Establishing Mutual Understanding in Systems Design: An Empirical Study

Defining Cyber Security and Cyber Security Risk within a Multidisciplinary Context using Expert Elicitation

It is important to have and use standardized terminology and develop a comprehensive common understanding of what is meant by cyber security and cyber security risk given the multidisciplinary nature of cyber security and the pervasiveness of cyber security concerns throughout society. Using expert elicitation methods, collaborating cyber researchers from multiple disciplines and two sectors (academia, government-military) were individually interviewed and asked to define cyber security and cyber security risk. Data-driven thematic analysis was used to identify the most salient themes within each definition, sector, and cyber expert group as a whole with results compared to current standards definitions. Network analysis was employed to visualize the interconnection of salient themes within and across sectors and disciplines. When examined as a whole group, "context-driven," "resilient system functionality," and "maintenance of CIA (confidentiality, integrity, availability)" were the most salient themes and influential network nodes for the definition of cyber security, while "impacts of CIA vulnerabilities," "probabilities of outcomes," and "context-driven" were the most salient themes for cyber security risk. We used this expert elicitation process to develop comprehensive definitions of cyber security (cybersecurity) and cyber security risk that encompass the contextual frameworks of all the disciplines represented in the collaboration and explicitly incorporates human factors as significant cyber security risk factors.

Toward an Understanding of How Post- Deployment User- Developer Interactions Influence System Utilization

Although initial adoption of an information system has been shown to influence system success, further value can be obtained when end-users move beyond adoption, utilizing more features of the system and integrating it into their work routines. Organizations can increase the post-deployment utilization of their systems by emphasizing continued interaction between developers and end-users. In this study, we develop a research model investigating the influence of shared understanding, faithfulness of appropriation, and consensus on spirit on post-deployment system utilization. Using a sample from a healthcare organization, we show that increased end-user postdeployment interaction with developers supports a shared understanding between the two groups, which ultimately impacts both the routinization and infusion of a system. This study provides a contribution by demonstrating the impact of developer/user interaction in the post-implementation phase of systems development.

Investigating the “Socio” in Socio-Technical Development: The Case for Psychological Safety in Agile Information Systems Development

One constitutional part of project management is the management of teams, their actions, and their social mechanisms. Team processes, behavior, and agile practices used by team members play important parts in the success of projects. To reap benefits from these highly interactive and social-focused practices, team members need to feel safe to speak freely. We propose a model that conceptualizes the effects of psychological safety and (social) agile practices on team performance. The proposed model combines recent research from organizational psychology and agile information systems development to provide a better understanding of the team-level effects. Our findings from three case studies conducted in two large insurance companies and one software development company suggest that social agile practices positively influence psychological safety, transparency, communication, and ultimately productivity.

Language Quality in Requirements Development: Tracing Communication in the Process of Information Systems Development

Knowledge transfer, communication, and shared understanding between project stakeholders are important factors in requirements development and in the information systems development process. Nevertheless, the impact and analysis of language and linguistic communication during requirements development is still an open issue. In our research, we claim that requirements development depends on the ability to deal with language and communication issues in practice and reach shared understanding of requirements. We propose the concept of language quality as a suitable means for analyzing the emergence of coherent and meaningful requirements. By applying the thereby developed dimensions of language quality to a real information systems development project, we are able to obtain practice-grounded propositions to further evaluate the consequences of different actions on the interaction and communication process of stakeholders in requirements development.