Search results

This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions.

The authors devised an approach to partially automate the construction of social goal models from personas. The authors provide two examples of how this approach can identify previously hidden implicit vulnerabilities and validate ethical hazards faced by penetration testers and their safeguards.

Visualising personas as goal models makes it easier for stakeholders to see implications of their goals being satisfied or denied and designers to incorporate the creation and analysis of such models into the broader requirements engineering (RE) tool-chain.

The approach can be used with minimal changes to existing user experience and goal modelling approaches and security RE tools.

The aim of this study is to investigate how the demographics and appearance cues of potential social engineers influence the likelihood that targets will trust them and accept security risk.

Data were collected through an online survey of 635 participants, including 322 participants from Arab countries and 313 participants from the UK. The survey presented scenarios with 16 personas who offered participants the use of their mobile internet hotspot. These personas were characterized by combinations of age (young vs aged), gender (male vs female), ethnicity (Arab vs UK) and look formality (casual vs formal). The study measured both participants’ offer acceptance and trust in the persona.

Results indicated a higher likelihood of offer acceptance from female and aged personas, as well as a greater trust in these groups. Arab participants showed a preference for personas with Arabian ethnic features. In both samples, trust and acceptance were influenced by the persona’s appearance, which was found to be gender-dependent; with female personas in casual attire and male personas in formal attire being trusted more in comparison to female with formal attire and male with informal, respectively.

Findings highlight the importance of incorporating awareness of appearance-based biases in cybersecurity training, suggesting the need for culturally sensitive training programs to enhance defense against social engineering.

This study distinguishes itself by elucidating the influence of social engineers’ demographic and appearance cues on the likelihood of individuals to take security risks, thus addressing a significant gap in the literature which has traditionally emphasized the profiles of targets.

There is a scarcity of research studies on why people remain inactive when encountering and recognising misinformation online. The main aim of this paper is to provide a groundwork for future research into why users do not challenge misinformation on digital platforms by generating hypotheses through a synthesis of pertinent literature, including organisational behaviour, communication, human-computer interaction (HCI), psychology and education.

Given the lack of directly related literature, this paper synthesised findings from relevant fields where the findings might be relevant, as the tendency to withhold opinions or feedback is a well-documented practice in offline interaction.

Following the analysis of relevant literature, the potential reasons for online silence towards misinformation can be divided into six categories: self-oriented, relationship-oriented, others-oriented, content-oriented, individual characteristics and technical factors.

Although corrections coming from peers can effectively combat misinformation, several studies showed that people in cyberspace do not take such action. To the best of the authors’ knowledge, there has been scarce and virtually non-existent research investigating why people refrain from challenging others who post misinformation online. Thus, this paper attempts to address this gap and identify reasons in adjacent domains. The reasons provide a starting point for researching interventions to reduce reluctance and abstinence regarding the challenge of misinformation. The findings can be beneficial beyond the area of challenging misinformation and are extensible to other types of content and communication that people are hesitant to discuss and challenge, such as online injustice, prejudice and hate speech.

Big data analytics capabilities are the driving force and deemed as an operational excellence approach to improving the green supply chain performance in the post COVID-19 situation. Motivated by the COVID-19 epidemic and the problems it poses to the supply chain's long-term viability, this study used dynamic capabilities theory as a foundation to assess the imperative role of big data analytics capabilities (management, talent and technological) toward green supply chain performance.

This study was quantitative and cross-sectional. Data were collected from 374 executives through a survey questionnaire method by applying an appropriate random sampling technique. The authors employed PLS-SEM to analyze the data.

The findings revealed that big data analytics capabilities play a significant role in boosting up sustainable supply chain performance. It was found that big data analytics capabilities significantly contributed to supply chain risk management and innovative green product development that ultimately enhanced innovation and learning performance. Moreover, innovation and green learning performance has a significant and positive relationship with sustainable supply chain performance. In the post COVID-19 situation, organizations can enhance their sustainable supply chain performance by giving extra attention to big data analytics capabilities and supply chain risk and innovativeness.

The paper specifically emphasizes on the factors that result in the sustainability in supply chain integrated with the big data analytics. Additionally, it offers the boundary condition for gaining the sustainable supply chain management.

This study aims to explore supply chain resilience (SCR) and provides a unique resilience index. The work measures the resilience status of 37 organizations across 22 industries and provides insight into accessing the supply chain (SC) vulnerability in an uncertain environment.

This study involves measuring the resilience status of 37 organizations across 22 industries based on a subjective decision-making approach using fuzzy logic. Experts from industries rated the importance and level of implementation of 33 attributes of SCR, which are used to develop a fuzzy index of implementation that explains the resilience status of organizations.

A novel coexistent resilience index is computed based on mutualism to exhibit the proportion of contribution or learning of each attribute of an organization in an industry. The research will enhance the response plans and formation of strategic alliances for mutual coexistence by industry.

Evidence-based interpretations and suggestions are provided for each industry to enhance resilience through coexistence.

The work uniquely contributes to academic literature and SC strategy. The novel coexistent resilience index is computed based on mutualism, facilitating researchers to access SC resiliency.

Megaproject supply chains involve multiple layers of stakeholders, leading to complex relationships and risks. The role of social interactions within these networks is unexplored. Therefore, an analysis of construction supply chain risk management from the perspective of social networks is essential to identify related stakeholders, their relationships and the social network risk factors.

About 65 risk factors, identified from literature and interviews, informed the development of a questionnaire for the study. Online questionnaires administered in Ghana and South Africa produced 120 valid responses. Feedback from the responses was ranked and assessed to determine the overall social network risk levels using the Normalised Mean and Fuzzy synthesis analysis methods.

About 24 risk factors were identified and classified into six groups: Client/Consultant-related, Community-related, Government-related, Industry Perception-related, Supplier-related and Stakeholder Opportunism. The top five social network risks identified include bribery, supplier monopoly, incomplete design teams, poor communication and lack of collaboration.

The study provides detailed evaluations of social network risks in Africa, and the findings will help in developing strategies to mitigate supply chain disruptions caused by these challenges.

This study contributes to the literature on supply chain risk management by offering context-specific insights into the social network perspective of megaprojects in Africa, which differs from those in developed countries.

This study aims to evaluate the adoption of four types of supplier sustainability risk management (SSRM) strategies, namely, risk avoidance (RA), risk acceptance (RAC), collaboration-based risk mitigation (CBM) and monitoring-based risk mitigation (MBM) in Sri Lankan apparel and retail industries, and to investigate their effect on supply chain performance (SCP).

This study uses the dynamic capability view (DCV) to develop its hypotheses. Data collected from 89 firms were analysed using partial least square (PLS) structural equation modelling and PLS-based multiple group analysis.

Sri Lankan apparel and retail firms adopt RA and MBM strategies relatively more than CBM and RAC strategies, whereas there is no significant difference between the two industries in terms of the use of SSRM strategies. The path analysis revealed significant effects of RA and RAC strategies on SCP of both industries. The effect of CBM strategy on SCP is moderated by industry, while MBM has no significant impact.

While managing supplier sustainability risks effectively, RA and RAC strategies provide more opportunities for managers to improve SCP. In achieving SCP, CBM strategies are proven to be more effective for retail industry compared with the apparel sector. Although MBM strategies offer sustainability advantages to firms, their contribution to improving the performance of apparel and retail supply chains is not significant. This research is limited to only two industries (apparel and retail) in Sri Lanka, where the evidence for the effects of SSRM strategies is not available for other contexts.

Either the effects of the four types of SSRM strategies on SCP or the moderating effect of industry on these effects have not been empirically confirmed in the literature. Evaluating the extent to which different strategies are implemented in Sri Lankan apparel and retail industries is another significant contribution of this research. Furthermore, this study contributes by using DCV to a sustainability-based supply chain risk management research.

With the rapid change that has taken place with digitalization and data-driven approaches in supply chains, business environment become more competitive and reaching sustainability in supply chains become even more challenging. In order to manage supply chains properly, in terms of considering environmental, social and economic impacts, organizations need to deal with huge amount of data and improve organizations' data management skills. From this view, increased number of stakeholders and dynamic environment reveal the importance of data-driven technologies in sustainable supply chains. This complex structure results in new kind of risks caused by data-driven technologies. Therefore, the aim of the study to analyze potential risks related to data privacy, trust, data availability, information sharing and traceability, i.e. in sustainable supply chains.

A hybrid multi-criteria decision-making (MCDM) model, which is the integration of step-wise weight assessment ratio analysis (SWARA) and TOmada de Decisao Interativa Multicriterio (TODIM) methods, is going to be used to prioritize potential risks and reveal the most critical sustainability dimension that is affected from these risks.

Results showed that economic dimension of the sustainable supply chain management (SSCM) is the most critical concept while evaluating risks caused by data-driven technologies. On the other hand, risk of data security, risk of data privacy and weakness of information technology systems and infrastructure are revealed as the most important risks that organizations should consider.

The contribution of the study is expected to guide policymakers and practitioners in terms of defining potential risks causes by data-driven technologies in sustainable supply chains. In future studies, solutions can be suggested based on these risks for achieving sustainability in all stages of the supply chain causes by data-driven technologies.

This paper constructs the uncertainty analysis model of prefabricated building supply chain risk. The model is designed to study the formation path of prefabricated building supply chain risk and is expected to be used by industry stakeholders for supply chain risk management.

Based on the uncertainty circle model, construct a configuration analysis framework for supply chain risks in prefabricated buildings. The fuzzy set qualitative comparative analysis (fsQCA) is used to study the configuration influence of five uncertain factors, including environment, plan-control, demand-supply, manufacturing and assembly-transportation, on the risk of the prefabricated building supply chain.

There are three paths to promote the high-risk generation of the prefabricated building supply chain: assembly-transportation-oriented, plan-control-oriented and manufacturing-oriented. There is a specific equivalent substitution relationship among the five causal conditions. Under specific conditions, different combinations of conditions have the same effect on promoting supply chain high-risk generation through equivalent substitution.

The multiple concurrent causal relationships of risk conditions in the assembly construction supply chain are studied under the grouping perspective, which helps to expand the research perspective of assembly construction supply chain risk and provides theoretical guidance for supply chain risk management of construction enterprises.

This paper aims to evaluate the risk factors and determines the overall risk level (ORL) of public-private-partnership (PPP) power projects in Ghana using fuzzy synthetic evaluation methodology (FSEM).

In this paper review of literature led to the development of a 67-factor risk list which was ranked by experts and industry practitioners through a questionnaire survey.

These factors were grouped into principal risk factors (PRFs) using component analysis and they served as the input variables for fuzzy analysis. The seven components were: Contract and Payment risks, Environmental risks, Financial and Cost risks, Legal and Guarantee risks, Operation risks, Socio-Political and Performance risks (SPR) and Tender and Negotiation risks. Study showed that the ORL of Ghanaian PPP power projects is high implying they are risky to both the public and private sectors. Fuzzy analysis also confirmed SPR as the most critical principal factor.

This study is significant and demonstrates that fuzzy methodology can be used as a useful risk evaluation tool and risk assessment framework for private investors, policy makers and public sector.