Search results

The purpose of this study is to examine how companies integrate cyber risk into their enterprise risk management practices. Data breaches have become commonplace, with thousands occurring each year, and some costing hundreds of millions of dollars. Consequently, cyber risk has become one of the gravest risks facing organizations, and has attracted boardroom-level attention. On the other hand, companies already manage many kinds of difficult and growing risks, and that firms lose less than 1% of annual revenues as a result of cyber incidents. Therefore, how should firms appropriately address cyber risk? Is it indeed a materially different kind of risk area, or is it simply just one more risk that can seamlessly be integrated into existing enterprise risk management (ERM) practices?

The authors performed thematic analysis based on semi-structured interviews, with non-probabilistic, purposive sampling, to answer two main questions. First, how do firms manage enterprise risks, generally? And second, how are they integrating cyber risk into these existing processes?

The authors find that there is considerable variation in the approach and sophistication in ERM practices, such as whether they are driven more like an auditing function, or as a risk champion. The authors also find that despite the novelty of cyber risk, it can be integrated like other enterprise risks, and that cyber risk is most often seen as an operational risk (similar to workplace accidents or fraud), rather than a strategic risk, emerging from, for example, technology innovation and R&D.

The generalization of the results is limited by the sample size and variation of firms interviewed. While the authors attempted to interview enterprise risk managers across a wide variation of firms, there were clear limitations in the scope. That being said, the authors were fortunate to be able to examine ERM and cyber risk practices across small and large, private and publicly traded companies, from a variety of business sectors.

The authors believe these finding are important because they present evidence that while cyber risk may be new, it does not require specialized handling or processes to track it at the enterprise level. While some firms may choose to provide special accommodations or attention because of their data collection or business practices, this approach is neither necessary nor required of all firms in all situations.

This research is one of the only papers that, to the best of the authors’ knowledge, examines how cyber risk is integrated at an enterprise level.

The purpose of this paper is to provide an analysis of the life of the musician Brian Wilson from five different perspectives.

The authors used a mixed method of collaborative autoethnography, psychobiography and digital team ethnography to try and better understand the life and contributions of Brian Wilson.

Each of the five contributors provides different insights into the life and music of Brian Wilson.

While the focus of this paper is on a single individual, a case study, the long and distinguished life of Brian Wilson provides much material for discussion and theorising.

Each individual presenting to mental health services has a complex biography. The five different contributions articulated in this paper could perhaps be taken as similar to the range of professional opinions seen in mental health teams, with each focusing on unique but overlapping aspects of the person’s story.

This account shows the importance of taking a biological-psychological-social-spiritual and cultural perspective on mental illness.

This multi-layered analysis brings a range of perspectives to bear on the life and achievements of Brian Wilson, from developmental, musical, psychological and lived experience standpoints.

The purpose of this study is to understand the complex interplay between illicit opioids trade and consumption practices and state policies that aim to reduce their misuse.

The study adopted an exploratory design. Data were gathered through in-depth interviews with 31 commercially oriented drug dealers in Uyo, Nigeria. The framework approach was used in data analyses, while “friction” provided the interpretive lens.

Accounts revealed public concerns over the misuse of tramadol and other opioids among young people and the associated health and social harms. These concerns provided support for enforcement-based approaches to prescription opioids control, including police raids on pharmacy stores. These measures did not curtail opioids supply and consumption. Instead, they constrained access to essential medicines for pain management, encouraged illegal markets and fuelled law enforcement corruption in the form of police complicity in illegal tramadol trade.

The findings reveal the frictions of drug control in Nigeria, wherein enforcement-based approaches gained traction through public concerns about opioids misuse but also faced resistance due to the persistence of non-medical use and illegal supply channels made possible by law enforcement complicity. These indicate a need to prioritize approaches that seek to reduce illegal supply and misuse of opioids while ensuring availability of these medications for health-care needs.

The study is unique in its focus on the creative tension that exists between state control measures and local opioids supply and consumption practices.