A taxonomy of data governance decision domains in data marketplaces

2023 | Electronic Markets | Citations: 0

Authors: Abraham, Rene; Schneider, Johannes; vom Brocke, Jan

Abstract: Commercializing data and data-related services has gained in importance in recen ... Expand

Abstract: Commercializing data and data-related services has gained in importance in recent years. Driven by digitalization and the Internet-of-Things (IoT), companies and individuals continuously generate vast amounts of data. Data marketplaces have emerged to support these data providers in selling their data to different data consumers. However, data marketplaces face challenges in different data governance decision domains that inhibit their adoption. To get a better understanding of how data marketplaces counteract these challenges, this paper develops a taxonomy of data governance decision domains in data marketplaces. We used a taxonomy development method to inspect 13 data marketplaces from eight countries. The resulting taxonomy shows an overview of mechanisms concerning data quality, data security, data architecture, metadata, data lifecycle, data storage, and data pricing. We discuss common instantiation patterns, highlight gaps, and propose possible solutions. The taxonomy sets a foundation for further research and theory-building on data marketplaces. Practitioners can use the taxonomy to develop customized data governance strategies for data marketplaces. Collapse

Topics: data governance price management system development method computer data storage website

Methods: design artifact data modeling design methodology design science company material

ETHICAL GUIDELINES FOR BLOCKCHAIN SYSTEMS

2023 | European Conference On Information Systems | Citations: 0

Authors: Agerskov, Signe; Pedersen, Asger; Beck, Roman

Abstract: Enterprise architects and IT systems developers must often decide ad hoc how to ... Expand

Abstract: Enterprise architects and IT systems developers must often decide ad hoc how to identify, assess and mitigate ethical issues of autonomous, rule-based systems based on blockchain technology. As blockchain systems are decentralized and immutable, developers must assess ethical risks, not only on an individual level but also on a network level along the life-cycle stages of a blockchain system. These ethical issues should be addressed and ideally mitigated by clearly defined norms and values that are intentionally incorporated in a blockchain system. As a reference for a normative system, we have chosen the European Union and its ethical values to discuss them in the context of ethical issues emerging from blockchain systems. This paper presents a top-down approach that establishes ethical guidelines for blockchain systems based on ethical issues mapped against European values. Collapse

Topics: blockchain smart contract data encryption privacy supply chain management

Methods: literature sample literature study case study computational algorithm triangulation

An Adversarial Dance: Toward an Understanding of Insiders’ Responses to Organizational Information Security Measures

2023 | Journal of the Association for Information Systems | Citations: 0

Authors: Balozian, Puzant; Burns, A.; Leidner, Dorothy

Abstract: Despite the increased focus on organizational security policies and programs, s ... Expand

Abstract: Despite the increased focus on organizational security policies and programs, some employees continue to engage in maladaptive responses to security measures (i.e., behaviors other than those recommended, intended, or prescribed). To help shed light on insiders' adaptive and maladaptive responses to IS security measures, we conducted a case study of an organization at the forefront of security policy initiatives. Drawing on the beliefs-actions-outcomes (BAO) model to analyze our case data, we uncover a potentially nonvirtuous cycle consisting of security-related beliefs, actions, and outcomes, which we refer to as an "adversarial dance." Explaining our results, we describe a novel belief framework that identifies four security belief profiles and uncovers an underexplored outcome of IS security: insiders' lived security experiences. We find that individuals' unfavorable lived security experiences produce counterproductive security-related beliefs that, in turn, lead to maladaptive behaviors. Maladaptive behaviors create new potential for security risk, leading to increased organizational security measures to counter them. Thus, the adversarial dance continues, as the new security measures have the potential to reinforce counterproductive security-related beliefs about the importance and risk of IS security and lead to new maladaptive behaviors. To help situate our findings within the current security literature, we integrate the results with prior research based on extant theories. While this paper is not the first to suggest that security measures can elicit maladaptive behaviors, the emergent belief framework and expanded BAO model of IS security constitute an important contribution to the behavioral IS security literature.Puzant Balozian is an assistant professor of computer information systems at James Madison University. His research focus is primarily on the impacts of organizational factors on individual user behaviors in the context of information security and privacy and addressing security policy compliance and violation. Collapse

Topics: IT security IT security defense productivity IT security threat anonymity

Methods: case study qualitative interview personal interview theory development survey

Theories: information systems theory neutralization theory behavioral theory

Facilitating interorganizational trust in strategic alliances by leveraging blockchain-based systems: Case studies of two eastern banks

2023 | International Journal of Information Management | Citations: 0

Authors: Chen, Renee Rui; Chen, Kun; Ou, Carol X.J.

Abstract: Strategic alliances require mutual trust and collaboration between organizations ... Expand

Abstract: Strategic alliances require mutual trust and collaboration between organizations. To increase alliance perfor­ mance, organizations in a strategic alliance are more likely to interpret each other’s equivocal behaviors in a positive way to sustain the stability of the relationship. Different from traditional mechanisms to build inter­ organizational trust, blockchain facilitates trust among alliance partners via its technology advantages, for example, public ledger and distributed consensus. The decentralized and distributed nature of a blockchainbased system assures that no single organization can add information to the chain without an approval from the alliance, nor can it make unilateral changes in the system. Drawing from the Affordance Theory, we propose an exploratory research design to understand the structure of a blockchain-based system, as well as how this blockchain-based system influences interorganizational trust in a strategic alliance and how blockchain-enabled interorganizational trust influences alliance performance. The case studies of two eastern banks indicate that the technical features of blockchain can help reduce equivocal behaviors and improve interorganizational trust. We discuss the findings and conclude the paper with implications. Collapse

Topics: blockchain affordance user experience usability smart contract

Methods: qualitative interview case study design artifact conceptual modelling computational algorithm

Theories: theory of affordance

Blockchain-based Governance, Risk Management, and Compliance for Fractional Ownership: Design and Implementation of A Decentralized Autonomous Agent System

2023 | HICSS | Citations: 0

Authors: Cu, Mina; Peko, Gabrielle; Chan, Johnny; Sundaram, David

Abstract: Fractional ownership makes homeownership more affordable. But there are challeng ... Expand

Abstract: Fractional ownership makes homeownership more affordable. But there are challenges in a fractional ownership real estate transaction (FORET) regarding governance, risk management and compliance (GRC) processes. Centralized GRC solutions are less effective in managing the tiered structure of communications in a FORET, which can lead to principal-agent problems such as information asymmetry, risk aversion, and moral hazard. In this research we investigate how these principal-agent problems in FORET could be mitigated. Using an agency theory perspective, we adopt a design science multimethodological research approach. We propose conceptual and system artefacts to support the design and implementation of a decentralized autonomous agent system. These artefacts deliver a formal problem representation structure related to centralized GRC in fractional ownership. We illustrate our solution with a system prototype and implementation. We evaluate the research outputs and compare them with existing GRC systems. This paper contributes to the understanding of GRC in supporting fractional ownership decision making. Collapse

Topics: blockchain decision making cloud computing smart contract moral hazard

Methods: design artifact design artifact testing design science field study theory development

Theories: agency theory lemon market theory

z-Commerce: Designing a Data-Minimizing One-Click Checkout Solution

2023 | DESRIST | Citations: 0

Authors: Ermolaev, Egor; Abellán Álvarez, Iván; Sedlmeir, Johannes; Fridgen, Gilbert

Abstract: E-commerce has grown rapidly over the past years, with prevailing e-commerce pla ... Expand

Abstract: E-commerce has grown rapidly over the past years, with prevailing e-commerce platforms aggregating large amounts of customer data. This practice has several undesirable side effects, such as facilitating profiling that may lead to price discrimination and data feedback loops that can hamper competition. Moreover, data hoarding carries security risks through data breaches and undermines customers’ privacy expectations. On the other hand, convenience aspects and compliance regulation demand the processing and storage of user-related data. To address this tension field, we aim to conceptualize and iteratively refine a data-minimizinig e-commerce platform. Following a design science research approach, we identify design objectives and propose and implement a solution in which stakeholders receive only customer data that is indispensable for their part of the process. Our solution leverages digital identity wallets and general-purpose zero-knowledge proofs (zk-SNARKs). We aim to perform a criteria-based evaluation to assess our artifact’s feasibility and fitness from an interdisciplinary perspective. With our results, we hope to illustrate that combining state-of-the-art cryptographic techniques and an emerging digital identity paradigm allows reaching the user experience of incumbent e-commerce platforms while mitigating the undesirable socio-economic side effects of avoidable data disclosure. Collapse

Topics: electronic commerce privacy user experience open source price discrimination

Methods: qualitative interview design artifact design science literature study business process modeling

Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

2023 | Electronic Markets | Citations: 0

Authors: Guggenberger, Tobias; Kühne, Daniela; Schlatt, Vincent; Urbach, Nils

Abstract: The introduction of blockchain offers new opportunities to rethink enterprise id ... Expand

Abstract: The introduction of blockchain offers new opportunities to rethink enterprise identity management. Recently, a new concept has emerged in the blockchain community called self-sovereign identity. Self-sovereign identity combines several existing decentralized identity management approaches, promising new ways to promote more convenient, connected, and secure identity services for the private and public sector. Nevertheless, research in this area is still in its infancy. Most of the very few articles focus either on the opportunities self-sovereign identity might offer or on very specific technical features. Studies on real-world applications of organizations using modern self-sovereign identity implementations and design theory are very rare. To fill this gap, we follow the design science research approach to design, implement, and evaluate a self-sovereign identity system to present tax attributes of online retailers. We present four design principles and conclude that the use of self-sovereign identity and blockchain offers opportunities to improve verification processes. Collapse

Topics: blockchain Hyperledger electronic commerce government system privacy

Methods: design principle design artifact qualitative interview design theory literature study

A privacy-preserving decentralized credit scoring method based on multi-party information

2023 | Decision Support Systems | Citations: 0

Authors: He, Haoran; Wang, Zhao; Jain, Hemant; Jiang, Cuiqing; Yang, Shanlin

Abstract: With society's wide-scale adoption of information technology, significant inform ... Expand

Abstract: With society's wide-scale adoption of information technology, significant information about borrowers is distributed across various parties, information that can be jointly used to improve credit scoring. However, use of such information faces many challenges, such as the problems of preserving privacy and information redun­ dancy. To address these challenges in leveraging multi-source information for credit scoring, we propose a decentralized multi-party method based on logistic regression. Specifically, we formulate a logistic regression model using the vertical federated learning paradigm. To preserve data privacy during multi-party collaborative model training, we use additively homomorphic encryption based on the second-order Taylor series expansion of the loss function and its gradient. To address information redundancy and to improve the performance of the credit scoring model, we use the proposed HE-DPGD algorithm to estimate the distributed coefficients in a privacy-preserving setting. Empirical evaluation shows that the proposed method can leverage information from multiple parties securely and effectively. Collapse

Topics: privacy homomorphic encryption logistics management online lending missing data

Methods: computational algorithm machine learning federated learning logistic regression experiment

DESIGNING BUSINESS REPUTATION ECOSYSTEMS - A METHOD FOR ISSUING AND TRADING MONETARY RATINGS ON A BLOCKCHAIN

2023 | European Conference On Information Systems | Citations: 0

Authors: Hemmrich, Simon; Bobolz, Jan; Beverungen, Daniel; Blömer, Johannes

Abstract: Many market transactions are subject to information asymmetry about the deliver ... Expand

Abstract: Many market transactions are subject to information asymmetry about the delivered value proposition, causing transaction costs and adverse effects among buyers and sellers. Information systems (IS) research has investigated how review systems can reduce information asymmetry in business-to-consumer markets. However, these systems use textual data or star ratings that cannot be readily applied to business-tobusiness markets, are vulnerable to manipulation, and suffer from other conceptual shortcomings. Building on design science research, we conceptualize a new class of reputation systems based on using payments as monetary ratings for each transaction stored on a blockchain. We show that our system assures content confidentiality so buyers can share, sell, and aggregate their ratings selectively, establishing a reputation ecosystem. Our prescriptive insights advance the design of reputation systems and offer new paths to understanding how payments can be used as signals that reduce information asymmetry in B2B transactions. Collapse

Topics: blockchain cryptocurrency business-to-business online reputation system privacy

Methods: design science design process design artifact

Theories: lemon market theory

An Information Security Performance Measurement Tool for Senior Managers: Balanced Scorecard Integration for Security Governance and Control Frameworks

2023 | Information Systems Frontiers | Citations: 0

Authors: Herath, Tejaswini C.; Herath, Hemantha S. B.; Cullum, David

Abstract: As organizations have become increasingly reliant on information systems, senior ... Expand

Abstract: As organizations have become increasingly reliant on information systems, senior managers are keen in assessing the progress of implemented information security strategies. Although the balanced scorecard approach has been suggested for security governance, a critical issue affecting information security practitioners is complexity, as there are many standards and frameworks, with duplication and overlaps to adhere to when organizing the data. Consequently, the article attempts to develop a more inclusive framework for information security governance, a research gap recently identified in the literature. The article maps five governance and control frameworks (COBIT, SABSA, ISG, ITIL, and ISO 27000) to the information security balanced scorecard (InfoSec BSC) to develop a conceptual design of an effective information security performance measurement tool that can be used by senior managers. Using a real-life case application and interviews with a panel of experts, the article identifies IS initiatives, performance measures for each of the mapped objectives derived from governance and control frameworks that may provide guidance for practitioners. Collapse

Topics: data security COBIT IT security ITIL information security management

Methods: qualitative interview case study personal interview survey delphi study

Theories: theory of everything