Analyzing historical decision-related data can help support actual operational decision-making processes. Decision mining can be employed for such analysis. This paper proposes the Decision Discovery Framework (DDF) designed to develop, adapt, or select a decision discovery algorithm by outlining specific guidelines for input data usage, classifier handling, and decision model representation. This framework incorporates the use of Decision Model and Notation (DMN) for enhanced comprehensibility and normalization to simplify decision tables. The framework’s efficacy was tested by adapting the C4.5 algorithm to the DM45 algorithm. The proposed adaptations include (1) the utilization of a decision log, (2) ensure an unpruned decision tree, (3) the generation DMN, and (4) normalize decision table. Future research can focus on supporting on practitioners in modeling decisions, ensuring their decision-making is compliant, and suggesting improvements to the modeled decisions. Another future research direction is to explore the ability to process unstructured data as input for the discovery of decisions.
MULTIFILE
Cybersecurity threat and incident managers in large organizations, especially in the financial sector, are confronted more and more with an increase in volume and complexity of threats and incidents. At the same time, these managers have to deal with many internal processes and criteria, in addition to requirements from external parties, such as regulators that pose an additional challenge to handling threats and incidents. Little research has been carried out to understand to what extent decision support can aid these professionals in managing threats and incidents. The purpose of this research was to develop decision support for cybersecurity threat and incident managers in the financial sector. To this end, we carried out a cognitive task analysis and the first two phases of a cognitive work analysis, based on two rounds of in-depth interviews with ten professionals from three financial institutions. Our results show that decision support should address the problem of balancing the bigger picture with details. That is, being able to simultaneously keep the broader operational context in mind as well as adequately investigating, containing and remediating a cyberattack. In close consultation with the three financial institutions involved, we developed a critical-thinking memory aid that follows typical incident response process steps, but adds big picture elements and critical thinking steps. This should make cybersecurity threat and incident managers more aware of the broader operational implications of threats and incidents while keeping a critical mindset. Although a summative evaluation was beyond the scope of the present research, we conducted iterative formative evaluations of the memory aid that show its potential.
French/English abstract: Les systèmes d’aide à la prise de décision jouent un rôle important dans la pratique juridique aux Pays-Bas. Divers organismes gouvernementaux utilisent de tels systèmes automatisés pour la prise de décisions juridiques (de masse). Les départements juridiques, les cabinets d’avocats, les éditeurs juridiques et d’autres organismes ont de plus en plus recours à ces outils pour appuyer et améliorer les services d’aide juridique aux particuliers et aux entreprises. Ces outils permettent d’améliorer l’efficacité des processus et des services juridiques, mais ils peuvent aussi avoir d’importants effets préjudiciables sur les droits des personnes ou sur la qualité juridique des services produits, en particulier lorsqu’il n’existe pas de processus de conception minutieux et transparent. Cet article donne un aperçu de l’utilisation de ces systèmes dans la pratique juridique néerlandaise, discute de leurs avantages, pièges et défis, puis il identifie certaines questions de recherche pour le futur.---Rule-based systems for decision support and decision-making play an important role in Dutch legal practice. Government agencies use rule-based systems for (mass) legal decision-making. Legal departments, law firms, legal publishers and various other organizations increasingly use rule-basedsystems to support and improve the provision of legal aid to private individuals and corporate clients. Rule-based systems can improve efficiency of legal processes and services, but can also have important detrimental effects on the rights of individuals or legal quality, especially when there is no careful and transparent design process. This article provides an overview of the use of these systems in Dutch legal practice, discusses benefits, pitfallsand challenges and identifies questions for future research.
