Policy capacity focuses on the managerial and organizational abilities to inform policy decisions with sound research and analysis, and facilitate policy implementation with operational efficiency. It stems from a view of the policy process that is rational and positivistic, in which optimal policy choices can be identified, selected, and implemented with objectivity. By itself, however, policy...

Like Archimedes who demanded a place to stand so that he could move the Earth, scientific journals also need a firm point to stand on. We use this example because it stresses the importance of determining the journal’s specific research field by editorial policies. One of the basic strategies for medical journals is to define their scope, which helps them to target specific readership, attract ...

Statistical significance tests (SSTs) have been the object of much controversy among social scientists. Proponents have hailed SSTs as an objective means for minimizing the likelihood that chance factors have contributed to research results; critics have both questioned the logic underlying SSTs and bemoaned the widespread misapplication and misinterpretation of the results of these tests. The ...

Motivated by recent practical observations of employees’ unapproved sourcing of cloud services at work, this study empirically evaluates bring your own cloud (BYOC) policies and social interactions of the IT department to sensitize employees’ security risk perception. Based on social information processing theory, BYOC strategies varying in the level of restriction from the obligatory, recommen...

Professional and academic literature indicates that organizational stakeholders may hold different perceptions of security rules and policies. This discrepancy of perceptions may be rooted into a conflict between the compliance of stakeholders to organizational norms on the one hand, and security rules on the other. The paper argues that a mismatched understanding of security policy can have a ...

The inventory process, i.e. the assessment of assets and implemented countermeasures, consumes a significant amount of time in the risk and compliance management process. Assets and countermeasures have to be identified and classified in terms of confidentiality, integrity and availability requirements. Depending on the organization’s size this process may include thousands of assets and counte...

The main aim of this study is underline that System Dynamics approach allows the building of a general framework in which psychological, economic, social, legal and organizational variables converge to describe the retirement behaviour and its main unintended consequences. It’s emphasized that organizational commitment and psychological contract breach play a considerable role in the dynamics o...

This paper provides an agent-based analytical framework for analyzing knowledge management policies in service-oriented organizations. The knowledge of workers dynamically changes as various services are created through the service interactions between workers and customers. Our previous study focused on the knowledge dynamics and proposed an agent-based model to discuss effective management po...

Access control systems are designed to allow or deny access to data according to organizational policies. In many organizations, the access rights of subjects to data objects are determined in consideration of clearance levels of subjects and classification levels of objects. In most formally-defined traditional access control systems, levels are predetermined and policies are rigid. However, i...

This paper examines how organizations perceive affordances of social media and how they react to their employees’ use of social media through policies, a key means of organizational governance. Existing literature identified 4 affordances visibility, persistence, editability, and association (between people and between people and information) as action potentials of social media in organization...