Papers
Sysadmins and the Need for Verification Information
Nicole F. Velasquez, University of Arizona, Alexandra Durcikova, University of Arizona
Traditional usability measures may not be sufficient for some
specialized users, such as system administrators. Because of their
broad range of responsibilities for highly complex and risky
business environments, these users also need tools that are
powerful, informative, and credible. To do their work, system
administrators need the ability to verify the work they have done.
That verification comes from accurate and available information
that we refer to as information credibility. This exploratory
research aims to address the relationship between task complexity,
task risk, and verification information seeking in GUI tools used
by system administrators. Potential antecedents of information
verification are identified and a model is proposed that addresses
how aspects of the task and environment affect the need for
verification. Findings suggest that task complexity is a significant
indicator of the need for verification information. Armed with
this knowledge, practitioners can anticipate the needs of system
administrators and design GUI tools with information credibility
in mind.
Information Displays for Managing Shared Files
Tara Whalen, Dalhousie University, Elaine G. Toms, Dalhousie University, James Blustein, Dalhousie University
Within the workplace setting, people need to provide sufficient
access to files to allow collaboration, without inadvertently
exposing sensitive files. Evidence suggests that file sharing
problems exist, and decrease security and interfere with
collaboration. A potential solution for managing these problems is
to present the user with clear information about file sharing
settings and activities. Current file managers either hide the
information or simply do not provide it. Using an awareness
framework, we identified the core information that users need to
be aware of for file sharing situations, performed two studies to
determine how to best represent those concepts as labels and
icons, and developed a prototype for a file manager that reveals
file sharing activity. The results of these design activities can be
adopted for other file sharing applications, improving their
security and collaborative usability.
Understanding and Supporting Personal Activity Management by IT Service Workers
Victor M. Gonzalez, University of Manchester, Leonardo Galicia, CICESE, Jesus Favela, CICESE
Many recent studies provide evidence of the challenges
experienced by knowledge workers while multi-tasking among
several projects and initiatives. Work is often interrupted, and this
results in people leaving activities pending until they have the
time, information, resources or energy to reassume them. Among
the different types of knowledge workers, those working directly
with Information Technology (IT) or offering IT services –
software developers, support engineers, systems administrators or
database managers –, experience particularly challenging
scenarios of multi-tasking given the varied, crisis-driven and
reactive nature of their work. Previous recommendations and
technological solutions to ameliorate these challenges give limited
attention to individual’s preferences and to understanding how
and what tools and strategies could benefit IT service workers as
individuals. Based on the analysis of characteristics of IT service
work and a consolidation of findings regarding personal activity
management processes, we present the design of a software tool to
support those processes and discuss findings of its usage by four
IT service workers over a period of eight weeks. We found that
the tool is used as a central repository to orchestrate personal
activity, complementing the use of e-mail clients and shared
calendars as well as supporting essential aspects of IT-service
work such as multi-tasking and detailed work articulation.
Work Practices of System Administrators: Implications for Tool Design
Nicole F. Velasquez, IBM, Suzanne P. Weisband, University of Arizona
System administrators are specialized workers and computer users. As skilled workers in complex and high-risk environments, intuition tells us this unique user group may have requirements of the systems and software they use that differ from the requirements of regular computer users. An examination of system administrator work practices sheds light on the system attributes and characteristics they need to do their jobs. Through shadowing, interviews, and a review of previous system administrator studies, we present information and system quality attributes that appear to be important to system administrators. Following a discussion of these attributes, we present a model of user satisfaction that provides actionable guidance and an integration of the attributes. We close with a discussion of the research findings and a call for future research in this area.
Network Authentication using Single Sign-On:The Challenge of Aligning Mental Models
Rosa Heckle, University of Maryland, Baltimore County, Wayne G. Lutters, University of Maryland, Baltimore County, David Gurzick, University of Maryland, Baltimore County
Healthcare organizations are struggling to meet industry best
practices for information security as well as complying with
regulatory requirements. Single sign-on technology is emerging
as a leading technology for password authentication management
and promises to improve security while curbing system
maintenance costs. While the technology seems to be a simple
viable solution for authentication, when placed in context, many
socio-technical complexities emerge. One of these complexities is
that of the mismatch between the users’ mental models and the
system model.
This study was a 15-month ethnographic field study that followed
the implementation of a single sign-on system in a hospital
environment. It resulted in the finding that the misaligned mental
models caused difficulties not only for the user but for the system
administrators. The findings also indicate that not only was the
user’s mental model of the technology inaccurate, but the
presentation of the technology by the information technology
group contributed to this misaligned understanding. The end
result was dissatisfaction with the new technology for both end
users and the system administrators.
In order to address the critical issue of mental model
misalignment in the implementation of SSO technology,
practitioners must first gain an understanding of the preexisting
mental models had by the target users regarding authentication
and then use this information to guide implementation of the new
technology.
Towards Virtualizing the Helpdesk: Assessing the Relevance of Knowledge
across Distance
Kevin F. White, University of Maryland, Baltimore County, Wayne G. Lutters, University of Maryland, Baltimore County, Anita H. Komlodi, University of Maryland, Baltimore County,
Managers of information systems face a knowledge crisis as they operate
in increasingly heterogeneous, hostile, expertise-poor environments.
This problem is compounded for small organizations. This paper presents
results from field research on the feasibility of fostering
cross-organizational knowledge sharing in order to expand access to
expertise for pernicious problems while minimizing the loss of context,
such as situational and environmental factors, that impacts the
usefulness of solutions. This essentially creates a virtual,
cross-organizational helpdesk.
In order to understand the utility of such a system we explore how
employees? satisfaction with helpdesk articles changes as the source of
the articles moves further away from local creation to generic
solutions. Our findings suggest that procedurally-based information
available within major Internet repositories tends to be the most highly
relevant and valued within organizations. However, when no documentation
is available from manufacturers, information contributed by partner
sites is more effective than those solely developed in-house. This paper
suggests strategies for reusing information to impact work within small
organizations.
Guidelines for Designing IT Security Management Tools
Pooya Jaferian, University of British Columbia, David Botta, University of British Columbia, Fahimeh Raja, University of British Columbia, Kirstie Hawkey, University of British Columbia, Konstantin Beznosov, University of British Columbia
An important factor that impacts the effectiveness of security systems
within an organization is the usability of security management tools. In
this paper, we present a survey of design guidelines for such tools. We
gathered guidelines and recommendations related to IT security
management tools from the literature as well as from our own prior
studies of IT security management. We categorized and combined
these into a set of high level guidelines and identifed the
relationships between the guidelines and challenges in IT
security management. We also illustrated the need for the
guidelines, where possible, with quotes from additional interviews with
five security practitioners. Our framework of guidelines can be used by
those developing IT security tools, as well as by practitioners and
managers evaluating tools.