Building a Responsibility Model to Foster Information Technology: Contributions from Social Sciences

Christophe, Feltus (2010): Building a Responsibility Model to Foster Information Technology: Contributions from Social Sciences.

Abstract

The economic context advocates a better understanding of responsibilities and an enhancement of these responsibilities within a moral perspective. These arising requirements have oriented our research toward the elaboration of an innovative responsibility model. This paper aims at enriching our responsibility model on the basis of a further analysis of these concepts in human sciences literature.

• Item Type: MPRA Paper
• Language: English
• Keywords: Responsibility model Access rights Cobit
• Subjects: K - Law and Economics > K0 - General; Y - Miscellaneous Categories > Y6 - Excerpts; Y - Miscellaneous Categories > Y9 - Other; Z - Other Special Topics > Z0 - General; Z - Other Special Topics > Z0 - General > Z00 - General; Z - Other Special Topics > Z1 - Cultural Economics ; Economic Sociology ; Economic Anthropology; Z - Other Special Topics > Z1 - Cultural Economics ; Economic Sociology ; Economic Anthropology > Z10 - General

References

ISO/IEC 38500 (2008), International Standard for Corporate Governance of IT (IT Governance)

CobiT 4.1, Control Objectives for Information and Related Technology, Information Systems Audit and Control Association

ITIL (2001), Service Delivery, The Stationery Office Edition, ISBN 011 3308930.

Vernadat F. B., Enterprise Modelling and Integration, Chapman & Hall, London (1995), ISBN 0-412-60550-3

ISO/IEC 15504, “Information Technology – Process assessment”, (parts 1-5), 2003-2006.

N. Dulay, E. Lupu, M. Solman, N. Damianou, A Policy Deployment Model for the Ponder Language , An extended version of paper in Proc. IEEE/IFIP International Symposium on Integrated Network Management, (IM’2001), Seattle, May 2001, IEEE Press.

Feltus, C., Petit, M., Building a Responsibility Model Including Accountability, Capability and Commitment, Fourth International Conference on Availability, Reliability and Security IEEE, 16-19/3/2009, Japan.

Feltus, C., Petit, M., Ataya, G., Definition and Validation of a Business IT Alignment Method for Enterprise Governance Improvement in the Context of Processes Based Organizations, 2008 Corporate Governance of IT International Conference, NZ.

L. Cholvy, F. Cuppens, and C. Saurel. Towards a logical formalization of responsibility. In Proc. of the Sixth International Conference on Artificial Intelligence and Law, pages 233--242, 1997.

Sarbanes, P. S. and Oxley, M. (2002) “Sarbanes-Oxley Act of 2002”.

Basel Committee on Banking Supervision, “International convergence of capital measurement and capital standards”; BIS; Basel, June 2004.

Yu, E. S., Liu, L. (2001). Modelling Trust for System Design Using the i* Strategic Actors Framework. Workshop on Deception, Fraud, and Trust in Agent Societies Held During the Autonomous, Eds. Lecture Notes In Computer Science, vol. 2246. Springer-Verlag, London, 175-194.

Dobson, J. and Martin, D., “Enterprise Modeling Based on Responsibility”, TRUST IN Technology: A Socio-Technical Perspective, Clarke, K., Hardstone, G., Rouncefield, M. and Sommerville, I., eds., Springer, 2006.

C. Bettini, S. Jajodia, X. S. Wang, and D. Wijesekera, Provisions and Obligations in Policy Management and Security Applications, 28th VLDB conference, China, 2002

Ferraiolo, D. F., Sandhu, R., Gavrila, S., D. Kuhn, R., Chandramouli, R. (2001), Proposed NIST Standard for Role-Based Access Control, ACM Transactions on Information and System Security, 4 (3), 224-274.

Crook, R., Ince, D., Nuseibeh, B., (2002) Towards an Analytical Role Modelling Framework for Security Requirements, Security Requirements Group, Departement of Computing, The Open University, Walton Hall, Milton Keynes, MK7 6AA, UK

Charles B. Haley, Robin C. Laney, Jonathan D. Moffett, and Bashar Nuseibeh, Using Trust Assumptions with Security Requirements, Requirements Engineering Journal, vol. 11 no. 2 (April 2006) pp. 138-15.

Fuxman, M. Pistore, J. Mylopoulos, P. Traverso, “Model Checking Early Requirements Specification in Tropos”, In the Proceedings of the 5th Int. Symposium on Requirements Engineering, RE’ 01, Toronto, Canada, 2001

Darling-Hammond, L. & Snyder, J. (1992). Reframing accountability: Creating learner- centered schools. In A. Lieberman (Ed.), The Changing Contexts of Teaching Chapter 2, pp. 11-36. Chicago, IL: University of Chicago Press.

Schedler, A. (1999). Conceptualizing Accountability. in Schedler, A., Diamond, L., Plattner, M. F. The Self-Restraining State: Power and Accountability in New Democracies. London: Lynne Rienner Publishers. 13–28.

Ellis WC and Osten WM, A strategy to enhance accountability in health care delivery. Physician executive 16(6):17-20 1990.

Fox, J. A., The uncertain relationship between transparency and accountability (August 1, 2007). Center for Global, International and Regional Studies. Reprint Series. Paper CGIRS-Reprint-2007-2. 2007-2

Stahl, B. C. & Wood, Ch. (2006): Forming IT Professionals in the Internet Age: A Critical Case Study In: Yoong, Pak & Huff, Sid (eds.) (2006): Managing IT Professionals in the Internet Age. Idea Group, Hershey, PA: 120 – 139

CEN/ISO (2005). Enterprise Integration – Constructs for enterprise modelling, prEN 19440, CEN/TC 310 and ISO/TC 184, BSI secretariat, London, UK.

Feltus, C., Petit, M., Vernadat, F., Enhancement of CIMOSA with Responsibility Concept to Conform to Principles of Corporate Governance of IT, 13th IFAC Symposium on Information Control Problems in Manufacturing, 3-5/6/2009, Moscow, Russia.

Laudon, K.C. and Laudon, J.P. (1999), Essentials of Management Information Systems, 4th edition London et al., Prentics Hall.

Feltus C, Dubois E, Petit M. Conceptualizing a responsibility based approach for elaborating and verifying rbac policies conforming with cobit framework requirements. In Requirements Engineering and Law (RELAW), 2010 Third International Workshop on 2010 Sep 28 (pp. 34-43). IEEE.

Spinello, R. (1997), Case studies in information and computer ethics, Upper Saddle River, NJ: Prentice Hall.

Norman, T. J. and Reed, C. 2001. Delegation and Responsibility. 7th international Workshop on intelligent Agents Vii. Agent theories Architectures and Languages (July 07 - 09, 2000). Eds. Lecture Notes In Computer Science, vol. 1986. Springer-Verlag, London, 136-149.

Shojiro Takao, Organization-Individual Linkages, Keio Business Review, No.33, 1996, pp. 153 – 164

Mowday, R.T., Porter, L. W. and Steers, R. M. (1982), Employee-Organization Linkages: The Psychology of Commitment, Absenteeim, and Turnover. New York: Academic Press.

Stebbins, R. A. (1970). On Misunderstanding the concept of commitment: A theoretical Clarification. Social Forces, 48, pp. 526 – 529

Grusky, O. (1996), Career Mobility and Organizational Commitment, Administrative Science Quarterly, 10, pp. 488 – 503

Hrebiniak, L.G. and Alutto, J. A. (1972) Personal and Role-Related Factors in the Development of Organizational Commitment, Administrative Science Quarterly, 17, pp. 555 – 573

Porter, L. W., Crampton, W. J. and Smith, F. J. (1976), Organizational Commitment and Managerial Turnover, Organizational Behavior and Human Performance, 15, pp. 87 – 98.

Meyer, J. P. Allen, N. J. (1984), Testing the ‘Side-Bet Theory’ of Organizational Commitment: Some Methodological Considerations, Journal of Applied Psychology, 69, pp. 372 – 378

Mathieu, J. E., Zajac, D. M. (1990), A review and Meta-Analysis of the Antecedents, Correlates, and Consequences of Organizational Commitment, Psychological Bulletin, 108, pp. 171 – 194.

Hackett, R. D., Bycio, P. and Hausdorf, P. A. (1994), Further Assesssments of Meyer and Allen’s (1991) Three-Component Model of Organizational Commitment, Journal of Applied Psychology, 79, pp. 15 – 23.

Ritzer, G. and Trice, H. M. (1969), An Empirical Study of Howard Becker’s side-bet Theory, Social Forces, 47, pp. 475 – 479.

McGee, G. W., Ford, R.C. (1987), Two (or More) Dimensios of Organizational Commitment: Reexamination of the Affective and Continuance Commitment Scale, Journal of Applied Psychology, 72, 638 – 642.

Allen, N.J., Meyer, J. P. (1990), The Measurement and Antecedents of Affective, Continuance, and Normative Commitment to the Organization, Journal of Occupational Psychology, 63, pp. 1 – 18.

O’Reilly, C and Chatman, J. (1986), Organizational Commitment and Psychological Attachment: The Effects of Compliance, Identification, and Internalization, Journal of Applied Psychology, 71, pp. 492 – 499.

Buchanana, B., II. (194), Building organizational Commitment: The Socialization of Managers in work organizations, Administrative science Quarterly, 19, pp. 533 – 546.

Hall, D. (1977), Organizational Identification as a function of Career Pattern and Organizational Type, Administrative Science Quarterly, 17, pp. 340 – 350.

Lio, K. (1995), Professional Orientation and Organizational Commitment among Employees: an Empirical Study of Detention Workers, Journal of Public Administration Research and Theory, 5, pp. 231 – 246.

Niehoff, B. P., Enz, C.A., Grover, R. A. (1990), The Impact of Top-Management Ctions on Employee Attitudes and Perceptions, Group & Organization Studies, 15, 3, pp. 337 – 352.

Florkowski, G., Schuster, M. (1992), Support for Profit Sharing and Organizational Commitment: A Path Analysis, Human Relations, 45, 5, pp. 507 – 523.

Blau, G. J. (1985), The measurmement and Prediction of Career Commitment, Journal of Occupational Psychology, 58, pp. 277 – 288.

Porter, L.W., Steers, R. M., Mowday, R. T., Boulian, P. V. (1974), Organizational Commitment, Job Satisfaction, and Turnover Among Psychiatric Technicians, Journal of Applied Psychology, 59, 603 – 9.

Schneider, F.B., Least privilege and more [computer security], Security & Privacy, IEEEVolume 1, Issue 5, Sept.-Oct. 2003 Page(s): 55 – 59

Feltus C, Petit M., Building a responsibility model using modal logic-towards Accountability, Capability and Commitment concepts. In 2009 IEEE/ACS International Conference on Computer Systems and Applications.

Mary Beth Chrissis, Mike Konrad, Sandy Shrum CMMI 2° édition - Guide des bonnes pratiques pour l'amélioration des processus - CMMI (r) pour le développement, version 1.2

Di Renzo, Bernard, and Christophe Feltus. "Process assessment for use in very small enterprises: the NOEMI assessment methodology." EuroSPI 2003.

Goodpaster, K.E., Matthews, J.B.Jr., (1982), Can a corporation have a moral conscience ? Hardvard Business Review (Jan-Feb 1982), pp. 132 – 141.