To Örebro University

oru.seÖrebro University Publications
System disruptions
There are recurring service disruptions on some of the search portals due to high traffic. We are working to resolve the issue, you may temporarily encounter an error message.
Change search
Link to record
Permanent link

Direct link
Publications (10 of 93) Show all publications
Björn, S., Jashari, V., Kolkowska, E. & Gao, S. (2026). Developing and testing a framework for matching distinct personality types with information security awareness methods. Information and Computer Security, 34(2), 246-272
Open this publication in new window or tab >>Developing and testing a framework for matching distinct personality types with information security awareness methods
2026 (English)In: Information and Computer Security, ISSN 2056-4961, E-ISSN 2056-497X, Vol. 34, no 2, p. 246-272Article in journal (Refereed) Published
Abstract [en]

Purpose: This study aims to develop and test a framework to associate learning styles and social influencing vulnerabilities with different personality types in the context of tailoring information security awareness (ISA) methods for people with different personality types.

Design/methodology/approach: The framework was developed following directed content analysis and applied to match distinct personality types with ISA methods identified through a systematic literature search. The directed content analysis was conducted in two parts: a) Describe and identify keywords for the DISC (dominance [D], inducement [I], submission [S] and compliance [C]) personality types, Kolb's learning styles and Cialdini's social influencing principles; b) Identify the relationships between personality types, learning styles and social influencing vulnerabilities and create the PLS (i.e. personality types, learning styles and social influencing vulnerabilities) framework. As a result, four relationships are identified for each distinct personality type in the PLS framework.

Findings: The study has theoretically demonstrated the framework's feasibility of finding best-matched ISA methods for distinct personality types, considering their linked learning style and social influencing vulnerabilities.

Research limitations/implications: The study provides two main theoretical contributions: 1) PLS framework: presenting the relationship of personality types with their linked learning style and their social influencing vulnerabilities; 2) Examples of matching distinct personality types with ISA methods, including suggestions for a theoretically best matched ISA method. Therefore, this study contributes to building a sound theoretical ground for tailoring ISA methods for people with different personality types. In addition, the derived keywords are helpful to capture a good understanding of the different dimensions of the selected theories. Furthermore, following the examples provided in this paper, the developed PLS framework can be used as a base for managers to use ISA methods for people with different personality types in organizations.

Practical implications: Furthermore, following the examples provided in this paper, the developed PLS framework can be used as a base for managers to employ ISA methods for people with different personality types in organizations.

Originality/value: To the best of the authors' knowledge, this study is the first of its kind in developing and testing a framework for matching distinct personality types with information security awareness methods.

Place, publisher, year, edition, pages
Emerald Group Publishing Limited, 2026
Keywords
Information security awareness methods, Personality types, Learning styles, Social influencing vulnerabilities, Information security awareness (ISA)
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-122463 (URN)10.1108/ICS-03-2025-0091 (DOI)001513863400001 ()2-s2.0-105008805835 (Scopus ID)
Available from: 2025-07-25 Created: 2025-07-25 Last updated: 2026-09-21Bibliographically approved
Andersson, A., Brauer, J., Kolkowska, E. & Lagsten, J. (2026). Transforming professional values in an automated public sector. International Journal of Public Sector Management
Open this publication in new window or tab >>Transforming professional values in an automated public sector
2026 (English)In: International Journal of Public Sector Management, ISSN 0951-3558, E-ISSN 1758-6666Article in journal (Refereed) Epub ahead of print
Abstract [en]

Purpose: Many public sector caseworkers experience the shift to digital administration as having changed their daily practices - especially in relation to their professional values. The purpose of this study is to find out in which ways these values have changed and how automation affect caseworkers' possibilities of acting in accordance with their professional values.

Design/methodology/approach: Based on an interpretative case study-approach, we have conducted 15 semi-structured interviews with public caseworkers in Sweden: eight in social work and seven at a driving license department. Findings were analyzed using reflexive thematic analysis and a framework of value positions for e-government.

Findings: We found that the following professional values were brought to the fore: equal treatment of clients and rule-adherence were emphasized, accountability of decisions was questioned in one organization, efficiency mainly increased and service-level was mainly improved. Other professional values affected by automation were that time for relational work increased and the discretion to make individual assessments decreased.

Originality/value: The study is original in how it addresses value positions by intersecting literature on e-government and sociology of professions. The study is also original by comparing caseworkers at different administrative levels, national and municipal.

Place, publisher, year, edition, pages
Emerald Group Publishing Limited, 2026
Keywords
Professionalism, Automation, Values, Digitalization, Public sector, Caseworkers
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-130371 (URN)10.1108/IJPSM-01-2026-0050 (DOI)001829122500001 ()
Funder
Forte, Swedish Research Council for Health, Working Life and Welfare
Available from: 2026-07-31 Created: 2026-07-31 Last updated: 2026-07-31Bibliographically approved
Gerdin, M., Karlsson, M., Kolkowska, E. & Grönlund, Å. (2026). You get the answers you ask for: Experimental evidence on the influence of inconsistent variable definitions on non-/compliance research findings. Computers & Security, 171, Article ID 105065.
Open this publication in new window or tab >>You get the answers you ask for: Experimental evidence on the influence of inconsistent variable definitions on non-/compliance research findings
2026 (English)In: Computers & Security, ISSN 0167-4048, E-ISSN 1872-6208, Vol. 171, article id 105065Article in journal (Refereed) Published
Abstract [en]

The research literature on employee non-/compliance with information security policies (ISPs) suffers from inconsistent findings. The aim of this paper is to investigate a promising, yet largely unexplored cause of these inconsistencies, namely, differences in how key variables have been conceptualized and operationalized into questionnaire measurement items across this literature. Specifically, by means of a survey experiment with 215 participants from a Swedish university, we formally tested whether alternative operationalizations of two key variables from Protection Motivation Theory-Perceived vulnerability and Perceived severity of a threat-lead to statistically significant differences in mean values across responder groups. Regarding the former variable, we found significant differences between operationalizations focusing on the probability and vulnerability of the threat. Regarding the latter, we found significant differences between whether the target of the consequences of the threat was unclear or clear to respondents, but not between clearly stated targets in terms of individuals and organizations. Overall, therefore, this study contributes to the field by highlighting the importance of conceptual clarity and precision in measuring key variables. It also highlights the potential of survey experiments-an underutilized method in ISP compliance research-for exploring the empirical impact of the different variable operationalizations which currently characterize much of the extant literature.

Place, publisher, year, edition, pages
Elsevier, 2026
Keywords
Information security policies, Non-compliance, Compliance, Protection motivation theory, PMT, Survey experiment, Information security management
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-130587 (URN)10.1016/j.cose.2026.105065 (DOI)001839704100001 ()
Available from: 2026-08-14 Created: 2026-08-14 Last updated: 2026-08-14Bibliographically approved
Gerdin, M., Grönlund, Å. & Kolkowska, E. (2025). Conceptual inconsistencies in variable definitions and measurement items within ISP non-/compliance research: A systematic literature review. Computers & Security, 152, Article ID 104365.
Open this publication in new window or tab >>Conceptual inconsistencies in variable definitions and measurement items within ISP non-/compliance research: A systematic literature review
2025 (English)In: Computers & Security, ISSN 0167-4048, E-ISSN 1872-6208, Vol. 152, article id 104365Article, review/survey (Refereed) Published
Abstract [en]

The rich stream of research focusing on employee non-/compliance with information security policies (ISPs) suffers from inconsistent results. Attempts to explain such inconsistencies have included investigation of possible contextual moderating factors. Another promising, yet not systematically investigated, explanation concerns conceptual inconsistencies in variable definitions and in questionnaire measurement items. Based on a systematic literature review covering 36 ISP non-/compliance articles using Protection Motivation Theory (PMT) and/or Theory of Planned Behavior (TPB), we found four major types of conceptual inconsistencies and unclarities within and across studies; (i) inconsistencies in variable definitions; (ii) inconsistencies between variable measurement items; (iii) inconsistencies between variable definitions and measurement items; and (iv) unclearly/vaguely worded measurement items. The review contributes to the field by demonstrating that the inconsistent results in the field may not only be due to unknown contextual moderators, but also to conceptual incongruences within and across studies.

Place, publisher, year, edition, pages
Elsevier, 2025
Keywords
Information security policy, Protection motivation theory, Theory of planned behavior, Variable properties, Non-compliance
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-119696 (URN)10.1016/j.cose.2025.104365 (DOI)001428697400001 ()2-s2.0-85217911678 (Scopus ID)
Available from: 2025-03-17 Created: 2025-03-17 Last updated: 2025-09-19Bibliographically approved
Kolkowska, E. & Hanif, M. (2025). Socio-Technical Transformation of Elderly-Care with Data-Driven Decision-Making: An Umbrella Review. In: Marija Topuzovska Latkovik; Peter Bednar; Mikko Rajanen; Joakim Kävrestad; Helena Vallo Hult; Amany Elbanna (Ed.), STPIS 2025: Socio-Technical Perspectives in Information Systems 2025: Proceedings of the 11th International Workshop on Socio-Technical Perspectives in Information Systems (STPIS 2025). Paper presented at 11th International Workshop on Socio-Technical Perspectives in IS (STPIS’25), Skopje, North Macedonia, September 17-18, 2025. Technical University of Aachen, 4134
Open this publication in new window or tab >>Socio-Technical Transformation of Elderly-Care with Data-Driven Decision-Making: An Umbrella Review
2025 (English)In: STPIS 2025: Socio-Technical Perspectives in Information Systems 2025: Proceedings of the 11th International Workshop on Socio-Technical Perspectives in Information Systems (STPIS 2025) / [ed] Marija Topuzovska Latkovik; Peter Bednar; Mikko Rajanen; Joakim Kävrestad; Helena Vallo Hult; Amany Elbanna, Technical University of Aachen , 2025, Vol. 4134Conference paper, Published paper (Refereed)
Abstract [en]

This umbrella literature review is driven by the pressing need for research to transform the elderly care sector, which is challenged by a rapidly ageing population and constrained resources. In this context, data-driven decision-making emerges as a promising approach to facilitate the necessary transformation. The aim this this review was to explore how socio-technical aspects are discussed in research on the use of data-driven decision-making in elderly care settings. Our analysis suggests that the majority of current research places disproportionate focus on technological development while neglecting the social, structural, and systemic contexts that are critical for successful and sustainable implementation. A more balanced and contextually aware approach—grounded in socio-technical systems thinking—is essential to advance the field and ensure that digital innovations truly enhance elderly care.

Place, publisher, year, edition, pages
Technical University of Aachen, 2025
Series
CEUR Workshop Proceedings, E-ISSN 1613-0073 ; 4134
Keywords
Elderly care, Socio-technical system, Data-driven-Decision Making, Digital Transformation
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-126328 (URN)
Conference
11th International Workshop on Socio-Technical Perspectives in IS (STPIS’25), Skopje, North Macedonia, September 17-18, 2025
Available from: 2026-01-16 Created: 2026-01-16 Last updated: 2026-01-19Bibliographically approved
Kolkowska, E. & Lagsten, J. (2025). The Development of a Blueprint for a master program - AI-supported business development in public organizations. Örebro: Örebro universitet
Open this publication in new window or tab >>The Development of a Blueprint for a master program - AI-supported business development in public organizations
2025 (English)Report (Other (popular science, discussion, etc.))
Abstract [en]

This report presents the development of a blueprint for a Master’s program tailored to public sector professionals without formal technical or programming backgrounds. The blueprint was developed as a part of WASP-ED (The Wallenberg AI and Transformative Technologies Education Development Program) work area 2. The program addresses the growing need for competencies among public servants leading or participating in AI-supported transformation in public organizations. It aims to equip domain experts with foundational AI knowledge and cross-disciplinary insight into the intersection of technology, society, and individuals. The goal is to bridge the knowledge gap between technical experts and sector-specific specialists.

The blueprint responds to knowledge gaps identified through a review of academic literature on AI system development and implementation in public organizations, recent reports from public and private entities, and complemented by empirical data collected through workshops, discussions, and interviews with key stakeholders. The suggested program is grounded in both theory and practice, drawing on the Sociotechnical AI systems perspective and the AI System Development Life Cycle (AI-DLC), designed specifically for public sector needs.

The initial version of the blueprint was shared with stakeholders including study directors, and others involved in developing Master's-level education in relevant disciplines. It was also evaluated against the WASP-ED curriculum and existing Master’s programs in Sweden.

Finally, there is a strong network of informatics researchers across Sweden — including at Örebro University (ÖRU), University of Gothenburg (GU), Linköping University (LiU), and Mid Sweden University — who possess relevant expertise, actively publish in this field, and maintain close collaborations with the public sector. These competencies and networks will play a key role in shaping and further developing the program.

Place, publisher, year, edition, pages
Örebro: Örebro universitet, 2025. p. 29
Keywords
business development, AI, public organisations
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-126725 (URN)
Projects
WASP-ED
Available from: 2026-01-26 Created: 2026-01-26 Last updated: 2026-01-27Bibliographically approved
Rostami, E., Karlsson, F., Kolkowska, E. & Gao, S. (2025). Towards software for tailoring information security policies to organisations’ different target groups. Computers & Security, 159, Article ID 104687.
Open this publication in new window or tab >>Towards software for tailoring information security policies to organisations’ different target groups
2025 (English)In: Computers & Security, ISSN 0167-4048, E-ISSN 1872-6208, Vol. 159, article id 104687Article in journal (Refereed) Published
Abstract [en]

Designing accessible and relevant information security policies (ISPs) that support employees is crucial for improving organisations' information security. When employees are required to deal with cumbersome ISPs, there is a risk of reduced motivation towards information security, and employees' not following the rules in ISPs has been reported as a persistent issue. Existing research has suggested adopting a tailored approach to ISPs in order to enhance their relevance to employees. Tailoring is difficult and time consuming and information security managers lack information security management systems software (ISMSS) that can assist with this tailoring task. In this paper, we develop a design theory for ISMSS to support information security managers in tailoring ISPs to different employees. To achieve this, we employ design science research, drawing on prior studies concerning the tailoring of systems development methods. We evaluate the design theory through an expository instantiation, POLCO, and with information security managers, demonstrating both proof-of-concept and proof-of-value.

Place, publisher, year, edition, pages
Elsevier, 2025
Keywords
Tailored information security policy, Policy component, Software for tailoring policy, Design science research
National Category
Information Systems, Social aspects
Research subject
Informatics
Identifiers
urn:nbn:se:oru:diva-124465 (URN)10.1016/j.cose.2025.104687 (DOI)001587718900001 ()2-s2.0-105017431728 (Scopus ID)
Projects
Computerized tool-support for designing modular information security policies
Funder
Swedish Civil Contingencies Agency
Note

This work was supported by the Swedish Research School of Management and IT (MIT) and the Swedish Civil Contingencies Agency (MSB).

Available from: 2025-10-17 Created: 2025-10-17 Last updated: 2026-01-23Bibliographically approved
Kolkowska, E., Soja, E., Soja, P., Kanclerz, J. & Balsamski, B. (2025). What Seniors Need vs What Providers Deliver: A Cross-Country Perspective on Value (Mis)Alignment in Digital Transformation of Elderly Care in Poland and Sweden. In: I. Luković; S. Bjeladinović; B. Delibašić; D. Barać; N. Iivari; E. Insfran; M. Lang; H. Linger; C. Schneider (Ed.), Empowering the Interdisciplinary Role of ISD in Addressing Contemporary Issues in Digital Transformation: How Data Science and Generative AI Contributes to ISD (ISD2025 Proceedings). Paper presented at 33rd International Conference on Information Systems Development (ISD 2025), Belgrade, Serbia, September 3-5, 2025. International Conference on Information Systems Development
Open this publication in new window or tab >>What Seniors Need vs What Providers Deliver: A Cross-Country Perspective on Value (Mis)Alignment in Digital Transformation of Elderly Care in Poland and Sweden
Show others...
2025 (English)In: Empowering the Interdisciplinary Role of ISD in Addressing Contemporary Issues in Digital Transformation: How Data Science and Generative AI Contributes to ISD (ISD2025 Proceedings) / [ed] I. Luković; S. Bjeladinović; B. Delibašić; D. Barać; N. Iivari; E. Insfran; M. Lang; H. Linger; C. Schneider, International Conference on Information Systems Development , 2025Conference paper, Published paper (Refereed)
Abstract [en]

This explorative study examined how technology providers are meeting seniors’ expectations for developing ICT solutions enabling digital transformation of elderly care in two contrasting socioeconomic settings: Poland and Sweden. To this end, we have analyzed the characteristics emphasized as important by technology providers on their websites and compared these factors with seniors’ needs identified in previous research. Our preliminary findings suggest that technology providers in Poland and Sweden fall short to fully meet the diversity of seniors’ needs or address their expectations. In this respect, it appears that technology providers focus mainly on those needs of seniors that are mos strongly recognized and unmet in the context of the prevailing socio-economic conditions of a given country.

Place, publisher, year, edition, pages
International Conference on Information Systems Development, 2025
Series
Proceedings of the International Conference on Information Systems Development, E-ISSN 2938-5202
Keywords
Elderly Care, Digital Transformation, Value-based objectives, Providers
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-126724 (URN)10.62036/ISD.2025.120 (DOI)9788397263215 (ISBN)
Conference
33rd International Conference on Information Systems Development (ISD 2025), Belgrade, Serbia, September 3-5, 2025
Funder
Örebro University
Note

The publication has been co-financed by the subsidy granted to the Krakow University of Economics, Poland and Örebro University School of Business, Sweden

Available from: 2026-01-26 Created: 2026-01-26 Last updated: 2026-01-27Bibliographically approved
Jashari, V., Björn, S., Kolkowska, E. & Gao, S. (2024). A Framework for Matching Distinct Personality Types with Information Security Awareness Methods. In: Nathan Clarke; Steven Furnell (Ed.), Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II. Paper presented at 18th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance (HAISA 2024), Skövde, Sweden, July 9-11, 2024 (pp. 88-100). Springer, 722
Open this publication in new window or tab >>A Framework for Matching Distinct Personality Types with Information Security Awareness Methods
2024 (English)In: Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II / [ed] Nathan Clarke; Steven Furnell, Springer, 2024, Vol. 722, p. 88-100Conference paper, Published paper (Refereed)
Abstract [en]

The objective of this study is to develop a framework to associate learning styles and social influencing vulnerabilities with different personality types in the context of tailoring Information Security Awareness (ISA) methods for people with different personality types. Directed content analysis is carried out to develop the framework. The analysis is conducted in the following two parts: a). Describe and identify keywords for the DISC (Dominance (D), Inducement (I), Submission (S) and Compliance (C)) personality types, Kolb’s learning styles and Cialdini’s social influencing principles; b). Identify the relationships between Personality types, Learning styles, and Social influencing vulnerabilities and create the PLS (i.e., Personality types, Learning styles, and Social influencing vulnerabilities) framework. As a result, four relationships are identified for each distinct personality type in the PLS framework. This study contributes to building a sound theoretical ground for tailoring ISA methods for people with different personality types . In addition, the derived keywords are helpful to capture a good understanding of the different dimensions of the selected theories. Furthermore, the developed PLS framework can be used as a base for managers to employ ISA methods for people with different personality types in organizations.

Place, publisher, year, edition, pages
Springer, 2024
Series
IFIP Advances in Information and Communication Technology, ISSN 1868-4238, E-ISSN 1868-422X ; 722
Keywords
Information security awareness methods; Learning styles; Personality types; Social influencing vulnerabilities
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-118695 (URN)10.1007/978-3-031-72563-0_7 (DOI)001561043300007 ()2-s2.0-85211330730 (Scopus ID)9783031725623 (ISBN)9783031725630 (ISBN)
Conference
18th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance (HAISA 2024), Skövde, Sweden, July 9-11, 2024
Available from: 2025-01-17 Created: 2025-01-17 Last updated: 2025-10-21Bibliographically approved
Kolkowska, E., Soja, E. & Soja, P. (2024). Determinants of Digital Transformation of Elderly Care: Preliminary Insights from Polish and Swedish Technology Providers. In: B. Marcinkowski; A. Przybylek; A. Jarzębowicz; N. Iivari; E. Insfran; M. Lang; H. Linger; C. Schneider (Ed.), Harnessing Opportunities: Reshaping ISD in the post-COVID-19 and Generative AI Era (ISD2024 Proceedings). Paper presented at 32nd International Conference on Information Systems Development (ISD 2024), Gdańsk, Poland, August 26-28, 2024. International Conference on Information Systems Development
Open this publication in new window or tab >>Determinants of Digital Transformation of Elderly Care: Preliminary Insights from Polish and Swedish Technology Providers
2024 (English)In: Harnessing Opportunities: Reshaping ISD in the post-COVID-19 and Generative AI Era (ISD2024 Proceedings) / [ed] B. Marcinkowski; A. Przybylek; A. Jarzębowicz; N. Iivari; E. Insfran; M. Lang; H. Linger; C. Schneider, International Conference on Information Systems Development , 2024Conference paper, Published paper (Refereed)
Abstract [en]

The current elderly care models are challenged by an ageing population and require digital transformation involving many stakeholders, among which technology providers appear under researched. To bridge this research gap, the current study examined the perceptions of technology providers regarding barriers and enablers in two contrasting socioeconomic contexts: Poland and Sweden. The analysis employed the five-dimensional SIM model as an analytical framework and allowed us to achieve a more nuanced understanding of the technology providers’ viewpoint on determinants of technology adoption for the digital transformation of elderly care. Our preliminary findings suggest that technology providers acknowledge their role in the transformation process and are willing to deliver quality solutions; however, they also perceive a number of environmental barriers that need be addressed at the governmental level. In addition, the results imply that socioeconomic context play a role in establishing a supportive environment for technology providers.

Place, publisher, year, edition, pages
International Conference on Information Systems Development, 2024
Series
Proceedings of the International Conference on Information Systems Development, E-ISSN 2938-5202
Keywords
Elderly Care, Digital Transformation, Determinants, Poland, Sweden
National Category
Information Systems, Social aspects
Identifiers
urn:nbn:se:oru:diva-126723 (URN)10.62036/ISD.2024.36 (DOI)9788397263208 (ISBN)
Conference
32nd International Conference on Information Systems Development (ISD 2024), Gdańsk, Poland, August 26-28, 2024
Available from: 2026-01-26 Created: 2026-01-26 Last updated: 2026-01-27Bibliographically approved
Organisations
Identifiers
ORCID iD: ORCID iD iconorcid.org/0000-0002-5270-1517

Search in DiVA

Show all publications