A systematic methodology for privacy impact assessments: a design science approach

2014 | European Journal of Information Systems | Citations: 14

Authors: Oetzel, Marie Caroline; Spiekermann, Sarah

Abstract: For companies that develop and operate IT applications that process the personal ... Expand

Abstract: For companies that develop and operate IT applications that process the personal data of customers and employees, a major problem is protecting these data and preventing privacy breaches. Failure to adequately address this problem can result in considerable damage to the company’s reputation and finances, as well as negative effects for customers or employees (data subjects). To address this problem, we propose a methodology that systematically considers privacy issues by using a step-by-step privacy impact assessment (PIA). Existing PIA approaches cannot be applied easily because they are improperly structured or imprecise and lengthy. We argue that companies that employ our PIA can achieve ‘privacy-by-design’, which is widely heralded by data protection authorities. In fact, the German Federal Office for Information Security (BSI) ratified the approach we present in this article for the technical field of RFID and published it as a guideline in November 2011. The contribution of the artefacts we created is twofold: First, we provide a formal problem representation structure for the analysis of privacy requirements. Second, we reduce the complexity of the privacy regulation landscape for practitioners who need to make privacy management decisions for their IT applications. Collapse

Topics: privacy data protection radio frequency identification system development method legal context

Methods: action research design artifact design science qualitative interview unified modeling language

Designing for mobile value co-creation—the case of travel counselling

2014 | Electronic Markets | Citations: 0

Authors: Schmidt-Rauch, Susanne; Schwabe, Gerhard

Abstract: This paper focuses on the development of a mobile service as extension of travel ... Expand

Abstract: This paper focuses on the development of a mobile service as extension of travel agencies’ sales channels, fundamentally driven by the notion of value co-creation. Design goals are directly linked to the understanding of travel counselling as practical value co-creation and to the concern to progress this understanding throughout the travel customer cycle. Customers as well as travel agencies benefit from a mobile service rooted in value co-creation. Mobile service applications which target a service provision which furthermore is in line with the core competency of a travel agency (advice-giving and continuously accompany the customer) are scarce. Taking this as a starting point, we propose a mobile service and system design which provides a travel customer with continuing support on the trip, suitable to complement a lively, ongoing customer-firm interaction which enables the co-creation of value, ultimately targeting increased customer retention and loyalty. Collapse

Topics: mobile system participatory design systems design information system use user experience

Methods: design artifact design methodology design requirement design science survey

Cognition Matters: Enduring Questions in Cognitive IS Research

2012 | Journal of the Association for Information Systems | Citations: 63

Authors: Davern, Michael; Shaft, Teresa; Te'eni, Dov

Abstract: We explore the history of cognitive research in information systems (IS) across ... Expand

Abstract: We explore the history of cognitive research in information systems (IS) across three major research streams in which cognitive processes are of paramount importance: developing software, decision support, and human-computer interaction. Through our historical analysis, we identify "enduring questions" in each area. The enduring questions motivated long-standing areas of inquiry within a particular research stream. These questions, while perhaps unapparent to the authors cited, become evident when one adopts an historical perspective. While research in all three areas was influenced by changes in technologies, research techniques, and the contexts of use, these enduring questions remain fundamental to our understanding of how to develop, reason with, and interact with IS. In synthesizing common themes across the three streams, we draw out four cognitive qualities of information technology: interactivity, fit, cooperativity, and affordances. Together these cognitive qualities reflect IT's ability to influence cognitive processes and ultimately task performance. Extrapolating from our historical analysis and looking at the operation of these cognitive qualities in concert, we envisage a bright future for cognitive research in IS: a future in which the study of cognition in IS extends beyond the individual to consider cognition distributed across teams, communities and systems, and a future involving the study of rich and dynamic social and organizational contexts in which the interplay between cognition, emotion, and attitudes provides a deeper explanation of behavior with IS. Collapse

Topics: usability decision support system human computer interaction decision support systems development

Methods: archival research design science NeuroIS co-citation analysis experiment

Theories: theory of distributed cognition cognitive theory theory of affordance cognitive fit theory neuroscience theory

A Model-Driven Method for the Systematic Literature Review of Qualitative Empirical Research

2012 | International Conference on Information Systems | Citations: 0

Authors: Oates, Briony June; Edwards, Helen; Wainwright, David William

Abstract: This paper explores a model-driven method for systematic literature reviews (SLR ... Expand

Abstract: This paper explores a model-driven method for systematic literature reviews (SLRs), for use where the empirical studies found in the literature search are based on qualitative research. SLRs are an important component of the evidence-based practice (EBP) paradigm, which is receiving increasing attention in information systems (IS) but has not yet been widely-adopted. We illustrate the model-driven approach to SLRs via an example focused on the use of BPMN (Business Process Modelling Notation) in organizations. We discuss in detail the process followed in using the model-driven SLR method, and show how it is based on a hermeneutic cycle of reading and interpreting, in order to develop and refine a model which synthesizes the research findings of previous qualitative studies. This study can serve as an exemplar for other researchers wishing to carry out model-driven SLRs. We conclude with our reflections on the method and some suggestions for further research. Collapse

Topics: database system business process management decision making organizational context virtual teamwork

Methods: modeling language business process model and notation synthesis design science conceptual modelling

Theories: soft systems theory

IT strategy Implementation Framework – Bridging Enterprise Architecture and IT Governance

2010 | Americas Conference on Information Systems | Citations: 0

Authors: Bartenschlager, Jens; Goeken, Matthias

Abstract: It’s increasingly acknowledged that firms cannot be competitive if their IT stra ... Expand

Abstract: It’s increasingly acknowledged that firms cannot be competitive if their IT strategies are not implemented methodically. A number of proposals have been made to prioritize strategic IT plan executions and determine the most appropriate models and architectures. While IT governance primarily focuses on day-to-day IT operations, enterprise architecture primarily focuses on designing the future state of architecture in support of business. Despite still being a major concern for business and IT executives, there is little published research that bridges both and therefore attempts to give methodological support from a holistic perspective. Additionally it seems that governance needs to be investigated in terms of implementing IT strategies on different levels of abstraction. This article therefore proposes a framework to analyze institutions and guide ITstrategy implementation in order to analyze, monitor and control the desired results. Due to the underlying theories and applied interviews the model is potentially generalizable. Collapse

Topics: information systems strategy IT governance enterprise architecture organizational context decision making

Methods: design science qualitative interview unified modeling language metamodel

Theories: organizational theory

The role of modelling in achieving information systems success: UML to the rescue?

2009 | Information Systems Journal | Citations: 9

Authors: Larsen, Tor J.; Niederman, Fred; Limayem, Moez; Chan, Joyce

Abstract: Much computer science literature addresses the mechanics of the Unified Modellin ... Expand

Abstract: Much computer science literature addresses the mechanics of the Unified Modelling Language (UML) and requirements modelling, but little research has addressed the role of UML in the broader organizational and project development context. This study uses a socio-technical approach to consider UML as a technology embedded in a social environment. In this study, project developers were interviewed in detail about their use of UML along with influences on their decisions to use this approach and the results of using it. Data were analyzed using causal mapping. Major findings included: (1) that definitions of success may differ by unit of analysis (e.g., developer, project, organization) and that the relationship among these definitions are complex; (2) a very large number of variables impacting project success were identified; (3) a number of important variables exist in complex (non-linear) relationships with project success; and (4) the majority of interviewees linked the use of UML to project success. Collapse

Topics: systems development organizational context information system use IS success usage intention

Methods: design science qualitative interview unified modeling language causality analysis qualitative coding

Theories: socio technical theory

An Investigation into the Continued Use of Unified Modeling Language (UML) in Information Systems Development

2005 | Americas Conference on Information Systems | Citations: 1

Authors: Siau, Keng; Tan, Xin

Abstract: As the de facto standard for object-oriented modeling language, UML is expected ... Expand

Abstract: As the de facto standard for object-oriented modeling language, UML is expected to play an increasingly important role in information systems development. The long-term viability and eventual success of UML depend, to a great extent, on the continued use by UML users such as developers and analysts. Systematic investigations on UML’s continued use have been missing from contemporary discussions. Our study attempts to fill this gap in the literature. We developed a research model, which is primarily based on the Expectation Disconfirmation Theory (EDT). According to this model, UML users’perceived discrepancy between pre-adoption expectation and post-adoption perceived performance, which is conceptualized as performance disconfirmation and effort disconfirmation, is the determinant of satisfaction. UML users’post-adoption expectation, in terms of perceived usefulness and perceived ease of use, is the determinant of attitude. Both satisfaction and attitude are posited as determinants of users’intention to continue using UML. Collapse

Topics: systems development consumer behavior perceived usefulness perceived ease of use organizational context

Methods: survey unified modeling language design science structural equation modeling

Theories: expectation disconfirmation theory

Ontology and Business: Creating Structure for Storing and Accessing Organizational Knowledge on Intranets

2004 | European Conference On Information Systems | Citations: 0

Authors: Jackson, Paul

Abstract: Storing organisational information on Intranets is fast becoming the norm for co ... Expand

Abstract: Storing organisational information on Intranets is fast becoming the norm for corporate information management, as is the provision of tools which assist locating, adding to and using organisational knowledge. The design of the storage layouts for these intranets, and the navigational principles by which the information can be found requires that the responsibility for creating and publishing information is considered, as well as the needs of others to access the information from within a variety of contexts. This article examines ways of uncovering the reality of organisational experience in order to create maps of organisational knowledge. These are derived from business process analysis to create a foundation for the design of intranets and knowledge management solutions. Collapse

Topics: knowledge representation knowledge management systems design communities of practice geographic information system

Methods: case study business process modeling ontological modelling qualitative interview design science