The engineering rationale, composed of established logic for the design and development of products, has been confronted by a shift to a circular economy. Digitalization (e.g., Industry 4.0) enables transformation, but it also increases relational complexities in scope and number. In Product–Service Systems (PSSs), the combination of manufactured goods and services should be delivered in new business models based on value-adding digital assistance. From a systems science view, such combinations cannot be managed by the same approach as if they were one uniform system; rather, it is an interdependent mix of technical, social, and digital designs. This paper initializes an updated conceptual discourse on PSSs and provides a reflection on the expected challenges in the transformation from linear to circular models. For example, the role of systems thinking to guide early design stages is discussed and the importance of processes for creating shared visions at different systems levels is suggested to be addressed in future research. The intention is to formulate thoughts about radical cognitive changes in order to realize the PSS paradigm.

Purpose: The study aims to revisit six previously defined challenges in information security risk management to provide insights into new challenges based on current practices. Design/methodology/approach: The study is based on an empirical study consisting of in-depth interviews with representatives from public sector organisations. The data were analysed by applying a practice-based view, i.e. the lens of knowing (or knowings). The results were validated by an expert panel. Findings: Managerial and organisational concerns that go beyond a technical perspective have been found, which affect the ongoing social build-up of knowledge in everyday information security work.. Research limitations/implications: The study has delimitation as it consists of data from four public sector organisations, i.e. statistical analyses have not been in focus, while implying a better understanding of what and why certain actions are practised in their security work. Practical implications: The new challenges that have been identified offer a refined set of actionable advice to practitioners, which, for example, can support cost-efficient decisions and avoid unnecessary security trade-offs. Originality/value: Information security is increasingly relevant for organisations, yet little is still known about how related risks are handled in practice. Recent studies have indicated a gap between the espoused and the actual actions. Insights from actual, situated enactment of practice can advise on process adaption and suggest more fit approaches.

This paper presents an explorative study and the results of 17 interviews with informants from different companies. Its purpose is to identify the challenges associated with implementing agile methods along with the established procedures for early design. The study exemplifies project leaders’ experiences and implementation efforts. As leaders of design projects, they have proposed the use of a new method that involves teams engaging in testing and evaluation, which aids in the understanding and introduction of change initiatives. The challenges that are identified are as follows: (1) a lack of approval not only from top managers but also from critical peers; (2) an unprepared organization that did not allow teamwork; and (3) a lack of specific company success factors to support new methods.

A new vision in manufacturing is to develop product-service integrated value solutions. Today, few firms have fully realized this vision because they are not able to support the reasoning in the early stages of design. The purpose of this paper is to

This article presents scenarios designed to support abstract and reflective thinking necessary to inculcate information security awareness among IT service designers. Data for the study was obtained in empirical interventions and through an action research approach in cooperation with an IT company. The findings highlight the need for training that, in combination with traditional contents, also integrates organizational, business, and social aspects into information security awareness. Rethinking a strategy for training to be grounded in scenarios from day-to-day business activities is one implication of the study; another is the suggestion to frame the scenarios as dilemmas, that is, problematic and realistic situations having multiple solutions depending on interpretations and perspectives, and a final conclusion is the importance of enabling structured in-depth dialogues among employees.