Research Steven De Haes

Abstract

The aim of the project is to explore new ways to understand and mitigate cyberrisks from an organizational and management perspective. Special focus goes towards understanding the concept of cyber resilience and how it can be applied in practice.

Researcher(s)

• Promoter: De Haes Steven
• Fellow: Van Giel Ziggy

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

In our increasingly digitized economy, information technology (IT) has become fundamental to support, sustain and grow organizations. Successful organizations leverage the digital innovation potential but also understand and manage the risks and constraints of technology. Previously, the governing non-executive board could delegate, ignore or avoid IT related decisions, but the disruptive new technologies (cloud, internet of things, big data…) are increasingly being felt at board level. Emerging research calls for more board level engagement in enterprise governance of IT and identifies serious consequences for digitized organizations in case the board is not involved. Yet, it appears that enterprise technology governance competence remains the 'elephant in the boardroom' for more than 80% of boards of directors. Starting from this problem statement, this PhD research focuses on the "why", "what" and "how" of board-level decision making in IT related matters.

Researcher(s)

• Promoter: De Haes Steven
• Fellow: Caluwe Laura

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

This research project is a collaboration between University of Antwerp and Antwerp Management School. It addresses theoretical and practice-oriented research on how organisations are implementing IT governance as enabler for business/IT alignment and value creation out of IT enabled investments.

Researcher(s)

• Promoter: De Haes Steven

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

The continued growth in the use of information technology has exposed businesses to the risk of loss of data, services and business operations due to an attack on their information systems. However, information security is not only a technical issue but an economic issue as well. Though there has been some research on the economic aspect of information security, the research in the domain is sparse and this motivates us to explore the application of theories and concepts from economics and finance to understand the economic dimension of information security. The research follows the Design Science Research approach. The ongoing research started with the evaluation of information security investment models proposed in the literature and the aim is to design and develop a prediction market for informed information security investment and risk management decisions. We hypothesize that: (i) a well-designed prediction market can be used for risk estimation and estimation of loss impact in the information security domain. This will help the decision makers in adopting an appropriate risk mitigation strategy; (ii) Prediction markets can further be useful in hedging information security risks by allowing trading of financial instruments linked to the risk of information security events. We explore the key design issues relevant to the market for trading of information security related financial instruments, which can be traded to facilitate the mitigation of a substantial proportion (if not all) of the information security risk.

Researcher(s)

• Promoter: De Haes Steven

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

Contemporary smaller organizations often struggle with IT-enabled value creation. This research project will gain insight in the implementation of IT governance in the SME context. Using these insights, SMEs will find guidance in their quest to IT-enabled value creation.

Researcher(s)

• Promoter: De Haes Steven
• Fellow: Huygh Tim

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

This project represents a formal service agreement between UA and on the other hand ISACA. UA provides ISACA research results mentioned in the title of the project under the conditions as stipulated in this contract.

Researcher(s)

• Promoter: De Haes Steven

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

This practice-oriented research attempts to demonstrate the business value obtained by applying governance and management practices as proposed in COBIT. The research project is commissioned by ISACA, the international federation of IT governance professionals, to the University of Antwerp.

Researcher(s)

• Promoter: De Haes Steven

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project

Abstract

Strategic investments in information technology (IT) are pervasive in contemporary organisations. However, there is a huge gap of knowledge and practical support in the efficient and effective implementation and delivery of such investments. Moreover, the assumed value in many cases is not achieved or insufficiently realised. Consequently, this PhD focuses on IT value management, where the entire process from idea till the realisation of business value is examined. In a first phase, management practices will be identified by both literature and case study research, which is validated through a Delphi study. Then, an international survey will investigate the impact that such practices have on business value creation from strategic IT enabled business investment. Finally, in-depth case study research should facilitate more understanding and insight into the contextual factors affecting the success of such investments.

Researcher(s)

• Promoter: Van Grembergen Wim
• Co-promoter: De Haes Steven
• Fellow: Maes Kim

Research team(s)

• Management Information Systems (MIS)

Project type(s)

• Research Project