Asprion, Petra
Lade...
E-Mail-Adresse
Geburtsdatum
Projekt
Organisationseinheiten
Berufsbeschreibung
Nachname
Asprion
Vorname
Petra
Name
Asprion, Petra
16 Ergebnisse
Suchergebnisse
Gerade angezeigt 1 - 10 von 16
- PublikationPersona-oriented data protection impact assessment for small businesses(2023) Schneider, Bettina; Asprion, Petra; Misyura, Ilya; Jonkers, Natalie; Zaugg, Esther [in: Proceedings of Society 5.0 Conference 2023]The European (EU) General Data Protection Regulation (GDPR) is applicable since May 2018 and has since posed major challenges for small businesses with limited knowledge and resources. According to Art. 35 of the GDPR, a so-called ‘Data Protection Impact Assessment’ (DPIA) is mandatory if a processing of personal data is likely to result in a high risk to the rights and freedoms of natural persons. There is a demand for low-threshold, practical instruments that support the required DPIA. The objective of this research was to develop a new DPIA instrument that meets the needs – as unit of analysis – of non-technology small businesses and complies with the requirements of the EU GDPR. Design Science Research was used as the methodological framework and identified personas were drivers in the development. The result is two variants of instruments that have been carefully evaluated and proven to be valuable.04B - Beitrag Konferenzschrift
- PublikationCybersecurity governance – An adapted practical framework for small enterprises(2023) Asprion, Petra; Gossner, Philipp; Schneider, Bettina; Bui, Tung X. [in: Proceedings of the 56th Hawaii International Conference on System Sciences]04B - Beitrag Konferenzschrift
- PublikationBuilding digital trust to protect whistleblowers - A blockchain-based reporting channel(2023) Asprion, Petra; Grieder, Hermann; Grimberg, Frank [in: Proceedings of the 56th Hawaii International Conference on System Sciences]Organizations today need internal reporting channels to report illegal/unethical misconduct. For this purpose, organizations set up one or more - often digital - internal reporting channels. Persons/Employees who want to report misconduct, so-called whistleblowers, expose themselves to reprisals and therefore need trustworthy reporting channels which ensure ´Digital Trust´. Blockchain, a technology that overcomes the need for trust due to its properties of immutability and integrity of data, could be promising as underlying technology for a digital reporting channel which is recognized as trustworthy. In our research, we explored multiple perspectives relevant to a trustworthy digital reporting system. Applying design science research, we evaluated the current state of the art of (digital) reporting channels and developed a prototypical blockchain-based reporting solution called “Integrity@Inside”. The prototype is being iteratively demonstrated and pre-evaluated.04B - Beitrag Konferenzschrift
- PublikationTouching space: distributed ledger technology for tracking and tracing certificates(2023) Moriggl, Pascal; Asprion, Petra; Schneider, Bettina; Scherb, Christopher; Bui, Tung X. [in: Proceedings of the 56th Hawaii International Conference on System Sciences]Components built into space vehicles and equipment (space products) must meet different regulatory requirements; in detail, each component must be certified and sustainably traceable at all times. Space engineers have expressed the need for an interoperable system to collect, manage and route certifications for components, parts and materials that go into space products. The lack of a unified approach in the European space industry is a challenge for companies involved in product development. This research proposes an open-source, secure, fast and distributed ledger technology (DLT) based solution that fits into any IT environment and is well adapted to the needs of manufacturing companies in the space sector. The results show that a blockchain-based solution based on ‘Hyperledger Fabric’ combined with the InterPlanetary File System is viable. The results can guide other researchers and practitioners to consider DLTs when changing their certification management paradigm with suppliers, customers and auditors.04B - Beitrag Konferenzschrift
- PublikationAgile management in cybersecurity(2023) Asprion, Petra; Giovanoli, Claudio; Scherb, Christopher; Bhat, Sourabha; Gerber, Aurona; Hinkelmann, Knut [in: Proceedings of Society 5.0 Conference 2023]Cybersecurity management has emerged as a topic of growing importance on a global scale. Applying traditional management practices to cybersecurity is often too cumbersome and can lead to significant delays. Today's enterprises must be able to adapt to ever-evolving digital threats and act with corresponding agility and flexibility. Agile methods are well suited for projects without a defined scope, duration, tasks, and resources and has been identified as suitable for meeting the management challenges of cybersecurity teams. Based on an in-depth literature review, this study assumed that adopting an agile approach to cybersecurity helps organizations manage cybersecurity effectively. A first prototypical model was developed and evaluated which combines agile methods with cybersecurity functions - based on a recognized reference model.04B - Beitrag Konferenzschrift
- PublikationAdaptable GDPR assessment tool for micro and small enterprises(SciTePress, 2022) Löffler, Emanuel; Schneider, Bettina; Goerre, Andreas; Asprion, Petra; Filipe, Joaquim; Smialek, Michal; Brodsky, Alexander; Hammoudi, Slimane [in: Proceedings of the 24th International Conference on Enterprise Information Systems]04B - Beitrag Konferenzschrift
- PublikationDecentralized autonomous organizations – Evolution, challenges, and opportunities(2022) Schneider, Bettina; Ballesteros, Ruben; Moriggl, Pascal; Asprion, Petra; Bork, Dominik; Barat, Souvik; Asprion, Petra; Marcelletti, Alessandro; Morichetta, Andrea; Schneider, Bettina; Kulkarni, Vinay; Breu, Ruth; Zech, Philipp [in: Proceedings of the PoEM 2022 Workshops and Models at Work]A decentralized autonomous organization (DAO) is an emerging entity facilitated through blockchain technology. It operates under the principle of a decentralized governance structure void of hierarchical leadership, and decisions are made based on community consensus. As DAO and its mechanisms are still in an early stage, its potential evolution and future influence on enterprises remain unclear. This work elaborates on this emerging type of organization through a literature review and case studies of DAOs to demonstrate the current state of the art. The findings presented include a brief discussion of the technology that facilitates these organizations. Additionally, advancements and the common characteristics of existing DAOs are presented. Examining current and defunct DAOs revealed the challenges these organizations should address to reach their full potential in future application areas. Finally, it is concluded which organizations and industries could most likely benefit from the DAO concept in future.04B - Beitrag Konferenzschrift
- PublikationA practical guideline for developing a managerial information security awareness program(2020) Schneider, Bettina; Asprion, Petra; Androvicsova, Simona; Azan, Wilfrid [in: AMCIS 2020 proceedings]04B - Beitrag Konferenzschrift
- PublikationExploring cyber security awareness through LEGO serious play part I: the learning experience(ToKnowPress, 2020) Asprion, Petra; Schneider, Bettina; Moriggl, Pascal; Grimberg, Frank; Dermol, Valerij [in: MakeLearn 2020: expanding horizons; business, management and technology for better society. Proceedings of the MakeLearn and TIIM International Conference, 20-22 May 2020, Online Conference]Lego Serious Play (LSP) is a methodology that helps people brainstorm and discuss complex ideas through storytelling and metaphors. LSP has been successfully applied as a mechanism for creative learning and team building. In this paper, we discuss using LSP to teach core topics of Cyber Security and Resilience (CS&R) in higher education. Initial results suggest that LSP has a positive impact on student learning, while also improving student engagement both, within the course and in their business environment. While the use of LSP discussed here focuses on its implementation in CS&R courses, this highly transferable methodology can be applied across the spectrum of disciplines and for multiple purposes. In addition, it can also be used to facilitate cyber security awareness or risk assessment workshops in various environments.04B - Beitrag Konferenzschrift
- PublikationStorytelling and gamification in E-learning – An empirical study to educate Swiss microenterprises in data protection(2020) Schneider, Bettina; Bontempo Salgueiro, Nathalia; Asprion, Petra; Habbabeh, Ali [in: Expanding Horizons: Business, Management and Technology for Better Society. Proceedings of the MakeLearn and TIIM International Conference 20-22 May 2020]04B - Beitrag Konferenzschrift