This paper is concerned with supporting the use of ISO 17799: 2005 information security management standard for the purpose of providing a 'common safe environment' for information services. The paper introduces a STOPE view of the standard, integrating its parts and protection measures around the basic domains of 'strategy, technology, organization, people, and environment'. The paper also presents an approach for the application of the standard, considering the STOPE view, in a way that emphasizes continuous improvement. The phases of the approach are based on the phases of six sigma DMAIC approach of 'define, measure, analyze, improve, and control'; the team proposed for the implementation of the work is also based on six sigma principles. The paper concludes with some suggestions for future related and needed work.

Objective(s) The aim of this study was to explore community pharmacists’ views toward the antibiotics dispensing law that was enforced in May 2018 and bans the sale of antibiotics without a prescription in community pharmacy settings in Saudi Arabia. Moreover, the potential impact of the law enforcement on the sales of oral antibiotics in Saudi Arabia was also explored. Methods A questionnaire-based cross-sectional study was conducted between September 2019 and March 2020 in Riyadh, Saudi Arabia. A multistage sampling technique was used to recruit community pharmacists from different districts. Pharmacists who consented to participate and reported practicing prior to the law enforcement were interviewed about their views of the law using a 14-item newly developed questionnaire. The annual sales of oral antibiotics for the years of 2017, 2018, and 2019 were retrieved from the Saudi Food and Drug Authority (SFDA) database. Results Two hundred and eighty six pharmacists consented to participate and met the inclusion criteria. After the law enforcement, approximately 51% of the participants reported that the percentage of patients seeking antibiotics without a prescription is less than 25%. Moreover, the majority (87.41%) reported a drop in the sales of antibiotics. Additionally, about 90% of the participants believed that the rate of inappropriate use of antibiotics will decrease as a result of the law enforcement. About 41% of the participants reported that the law has negatively impacted their pharmacies’ profits. The sales of oral antibiotics have seen a 16.6% drop in the year of 2019 as compared to 2017. Conclusion The antibiotics dispensing law is favorably perceived among community pharmacists in Saudi Arabia despite some concerns about its impact on their sales. Exploring different business models that delink the profits from the volume of antibiotics sales is necessary for this vital industry to thrive.

Purpose -With the widespread of e-services, provided by different organizations at the internal intranet level, the business extranet level, and the public internet level, compliance with international information security management standards is becoming of increasing importance for establishing a common and safe environment for such services. The purpose of this paper is to examine the development of a mathematical model that enables the investigation of compliance of organizations with the widely acknowledged international information security management standard ISO 17799-2005. Design/methodology/approach -The model is based on the strategy, technology, organization, people and environment -STOPE -framework that provides an integrated well-structured view of the various factors involved. The paper addresses the use of the model for practical investigations; it describes a practical example illustrating possible practical results. Findings -The results show the strengths and the weaknesses of compliance, with the standard, at different levels: from the level of the measures associated with each of the "131" standard protection controls, up to the level of the STOPE domains. Originality/value -The paper addresses the use of a mathematical model for practical investigations of compliance with the international information security management standard.