of Terms and Time (CBoTT)

2023 | International Conference on Information Systems | Citations: 0

Authors: Kayhan, Varol; Shivendu, Shivendu; Behnia, Rouzbeh; Daniel, Clinton; Agrawal, Manish

Abstract: Threat hunting is sifting through system logs to detect malicious activities th ... Expand

Abstract: Threat hunting is sifting through system logs to detect malicious activities that might have bypassed existing security measures. It can be performed in several ways, one of which is based on detecting anomalies. We propose an unsupervised framework, called continuous bag-of-terms-and-time (CBoTT), and publish its application programming interface (API) to help researchers and cybersecurity analysts perform anomaly-based threat hunting among SIEM logs geared toward process auditing on endpoint devices. Analyses show that our framework consistently outperforms benchmark approaches. When logs are sorted by likelihood of being an anomaly (from most likely to least), our approach identifies anomalies at higher percentiles (between 1.82-6.46) while benchmark approaches identify the same anomalies at lower percentiles (between 3.25-80.92). This framework can be used by other researchers to conduct benchmark analyses and cybersecurity analysts to find anomalies in SIEM logs. Collapse

Topics: IT security application programming interface Hadoop Distributed File System website web analytics

Methods: natural language processing artificial neural network support vector machine term frequency–inverse document frequency DBSCAN

Where is IT in Information Security? The Interrelationship among IT Investment, Security Awareness, and Data Breaches

2023 | Management Information Systems Quarterly | Citations: 1

Authors: Li, Wilson Weixun; Leung, Alvin; Yue, Wei

Abstract: Data breaches can severely damage a firm's reputation and its customers' confid ... Expand

Abstract: Data breaches can severely damage a firm's reputation and its customers' confidence. Firms must therefore continuously invest in security measures to prevent such breaches. However, the effectiveness of security investment has been questioned by both practitioners and academics. We illustrate the bidirectional dynamic relationship between information technology (IT) investment and data breaches moderated by threat and countermeasure security awareness using an eight-year panel of 311 U.S.-listed firms to provide empirical evidence that threat awareness broadens firms' scope for addressing databreach issues by investing more in IT than in security. Countermeasure awareness equips firms with sufficient knowledge and experience to ensure effective implementation of IT, which provides more comprehensive protection than security investment alone. Our results suggest that firms should evolve beyond the reactive mindset of solely upgrading security and begin nurturing both threat awareness and countermeasure awareness to address the underlying IT system issues that are the cause of data breaches. Collapse

Topics: IT investment data breach IT security defense data security IT security threat

Methods: longitudinal research robustness check autocorrelation analysis survey literature study

Theories: institutional theory protection motivation theory

Understanding critical risks of business process outsourcing from the vendor perspective: A dyadic comparison Delphi study

2023 | Information & Management | Citations: 0

Authors: Liu, Shan; Keil, Mark; Wang, Lin; Lu, Yaobin

Abstract: Business process outsourcing (BPO) enables organizations to enhance operational ... Expand

Abstract: Business process outsourcing (BPO) enables organizations to enhance operational capability, shorten response time, and gain strategic value. Yet, BPO risks are real and BPO initiatives can and do go awry. While prior research has attempted to understand BPO risks from the client perspective, the critical risks of BPO from the vendor perspective (and how they differ from those of the client perspective) are not well understood. By using the Delphi method, this study identifies and ranks BPO risk factors from the perspective of vendors as well as clients (for comparison purposes) across two countries. We identify a list of 68 BPO risk factors perceived by vendors and clients and top-ranked risk factors perceived by vendors. We categorize these factors into six risk dimensions (i.e., organizational environment, client, complexity, contract, execution, and vendor). Our findings indicate that vendors are concerned about not only the risks that influence their own business, but also those that may impact the business of clients. However, vendors focus more on client and execution risks, whereas clients focus more on vendor and organizational environment risks. Our research contributes to the existing literature by not only investigating the top-ranked risks from the perspective of vendors, but also revealing the similarities and differences in the perceptions of vendors and clients with respect to BPO risk. Our research also has practical utility for BPO vendors and clients. Collapse

Topics: outsourcing national culture brainstorming business function electronic mail

Methods: delphi study literature sample survey literature study qualitative interview

Theories: sociotechnical systems theory

Antecedents and performance outcomes of employees’ data analytics skills: an adaptation structuration theory-based empirical investigation

2023 | European Journal of Information Systems | Citations: 0

Authors: Shao, Zhen; Benitez, Jose; Zhang, Jing; Zheng, Hanqing; Ajamieh, Aseel

Abstract: How do organizations develop and manage employees’ data analytics skills to crea ... Expand

Abstract: How do organizations develop and manage employees’ data analytics skills to create business value and enhance organizational competitive advantage? In order to address this prominent and critical research question for IS research, we conceptualize and operationalize data analytics skills at the individual level and develop a nomological network model to examine its critical antecedents and outcomes from the lens of adaptation structuration theory. We test our core proposition and research model using survey data collected from 258 frontline employees of three data-intensive research institutes in China. We discover that data-driven culture, data analytics affordance, and individual absorptive capacity are positively associated with employees’ data analytics skills, which in turn, have positive influences on their task and innovative performance. We classify the employees into digital immigrants and digital natives based on age and examine the different influences of three salient antecedents on data analytics skills between the two groups. The research findings suggest that data-driven culture plays a more significant role in driving data analytics skills for digital immigrants, while data analytics affordance exhibits a stronger influence on data analytics skills for digital natives. Collapse

Topics: analytical information system absorptive capacity task productivity affordance usability

Methods: survey parametric test structural equation modeling statistical power analysis field study

Theories: theory of affordance structuration theory adaptive structuration theory

Technology readiness and the organizational journey towards AI adoption: An empirical study

2023 | International Journal of Information Management | Citations: 5

Authors: Uren, Victoria; Edwards, John S.

Abstract: Artificial Intelligence (AI) is viewed as having potential for significant econo ... Expand

Abstract: Artificial Intelligence (AI) is viewed as having potential for significant economic and social impact. However, its history of boom and bust cycles can make potential adopters wary. A cross-sectional, qualitative study was carried out, with a purposive sample of AI experts from research, development and business functions, to gain a deeper understanding of the adoption process. Technology Readiness Levels were used as a benchmark against which the experts could align their experiences. A model of AI adoption is proposed which embeds an extended version of the People, Processes, Technology lens, incorporating Data. The model suggests that people, process and data readiness are required in addition to technology readiness to achieve long term operational success with AI. The findings further indicate that innovative organizations should build bridges between technical and business functions. Collapse

Topics: artificial intelligence business function innovation management spreadsheet data management

Methods: qualitative interview qualitative coding chatbot machine learning cross sectional research

Theories: socio technical theory