Search results

This paper presents a qualitative study of penetration testing, the practice of attacking information systems to find security vulnerabilities and fixing them. The purpose of this paper is to understand whether and to what extent penetration testing can reveal various socio-organisational factors of information security in organisations. In doing so, the paper innovates theory by using Routine Activity Theory together with phenomenology of information systems concepts.

The articulation of Routine Activity Theory and phenomenology emerged inductively from the data analysis. The data consists of 24 qualitative interviews conducted with penetration testers, analysed with thematic analysis.

The starting assumption is that penetration testers are akin to offenders in a crime situation, dealing with targets and the absence of capable guardians. A key finding is that penetration testers described their targets as an installed base, highlighting how vulnerabilities, which make a target suitable, often emerge from properties of the existing built digital environments. This includes systems that are forgotten or lack ongoing maintenance. Moreover, penetration testers highlighted that although the testing is often predicated on planned methodologies, often they resort to serendipitous practices such as improvisation.

This paper contributes to theory, showing how Routine Activity Theory and phenomenological concepts can work together in the study of socio-organisational factors of information security. This contribution stems from considering that much research on information security focuses on the internal actions of organisations. The study of penetration testing as a proxy of real attacks allows novel insights into socio-organisational factors of information security in organisations.

Despite the widespread use and application of resilience, much uncertainty about the conceptualization and operationalization in the context of tourism destinations still exists. The purpose of this paper is to provide a conceptual elaboration on destination resilience and to introduce a model for an improved understanding of the concept.

Taking a conceptual research approach, this paper seeks to untangle the fuzziness surrounding the destination and resilience concept by providing a new interpretation that synthesizes theories and concepts from various academic disciplines. It analyses the current debate to derive theoretic baselines and conceptual elements that subsequently inform the development of a new “Destination Resilience Model”.

The contribution advances the debate by proposing three key themes for future resilience conceptualizations: (1) the value of an actor-centered and agency-based resilience perspective; (2) the importance of the dynamic nature of resilience and the (mis)use of measurement approaches; (3) the adoption of a dualistic resilience perspective distinguishing specified and general resilience. Building on these propositions, we introduce a conceptual model that innovatively links elements central to the concepts of destination and risk and combines different narratives of resilience.

The contribution advances the debate surrounding destination resilience by critically examining the conceptualization and operationalization of destination resilience within previous research and by subsequently proposing a “Destination Resilience Model” that picks up central element of the three new frontiers identified in the conceptually driven review. The innovative integration strengthens the comprehension of the resilience concept at destination level and supports building future capacities to manage immediate adverse impacts as well as novel and systemic risks.

Surgical services are settings where resilient performance (RP) is necessary to cope with a wide range of variabilities. Although RP can benefit from a supportive built environment (BE), prior studies have focused on the operating room, giving scant attention to support areas. This study takes a broader perspective, aiming at developing BE design knowledge supportive of RP at the surgical service as a whole.

Seven BE design prescriptions developed in a previous work in the context of internal logistics of hospitals, and thus addressing interactions between workspaces, were used as a point of departure. The prescriptions were used as a data analysis framework in a case study of the surgical service of a medium-sized private hospital. The scope of the study included surgical and support areas, in addition to workflows involving patients and family members, staff, equipment, sterile instruments and materials, supplies, and waste. Data collection included document analysis, observations, interviews, and meetings with hospital staff.

Results identified 60 examples of using the prescriptions, 77% of which were related to areas other than the operating rooms. The developed design knowledge is framed as a set of prescriptions, examples, and their association to workflows and areas, indicating where it should be applied.

The design knowledge is new in surgical services and offers guidance to both BE and logistics designers.

Emergence is a key concept in service-dominant (SD) logic; however, the literature is neonatal on the underlying mechanisms that lead to emergence within service ecosystems. This study aims to address the call by Vargo et al. (2022) for understanding the role of actor engagement in emergence of novel outcomes, by identifying a process of how various actor roles in entrepreneurial ecosystem (EE) emerge as resource through the actor engagement.

Following a longitudinal design, this study conduct interviews from 20 respondents over eight months in three phases (group interviews, post-training, post-funding). This study analyzes the respondents’ engagement in an entrepreneurial service context. This study uses qualitative inductive approach and thematic analysis.

Results show that actor roles emerge as role expectations from essential provider and beneficiary position in a service ecosystem through actor role readiness, manifested as engagement properties in the actor engagement process. This study identifies five actor roles and their corresponding role readiness dimensions that emerge. Based on these propositions through which the authors position generic actor roles emergence within the actor engagement process in a service ecosystem.

This paper advances the understanding of micro-level process in emergence literature in SD logic by providing a conceptual understanding of emergence of actor roles as a resource through actor engagement. By grounding the study in EE, this study provides empirical evidence to the underlying mechanisms at the micro level of resource emergence process in a service ecosystem.

In socio-technical transition theory, resistance by existing technology and regime resistance plays a key role. The resistance is in the form of intentional improvements; eventually, the regime destabilizes and adopts the new technology, referred to as the sailing-ship effect. Researchers used a structural view and examined it as a strategic action and its relationship with new technology (competitive/symbiotic) in non-fast-changing sailing systems. This study uses a microlevel view and examines it in a fast-changing where products/services are developed by integrating existing technology with new product innovations; their success depends on addressing technical/market uncertainty. This study examines the sailing-ship effect in a fast-changing system and contributes to the socio-technical transition theory.

The authors need to examine the phenomena of the sailing-ship effect in its setting, and a case-study method is appropriate. The selected case provided diverse analytic and heuristic perspectives to examine the phenomena; therefore, it was a single case study.

In an IT scenario, the strategic actions decide and realize agility and competitive advantage by formulating appropriate goals with required budgets and coevolutionary changes to resources at product, process and organizational levels, addressing technical/market uncertainty. Moreover, the agility displayed by strategic actions determines the relationship with new technology, which is interspersed. Finally, it provided insights into struggle, navigation and negotiations, forming strategic actions to display the sailing-ship effect.

The study selected a Banking Financial Services and Insurance product of an IT Services company. As start-ups exhibit inherent (emergent) agility, the authors can examine agility as a combination of emergent and strategic actions by selecting a start-up.

The study highlights the strategic actions specific to an IT services company. It developed its product and services by steering clear from IT innovations such as native cloud and continuous deployment. It improved its products/services with necessary organizational changes and achieved the desired agility and competitive advantage. Therefore, organizations devise appropriate strategic actions to combat the sailing-ship effect apart from setting goals and selecting IT innovations.

The study expands the socio-technical transition theory by selecting a fast-changing system. It provided insights into the relationship between existing and new technology and the strategic actions necessary to manage technical and market uncertainty and achieve the desired competitive advantage, or the sailing-ship effect.

This paper aims to contribute to the understanding of novelty emergence in the context of an “off-line” open innovation system. Several contributions address novelty generation implying open innovation that is typically mediated by IT systems, while fewer address open innovation that takes place off-line, through new forms of collaboration happening in the so-called “physical spaces” and in widespread creativity contexts involving whole cities and territories. This research aims to clarify what the critical elements for novelty generation are, and how and why they interact in producing novelty.

This paper presents the case study of the Blackshape, a high-tech start-up that has become the Italian symbol of a new bottom-up economy that is grounded on high-education, a mix of territorial competencies and young initiative, and produces the development or growth of territories experiencing present or foreseen economic retardation for various reasons. This is a case in which novelty is emergent and takes place through exaptation. The case is used to elaborate an inductive understanding of the process of novelty generation through exaptation and follows a “conceptual composition” format (Berends and Deken, 2019).

This paper shows that initiatives building widespread creativity on the territory play a prominent role for emergent novelty generation, as they provide the context that sustains the efforts to keep on trying of entrepreneurs, welcomes unforeseen interaction and keeps interesting people on the territory that can be involved in random encounters. This paper adds that crucial contributions for the definition of the innovative project come from contributors that are expected to provide suggestions in other areas. Such prominent contributors are engaged in a sense “by mistake”, and here the randomness perceived by the actors experiencing it, because they are perceived to be able to provide some contributions, while they provide others that are more important to the project. This paper argues that such “perceived randomness” sustains a mechanism of selection of novelty generation partners that allows to go beyond the ability of actors themselves to design and foresee other actors’ contribution into the project. Finally, two other elements play a role: how the project is narrated, as well as, how the entrepreneurial team communicates their entrepreneurial competence for the project.

This theoretical understanding builds on only one case study; further research might validate the critical role of our understanding of novelty generation elements and help develop their dynamics further.

Many elements in our understanding of novelty generation have typically been understood as resulting from luck and randomness, leaving, therefore, very little hope to actors’ interest in supporting them. This paper claims that such elements and such dynamics can be sustained and novelty generation can indirectly be supported, for instance, by suggesting a high openness and sharing of one’s own project even to accidentally encountered actors, as one’s own ability to foresee how they might contribute to the project is very poor.

This paper provides a tentative understanding of the elements and dynamics of novelty generation through exaptation building on theoretical elaboration that is inductively triggered and stimulated by empirical evidence.

The purpose of this study is twofold: first, to provide a nuanced understanding of the information concept that encapsulates both its universal foundations and context-dependent intricacies, and second, to propose a theoretical framework that integrates these diverse viewpoints, thereby contributing to the theoretical discourse and practical applications in information science/studies (IS).

The aim of this paper is to explore the relationship between universalism and pluralism in connection with semiotics. The paper adopts a conceptual approach based on semiotics to address the long-standing debate over the definition of information in IS. By engaging with two foundational semiotic theories—C.S. Peirce's pragmatic semiotics and Ferdinand de Saussure's structuralist semiotics – the research seeks to bridge the conflicting perspectives of universalism and pluralism within the field.

The findings reveal that Peirce's semiotics, with its universalist core, views information as dynamic and shaped by context, while Saussure's approach, which is rooted in linguistics, emphasizes the relational aspects of sign systems and connects them to pluralism. This comparative analysis facilitates a broad understanding of information that transcends the limitations of singular perspectives. In conclusion, the paper seeks to demonstrate that the integration of universalist and pluralist perspectives through semiotics offers a more holistic approach to the study of information in IS. It contributes to the field by suggesting that the tension between these perspectives is not only reconcilable but also essential for a richer and more complete understanding of information. This theoretical foundation paves the way for future research and practical advancements in IS and advocates for approaches that recognize the complexity and multifaceted nature of information.

The study engages with theoretical frameworks, predominantly semiotic theories by C.S. Peirce and Ferdinand de Saussure. While this provides a deep conceptual understanding, the lack of empirical data may limit the practical applicability of the findings. The research focuses on two semiotic perspectives, which, although foundational, do not represent the entirety of semiotics or information theory. Other significant semiotic theories and perspectives could provide alternative or complementary insights. The concepts of universalism and pluralism in information science are highly intricate and multifaceted. This study's approach to synthesizing these concepts, while comprehensive, might oversimplify some aspects of these complex paradigms.

The paper's originality lies in its unique integration of semiotic theories into the discourse of IS. This integration offers a novel perspective on understanding the concept of information, bridging the gap between universalist and pluralist approaches. The study presents a new conceptual framework for understanding information that combines elements of universalism (consistent, objective understanding of information) and pluralism (context-dependent, subjective interpretations). This dual approach is relatively unexplored in IS literature, providing fresh insights into the complex nature of information.

Pandemics are frequent events, and the impact of each pandemic makes a strong and long-term effect on companies and markets. Given the potential impact of the COVID-19 pandemic, it is important to investigate the crisis from a different perspective to know how companies have sustained growth in markets. The purpose of this paper is to understand how profit-oriented customer-centric companies (small, medium and large) have responded and adapted to COVID-19 crisis, using the complexity theory.

Drawing upon the complexity theory, a humble attempt is made to develop theoretical propositions by conceptualizing companies as complex adaptive systems. The paper examines companies from three dimensions (i.e. internal mechanism, environment and coevolution).

Companies self-organize, emerge into new states and become adaptive to the changing environment. Companies create knowledge to understand the dynamic anatomy and design survival and growth strategies during and post COVID-19 era. Complex adaptive systems perspective provides companies with insights to deal with complex issues raised due to COVID-19 pandemic. They can handle the impact of pandemic efficiently with complex adaptive systems by developing and implementing appropriate strategies post-COVID-19.

The study reveals how companies evolve and emerge into as complex adaptive systems to adapt themselves to the highly dynamic environment, which are uncertain, unpredictable, nonlinear and multifaceted, in the context of COVID-19. Implications for theory and practice of viewing companies as complex adaptive systems and coevolving structures in the COVID-19 context are discussed.

The study sets out to demonstrate how a lifecycle perspective on complex, public-sector procurement projects can be used for making qualitative assessments of procurement policy and practice and reveal those procurement capabilities that are most impactful for operating effectively.

Agency theory, institutional theory and the lifecycle analysis technique are combined to abductively develop a framework to identify, analyse and compare complex procurement policies and practices in public sector organisations. Defence is the focal case and is compared with cases in the Nuclear, Local Government and Health sectors.

The study provides a framework for undertaking a lifecycle analysis to understand the challenges and capabilities of complex, public-sector buyers. Eighteen hierarchically-arranged themes are identified and used in conjunction with agency theory and institutional theory to explain complex procurement policy and practice variation in some of the UK’s highest-profile public buyers. The study findings provide a classification of complex buyers and offer valuable guidance for practitioners and researchers navigating complex procurement contexts.

The lifecycle approach proposed is a new research tool providing a bespoke application of theory by considering each lifecycle phase as an individual but related element that is governed by unique institutional pressures and principal-agent relationships.

The introduction of robots as value-adding “workers” on the shop floor triggers complex changes to manufacturing work. Such changes involve highly entangled relationships between technology, organisation and people. Understanding such entanglements requires a holistic assessment of contemporary robotised manufacturing work, to anticipate the dynamically emerging opportunities and risks of robotised work.

A systematic literature review of 87 papers was conducted to capture relevant themes of change in robotised manufacturing work. The literature was analysed using a thematic analysis approach, with Checkland’s soft systems thinking as an analytical framework.

Based on the literature analysis, the authors present a systemic conceptualisation of robotised manufacturing work. Specifically, the conceptualisation highlights four entangled themes of change: work, organisation of labour, workers’ (experiences) and the firm’s environment. Moreover, the authors discuss the complex patterns of interactions between these objects as relationships that defy straightforward cause–effect models.

The findings draw attention to complex interactions between robotisation and manufacturing work. It can, therefore, inform strategic decisions and support projects for robotisation from a holistic perspective.

The authors present a novel approach to studying and designing robotised manufacturing work as a conceptual system. In particular, the paper shifts the focus towards crucial properties of the system, which are subject to complex changes alongside the introduction of robot technology in manufacturing. Soft systems thinking enables new research avenues to explain complex phenomena at the intersection of robotisation and manufacturing work.