In case of a major cyber incident, organizations usually rely on external providers of Cyber Incident Response (CIR) services. CIR consultants operate in a dynamic and constantly changing environment in which they must actively engage in information management and problem solving while adapting to complex circumstances. In this challenging environment CIR consultants need to make critical decisions about what to advise clients that are impacted by a major cyber incident. Despite its relevance, CIR decision making is an understudied topic. The objective of this preliminary investigation is therefore to understand what decision-making strategies experienced CIR consultants use during challenging incidents and to offer suggestions for training and decision-aiding. A general understanding of operational decision making under pressure, uncertainty, and high stakes was established by reviewing the body of knowledge known as Naturalistic Decision Making (NDM). The general conclusion of NDM research is that experts usually make adequate decisions based on (fast) recognition of the situation and applying the most obvious (default) response pattern that has worked in similar situations in the past. In exceptional situations, however, this way of recognition-primed decision-making results in suboptimal decisions as experts are likely to miss conflicting cues once the situation is quickly recognized under pressure. Understanding the default response pattern and the rare occasions in which this response pattern could be ineffective is therefore key for improving and aiding cyber incident response decision making. Therefore, we interviewed six experienced CIR consultants and used the critical decision method (CDM) to learn how they made decisions under challenging conditions. The main conclusion is that the default response pattern for CIR consultants during cyber breaches is to reduce uncertainty as much as possible by gathering and investigating data and thus delay decision making about eradication until the investigation is completed. According to the respondents, this strategy usually works well and provides the most assurance that the threat actor can be completely removed from the network. However, the majority of respondents could recall at least one case in which this strategy (in hindsight) resulted in unnecessary theft of data or damage. Interestingly, this finding is strikingly different from other operational decision-making domains such as the military, police and fire service in which there is a general tendency to act rapidly instead of searching for more information. The main advice is that training and decision aiding of (novice) cyber incident responders should be aimed at the following: (a) make cyber incident responders aware of how recognition-primed decision making works; (b) discuss the default response strategy that typically works well in several scenarios; (c) explain the exception and how the exception can be recognized; (d) provide alternative response strategies that work better in exceptional situations.
DOCUMENT
The literature on how organizations respond to institutional pressure has shown that the individual decision-makers’ interpretation of institutional pressure played an important role in developing organizational responses. However, it has paid less attention to how this interpretation ultimately contributes to their range of organizational decisions when responding to the same institutional pressure. We address this gap by interviewing board members of U.S. and Dutch hospitals involved in adopting best practices regarding board evaluation. We found four qualitatively different cognitive frames that board members relied on to interpret institutional pressure, and which shaped their organizational response. We contribute to the literature on organizational response to institutional pressure by empirically investigating how decision-makers interpret institutional pressure, by suggesting prior experience and role definition as moderating factors of multidimensional cognitive frames, and by showing how these cognitive frames influence board members’ response to the same institutional pressure.
DOCUMENT
Change has become continuous, and innovation is a primary approach for hospitality, i.e., hotel companies, to become or remain economically viable and sustainable. An increasing number of management researchers are paying more attention to workplace rather than technological innovation. This study investigates workplace innovation in the Dutch hotel industry, in three- and four-star hotels in the Netherlands, by comparing them to other industries. Two samples were questioned using the Workplace Innovation survey created by the Dutch Network of Social Innovation (NSI). The first was conducted in the hospitality industry, and these data were compared with data collected in a sample of other industries. Results suggest that greater strategic orientation on workplace innovation and talent development has a positive influence on four factors of organizational performance. Greater internal rates of change, the ability to self-organize, and investment in knowledge also had positive influences on three of the factors—growth in revenue, sustainability, and absenteeism. Results also suggest that the hospitality industry has lower workplace innovation than other industries. However, no recent research has assessed to what degree the hospitality industry fosters workplace innovation, especially in the Netherlands. Next to that, only few studies have examined management in the Dutch hotel industry, how workplace innovation is used there, and whether it improves practices.
DOCUMENT
In this multi-study paper, we integrate Social Exchange Theory and the discretionary workplace behavior literature. Specifically, we posit that by breaching their psychological contract (PC) obligations, organizations may trigger negative reciprocity, which in turn may increase deviant behavior. Moreover, we posit that by fulfilling their legitimately PC obligations, organizations may trigger positive reciprocity, which in turn may increase unethical pro-organizational behavior. Across two studies (3-wave field study with traditional breach measure and 2-wave field study with expanded breach measure and polynomial regression), we found repeated evidence for our hypotheses. Specifically, we found that PC breach (Study 1) and PC under-fulfillment (Study 2) are positively related to the enactment of organizational deviance via negative reciprocity. Furthermore, we found that PC fulfillment (Study 1) and high absolute levels of PC fulfillment (Study 2) are positively related to unethical pro-organizational behavior via positive reciprocity. Implications for theory and practice are discussed.
DOCUMENT
Computer security incident response teams (CSIRTs) respond to a computer security incident when the need arises. Failure of these teams can have far-reaching effects for the economy and national security. CSIRTs often have to work on an ad hoc basis, in close cooperation with other teams, and in time constrained environments. It could be argued that under these working conditions CSIRTs would be likely to encounter problems. A needs assessment was done to see to which extent this argument holds true. We constructed an incident response needs model to assist in identifying areas that require improvement. We envisioned a model consisting of four assessment categories: Organization, Team, Individual and Instrumental. Central to this is the idea that both problems and needs can have an organizational, team, individual, or technical origin or a combination of these levels. To gather data we conducted a literature review. This resulted in a comprehensive list of challenges and needs that could hinder or improve, respectively, the performance of CSIRTs. Then, semi-structured in depth interviews were held with team coordinators and team members of five public and private sector Dutch CSIRTs to ground these findings in practice and to identify gaps between current and desired incident handling practices. This paper presents the findings of our needs assessment and ends with a discussion of potential solutions to problems with performance in incident response. https://doi.org/10.3389/fpsyg.2017.02179 LinkedIn: https://www.linkedin.com/in/rickvanderkleij1/
MULTIFILE
This paper presents four research projects on organizational innovation in the Netherlands. These projects are still in a design and theoretical investigation stage, but the authors find it useful to share their findings and insights with the research community in order to inspire them with their ideas and research agenda. In the paper four constructs are explored that focus on the human factor in organizations and that may have a positive influence on organizational innovation. Shared leadership: It is often thought that, for innovation, only one brilliant mind with a break-through idea in a single flash of enlightenment is needed. Recent research, however, shows that most innovations are the result of team-flow and sharing and alternating leadership tasks. Social Capital: through leadership and decision making, by influencing trust, respect and commitment, the organizations social capital and thus its innovative power is increased. External consultancy: deployment of external consultants will add to knowledge and skills necessary for innovation. IT and workflow management: if handled correctly, the human factor can add substantial quality to the design and use of IT in organizations. The paper shows that the way these constructs are managed is crucial in influencing and motivating members of an organization to attribute to innovation and make use of the facilities that are offered to them.
DOCUMENT
This manifesto presents 10 recommendations for a sustainable future for the field of Work and Organizational Psychology. The manifesto is the result of an emerging movement around the Future of WOP (see www.futureofwop.com), which aims to bring together WOP-scholars committed to actively contribute to building a better future for our field. Our recommendations are intended to support both individuals and collectives to become actively engaged in co-creating the future of WOP together with us. Therefore, this manifesto is open and never “finished.” It should continuously evolve, based on an ongoing debate around our professional values and behavior. This manifesto is meant, first of all, for ourselves as an academic community. Furthermore, it is also important for managers, decision makers, and other stakeholders and interested parties, such as students, governments and organizations, as we envision what the future of WOP could look like, and it is only through our collective efforts that we will be able to realize a sustainable future for all of us.
MULTIFILE
Aim of the researchAim of this study is to understand which approach (expert or process orientated) sport club consultants use in succesfully raising the organizational capacity of voluntary sport clubs in the northern part of the Netherlands. Around 130 professional sport club consultants are active in the northern part of the Netherlands, but it is not clear which approach they use in raising the organizational capacity of the clubs within a specific context and if this approach is effective. Theoretical backgroundA sport club with great organizational capacity has the ability to offer their sport, now and in the future, in a sustainable and socially responsible way to (potential) members. Dutch voluntary sport clubs (VSCs) are facing several challenges in perceived consumerist behavior by members (Van der Roest, 2015), demands by the government to attribute to the social policy agenda (Coalter, 2007) and declining number of members in complex contexts (Wollebæk, 2009). Between 300-500 sport club consultants, mostly funded by local governments or sport associations, are tasked to raise the organizational capacity of these VSCs in the Netherlands Most consultants play an expert role delivering generic interventions on specific topics as recruiting volunteers, sponsorships or positive behavior support. The other consultants play a process consultation role in which a holistic strategic change approach is used for more sustainable organizational development (Schein, 1999). The context of the organizations (VSC’s) is determining which approach is the best in developing the organizational capacity. But most of the time consultants use the same, mostly expert role, in consulting the organizations (Boonstra & Elving, 2009). Therefore it is not clear which approach (expert or process orientated) sport club consultants in the Netherlands use in raising the organizational capacity of VSC’s in different contexts. Methodology, research design, and data analysisThe study will be conducted from March 2017 till the end of July 2017 in the northern part of the Netherlands. In March we have started .with identifying successful sport club consultants in three steps: these steps show a qualitative description of the current competences, approaches and interventions (repertoire) as seen by the sport club consultants in our target group:1) A group of experts have been gathered to formulate criteria for the competences, approaches and interventions of a successful process orientated sport club consultant. 2) The criteria from step 1 are validated by theory about organizational development and consulting of organizations. Thereafter the criteria are processed into a digital survey 3) The survey has been send to n=130 sport club consultants in the northern part of the Netherlands. 4) Based on the output of the survey, profiles will be developed of different types sport club consultants (process orientated, mediator, supporter, coach, expert) and the approaches per type of consultant. For each profile a ranking will be made based on which criteria (from step 1) the consultants meet. This ranking will be used to make a selection of successful sport club consultants to conduct research in five multiple case studies. From June on multiple case studies will be conducted in which five process consultants are working with a VSC. A case study protocol will be developed that observe the consultant in three sessions at the club In addition interviews will be conducted with the consultant, the board of the club, and other relevant stakeholders. With a cross-case synthesis patterns will be developed in the way the consultants worked and how these approaches were interpreted and valued by the various stakeholders. Results, discussion, and implications/conclusionsIn the expected results both approaches and interventions (repertoire) of the consultant as their competences and qualities are analyzed which will result in the profiling of the active sport club consultants. We also gain insights in which approach of the sport club consultants is the most effective in raising the organizational capacity of a VSC in a given context. New insights on how consultants can successfully contribute to the sustainable organizational development of VSCs will be presented.
DOCUMENT
We aim to understand how actors respond to field logic plurality and maintain legitimacy through business model innovation. Drawing on a longitudinal field study in the fashion industry, we traced how de novo and incumbent firms incorporate circular logics in business models (for sustainability) and uncover how the intersection between issue and exchange fields creates institutional complexity and experimental spaces for business model innovation. Our findings showed a shift in the discourse on circular logic that diverted attention and resources from materials innovation (e.g., recycling) to business model innovation (e.g., circular business models). By juxtaposing institutional complexity and external pressure to maintain legitimacy, we derived four strategic business model innovation responses—preserve, detach, integrate and extend—that illuminate how actors leverage shifting logics and innovate extant business models (for sustainability). We make novel contributions to the literature on organizational fields, business models for sustainability, and business model innovation.
DOCUMENT
Aim of this study is to understand which approach (expert or process orientated) sport club consultants use in succesfully raising the organizational capacity of voluntary sport clubs in the northern part of the Netherlands. Around 130 professional sport club consultants are active in the northern part of the Netherlands, but it is not clear which approach they use in raising the organizational capacity of the clubs within a specific context and if this approach is effective. Theoretical backgroundA sport club with great organizational capacity has the ability to offer their sport, now and in the future, in a sustainable and socially responsible way to (potential) members. Dutch voluntary sport clubs (VSCs) are facing several challenges in perceived consumerist behavior by members (Van der Roest, 2015), demands by the government to attribute to the social policy agenda (Coalter, 2007) and declining number of members in complex contexts (Wollebæk, 2009). Between 300-500 sport club consultants, mostly funded by local governments or sport associations, are tasked to raise the organizational capacity of these VSCs in the Netherlands. Most consultants play an expert role delivering generic interventions on specific topics as recruiting volunteers, sponsorships or positive behavior support. The other consultants play a process consultation role in which a holistic strategic change approach is used for more sustainable organizational development (Schein, 1999). The context of the organizations (VSC’s) is determining which approach is the best in developing the organizational capacity. But most of the time consultants use the same, mostly expert role, in consulting the organizations (Boonstra & Elving, 2009). Therefore it is not clear which approach (expert or process orientated) sport club consultants in the Netherlands use in raising the organizational capacity of VSC’s in different contexts. Methodology, research design, and data analysisThe study will be conducted from March 2017 till the end of July 2017 in the northern part of the Netherlands. In March we have started with identifying successful sport club consultants in three steps: these steps show a qualitative description of the current competences, approaches and interventions (repertoire) as seen by the sport club consultants in our target group:1) A group of experts have been gathered to formulate criteria for the competences, approaches and interventions of a successful process orientated sport club consultant. 2) The criteria from step 1 are validated by theory about organizational development and consulting of organizations. Thereafter the criteria are processed into a digital survey 3) The survey has been send to n=130 sport club consultants in the northern part of the Netherlands. 4) Based on the output of the survey, profiles will be developed of different types sport club consultants (process orientated, mediator, supporter, coach, expert) and the approaches per type of consultant. For each profile a ranking will be made based on which criteria (from step 1) the consultants meet. This ranking will be used to make a selection of successful sport club consultants to conduct research in five multiple case studies. From June on multiple case studies will be conducted in which five process consultants are working with a VSC. A case study protocol will be developed that observe the consultant in three sessions at the club. In addition interviews will be conducted with the consultant, the board of the club, and other relevant stakeholders. With a cross-case synthesis patterns will be developed in the way the consultants worked and how these approaches were interpreted and valued by the various stakeholders. Results, discussion, and implications/conclusionsIn the expected results both approaches and interventions (repertoire) of the consultant as their competences and qualities are analyzed which will result in the profiling of the active sport club consultants. We also gain insights in which approach of the sport club consultants is the most effective in raising the organizational capacity of a VSC in a given context. New insights on how consultants can successfully contribute to the sustainable organizational development of VSCs will be presented.
DOCUMENT
