<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Urpo Kaila</style></author><author><style face="normal" font="default" size="100%">Linus Nyman</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Information Security Best Practices: First Steps for Startups and SMEs</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">best practices</style></keyword><keyword><style  face="normal" font="default" size="100%">cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">information security</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">SMEs</style></keyword><keyword><style  face="normal" font="default" size="100%">startups</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2018</style></year><pub-dates><date><style  face="normal" font="default" size="100%">11/2018</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">https://timreview.ca/article/1198</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">8</style></volume><pages><style face="normal" font="default" size="100%">32-42</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This article identifies important first steps toward understanding and implementing information security. From the broad selection of existing best practices, we introduce a lightweight yet comprehensive security framework with four useful first steps: identifying assets and risks; protecting accounts, systems, clouds, and data; implementing a continuity plan; and monitoring and reviewing. This article is intended primarily for startups and less mature companies, but it is likely to be of interest to any reader seeking an introduction to basic information security concepts and principles as well as their implementation.</style></abstract><issue><style face="normal" font="default" size="100%">11</style></issue><custom1><style face="normal" font="default" size="100%">Finnish IT Center for Science (CSC)
Urpo Kaila is the Head of Security for CSC – the Finnish IT Center for Science. His background in the information security industry, with long experience in handling security incidents as well as developing solutions for information security and data protection. He has been responsible to achieve the valued ISO/IEC 27001 information security management certification for CSC and is a steering committee member in security groups for some European Research Infrastructures, such as WISE and GÉANT SIG-ISM. Urpo holds the professional international information security certificates CISSP, GCIH, GCED, CISM, and ISO 27001 Lead Auditor. He also holds a Master’s degree from the Hanken School of Economics. His research focuses on best practices in information security and data protection.</style></custom1><custom2><style face="normal" font="default" size="100%">Hanken School of Economics
Linus Nyman is an Assistant Professor at the Hanken School of Economics in Helsinki, Finland, and an Adjunct Research Professor in the Technology Innovation Management (TIM) program at Carleton University in Ottawa, Canada. He has lectured on a range of topics, including information security and privacy, information systems science, corporate strategy, and open source software development. His current research focuses on information security and privacy, which are topics he also covers in a blog for the Finnish daily newspaper &lt;em&gt;HBL.&lt;/em&gt; Linus holds a PhD and a Master’s degree, both from the Hanken School of Economics.</style></custom2></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Hugh Rooney</style></author><author><style face="normal" font="default" size="100%">Brian Aiken</style></author><author><style face="normal" font="default" size="100%">Megan Rooney</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Q&amp;A. Is Internal Audit Ready for Blockchain?</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">blockchain</style></keyword><keyword><style  face="normal" font="default" size="100%">controls</style></keyword><keyword><style  face="normal" font="default" size="100%">governance</style></keyword><keyword><style  face="normal" font="default" size="100%">internal audit</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2017</style></year><pub-dates><date><style  face="normal" font="default" size="100%">10/2017</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/1113</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">7</style></volume><pages><style face="normal" font="default" size="100%">41-44</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><issue><style face="normal" font="default" size="100%">10</style></issue><custom1><style face="normal" font="default" size="100%">Tendermint/COSMOS
Hugh Rooney is a member of the Tendermint/COSMOS team who are building blockchain infrastructure that will provide unparalleled scalability, security, and interoperability to the next generation of blockchain-based applications. Hugh holds an MBA from the Richard Ivey School of Business in London, Canada, and has extensive experience in the application of leading-edge technologies to a wide range of business problems in both the public and private sectors.</style></custom1><custom2><style face="normal" font="default" size="100%">Audit Committee to the Auditor General of Canada
Brian Aiken is an External Board Member of the Audit Committee to the Auditor General of Canada. He has held a variety of management positions at the Bank of Canada, including oversight for financial systems, strategic planning, corporate security, and internal audit. He later joined the Royal Canadian Mounted Police as a Chief Audit Executive, with responsibility for internal audit, program evaluation, and quality assurance and management review. He completed his career as the Assistant Comptroller General, Internal Audit, at the Treasury Board Secretariat of Canada. He holds a Bachelor’s degree in business administration from the University of Ottawa and is a Certified Internal Auditor and Certified Fraud Examiner.</style></custom2><custom3><style face="normal" font="default" size="100%"> 
Megan Rooney is a law student at Osgoode Hall Law School in Toronto, Canada, with an interest in the practical implications of technology on governance. A graduate of the Theatre Production and Management program at York Universities Fine Arts Department (Cum Laude and Dean’s List). Megan was a Senior Editor at the &lt;em&gt;Osgoode Hall Law Journal&lt;/em&gt; and has worked as a research assistant to several professors as well as the International Institute of Business Analysis (IIBA).</style></custom3></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Luca Urciuoli</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Cyber-Resilience: A Strategic Approach for Supply Chain Management</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cross-border trade</style></keyword><keyword><style  face="normal" font="default" size="100%">cyber-resilience</style></keyword><keyword><style  face="normal" font="default" size="100%">ICT</style></keyword><keyword><style  face="normal" font="default" size="100%">IT</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">supply chain management</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2015</style></year><pub-dates><date><style  face="normal" font="default" size="100%">04/2015</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/886</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">5</style></volume><pages><style face="normal" font="default" size="100%">13-18</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">Risk management and resilience strategies in supply chains have an important role in ensuring business continuity and reliability in a cost-efficient manner. Preventing or recovering from disruptions requires access and analysis of large amounts of data. Yet, given the multiple stakeholders, operations, and environmental contexts in which a global supply chain operates, managing risks and resilience becomes a challenging task. For this reason, information and communication technologies (ICT) are being developed to support managers with tailored tools and services to monitor disruptions, enhance instantaneous communication, and facilitate the quick recovery of supply chains. Hence, the objective of this article is to shed light on managerial strategies to improve the resilience of supply chains and thereby to point out how these could be automated by means of innovative ICT systems. In particular, this article concludes by warning about existing challenges to implementing such systems. If these challenges are not correctly addressed by managers, there is a major risk of further jeopardizing supply chains.</style></abstract><issue><style face="normal" font="default" size="100%">4</style></issue><custom1><style face="normal" font="default" size="100%">Zaragoza Logistics Center
Luca Urciuoli is an Associate Research Professor in the MIT International Logistics Program within the Zaragoza Logistics Center in Spain, where he teaches and performs research in supply chain network design, supply chain risk, and security management. He holds an MSc degree in Industrial Engineering from Chalmers University of Technology in Gothenburg, Sweden, and a Doctorate in Transportation Security from the Engineering University of Lund, Sweden. He has been working at the research unit of the Volvo group as a project manager developing on-board transport and telematics services. He also led the research of the Cross-border Research Association in Switzerland and collaborated in several FP7 research and consultancy projects, with a focus on topics such as e-Customs, trade facilitation, supply chain security, waste security, and postal security. He is also an editorial board member for the &lt;em&gt;Journal of Transportation Security&lt;/em&gt;, and he has published his research in several scientific and practitioner journals. 
Contact: &lt;a href=&quot;mailto:lurciuoli@zlc.edu.es&quot;&gt;lurciuoli@zlc.edu.es&lt;/a&gt;</style></custom1></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Hugh Boyes</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Cybersecurity and Cyber-Resilient Supply Chains</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cyber-resilience</style></keyword><keyword><style  face="normal" font="default" size="100%">cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">supply chain</style></keyword><keyword><style  face="normal" font="default" size="100%">threat management</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2015</style></year><pub-dates><date><style  face="normal" font="default" size="100%">04/2015</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/888</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">5</style></volume><pages><style face="normal" font="default" size="100%">28-34</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">There has been a rapid growth in the use of communications and information technology, whether embedded in products, used to deliver services, or employed to enable integration and automation of increasingly global supply chains. Increased use of information technology introduces a number of cybersecurity risks affecting cyber-resilience of the supply chain, both in terms of the product or service delivered to a customer and supply chain operation. The situation is complicated by factors such as the global sourcing of technology components or software, ownership of the systems in a supply chain, different legal jurisdictions involved, and the extensive use of third parties to deliver critical functionality. This article examines the cyber-resilience issues related to the supply of products, services, and the supply chain infrastructure considering the nature of threats and vulnerabilities and the attributes of cybersecurity. In doing so, it applies a model for cybersecurity that is adapted from the Parkerian hexad to explore the security and trustworthiness facets of supply chain operations that may impact cyber-resilience.</style></abstract><issue><style face="normal" font="default" size="100%">4</style></issue><custom1><style face="normal" font="default" size="100%">University of Warwick
Hugh Boyes is a Principal Fellow at WMG at the University of Warwick, United Kingdom, where he focuses on cyber-resilience and the cybersecurity of cyber-physical systems. He is a Chartered Engineer, a Fellow of the IET and holds the CISSP credential issued by (ISC)&lt;sup&gt;2&lt;/sup&gt;. Hugh is also the Cyber Security Lead at the Institution of Engineering and Technology (IET), where he focuses on developing cybersecurity skills initiatives for engineering and technology communities. This work is particularly focused on the design and operation of physical-cyber systems (e.g., industrial control systems, building automation systems). He has written two guidance documents for the Institution of Engineering and Technology (IET) on cybersecurity in the built environment, and with Alex Luck, is the joint technical author of a BSI publicly available specification (PAS) on security-minded building information modeling, digital built environments, and smart asset management.</style></custom1></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Chris McPhee</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Editorial: Insights (June 2013)</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">case study</style></keyword><keyword><style  face="normal" font="default" size="100%">intellectual property</style></keyword><keyword><style  face="normal" font="default" size="100%">IT function</style></keyword><keyword><style  face="normal" font="default" size="100%">open source business</style></keyword><keyword><style  face="normal" font="default" size="100%">process ambidexterity</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">software licenses</style></keyword><keyword><style  face="normal" font="default" size="100%">startups</style></keyword><keyword><style  face="normal" font="default" size="100%">technology entrepreneurship</style></keyword><keyword><style  face="normal" font="default" size="100%">uncertainty</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2013</style></year><pub-dates><date><style  face="normal" font="default" size="100%">06/2013</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/689</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">3</style></volume><pages><style face="normal" font="default" size="100%">3-4</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><issue><style face="normal" font="default" size="100%">6</style></issue><custom1><style face="normal" font="default" size="100%">Technology Innovation Management Review
Chris McPhee is Editor-in-Chief of the &lt;em&gt;Technology Innovation Management Review&lt;/em&gt;. Chris holds an MASc degree in Technology Innovation Management from Carleton University in Ottawa and BScH and MSc degrees in Biology from Queen's University in Kingston. He has over 15 years of management, design, and content-development experience in Canada and Scotland, primarily in the science, health, and education sectors. As an advisor and editor, he helps entrepreneurs, executives, and researchers develop and express their ideas.</style></custom1></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Rich Goyette</style></author><author><style face="normal" font="default" size="100%">Yan Robichaud</style></author><author><style face="normal" font="default" size="100%">François Marinier</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">A Research Agenda for Security Engineering</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">information system security engineering</style></keyword><keyword><style  face="normal" font="default" size="100%">research</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">security engineering</style></keyword><keyword><style  face="normal" font="default" size="100%">security measurement</style></keyword><keyword><style  face="normal" font="default" size="100%">threat modelling</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2013</style></year><pub-dates><date><style  face="normal" font="default" size="100%">08/2013</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/715</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">3</style></volume><pages><style face="normal" font="default" size="100%">41-50</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">Despite nearly 30 years of research and application, the practice of information system security engineering has not yet begun to exhibit the traits of a rigorous scientific discipline. As cyberadversaries have become more mature, sophisticated, and disciplined in their tradecraft, the science of security engineering has not kept pace. The evidence of the erosion of our digital security – upon which society is increasingly dependent – appears in the news almost daily.

In this article, we outline a research agenda designed to begin addressing this deficit and to move information system security engineering toward a mature engineering discipline. Our experience suggests that there are two key areas in which this movement should begin. First, a threat model that is actionable from the perspectives of risk management and security engineering should be developed. Second, a practical and relevant security-measurement framework should be developed to adequately inform security-engineering and risk-management processes. Advances in these areas will particularly benefit business/government risk assessors as well as security engineers performing security design work, leading to more accurate, meaningful, and quantitative risk analyses and more consistent and coherent security design decisions.

Threat modelling and security measurement are challenging activities to get right – especially when they need to be applied in a general context. However, these are decisive starting points because they constitute the foundation of a scientific security-engineering practice. Addressing these challenges will require stronger and more coherent integration between the sub-disciplines of risk assessment and security engineering, including new tools to facilitate that integration. More generally, changes will be required in the way security engineering is both taught and practiced to take into account the holistic approach necessary from a mature, scientific discipline.</style></abstract><issue><style face="normal" font="default" size="100%">8</style></issue><custom1><style face="normal" font="default" size="100%">Communications Security Establishment Canada
Richard Goyette is Senior Security Architect at Communications Security Establishment Canada. Richard has a BEng and MEng in Electrical Engineering, both from the Royal Military College of Canada in Kingston, Canada. Richard spent 22 years as a Signals officer in the Canadian Forces, where he was involved with a multitude of projects in the areas of intelligence, security, and command and control. He is currently employed in the area of architecture and technology assurance developing security guidance for the wider Government of Canada.</style></custom1><custom2><style face="normal" font="default" size="100%">Communications Security Establishment Canada
Yan Robichaud is a Senior Security Architect at Communications Security Establishment Canada. Yan has a BASc degree in Computer Engineering and MSc degree in Electrical Engineering, both from Université Laval, Québec City, Canada. He provides advice and guidance related to security architecture and engineering, threat assessment, and risk management to Government of Canada departments and agencies. He is involved in key government IT initiatives, such as large IT consolidation projects, enterprise security architecture, and the security of space-based systems. Yan is also involved in the development of IT security courses and leads the production of publications about IT-security guidance, such as &quot;ITSG-33 IT Security Risk Management: A Lifecycle Approach&quot;.</style></custom2><custom3><style face="normal" font="default" size="100%">
François Marinier is an independent IT security analyst with experience in all facets of IT-security risk management. François started his career working in computer operations and mainframe application support. He eventually migrated to IT security, where he acquired knowledge and experience in the development and application of processes for IT-security risk management. He has also worked as an analyst, supporting large IT-infrastructure initiatives, in both the public and private sectors. For the last three years, François has dedicated his work almost exclusively to the development of ITSG-33, the next generation of guidelines for IT security risk management for the Government of Canada.</style></custom3></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Suchita Nirosh Kannangara</style></author><author><style face="normal" font="default" size="100%">Peter Uguccioni</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">Risk Management in Crowdsourcing-Based Business Ecosystems</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">business ecosystem health</style></keyword><keyword><style  face="normal" font="default" size="100%">business ecosystems</style></keyword><keyword><style  face="normal" font="default" size="100%">crowdsourcing</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2013</style></year><pub-dates><date><style  face="normal" font="default" size="100%">12/2013</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/751</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">3</style></volume><pages><style face="normal" font="default" size="100%">32-38</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">The benefits of crowdsourcing are enabled by open environments where multiple external stakeholders contribute to a firm's outcomes. However, crowdsourcing typically has been examined as a general process and not from the specific perspective of a mechanism for driving value creation and capture within a business ecosystem. In this conceptual article, we highlight this research gap by examining crowdsourcing from a business ecosystem perspective and by identifying the inherent business risks in crowdsourcing-based business ecosystems. We apply the concept of ecosystem health to the crowdsourcing context, in terms of how firms create and capture value, and we examine the methods by which these firms can maximize health by mitigating risk in crowdsourcing-based business ecosystems.</style></abstract><issue><style face="normal" font="default" size="100%">12</style></issue><custom1><style face="normal" font="default" size="100%">Carleton University
Nirosh Kannangara is a graduate student in the Technology Innovation Management (TIM) program at Carleton University in Ottawa, Canada. He holds a BEng in Communications Engineering, also from Carleton University. Nirosh has more than two years of experience designing software in the optical transport communication industry and currently works as a Photonics Software Engineer at Ciena Corporation.</style></custom1><custom2><style face="normal" font="default" size="100%">Carleton University
Peter Uguccioni is a graduate student in the Technology Innovation Management (TIM) program at Carleton University in Ottawa, Canada. He holds a bachelor's degree in Computer Science from the University of Ottawa. Peter has more than 20 years of experience in software development and as a manager of technology innovation at a variety of firms in Ottawa.</style></custom2></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Paul Card</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">TIM Lecture Series – Using Risk to Drive a Security Service</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">cybersecurity</style></keyword><keyword><style  face="normal" font="default" size="100%">platforms</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">security</style></keyword><keyword><style  face="normal" font="default" size="100%">services</style></keyword><keyword><style  face="normal" font="default" size="100%">strategy</style></keyword><keyword><style  face="normal" font="default" size="100%">uncertainty</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2013</style></year><pub-dates><date><style  face="normal" font="default" size="100%">06/2013</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/696</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Talent First Network</style></publisher><pub-location><style face="normal" font="default" size="100%">Ottawa</style></pub-location><volume><style face="normal" font="default" size="100%">3</style></volume><pages><style face="normal" font="default" size="100%">42-45</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><issue><style face="normal" font="default" size="100%">6</style></issue><custom1><style face="normal" font="default" size="100%">Seccuris
Paul Card is Director of R&amp;D at Seccuris. He has more than 10 years of experience working with domestic and international companies to advance technology, research, and development strategies. Prior to joining Seccuris, Paul was a Research Scientist at TR Labs, where he was responsible for the security research portfolio. He has worked with over 20 different ICT companies in research and development activities. Paul holds a PhD and MSc in Electrical and Computer Engineering from the University of Manitoba in Winnipeg, Canada. Paul is an Adjunct Professor of the University of Manitoba, and he is a member of the IEEE and the ACM. </style></custom1></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Tony Lackey</style></author></authors></contributors><titles><title><style face="normal" font="default" size="100%">TIM Lecture Series: The Importance of Dealing with Risk for New Businesses</style></title><secondary-title><style face="normal" font="default" size="100%">Technology Innovation Management Review</style></secondary-title></titles><keywords><keyword><style  face="normal" font="default" size="100%">insurance</style></keyword><keyword><style  face="normal" font="default" size="100%">risk management</style></keyword><keyword><style  face="normal" font="default" size="100%">startups</style></keyword><keyword><style  face="normal" font="default" size="100%">technology entrepreneurship</style></keyword></keywords><dates><year><style  face="normal" font="default" size="100%">2012</style></year><pub-dates><date><style  face="normal" font="default" size="100%">04/2012</style></date></pub-dates></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://timreview.ca/article/550</style></url></web-urls></urls><volume><style face="normal" font="default" size="100%">2</style></volume><pages><style face="normal" font="default" size="100%">41-43</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><issue><style face="normal" font="default" size="100%">4</style></issue><custom1><style face="normal" font="default" size="100%">Carleton University
Tony Lackey is Manager of Risk and Insurance at Carleton University in Ottawa, Canada, where he also lectures in the Sprott School of Business. Prior to coming to Carleton, he spent over 18 years in the general insurance industry, the last four of which in the role of Regional Claims Manager at a large Canadian mutual insurance company. Tony also operating an independent consulting business where he offered technical audit services and developed claims systems. He has also held executive positions with several insurance and non-profit organisations. Tony holds a BA from Carleton University and the Certified Risk Manager (CRM) designation. He is also a Fellow of the Global Risk Management Institute and a Fellow Certified Insurance Professional. He is an active member of the Risk and Insurance Managers Society and is Past-President of the Ottawa chapter. </style></custom1></record></records></xml>