System disruptions
There are recurring service disruptions on some of the search portals due to high traffic. We are working to resolve the issue, you may temporarily encounter an error message.
Change search
Link to record
Permanent link

Direct link
Publications (10 of 79) Show all publications
El Moutaouakil, S., Lindström, J. & Andersson, K. (2026). Evaluating the Effectiveness of Information Security Management Systems: An Analysis Framework and Key Metrics. Journal of Cybersecurity and Privacy, 6(2), Article ID 73.
Open this publication in new window or tab >>Evaluating the Effectiveness of Information Security Management Systems: An Analysis Framework and Key Metrics
2026 (English)In: Journal of Cybersecurity and Privacy, E-ISSN 2624-800X, Vol. 6, no 2, article id 73Article in journal (Refereed) Published
Abstract [en]

As large scale digitization continues to reform business processes, one critical challenge organizations are currently facing is managing the staggering amount of data flowing. Further, with large datasets comes the added complexity of insuring a cyber secure environment and shielding the information security management system (ISMS) from undesirable manipulations. Today’s drastic rise of cyberattacks urges the need for effective security frameworks to guard against unauthorized access and malicious acts impeding business operations. The latter of which compelled organizations to adopt holistic information security approaches, commonly implemented via ISMS frameworks. Further, to maintain an effective ISMS, ongoing monitoring and measurements are highly required. Considering the aforementioned points, this paper explores how organizations measure the effectiveness of their ISMS focusing on key performance indicators, metrics, and foundational components involved in information security management by categorizing metrics into governance, risk, and incident response as well as determining the maturity level based on ISO alignment, the presence, specificity and automation of KPIs. Based on empirical interviews with eight diverse organizations, the research findings reveal a wide range of maturity among organizations, from those lacking clear defined KPIs to those with sophisticated multi-layered systems. While special attention is paid to incident-response management, companies with a strong ISMS stand out because they use automated and proactive metrics for strategic reporting, whereas companies with a weaker ISMS often do not have organized KPIs and depend on random manual audits. Based on these results, the present work suggests an analysis framework for evaluating ISMS effectiveness. While previous studies have struggled to define clear ISMS measurement practices, this paper aims to provide insights on measurements by identifying the core building blocks of ISMS and revealing how they are evaluated to drive continual ISMS improvement.

Place, publisher, year, edition, pages
MDPI, 2026
Keywords
information security management system (ISMS), cyberattacks, KPIs, improvement, measurement, key metrics, effectiveness, incident management, analysis framework
National Category
Computer Sciences Information Systems
Research subject
Cyber Security
Identifiers
urn:nbn:se:ltu:diva-117158 (URN)10.3390/jcp6020073 (DOI)001749804000001 ()2-s2.0-105036850684 (Scopus ID)
Funder
European Regional Development Fund (ERDF)
Note

Funder: Cybersäkerhetsnod Norr (20366918);

Full text license: CC BY

Available from: 2026-04-15 Created: 2026-04-15 Last updated: 2026-06-30Bibliographically approved
Psarommatis, F. & Lindström, J. (2026). Smart manufacturing and circularity. In: D.A. Rossit; F. Psarommatis (Ed.), Smart Manufacturing 5.0: Sustainability, Human-Centricity and Resilience (pp. 269-306). Elsevier
Open this publication in new window or tab >>Smart manufacturing and circularity
2026 (English)In: Smart Manufacturing 5.0: Sustainability, Human-Centricity and Resilience / [ed] D.A. Rossit; F. Psarommatis, Elsevier, 2026, p. 269-306Chapter in book (Refereed)
Abstract [en]

This chapter examines how Smart Manufacturing 5.0 can operationalize circularity in manufacturing by enabling value-retention loops such as reuse, repair, refurbishment, remanufacturing, repurposing, and recycling. It argues that circularity is not realized through policy ambition alone, but through engineering, planning, control, and verification across the full product lifecycle. Building on R-strategy logic, the chapter frames circularity as a set of industrial decision and execution problems distributed across design, production, service, reverse logistics, recovery, and compliance. It analyzes how core Smart Manufacturing 5.0 capabilities, including cyber-physical connectivity, artificial intelligence and analytics, digital twins, human-centric operations, and cross-enterprise data governance, support these decisions by improving observability, reducing uncertainty, and coordinating circular workflows. A central contribution of the chapter is the positioning of Digital Product Passports and advanced traceability as foundational infrastructure for scalable circular manufacturing. Without persistent identity, lifecycle lineage, interoperable data, and verifiable evidence, higher-value loops remain difficult to execute safely, economically, and at scale. The chapter further discusses the main shortcomings of current approaches, including fragmented data, weak interoperability, governance and liability concerns, reverse-flow uncertainty, and the implementation burden of complex digital architectures. It concludes that the practical path toward circular manufacturing is traceability-first and staged: establish persistent product identity, minimum interoperable datasets, and lifecycle event capture, then progressively integrate decision support, optimization, and compliance-ready evidence across value networks.

Place, publisher, year, edition, pages
Elsevier, 2026
Keywords
Circular economy, Circular manufacturing, Digital product passport, Lifecycle data, R-strategies, Remanufacturing, Reverse logistics, Smart Manufacturing 5.0, Sustainability, Traceability
National Category
Production Engineering, Human Work Science and Ergonomics
Research subject
Cyber Security
Identifiers
urn:nbn:se:ltu:diva-120145 (URN)10.1016/B978-0-443-40477-1.00012-4 (DOI)
Note

ISBN for host publication: 978-0-443-40477-1

Available from: 2026-10-12 Created: 2026-10-12 Last updated: 2026-10-12Bibliographically approved
Lindström, J., Kyösti, P., Psarommatis, F., Birk, W., Lejon, E., Andersson, A., . . . Andersson, K. (2025). A capability maturity model (CMM) for long-term management of Zero Defect Manufacturing (ZDM) implementations – ZDM-CMM. In: Sebastian Thiede, Roy Damgrave, Tom Vanekar, Eric Lutters (Ed.), Proceedings of the 58th CIRP Conference on Manufacturing Systems 2025: . Paper presented at 58th CIRP Conference on Manufacturing Systems 2025, April 13-16, 2025, Enschede, The Netherlands (pp. 187-192). Elsevier, 134
Open this publication in new window or tab >>A capability maturity model (CMM) for long-term management of Zero Defect Manufacturing (ZDM) implementations – ZDM-CMM
Show others...
2025 (English)In: Proceedings of the 58th CIRP Conference on Manufacturing Systems 2025 / [ed] Sebastian Thiede, Roy Damgrave, Tom Vanekar, Eric Lutters, Elsevier, 2025, Vol. 134, p. 187-192Conference paper, Published paper (Refereed)
Abstract [en]

The proposed evaluated Capability Maturity Model (CMM) for long-term management of Zero Defect Manufacturing (ZDM) implementations, ZDM-CMM, is intended as a tool for organizations initiating or advancing their ZDM initiatives. This ZDM-CMM offers guidance on key perspectives crucial for successful ZDM development, deployment, and potential objectives for measuring maturity and progress over time. The evaluation of the ZDM-CMM highlights use in balancing conflicting objectives such as speed, cost, and quality, with sensitivity analysis recommended to determine their relative importance. While additional objectives were suggested, the current model provides a foundational framework to be refined with further experience. The CMM, designed primarily for tracking maturity rather than comparing implementations, emphasizes the significance of considering various perspectives early in ZDM project planning to ensure comprehensive management. Although not yet widely adopted, the companies that participated in the evaluation expressed interest in using the CMM for visualization of progress and holistic assessment of ZDM efforts. Further, the ZDM-CMM is expected to provide significant insights for project planning, potentially saving time, resources, and ensuring thorough consideration of critical ZDM aspects. 

Place, publisher, year, edition, pages
Elsevier, 2025
Series
Procedia CIRP, E-ISSN 2212-8271
Keywords
capability maturity model (CMM), implementation, long-term, management, objectives, Zero Defect Manufacturing (ZDM)
National Category
Other Mechanical Engineering
Research subject
Cyber Security; Information Systems
Identifiers
urn:nbn:se:ltu:diva-113475 (URN)10.1016/j.procir.2025.03.014 (DOI)2-s2.0-105009399494 (Scopus ID)
Conference
58th CIRP Conference on Manufacturing Systems 2025, April 13-16, 2025, Enschede, The Netherlands
Note

Full text: CC BY license;

For funding information, see: https://doi.org/10.1016/j.procir.2025.03.014

Available from: 2025-06-17 Created: 2025-06-17 Last updated: 2025-11-28Bibliographically approved
Lindström, J. & Andersson, K. (2025). Extending lifecycles of connected offerings. Luleå University of Technology
Open this publication in new window or tab >>Extending lifecycles of connected offerings
2025 (English)Other (Other (popular science, discussion, etc.))
Abstract [en]

The whitepaper provides an overview of how it is possible to extend the lifecycles of connected offerings comprising for instance hardware, software, a support-service system and long-term management of operation. These offerings may span from products, products with add-on or integrated services, solutions, product-service systems, industrial product-service systems, and functions, etc. The selection of business model for an offering has a large impact on how the provider and customer/user can maintain, update and support the offering and keep it operational with a high level of availability and cybersecurity. In addition, new ways of designing the sales agreements or contracts may also lead to an increased level of re-circularity, extension of lifecycles and less ecological impact. This requires that an offering’s lifecycle is foreseen and planned for already at the initial conceptual, requirement engineering, and design phases, rather than trying to add this at a later stage at a much higher cost and effort. The total cost of ownership perspective is applied and compared to the initial cost perspective, which currently often is used.

Place, publisher, year, pages
Luleå University of Technology, 2025. p. 9
National Category
Business Administration Electrical Engineering, Electronic Engineering, Information Engineering
Research subject
Cyber Security; Area of Future Importance - CREATERNITY
Identifiers
urn:nbn:se:ltu:diva-115850 (URN)
Available from: 2025-12-19 Created: 2025-12-19 Last updated: 2025-12-19Bibliographically approved
Lindström, J., Delin, J. & Andersson, K. (2025). Handbook on Operational Technology and its Security: Introducing an OT/OT Security Framework. Luleå: Luleå tekniska universitet
Open this publication in new window or tab >>Handbook on Operational Technology and its Security: Introducing an OT/OT Security Framework
2025 (English)Other (Other (popular science, discussion, etc.))
Place, publisher, year, pages
Luleå: Luleå tekniska universitet, 2025. p. 90
National Category
Computer and Information Sciences
Research subject
Cyber Security
Identifiers
urn:nbn:se:ltu:diva-115290 (URN)978-91-8048-890-7 (ISBN)
Projects
Cybersäkerhetsnod NorrArctic 6G
Note

Funders: European Regional Development Fund and the Cybersäkerhetsnod Norr-project (no. 20366918); InterregAurora program, Arctic 6G project (award no. 20357901)

Available from: 2025-11-03 Created: 2025-11-03 Last updated: 2025-11-03Bibliographically approved
Lindström, J., Kyösti, P., Birk, W., Lejon, E., Schneider, G., Andersson, A., . . . Andersson, K. (2025). Interoperability requirements for Zero Defect Manufacturing within Industry4.0. In: Sebastian Thiede, Roy Damgrave, Tom Vanekar, Eric Lutters (Ed.), Proceedings of the 58th CIRP Conference on Manufacturing Systems 2025: . Paper presented at 58th CIRP Conference on Manufacturing Systems 2025, April 13-16, 2025, Enschede, The Netherlands (pp. 532-537). Elsevier, 134
Open this publication in new window or tab >>Interoperability requirements for Zero Defect Manufacturing within Industry4.0
Show others...
2025 (English)In: Proceedings of the 58th CIRP Conference on Manufacturing Systems 2025 / [ed] Sebastian Thiede, Roy Damgrave, Tom Vanekar, Eric Lutters, Elsevier, 2025, Vol. 134, p. 532-537Conference paper, Published paper (Refereed)
Abstract [en]

The paper addresses, based on a qualitative study comprising five companies, requirements for interoperability concerning Zero Defect Manufacturing (ZDM) in an Industry4.0 context. The results outline a strong link between well working interoperability and achieving the benefits from ZDM efforts. Further, the results also outline the need for getting out the right data from production processes and keep high data quality supported by management attention and a clear vision. The results are aligned with existing literature and studies but bring up more details on requirements on evolving interoperability for ZDM in terms of data quality and how the analytic output can be used for decisions based on the reliability and confidence levels. In addition, the increased need for cybersecurity within ZDM is highlighted where also cybersecurity requires interoperability to function well over time. 

Place, publisher, year, edition, pages
Elsevier, 2025
Series
Procedia CIRP, E-ISSN 2212-8271
Keywords
cloud services, cybersecurity, Industry 4.0, interoperability, integrability, requirements, Zero Defect Manufacturing (ZDM)
National Category
Other Electrical Engineering, Electronic Engineering, Information Engineering
Research subject
Cyber Security; Information Systems; Automatic Control
Identifiers
urn:nbn:se:ltu:diva-113480 (URN)10.1016/j.procir.2025.02.167 (DOI)2-s2.0-105009407048 (Scopus ID)
Conference
58th CIRP Conference on Manufacturing Systems 2025, April 13-16, 2025, Enschede, The Netherlands
Note

Full text: CC BY-NC-ND license;

For funding information, see: https://doi.org/10.1016/j.procir.2025.02.167

Available from: 2025-06-17 Created: 2025-06-17 Last updated: 2025-11-28Bibliographically approved
Lindström, J. & Andersson, K. (2025). Zero Trust-related Challenges in 6G. In: : . Paper presented at 6G Resilience Summit, November 18-19, 2025, Oulu, Finland.
Open this publication in new window or tab >>Zero Trust-related Challenges in 6G
2025 (English)Conference paper, Oral presentation with published abstract (Other academic)
National Category
Information Systems
Research subject
Cyber Security
Identifiers
urn:nbn:se:ltu:diva-115562 (URN)
Conference
6G Resilience Summit, November 18-19, 2025, Oulu, Finland
Funder
Luleå University of TechnologyInterreg Aurora, Arctic 6G project, award no. 20357901
Note

Funder: European Regional Development Fund and the Cybersäkerhetsnod Norr-project (no. 20366918);

Available from: 2025-11-26 Created: 2025-11-26 Last updated: 2025-11-26Bibliographically approved
Lindström, J., Kyösti, P., Psarommatis, F., Andersson, K. & Starck Enman, K. (2024). Extending Product Lifecycles—An Initial Model with New and Emerging Existential Design Aspects Required for Long and Extendable Lifecycles. Applied Sciences, 14(13), Article ID 5812.
Open this publication in new window or tab >>Extending Product Lifecycles—An Initial Model with New and Emerging Existential Design Aspects Required for Long and Extendable Lifecycles
Show others...
2024 (English)In: Applied Sciences, E-ISSN 2076-3417, Vol. 14, no 13, article id 5812Article in journal (Refereed) Published
Abstract [en]

This paper introduces an evaluated initial model for how product lifecycles can be extended considering new and emerging existential design aspects concerning both general as well as digital/connected products. The initial model, which is cyclic, includes reverse logistics of components and raw materials, as well as information on how to manage data at the end of lifecycles. The aim is to improve long-term sustainability with a high degree of circularity while also achieving increased profitability and competitiveness. Further, we highlighted that product providers must start to evaluate and prepare for how to improve product durability, manage long and extendable lifespans, and achieve circularity with reverse logistics to close the loops. Additionally, updatability and upgradability are also required to stay current with time and create value while being cybersecure. Otherwise, customers’ expectations, various legal and regulatory aspects, as well as other existential design aspects can halt or even terminate a product’s lifecycle.

Place, publisher, year, edition, pages
MDPI, 2024
Keywords
circular, design aspect, digital/connected product, existential, parallel technical lifecycles, product, product lifecycle, sustainability
National Category
Mechanical Engineering
Research subject
Cyber Security
Identifiers
urn:nbn:se:ltu:diva-108413 (URN)10.3390/app14135812 (DOI)001269314800001 ()2-s2.0-85198410345 (Scopus ID)
Funder
EU, Horizon 2020, 101092008EU, Horizon 2020, 101138330
Note

Validerad;2024;Nivå 2;2024-07-25 (signyg);

Fulltext license: CC BY

Available from: 2024-07-25 Created: 2024-07-25 Last updated: 2025-10-21Bibliographically approved
Lindström, J., Hermanson, A., Blomstedt, F. & Kyösti, P. (2019). A Multi-Usable Cloud Service Platform: A Case Study on Improved Development Pace and Efficiency. In: Dimitrios Kiritsis; Gökan May (Ed.), Smart Sustainable Manufacturing Systems: (pp. 38-51). Basel, Switzerland: MDPI
Open this publication in new window or tab >>A Multi-Usable Cloud Service Platform: A Case Study on Improved Development Pace and Efficiency
2019 (English)In: Smart Sustainable Manufacturing Systems / [ed] Dimitrios Kiritsis; Gökan May, Basel, Switzerland: MDPI, 2019, p. 38-51Chapter in book (Refereed)
Abstract [en]

The case study, spanning three contexts, concerns a multi-usable cloud service platform for big data collection and analytics and how the development pace and efficiency of it has been improved by 50–75% by using the Arrowhead framework and changing development processes/practices. Furthermore, additional results captured during the case study are related to technology, competencies and skills, organization, management, infrastructure, and service and support. A conclusion is that when offering a complex offer such as an Industrial Product-Service System, comprising sensors, hardware, communications, software, cloud service platform, etc., it is necessary that the technology, business model, business setup, and organization all go hand in hand during the development and later operation, as all ‘components’ are required for a successful result.

Place, publisher, year, edition, pages
Basel, Switzerland: MDPI, 2019
Keywords
big data, case study, circular economy, data collection and analytics, development, efficiency, improvement, multi-usable cloud service platform, pace
National Category
Information Systems
Research subject
Information Systems
Identifiers
urn:nbn:se:ltu:diva-75700 (URN)
Note

ISBN för värdpublikation: 978-3-03921-201-9, 978-3-03921-202-6;

This book is a reprint of the Special Issue Smart Sustainable Manufacturing Systems that was published in Applied Sciences

Available from: 2019-08-27 Created: 2019-08-27 Last updated: 2025-10-22Bibliographically approved
Lindström, J., Viklund, P., Tideman, F., Hällgren, B. & Elvelin, J. (2019). Oh, no – not another policy! Oh, yes - an OT-policy!. In: Peter Butala, Edvard Govekar, Rok Vrabič (Ed.), Procedia CIRP, vol 81: . Paper presented at 52nd CIRP Conference on Manufacturing Systems (CMS), Ljubljana, Slovenia, June 12-14, 2019 (pp. 582-587). Elsevier, 81
Open this publication in new window or tab >>Oh, no – not another policy! Oh, yes - an OT-policy!
Show others...
2019 (English)In: Procedia CIRP, vol 81 / [ed] Peter Butala, Edvard Govekar, Rok Vrabič, Elsevier, 2019, Vol. 81, p. 582-587Conference paper, Published paper (Refereed)
Abstract [en]

The paper addresses the need for a policy document in organizations concerned with Operational Technologies (OT) within their production and operational environments, and secondly how such an OT policy was developed and crafted by a Swedish municipality and its water production and wastewater management department. The first initial design criteria was to clearly distinguish the IT environment from the OT environment and the second design criteria was to achieve an improved, affordable and maintainable cybersecurity level for the OT environment. The results of the paper are an initial OT policy and an action plan for the necessary technical and organizational change in the OT environment.

Place, publisher, year, edition, pages
Elsevier, 2019
Series
Procedia CIRP, ISSN 2212-8271 ; 81
Keywords
cybersecurity, Operational Technology (OT), OT policy, production systems
National Category
Production Engineering, Human Work Science and Ergonomics
Research subject
Information Systems
Identifiers
urn:nbn:se:ltu:diva-75113 (URN)10.1016/j.procir.2019.03.159 (DOI)000566264700100 ()2-s2.0-85068449916 (Scopus ID)
Conference
52nd CIRP Conference on Manufacturing Systems (CMS), Ljubljana, Slovenia, June 12-14, 2019
Available from: 2019-06-28 Created: 2019-06-28 Last updated: 2025-10-22Bibliographically approved
Organisations
Identifiers
ORCID iD: ORCID iD iconorcid.org/0000-0002-2356-7830

Search in DiVA

Show all publications