In this study, we address the role of Participatory Design (PD) in emerging public sector governance forms and, more specifically, civic engagement and we-government initiatives. We achieve this by first providing a research overview of the development of PD approaches since they originated in the 1970s, identifying different PD generations and associated concepts, contexts, and challenges, and then relating them to current public sector trends. Next, we link the overview to a practical example by presenting a case of applying PD to a civic engagement project that takes place in the Swedish emergency response system. Our example findings sustain previously identified needs to return to broad change processes and balance this with ICT re-configuration and structuration of the collaborative processes, the related stakeholders, and their needs, this time in a context where work tasks and responsibilities are not yet defined, known or experienced among stakeholders. We then suggest methodological ways to handle this by (1) applying an interdisciplinary PD approach, (2) replacing the traditional design group with a combination of various qualitative methods and PD techniques, e.g., focus groups, modified scenario-based future workshops, exercises, and after-action-reviews, and (3) support PD activities with context-specific frameworks. We argue that applying PD concepts to the governance forms that are emerging in resource-constrained public sector organizations poses a number of challenges, many of them relating directly to the unknown character of the work setting and the practical difficulties of involving civil citizens as end-users. However, if they are addressed and handled adequately, making civic engagement initiatives work processes and ICT support to work smoothly, this can contribute to a re-politicization of PD in terms of space, action, and the empowerment of citizens both by enhancing their skills and by having them represented in design activities.

Software-intensive information systems have a major impact on our lives, both privately and professionally. Development of these systems is a complex activity that requires the involvement of people with different competences and skills. Even though software-intensive systems have been developed since the 1960s, the success rate is still low. A major hindrance to successful system development projects is the lack of consistent terminology. Since systems development is a collaborative activity, involving not only systems developers but also domain experts and user representatives, the understanding of each other is a prerequisite for an effective collaboration. The aim of this paper is to explore and present definitions, dependencies, and relationships of the most fundamental concepts in systems development in the form of an ontology. The ontology consists of four categories of concepts: General concepts, Description concepts, Realization concepts, and Appearance concepts. The two core concepts in the ontology are Systems and Systems development.

Purpose The purpose of this paper is to describe the controlled information security project which is designed to investigate, assess and provide tools to improve the information security status in organizations with a focus on public agencies. A central question for the project is how information security issues are communicated within organizations, specifically underlining that communication is control in a cybernetic sense. Design/methodology/approach The research method applied can be expressed as applied general systems theory combined with design science. The project is carried out in a number of steps: to design modelling techniques and metrics for information security issues in organizations; to collect data from Swedish governmental agencies; to use the modelling techniques to model communication of information security in organizations from different perspectives; to apply metrics on the data in order to assess information security levels in the agencies; to identify gaps; and to identify needs for improvement. Findings The motivation for the research is that communication of information security issues within organizations tend to be insufficient and the mental connections between IT‐security and information security work are weak, which prohibits the organization from learning and adapting in its security work. An entity's authority depends on its ability to control and manage the variety in the 14 layers. The general control objectives needed were implied based on the information security management standard. Originality/value The paper focuses on mind to mind communication conditions and how to adapt mechanistic systems.