TIM-7040

Cairney, P. (2021). The politics of policy design. EURO Journal on Decision Processes, 9(2021). https://doi.org/10.1016/j.ejdp.2021.100002
This article examines the gap between theory and practice of policy design. It identifies policy design dilemmas that need to be resolved with clear political choice rather than technical design method.

California Department of Technology. (2023). California agile framework (CA-Agile). CA-PMO. https://projectresources.cdt.ca.gov/agile/
Many organizations and industries are utilizing the Agile Methodology, including IT. The CA-Agile framework is designed to help manage agile delivery in the context of IT implementation; however, it is applicable to any type of organization or industry.

Källgården, O. (2019.). Spotify: An ITIL® Case Study. Axelos. https://www.axelos.com/resource-hub/case-study/spotify-itil-case-study
Organizations must formulate strategies for managing technology and innovation in global organizations with the adaptation of new technology. This case study discusses how Spotify embraces ITIL principles.

Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020). IoT cyber risk: a holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process. EURASIP Journal on Information Security, 2020(1), 1–18. https://jis-eurasipjournals.springeropen.com/articles/10.1186/s13635-020-00111-0
The adaptation of new technologies require continued evaluation of risk and policy revision. This study includes a review of current cyber risk assessment methodologies and their application to IoT systems using NIST, Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVESM), Threat Assessment & Remediation Analysis (TARA), and ISO.

New Jersey Office of Information Technology. (n.d.). OIT tactical planning. NJOIT. https://nj.gov/it/whatwedo/tpu/
The OIT Tactical Planning Unit (OIT TPU) manages the IT Tactical Plan Reporting Process. This process requires the Executive Branch Departments and Agencies to provide current detailed information on each Agency’s IT hardware and software maintenance, support, end of life resources, and new and existing project initiatives each year.

New Jersey Office of Information Technology. (n.d.). System architecture review. NJOIT. https://nj.gov/it/whatwedo/sar/
The System Architecture Review (SAR) ensures compliance with existing standards and practices. SAR ensures technology solutions for the State of New Jersey.

Sarbanes-Oxley Act of 2002, Pub. L. No. 107-204, 116 Stat. 1751 (2001-2002). https://www.congress.gov/bill/107th-congress/house-bill/3763
The formulation of new policies often begins with legal, ethical, and regulatory concerns. Sarbanes-Oxley Act (SOX) of 2002 protects investors by improving accuracy and reliability of corporate disclosures in relation to securities laws, and for other purposes.

Arizona Strategic Enterprise Technology. (n.d.) Policies, standards and procedures. ASET. https://aset.az.gov/policies-standards-and-procedures
Industry standards outline the measures an organization will take to prevent and mitigate cyber risks and attacks. These standards also specify the roles and responsibilities of employees to secure company assets and prevent data loss. ASET is an award-winning government portal that has useful templates for open use.

California Project Management Office. (2023). Project delivery resources. CA-PMO. https://projectresources.cdt.ca.gov/
CA-PMO has project resources that provide organizations with a knowledgebase of guidance and templates to achieve IT delivery goals. There are a variety of frameworks available to address different domains.

Ellis, T., & Levy, Y. (2008). Framework of problem-based research: A guide for novice researchers on the development of a research-worthy problem. Informing Science, 11, 17-33. http://proxy1.ncu.edu/login?url=https://search.ebscohost.com/login.aspx?direct=true&db= a9h&AN=36030721&site=eds-live
This article is important because it discusses the components of the research triad: the problem, the purpose, and the research questions.

Federal Financial Institutions Examination Council. (2023). Cybersecurity assessment tool. FFIEC. https://www.ffiec.gov/cyberassessmenttool.htm
The adoption of new technologies by organizations often leads to legal, ethical, and regulatory concerns. The FFIEC created the Cybersecurity Assessment Tool to help industries identify their cybersecurity risks and preparedness to mitigate risks.