Papers by Harri Ruoslahti
WMU studies in maritime affairs, 2018
Tiede ja ase, Dec 29, 2020

Information & Security, 2020
The European Union (EU) promotes European innovation. Diverse stakeholders have opportunities to ... more The European Union (EU) promotes European innovation. Diverse stakeholders have opportunities to create knowledge by engaging in innovation projects. Society expects that projects review how they impact on the community and how they share knowledge and deliver outcomes. This systematic literature review is based on a key word search and analysis of a final sample of 31 academic papers by extracting relevant data from the articles into a Data Extraction Table (DET). Results indicate that four main themes discussed emerge from the sample literature: ICT alignment, Organisational Culture, Innovation Culture, and ICT-readiness. Organizational Learning approaches can provide a framework to design methodology for conducting Societal Impact Assessment, and E-skills and Training. This study specifically adds to the body of knowledge of approaches to organisational learning This perspective can provide additional elements towards the development of a more comprehensive Societal Impact Assessment Toolkit and E-skills and Training Toolkit for the ECHO project.
Journal of Innovation & Knowledge, Oct 1, 2020
This is a self-archived version of an original article. This version may differ from the original... more This is a self-archived version of an original article. This version may differ from the original in pagination and typographic details.

Information & Security, 2020
The Covid19-virus outbreak during the spring of 2020 forced many changes in work, life and societ... more The Covid19-virus outbreak during the spring of 2020 forced many changes in work, life and society. Laurea University of Applied Sciences (Laurea) closed all of its six campuses on March 9, 2020, and all teaching activities were transferred to online communication and learning platforms such as Zoom, Teams and Optima. This article presents qualitative case study research. Six teachers of Laurea University of Applied Sciences wrote short narratives of their experiences in moving from classroom to online teaching. The narratives were analysed, and the results grouped under relevant themes: Level of Preparation, Challenges and Risks, and Student Feedback and New ways of Work. The transition from classroom to online teaching was relatively easy for the respondents. The main reason was that the program already had created extensive online content and could be used for a fast transition. The contribution of this article is in presenting one practical case of rapid transition from classroom to online learning.

Advances in public relations and communication management, Sep 21, 2018
Co-creation of knowledge offers significant opportunities for innovation. This chapter seeks to g... more Co-creation of knowledge offers significant opportunities for innovation. This chapter seeks to gain understanding of the process of co-creation of knowledge for innovation and Public Relations in multi-stakeholder projects by exploring current insights in academic literature. The research questions look at how co-creation of knowledge for innovation has been investigated in the scholarly literature; the roles of end-users; and the modes and challenges of end user participation and in collaboration relating to communication. The method of this chapter is a structured literature review, following a series of rigorous steps: a search of databases, analysis of 33 articles found, summarizing relevant content using a data extraction table and a data extraction continuum as analysis tools to show the range of projects discussed in the literature to create a comprehensive overview. The findings indicate that multi-stakeholder networks can be structured for different aims. In the articles found different types of projects were investigated. Four categories of projects were found: (1) Co-creation projects benefiting one company; (2) Co-creation projects benefiting business-to-business value chain networks; (3) Co-creation projects benefiting public entities; and (4) Co-creation projects benefiting innovation network stakeholders. Complexity is highest for multiple-stakeholder co-creation projects benefiting innovation network stakeholders, where the roles between stakeholders are fluid and changing constantly. Solving common issues motivates the stakeholders to collaborate and build trust. Open innovation environments may facilitate communication and interaction. Co-creation of knowledge requires intensive collaboration. Knowing the main challenges to address this, will help the functioning of co-creation collaboration networks and their Public Relations.

Zenodo (CERN European Organization for Nuclear Research), Jun 30, 2021
ECHO is a cybersecurity pilot project under the H2020 Program. The ECHO Federated Cyber Range (E-... more ECHO is a cybersecurity pilot project under the H2020 Program. The ECHO Federated Cyber Range (E-FCR) provides enabling technology supporting ECHO Network operations, ensuring a safe and reliable multi-sector simulation environment in which to ensure viable delivery of identified technology roadmaps, as well as, hands-on cyber-skills development involving realistic sector specific or multi-sector simulations. A cyber range leverages cloud technologies to provide a virtualized environment in which realistic cyber scenarios can be instantiated. The eHealth platform by project SHAPES will rely on services and products provided by vendors. Operability and usability of the platform requires reliable, uninterrupted and well-managed actions from the systems utilized to run services of the eHealth platform. The SHAPES platform operates in the cyber domain and the taxonomy of cyber-risks vary from actions of people due lack of cybersecurity awareness to technology failures. Moreover, threats from malicious external sources might exploit vulnerabilities of SHAPES assets and therefore cause damage. Predefined security validation procedures facilitate to create a baseline for services and their desired level of security. This work-in-progress paper explores how to apply E-FCR during eHealth-services validation processes. The paper profits two Horizon-2020 projects: The ECHO cybersecurity project demonstrating how to utilize E-FCR in the healthcare domain; and the SHAPES healthcare project that needs a cybersecurity validation processes for services incorporated into the SHAPES platform.
Current critical infrastructures can be considered Cyber Physical Systems (CPS), which seamlessly... more Current critical infrastructures can be considered Cyber Physical Systems (CPS), which seamlessly integrate human, physical, and computational elements. Data for this case study is collected from 16 R&D projects from three Finnish universities. Results indicate that future CPS competences are multidisciplinary, and include many industrial sectors, academic disciplines, and theories. In this paper, the writers argue that such multi-stakeholder collaboration is needed to control complex integrated Cyber Physical Systems of critical infrastructure, and that CPS education should cover all CPS domains (physical, informational, cognitive, and social) and event-management cycles (plan/prepare, absorb, recover, and adapt), and should focus on cooperation and information sharing between the different stakeholders involved.
A co-created network community for knowledge and innovations-promoting safety and security in the... more A co-created network community for knowledge and innovations-promoting safety and security in the arctic. In Dejan Verčič, Ana Tkalac Verčič and Krishnamurthy Sriramesh (Editors) Engaging people in a disengaged world.

Information & Security, 2020
The European Union promotes innovation through its funding programmes for research and innovation... more The European Union promotes innovation through its funding programmes for research and innovation. To support the innovation process, one of these projects, ECHO, aims to deliver a Societal Impact Assessment (SIA) toolkit to assess the impact of establishing a European network of cybersecurity competence centres. This article provides an overview of the theoretical foundations on network co-creation and inter-organizational knowledge transfer as learning outcomes, and discusses these approaches in performing impact assessment at the societal level. Literature review on evaluation and assessment, co-creative innovation, and learning approaches are examined, summarized and combined into a learning and SIA-outcomes Matrix. Measurement of impacts through a digital Societal Impact Assessment toolkit can improve the quality of the value creation. Towards that purpose, we offer an approach that combines traditional evaluation and assessment, co-creative innovation, learning and SIA-outcomes in a practical Matrix to provide an applicable element towards a more comprehensive SIA-toolkit for the ECHO network.
Cooperation on the Arctic domain between Russia,

Current critical infrastructures can be considered cyber-physical systems (CPS). CPS are a subset... more Current critical infrastructures can be considered cyber-physical systems (CPS). CPS are a subset of sociotechnical systems that provide seamless integration between computational, human and physical elements. The National Academy of Sciences identifies four event management cycles that a system needs to maintain to be resilient: 1) Selfmodify/Plan/Prepare, 2) Absorb, 3) Recover, and 4) Adapt and learn. The Network-Centric Warfare doctrine identifies four domains that create shared situational awareness and inform decentralized decision-making: 1) Physical, 2) Information, 3) Cognitive, 4) Social. The research data of our case study is collected from authentic research and development projects (n=16) from three Finnish universities. Results indicate that future competences with regard to CPS are multidisciplinary including many industrial sectors and academic disciplines as well as multiple theories. Designing new curriculums and educational needs with regard to CPS, could benefit from the design science research (DSR) framework from Hevner and Chatterjee (2010). We have exploited the DSR framework for mapping future educational needs with regard to CPS and relevant industrial sectors and academic disciplines should be included. This paper argues that CPS education should, in all cases, cover both the four CPS domains (physical, information, cognitive and social) as well as all event management cycles (plan/prepare, absorb, recover and adapt). Traditional safety and security thinking has been based on the supposition that we can focus our actions in controlling our own systems and to stay inside a "circle of protection". Thus, multi-stakeholder coordination and cooperation are needed, as no one actor alone can control complex large integrated cyber-physical systems of critical infrastructure. The focus of CPS education should thus also focus on cooperation and information sharing between the different different stakeholders. This is the way to promote more resilient complex systems of systems. Students need frameworks and models that enable resilience management across the entire network to maintain and improve critical functionalities.

The most intrusive parts used in law enforcement surveillance operations are the pieces of survei... more The most intrusive parts used in law enforcement surveillance operations are the pieces of surveillance equipment and the data they produce. At the moment, no authenticated permission token is needed. If a token is not required, this simply means that the usage cannot be monitored. There is not even proof of correct usage of the equipment. A similar kind of a problem exists with the data produced by the processes. With the current systems, it cannot be determined when, where and by whom the data were produced. Also, it cannot be said whether the collected data are the same kind of data that were authorized to be collected. When coercive methods are used, the authority should be asked if the equipment is able to work without a token, if there is someone who knows about the operation and can be identified, if the equipment can be used without authorization, if the amount of data can be identified, and if the equipment used has been under control the entire time.

Law enforcement agencies (LEAs) constantly seek new technological recording, retrieving and monit... more Law enforcement agencies (LEAs) constantly seek new technological recording, retrieving and monitoring solutions that would facilitate their combat against organized crime. For example, GPS sensors and systems benefit LEAs when tracking non-cooperative targets. However, the management of numerous electronic tracking devices within many simultaneous crime investigations has proven to be a demanding task for LEAs. Complications have spawned many lawsuits and negative publicity. These episodes have diminished citizens' trust in a constitutional state. It has been verified by means of participative observations that LEAs have a tendency to create two-level systems: some that work on the streets and others that are valid in the courts of justice, which create tensions between authorities. The importance of transparency is emphasized at all EU administrative levels. However, LEAs concentrate only on data acquisition rather than on making their operations transparent throughout. To protect the privacy of suspects, investigations and data acquisition cannot be made public. However, these operations could be so transparent that they enable criticism and control by citizens. To improve the processes of LEAs, the three main functions (crime investigation, chain-of-custody and monitoring-of-legality) should be considered together. Combining their now separate information systems will avoid the triple workload. It will also lead to additional benefits, such as transparency of surveillance and a new tool for achieving a balance between surveillance and privacy. The guidelines for this combining cannot be drawn from criminal justice and organizational imperatives alone, but from ever advancing technical imperative, too.

Annals of disaster risk sciences, Nov 17, 2020
Critical infrastructures often lack resilience and easily lose critical functionalities if hit by... more Critical infrastructures often lack resilience and easily lose critical functionalities if hit by adverse events. Continuity management strategies for critical infrastructure operators and the networks that they form, rely also on the functionality of other interrelated networks. Disruptions in operations may affect society and for this reason, securing the operations of critical infrastructure operators is important. The technological impacts of CPS become evident to the resilience of all fields of critical infrastructure, but there is also human elements to take into account. The research question of this study is: How to enhance business continuity of critical infrastructure? This case study research uses qualitative methods collected by conducting interviews of resilience and continuity professionals who work with Finnish critical infrastructure. Resilience and continuity management are key for critical infrastructure operators. Important factors identified were identifying risks, critical activities, key personnel, creating guidelines and procedures, and open communication, which themes were recognised as important to improve resilience and manage continuity.

European Conference on Knowledge Management
Recent scientific approaches and practical work-life developments aim to increase actor engagemen... more Recent scientific approaches and practical work-life developments aim to increase actor engagement to form expert communities. Solving common issues motivates stakeholders to collaborate and build trust to enable the co-creation of knowledge. This research is based on reading materials to understand how the engagement of actors in expert communities becomes viewed. The purpose of research-based development is to include actors in co-creation contexts. Gap analysis can be used to aid the planning of training implementation. Development processes are continuous and cyclical in nature. An open mind for change and a desire to learn are key to building competence. A plan for implementing development measures can help select learning methods that promote knowledge sharing and searching for new information. Measuring and evaluating learning can provide valuable feedback, which is needed to identify critical competencies and competence risks, and to promote the creation of a culture of lea...

European Conference on Cyber Warfare and Security
Information technology and its applications surround us and those have become crucial to our live... more Information technology and its applications surround us and those have become crucial to our lives. However, the understanding of the digital world is not as strong. Successful and functional cybersecurity is a vital component for the defence of a civilised society. This study looks at how cybersecurity has been handled in thesis written at one University of Applied Sciences and what kind of topics have been chosen by thesis writers, and what is written about cybersecurity in them to understand how cybersecurity is seen in higher education. The goal of this paper was to find out how cybersecurity has been handled in theses and what kind of topics have been chosen by thesis writers. The two research questions are: what theses have been published that handle cybersecurity; and how does cybersecurity in them? As typical of a case study, attention is paid to a small number of cases (n = 15) attempting to describe the phenomenon they represent. Of the fifteen theses, two were master’s an...

Advances in Public Relations and Communication Management, 2018
European industry, academia, and potential end users for future solutions are widely involved in ... more European industry, academia, and potential end users for future solutions are widely involved in applying for European Union (EU) funding of research and innovation and implementation of the projects. Funding instrument requirements emphasize the influence of skills and knowhow of these project consortia professionals. This chapter proposes a co-creative model for communication and dissemination, or project PR, based on the experiences of both planning and coordinating dissemination activities of three EU funded projects. Multidisciplinary international project PR offers strategic opportunities for PR professionals. The model employs the co-creation methods based on the pedagogical model called Learning by Developing (Laurea, 2011). In addition to the pedagogical model, the proposed conceptualization of co-creation for public relations and dissemination utilizes a media evaluation framework, which is adapted from Vos & Schoemaker's model (2004), combining elements of both balanced scorecard and quality management. The findings demonstrate that commitment and active participation of end user groups in the early stage of the project are needed for successful dissemination, which should be supported by each partner's PR actions and networks. The dissemination process should start when the project begins, be ongoing, even extending to beyond the project. Dissemination is an expanding process, and it requires facilitation that supports PR and the engagement of key stakeholders. The European Commission can gain from modernized PR and dissemination activities, and from as many end users as possible adopting new innovations, which generate more business possibilities for the industry, and further research projects for the academia.
Uploads
Papers by Harri Ruoslahti