공간정보산업 활성화를 위한 공간정보 보안관리체계의 개선전략 - 공간정보의 생산·관리·보급 기관을 중심으로 -

This paper introduces a structured goal-oriented agent-based process modelling framework, where advanced security requirements engineering techniques are combined with software security modelling approaches, to provide an environment within which the security managers and the analysts can easily cooperate to discover, verify and validate the new IT system security requirements. Without multi-agent systems engineering methodologies, the realization of complex information systems involving numerous interacting components would be prohibitively expensive, prone to failure and involve timescales unacceptable in today's security environment. By following appropriate methodologies, highly integrated and complex security management & control (SMC) information systems can be built to interact securely on a global scale. This paper presents an approach to design a multi-agent system managing a security management system corporate memory in the form of a distributed semantic Web and describes the resulting architecture. We present an information and knowledge exchange framework to support a distributed security problem solving in a PKI-based network environment domain. It addresses two important issues: (1) how individual agents should be interconnected so that their security capabilities are efficiently used and their security goals are accomplished effectively and efficiently; (2) how the information and knowledge transfer should take place among agents to allow them to respond successfully to user requests and unexpected situations in the security domain. We employ the concepts related to SAMARA - a security architecture multi-agents systems risk assessment. The focus of this paper is dynamic knowledge exchange among SAMARA agents. The co-ordinator agent together with a decision enabling warehouse (DEW) acting as a dynamic knowledge-based security platform plus direct intercommunication among the agents enable facts, commands, and rules to be transferred between SAMARA agents. Knowledge can be exchanged among the agents by using a combination of facts, rules and commands transfers

Almost cloud service providers are having their own architectures for providing a variety of cloud services to their customers, cloud service clients. These various architectures and services increase the complexity of security management policies, frameworks, and systems, because they would require different aspects of security solutions for their own architectures and services. Consequently, such compatibility issues make us difficult to design a common security framework, security management system, or security evaluation system. Recognizing the need to solve such issues, we analyze common security elements to be required for cloud computing virtualization, and identify requirements for information protection in this paper. We also identify possible threats that may occur depending on different functions and roles over the cloud virtualization environments, and define security elements and requirements to deal with those issues. We show a set of common directions or approaches to prevent any possible treats to cloud computing, and provide more efficient and systematic method of managing and operating cloud computing system.

Özet Bu çalışmanın amacı, ISO 500’de yer alan kooperatiflerin web sitelerinin incelenerek sürdürülebilirlik çatısı altında sürdürülebilirliğin sosyal, ekonomik ve çevresel boyutlarına göre mevcut durumlarını ortaya koymaktır. Bu kapsamda, kooperatiflerin Kurumsal Sosyal Sorumluluk, ISO 9001 Kalite Yönetim Sistemi, ISO 14001 Çevre Yönetim Sistemi, ISO 27001 Bilgi Güvenliği Yönetim Sistemi, ISO 22000 Gıda Güvenliği Yönetim Sistemi, ISO 45001 İş Sağlığı ve Güvenliği Yönetim Sistemi, ISO 50001 Enerji Yönetim Sistemi sertifikasyon durumu incelenmiştir. Betimsel tarama modelinde olan araştırmada amaçlı örneklem yöntemiyle seçilen yedi kooperatifin web siteleri taranmıştır. Araştırmada içerik analizi yöntemlerinden yüzde ve frekans analizi kullanılmıştır ve veriler arasındaki korelasyon incelenmiştir. Analizler sonucunda sürdürülebilirlik kavramı kapsamında incelenen parametrelerle kooperatiflerin ISO 500 sıralaması arasında anlamlı bir ilişkinin olmadığı görülmektedir. Bununla birlikte kooperatiflerin tamamının sosyal sorumluluk projeleri yaptığı, %86’sının kalite (ISO 9001), %71’inin çevre (ISO 14001), iş sağlığı ve güvenliği (ISO 45001) ve gıda güvenliği (ISO 22000), %29’unun enerji güvenliği (ISO 50001) ve %14’ünün bilgi güvenliği (ISO 27001) yönetim sistemlerine sahip olduğu belirlenmiştir.

This paper presents a theoretical research framework that was used to analyse operational risk management (ORM) system practices in Australia. It provides a new perspective on how to use national and international operational management system standards as a basis for systematic management of operational risks. Based on the extensive literature review and the analysis of operational risk management system practices that are common in Australian organisations, this paper identifies the critical factors for effective use of an ORM system. The proposed framework could also be used as a model to research ORM system applications in other countries.

The purpose of this study was to investigate and analyze the assumptions and requirements for the implementation of Information Security Management System (ISMS). Methodology: To check assumptions security management system implementation is the population of Tabriz hospitals. Review the requirements and assumptions are based on the standard ISO / IEC 27001, ISO / IEC 27002 test target setting and ISO 27001 standard questionnaire containing 33 questions in 11 control is used. The data were analyzed using descriptive and inferential statistical method that factors in the implementation of information security management system was confirmed. As well as to identify factors contributing to the implementation of information security management system and factor analysis, structural equation model was used PLS smart software that based on its findings to impact and indirect aspects of implementation effectiveness of the system. Results: Using the software, smart-PLS and using structural equation modeling confirmatory factor analysis was performed to measure the test of convergent validity, divergent validity, reliability Security and reliability of observable variables and quality test and measurement model of the 101 comments experts, all the prerequisites and requirements, including information security policy, the organization of information security, asset management, human resources in terms of security, physical and environmental security, communications and operations management, access control, use, development and maintenance, incident management information security, business continuity management and compliance with laws in secure level at %99 is forecast in Tabriz hospitals are effective information security management system. Conclusion: According to prioritize the factors affecting information security management system, operating (after) the most monitors and agents (after) the supply and implementation of information security management system least affected are in Tabriz hospitals.

The paper analyzes the concepts of "data", "information", "knowledge", "intelligence", "activity", establishes their relationship in the context of integrating information about the enterprise with the contours of security management through the connection of information technologies, operation technologies, ecology technologies (IT, OT, ET). The authors propose an integrated model of information representation of the organization based on a chain of data, information, knowledge and activity / intelligence. The main feature of this model is that it explicitly includes activities that are implemented considering the laws of natural intelligence and forms a corresponding control loop. The security management system is based on identifying and tolerating threats on the stages of processing the data, information, knowledge and intelligence/activities and IT, OT and ET levels. Two industrial cases related to dialog enterprise management system and post-accident monitoring system are discussed.

Taking the performance evaluation of power systems as core, a new energy-saving management mode was proposed based on the routine and special evaluation for economic operation and energy-saving management of related systems and equipment. The technical reconstruction, maintenance, S&T planning and projects were proposed by means of current energy-consuming standard, identification and prediction of energy-saving potential. This mode integrated the science & technology management with the production management, such as operation, technical retrofit and maintenance. The solutions for several key supporting technologies were analyzed to build the energy-saving index system, technical standard system and information system. The scientific, complete and operational management system and technical supporting system were researched for the energy saving and consumption reduction of power generation groups. It laid a solid foundation to build the system of energy saving and consumption reduction.

Purpose: This article aims to assess the effectiveness of security management systems in public organisations using statistical data and institutional reports, with particular emphasis on the relationship between the maturity of these systems and the level of threats, including cybersecurity threats and incidents.The article aims to fill a research gap in the empirical analysis of the actual functioning of security systems in the public sector.Design/Methodology/Approach: The research was conducted using triangulation of research methods.Statistical data from institutional reports, document analysis (control and audit reports), comparative methods and analysis of scientific literature on security management, risk management and organisational resilience were used.The main research problem was formulated as follows: to what extent does the maturity of security management systems affect the level of threats and the effectiveness of public organisations' responses?The research hypothesis was that public organisations with more mature security management systems have fewer security incidents, shorter response times, and greater organisational resilience than entities with fragmented or informal security systems. Findings:The study indicates a clear relationship between the maturity of security management systems and the level of risk in public organisations.Entities with integrated security systems, regular risk analyses, functioning audit mechanisms, and a developed security culture are characterised by fewer incidents (including cybersecurity incidents) and a higher effectiveness in responding to threats.Practical implications: The article contributes to research on security management in the public sector by empirically confirming the importance of system maturity for organisational resilience. Originality value:The results also have a practical dimension and can serve as a basis for improving security management systems and data-driven decision-making in public organisations.

In recent years, there have been major developments in, and deployment of, diverse mobile technology. Security issues in mobile computing are now presenting significant challenges. Heterogeneous networks are the convergence of wired and wireless networks, other diverse end user devices and other communication technologies which provide very high speed connections. Major security challenges in 4G heterogeneous networks are inherent in current internet security threats and IP security vulnerabilities. In this paper, we propose a management system which is responsible for enforcing security policies and ensuring that security policies continued to be followed. The objective of this security management system is to prevent the mobile equipment from being abused or used as a malicious attack tool. The proposed security management system is consistent with the security specifications defined by ITU-T recommendation M.3400 TMN management functions. Finally, this paper will present a policy-based architecture for the security management system of 4G heterogeneous networks focusing on detection and prevention of malicious attacks.Keywords4G Networks4G SecurityHeterogeneous networksHeterogeneous securityMobile securitySecurity management system

Semiconductor manufacturers are continually working to reduce time-to-market in an effort to improve serviceability while decreasing operating costs. IBMs Microelectronics Division semiconductor manufacturing facility in Essex Junction, Vermont, recently embarked upon an initiative to accomplish this with a comprehensive operations management system. Operations management is a system that groups wafer processing operations into 24-hour segments, or ranges, incorporating the raw process times of each processing operation with the required cycle time of the fabricator. Each day, work in process (WIP) is moved within each range of each manufacturing operation during a 24-hour period, thereby creating a productivity flow through the entire line. By reducing the variability of a lines operations, inventory and cycle time can be reduced and customer demands met. This paper discusses the philosophy, planning, and implementation of the operations management system in this fabricator. It will also discuss traditional operations management and the theory of constraint management, as well as how, through a team-oriented effort, the process was modified to fit this multi-flow, multi-technology process line. Results, challenges and the learning derived as a result of implementing this management system will also be shared.

The implementation of performance management and appraisal system in any organization is to accomplish its strategic goals and objectives. The foundation of any organization is the performance management system (PMS). Organizations would not be able to survive if workers did not perform their assign duties. Organizations would be competitive and productivity would rise if workers gave their best effort. Performance appraisals (PA) are seen to be a useful Human Resource Management (HRM) tool that measures the standards that any organization or company sets for its workers by monitoring each worker’s performance in relation to the organization’s objectives. In Gombe State Treasury, staff evaluation performance is conducted manually which result to a lot of problems such as data inconsistency, inadequate storing of posting history, limited accessibility and flexibility among others. To address these issues online appraisal system was developed and implemented in the organization using water fall model as the adopted methodology and it is evaluated by distributing questionnaires to the staff and the management, analysis was carried out based on the defined hypothesis to see the impact of the system in the ministry which was found that the system has significant impact in conducting the appraisal exercise on both the staffs and the management as such it overcome the mentioned challenges faces during the exercise. The new system was designed to be more effective and productive for conducting staff appraisal exercise, eliminating all types of delay and tension. This research work made use of data collected from the organizations materials and journals from various authors and software was developed to effectively achieved aims of the research. The implementation of the system was carried out using PHP, JAVASCRIPT, CSS, APACHE and MYSQL for the database was carried out in the research. The system will automatically reduce the time and effort in the process. The system also evaluated by the staff of the organization and the data collected were analyzed and concluded that the system has significant impact in conducting the process based on the defined hypothesis.

This paper analyzes the current situation and Countermeasures of IT management system, and the necessity of adopting intelligent management in website management, and puts forward the design of open IT operation and maintenance management system based on data mining, so as to improve the system performance by optimizing the system hardware structure and equipment. Based on the development of the existing software and the construction of the information system, combined with the experience of IT operation and maintenance, user needs and advanced IT service management concept, the equipment maintenance management system based on IT operation and maintenance is designed and developed. The system has simple operation and good interactivity. It provides users with the functions of equipment maintenance management and information tracking. It can also query the real-time information according to the actual needs of users, and make the system maintenance The experiment shows that the open IT operation and maintenance management system based on data mining can better meet the needs of users and design requirements.

Introduction. The innovative way of development today is considered the most rational and effective. The relevance of using modern technologies in all spheres, in particular in the operational management system, is becoming obvious. Operations management is about effectively managing any operations, but lately it has become more and more complex. The emergence of a large number of advanced technologies allows subjects to make decisions that should lead to important and strategic positive consequences for the company. However, it can cause harm, cause negative processes for internal life, affect the structure of the company. The main thing here is efficiency in managing operations of any nature. Thus, consideration of the main directions of development of operational management technologies should be highlighted as the most relevant. Methods. General scientific and special methods were used in the process of research, in particular: the analytical method was used when reviewing literary sources; the classification method made it possible to differentiate the main components of operational management; the method of description was used to give them a detailed description; the monographic method was used in the study of literary sources on the details of control elements; the system and analytical method was applied in the processing of the received information. Results. The theoretical, organizational and practical principles of the development of operational management in companies were considered in the article. It has been established that today there is a modernization and revision of a number of issues regarding the effectiveness of the production management system in companies in connection with the active transition to global criteria for the effectiveness of production management and the exit from the crisis. Directions for the development of operational management were proposed, which will make it possible to modernize the structural elements of management in the company. Discussion. The obtained recommendations can be used to improve the effectiveness of operational management, which will involve improving the methodology, developing a progressive regulatory framework, increasing the professionalism of managers in relation to management activities, which should be aimed at comprehensively solving the problems of improving the processes of development, adoption, and most importantly, the implementation of management decisions, which will directly affect the improvement of production efficiency in the future. Keywords: operational management, company, efficiency, business environment, business process.

Although companies systematically introduce management systems to improve performance and reduce major accident risks, gaps remain. The mismatch between HSE management system and practical HSE works, line and HSE departments and HSE requirements and actions exerts significant negative impact on the effectiveness and efficiency of HSE management. Under these circumstances, operational management system (OMS), barrier management system (BMS), process safety management and asset integrity management are all studied and applied in an oilfield. The oilfield experienced nine years of development, and the production capacity increased from 4,000 to 400,000 barrels per day. Almost 7,000 people were working in the oilfield during peak time from around 40 countries. During such a development, HSE management was extremely challengeable, and a practical and integrated HSE risk management model was pursued and established. This paper describes a method of HSE risk management integration called safety net model. The model physically segregates oilfield facilities into individually managed areas or grids. A safety grid is the basic unit of a safety net, and the safety net comprises a series of correlative and interactive safety grids from bottom to up. OMS, HEMP and BMS are the bases of safety net model. Each safety grid complies with the principle of twin orientations: the identification of HSE hazards and assessment of HSE risks and the formulation and substantiation of systematic risk control measures. Specifically, the safety grid has two sets of basic components: hazard, output and time (HOT) and authority, boundary and control (ABC). HOT refers to hazard orientation, and ABC refers to risk control orientation. Two sets of components define attributes of each safety grid. The risk profile is assessed for each grid, in which technical safety and consequence studies are introduced to visually represent at risk locations. Overlaying contours and process boundaries as typical examples result in a simplified model that enables area owners to recognise risks, controls and mitigations so that they can introduce suitable risk reduction measures for safe operations. Through components (HOT ABC) of each safety grid, OMS and BMS are introduced to operational sites and positions directly and easily. Six components are connection points of every safety grid, and all safety grids are knitted to an integrated safety net. The implementation of safety net model contributes to good HSE performance of the oilfield studied, and the resulting performance is recognised and appreciated by local government and funding parties. This paper focuses on how to communicate the information in compliance with the principle of twin orientations from safety studies recorded in OMS and BMS to the safety grid. Comprising safety grids, safety net model is an applicable and practical carrier of integrated HSE risk management.

Purpose The literature highlights the relevance of performance measurement and management system in small and medium enterprises (SMEs) to face the current competitive environment. However, a number of studies investigate how performance measurement and management system is effective for evolving and how contingency factors could influence this change. Newer experiences are sporadic and rarely investigated by researchers and practitioners. The purpose of this study is to identify the feasible evolutionary path of performance measurement and management system in leading SMEs to respond to current business challenges. Furthermore, it aims to contribute to the understanding of the role of key contingency factors influencing this evolution. Design/methodology/approach A longitudinal case study, based on retrospective and real-time investigations, is performed to investigate the primary evolutions of the performance measurement and management system and its key determinants. Findings The findings highlight two evolution paths, increasing the maturity of performance measurement. The first path highlights a strong command and control of performance management; the second path shows a democratic and participative of performance management. Moreover, management information system, organizational culture and management style are highlighted as key contingency factors in the change of performance management. Originality/value The authors contribute to knowledge in performance measurement field, showing how the efforts for developing performance measurement and management system in a leading SME could determine two different evolutionary paths. Furthermore, the paper describes the increasing role of organizational culture, management style and management information system in performance management evolution, as well as the relevance of online chats and social media in performance management activities.