Fredrik Karlsson
Fredrik Karlsson Position: Professor School/office: Örebro University School of BusinessEmail: ZnJlZHJpay5rYXJsc3NvbjtvcnUuc2U=
Phone: +46 19 303994
Room: N4039
Research subject
Research environments
About Fredrik Karlsson
About Fredrik Karlsson
Fredrik Karlsson is a Professor of Informatics at Örebro University and a member of the research environment Centre for Empirical Research on Information Systems (CERIS).
Research
His research primarily focuses on information security management and systems development.
Fredrik Karlsson works to create favourable conditions for employees to contribute to their organisations’ information security posture. A key premise of this work is to view employees as a resource and to encourage them to actively take initiatives to enhance information security. In several projects, he has studied how employees must prioritise between their main tasks and information security, often due to different parts of the management team pursuing diverse, and sometimes conflicting, objectives. Fredrik Karlsson has developed methods and IT systems to identify such situations, where the findings can be used to improve how organisations lead their employees.
Fredrik Karlsson also researches ways to improve operational information security policies, making them clearer and more accessible to employees. For example, he has led projects exploring how information security policies can be tailored to employees’ roles and tasks, facilitated by custom-designed software. His research includes investigating how Artificial Intelligence, specifically large language models, can be used to enhance the content of information security policies, such as by making instructions to employees clearer. He has also led several research projects on information security culture.
In the second research area, systems development, Fredrik Karlsson contributes to understanding how organisations can effectively structure their work in developing IT solutions. This includes research on the use and adaptation of systems development methods. Notably, he has led a research project on cargo cult behaviours in system development teams using agile practices. These behaviours involve mimicking others’ actions—i.e., ways of working—without understanding the underlying goals. The result is superficial actions, with system development teams failing to realise the full potential of agile practices. He is currently interested in how Artificial Intelligence impacts the agile practices used by organisations and how large language models can assist system development teams in requirements engineering.
Fredrik Karlsson is engaged as a reviewer and presenter at international scientific conferences, where he has also organised such events both at Örebro University and abroad. He has held numerous editorial positions for international scientific journals. Fredrik Karlsson has previously been the research leader for CERIS.
Teaching
Fredrik Karlsson has been optioned as excellent teacher at Örebro University. He teaches at undergraduate, master’s, and doctoral levels. Fredrik Karlsson led the development of the master’s programme in Informatics, Information Security Management, which was developed in collaboration with industry and public agencies, with funding from the Swedish Knowledge Foundation (KK-stiftelsen). He has also delivered commissioned training courses on information security management.
Research projects
Active projects
- Enterprise Architecture: Thinking in local government eGov adoption
- Improving Information Security Policy Design using AI
- Consistency of GPT Models in Classifying Natural Language Requirements
- Actionability in Information Security Policies
- Privacy issues in management of intelligent systems in elderly care
Completed projects
- A design theory and a method for Value-based compliance
- Attitude
- Cargo cult behaviour in agile systems development
- Computerized tool-support for designing modular information security policies
- Does group development improve End User Development?
- Flow in game design
- Shop at home
- Improving Efficiency in Product Creation of Complex Systems
- Information Security Attitudes (ATTITUDE)
- Information security culture in practice
- INTERORG
- ISO
- MC Sandbox II
- Method for assessment of information assets
- MMC in a agile context
- Overview on Swedish information security research
- Security in cloud solutions
- The Role of Guilt Proneness in Information Security
- Transferring design decisions using End User Development
- User stories to elicit method requirements
- Value Conflicts and Information Systems Security in Health Care
Research groups
Publications
Articles in journals |
Articles, reviews/surveys |
Books |
Chapters in books |
Collections (editor) |
Conference papers |
Conference proceedings (editor) |
Manuscripts |
Reports |
Articles in journals
- Rostami, E. & Karlsson, F. (2024). Qualitative content analysis of actionable advice in information security policies - introducing the keyword loss of specificity metric. Information and Computer Security. [BibTeX]
- Rostami, E. , Karlsson, F. & Gao, S. (2023). Policy components - a conceptual model for modularizing and tailoring of information security policies. Information and Computer Security, 31 (3), 331-352. [BibTeX]
- Denk, T. , Hedström, K. & Karlsson, F. (2022). Citizens' attitudes towards automated decision-making. Information Polity, 27 (3), 391-408. [BibTeX]
- Karlsson, F. , Kolkowska, E. & Petersson, J. (2022). Information security policy compliance-eliciting requirements for a computerized software to support value-based compliance analysis. Computers & security (Print), 114. [BibTeX]
- Andersson, A. , Hedström, K. & Karlsson, F. (2022). “Standardizing information security – a structurational analysis”. Information & Management, 59 (3). [BibTeX]
- Karlsson, M. , Karlsson, F. , Åström, J. & Denk, T. (2022). The effect of perceived organizational culture on employees’ information security compliance. Information and Computer Security, 30 (3), 382-401. [BibTeX]
- Islam, M. S. & Karlsson, F. (2022). The public sector cloud service procurement in Sweden: An Exploratory Study of Use and Information Security Challenges. International Journal of Public Administration in the Digital Age, 8 (1), 1-22. [BibTeX]
- Karlsson, F. , Hedström, K. , Frostenson, M. , Prenkert, F. , Kolkowska, E. & Helin, S. (2021). Attempts to share information between public sector organisations over time: A case-based exploration of value conflicts. Information Polity, 26 (3), 289-310. [BibTeX]
- Bergström, E. , Karlsson, F. & Åhlfeldt, R. (2021). Developing an information classification method. Information and Computer Security, 29 (2), 209-239. [BibTeX]
- Ågerfalk, P. J. & Karlsson, F. (2020). Artefactual and empirical contributions in information systems research. European Journal of Information Systems, 29 (2), 109-113. [BibTeX]
- Andersson, A. , Karlsson, F. & Hedström, K. (2020). Consensus versus warfare – unveiling discourses in de jure information security standard development. Computers & security (Print), 99. [BibTeX]
- Goldkuhl, G. & Karlsson, F. (2020). Method Engineering as Design Science. Journal of the Association for Information Systems, 21 (5), 1237-1278. [BibTeX]
- Rostami, E. , Karlsson, F. & Gao, S. (2020). Requirements for computerized tools to design information security policies. Computers & security (Print), 99. [BibTeX]
- Karlsson, F. , Kolkowska, E. & Törner, M. (2018). Guest editorial: Value Conflicts and Information Security Management. Information and Computer Security, 26 (2), 146-149. [BibTeX]
- Karlsson, F. , Frostenson, M. , Prenkert, F. , Kolkowska, E. & Helin, S. (2017). Inter-organisational information sharing in the public sector: A longitudinal case study on the reshaping of success factors. Government Information Quarterly, 34 (4), 567-577. [BibTeX]
- Karlsson, F. , Karlsson, M. & Åström, J. (2017). Measuring employees’ compliance: The importance of value pluralism. Information and Computer Security, 25 (3), 279-299. [BibTeX]
- Karlsson, F. , Hedström, K. & Goldkuhl, G. (2017). Practice-based discourse analysis of information security policies. Computers & security (Print), 67, 267-279. [BibTeX]
- Kolkowska, E. , Karlsson, F. & Hedström, K. (2017). Towards analysing the rationale of information security non-compliance: Devising a Value-Based Compliance analysis method. Journal of strategic information systems, 6 (1), 39-57. [BibTeX]
- Hedström, K. , Karlsson, F. & Söderström, F. (2016). Challenges of introducing a professional eID card within health care. Transforming Government: People, Process and Policy, 10 (1), 22-46. [BibTeX]
- Holgersson, J. & Karlsson, F. (2014). Public e-service development: understanding citizens' conditions for participation. Government Information Quarterly, 31 (3), 396-410. [BibTeX]
- Karlsson, F. & Hedström, K. (2013). Evaluating end user development as a requirements engineering technique for communicating across social worlds during systems development. Scandinavian Journal of Information Systems, 25 (2). [BibTeX]
- Karlsson, F. (2013). Longitudinal use of method rationale in method configuration: an exploratory study. European Journal of Information Systems, 22 (6), 690-710. [BibTeX]
- Hedström, K. , Karlsson, F. & Kolkowska, E. (2013). Social action theory for understanding information security non-compliance in hospitals: the importance of user rationale. Information Management & Computer Security, 21 (4), 266-287. [BibTeX]
- Karlsson, F. , Holgersson, J. , Söderström, E. & Hedström, K. (2012). Exploring user participation approaches in public e-service development. Government Information Quarterly, 29 (2), 158-168. [BibTeX]
- Karlsson, F. & Ågerfalk, P. J. (2012). MC Sandbox: devising a tool for method-user-centered method configuration. Information and Software Technology, 54 (5), 501-516. [BibTeX]
- Hedström, K. , Kolkowska, E. , Karlsson, F. & Allen, J. P. (2011). Value conflicts for information security management. Journal of strategic information systems, 20 (4), 373-384. [BibTeX]
- Karlsson, F. & Ågerfalk, P. (2009). Exploring agile values in method configuration. European Journal of Information Systems, 18 (4), 300-316. [BibTeX]
- Hedström, K. , Karlsson, F. & Kolkowska, E. (2009). Managing information systems security: compliance between users and managers. E-Hospital, 11 (2), 30-31. [BibTeX]
- Karlsson, F. & Ågerfalk, P. J. (2009). Towards structured flexibility in information systems development: devising a method for method configuration. Journal of Database Management, 20 (3), 51-75. [BibTeX]
- Karlsson, F. & Wistrand, K. (2006). Combining method engineering with activity theory: theoretical grounding of the method component concept. European Journal of Information Systems, 15 (1), 82-90. [BibTeX]
- Karlsson, F. & Ågerfalk, P. (2004). Method configuration: adapting to situational characteristics while creating reusable assets. Information and Software Technology, 46 (9), 619-633. [BibTeX]
Articles, reviews/surveys
- Havstorm, T. E. & Karlsson, F. (2023). Software developers reasoning behind adoption and use of software development methods – a systematic literature review. International Journal of Information Systems and Project Management, 11 (2), 47-78. [BibTeX]
- Rostami, E. , Karlsson, F. & Kolkowska, E. (2020). The hunt for computerized support in information security policy management: A literature review. Information and Computer Security, 28 (2), 215-259. [BibTeX]
- Karlsson, F. , Kolkowska, E. & Prenkert, F. (2016). Inter-organisational information security: a systematic literature review. Information & Computer Security, 24 (5), 418-451. [BibTeX]
- Karlsson, F. , Åström, J. & Karlsson, M. (2015). Information security culture: state-of-the-art review between 2000 and 2013. Information and Computer Security, 23 (3), 246-285. [BibTeX]
Books
- Karlsson, F. (2007). Programmering i Delphi.Net (1ed.). Lund: Studentlitteratur AB. [BibTeX]
Chapters in books
- Karlsson, F. , Hedström, K. & Kolkowska, E. (2023). Using the Delphi Method to Elicit Requirements for an International Master’s Program in Information Security Management. In: Leslie F. Sikos; Paul Haskell-Dowland, Cybersecruity Teaching in Higher Education (pp. 37-57). Cham: Springer. [BibTeX]
- Ågerfalk, P. & Karlsson, F. (2021). Theoretical, Empirical, and Artefactual Contributions in Information Systems Research: Implications Implied. In: Nik Rushdi Hassan; Leslie P. Willcocks, Advancing Information Systems Theories: Rationale and Processes (pp. 53-73). Cham: Palgrave Macmillan. [BibTeX]
- Karlsson, F. & Hedström, K. (2021). Value-Based Compliance Theory. In: Jajodia S., Samarati P., Yung M, Encyclopedia of Cryptography, Security and Privacy. Berlin, Heidelberg: Springer Berlin/Heidelberg. [BibTeX]
- Denk, T. , Hedström, K. , Karlsson, F. & Whilborg, E. (2020). Medborgarnas inställning till automatiserat beslutsfattande. In: Anders Carlander & Ulrika Andersson, Digitala är vi allihopa?: Den västsvenska SOM-undersökningen 2019 (pp. 78-89). Göteborg: SOM-institutet, Göteborgs universitet. [BibTeX]
- Mäki-Runsas, T. E. , Wistrand, K. & Karlsson, F. (2019). Cargo Cults in Information Systems Development: A Definition and an Analytical Framework. In: Bo Andersson, Björn Johansson, Chris Barry, Michael Lang, Henry Linger, Christoph Schneider, Advances in Information Systems Development: Designing Digitalization (pp. 35-53). . Springer International Publishing. [BibTeX]
- Denk, T. , Hedström, K. & Karlsson, F. (2019). Medborgarna och automatiserat beslutsfattande. In: Ulrika Andersson, Björn Rönnerstrand, Patrik Öhberg och Annika Bergström, Storm och Stiltje: SOM-institutets 74:e forskarantologi (pp. 183-196). Göteborg: SOM-institutet. [BibTeX]
- Andersson, A. , Karlsson, F. & Hedström, K. (2017). Konfliktfylld kultur vid framtagande av informationssäkerhetsstandarder. In: Jonas Hallberg, Peter Johansson, Fredrik Karlsson, Frida Lundberg, Björn Lundgren, Marianne Törner, Informationssäkerhet och organisationskultur. Lund: Studentlitteratur AB. [BibTeX]
- Karlsson, M. , Karlsson, F. & Åström, J. (2017). Organisationskulturens påverkan på informationssäkerhetsarbetet. In: Jonas Hallberg, Peter Johansson, Fredrik Karlsson, Frida Lundberg, Björn Lundgren och Marianne Törner, Informationssäkerhet och organisationskultur (pp. 25-40). Lund: Studentlitteratur AB. [BibTeX]
- Frostenson, M. , Hedström, K. , Helin, S. , Karlsson, F. , Kolkowska, E. & Prenkert, F. (2017). Samverkan mellan aktörer i industriella nätverk skapar nya utmaningar för informationssäkerheten. In: J. Hallberg, P. Johansson, F. Karlsson, F. Lundberg, B. Lundgren, M. Törner, Informationssäkerhet och organisationskultur (pp. 61-75). Lund: Studentlitteratur AB. [BibTeX]
- Hedström, K. , Karlsson, F. & Kolkowska, E. (2017). Utveckling av praktikanpassad informationssäkerhetspolicy. In: Jonas Hallberg, Peter Johansson, Fredrik Karlsson, Frida Lundberg, Björn Lundgren, Marianne Törner, Informationssäkerhet och organisationskultur. Lund: Studentlitteratur AB. [BibTeX]
- Kolkowska, E. , Hedström, K. & Karlsson, F. (2012). Analyzing information security goals. In: Manish Gupta, John Walp, Raj Sharman, Threats, countermeasures, and advances in applied information security (pp. 91-110). . IGI Global. [BibTeX]
- Karlsson, F. & Hedström, K. (2010). Var är perspektivet?: Systemutvecklingsforskning inom e-government. In: Katarina Lindblad-Gidlund, Förvaltning och medborgarskap i förändring: etablerad praxis och kritiska perspektiv (pp. 121-138). Lund: Studentlitteratur AB. [BibTeX]
- Karlsson, F. , Ågerfalk, P. & Hjalmarsson, A. (2002). Demystifying the Internet-based Software Artefact. In: Harindranath, G; Wojtkowski, WG; Zupancic, J; Rosenberg, D; Wrycza, S; Sillince, JAA, New perspectives on information systems development: theory, methods, and practice (pp. 177-188). New York, USA: Kluwer Academic Publishers. [BibTeX]
- Ågerfalk, P. , Karlsson, F. & Hjalmarsson, A. (2002). Exploring the Explanatory Power of Actability: The Case of Internet-based Software Artefacts. In: Kecheng, L; Clarke, RJ; Andersen; Stamper, RK; AbouZeid, ES, Organizational semiotics: evolving a science of information systems (pp. 1-20). Boston, USA: Kluwer Academic Publishers. [BibTeX]
Collections (editor)
- Hallberg, J. (ed.) , Johansson, P. (ed.) , Karlsson, F. (ed.) , Lundberg, F. (ed.) , Lundgren, B. (ed.) & Törner, M. (ed.) (2017). Informationssäkerhet och organisationskultur. Lund: Studentlitteratur AB. [BibTeX]
Conference papers
- Rostami, E. & Karlsson, F. (2023). A Qualitative Content Analysis of Actionable Advice in Swedish Public Agencies’ Information Security Policies. In: Steven Furnell; Nathan Clarke, Human Aspects of Information Security and Assurance 17th IFIP WG 11.12 International Symposium, HAISA 2023, Kent, UK, July 4–6, 2023, Proceedings. Paper presented at 17th IFIP International Symposium on Human Aspects of Information Security & Assurance (HAISA 2023), Kent, UK, July 4–6, 2023. (pp. 157-168). Springer. [BibTeX]
- Havstorm, T. E. , Karlsson, F. & Hedström, K. (2023). Uncovering Situations of Cargo Cult Behavior in Agile Software Development Method Use. In: Tung X. Bui, Proceedings of the 56th Hawaii International Conference on System Sciences. Paper presented at 56th Hawaii International Conference on System Sciences (HICSS), Maui, Hawaii, USA, January 3-6, 2023. (pp. 6486-6495). University of Hawai'i at Manoa. [BibTeX]
- Rostami, E. , Karlsson, F. & Gao, S. (2022). Policy Components: A Conceptual Model for Tailoring Information Security Policies. In: Nathan Clarke; Steven Furnell, Human Aspects of Information Security and Assurance 16th IFIP WG 11.12 International Symposium, HAISA 2022, Mytilene, Lesbos, Greece, July 6–8, 2022, Proceedings. Paper presented at 16th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance (HAISA 2022), Mytilene, Lesbos, Greece, July 6-8, 2022. (pp. 265-274). Springer. [BibTeX]
- Mäki-Runsas, T. E. , Wistrand, K. & Karlsson, F. (2018). Cargo Cults in Information Systems Development: a Definition andan Analytical Framework. In: 27th International Conference on Information Systems Development (ISD2018). Paper presented at 27th International Conference on Information Systems Development (ISD2018), Lund, Sweden, August 22-24, 2018. [BibTeX]
- Linander, F. , Wistrand, K. & Karlsson, F. (2016). Measuring and Visualising Projects' Collective Method Rationale. In: Jennifer Horcoff, Manfred A. Jeusfeld, Anne Persson, The Practice of Enterprise Modeling 9th IFIP WG 8.1. Working Conference, PoEM 2016, Skövde, Sweden, November 8-10, 2016, Proceedings. Paper presented at 9th IFIP WG 8.1 Working Conference on The Practice of Enterprise Modeling, Skövde, Sweden, November 8-10, 2016. (pp. 344-352). Springer International Publishing. [BibTeX]
- Karlsson, F. , Kolkowska, E. , Hedström, K. & Frostenson, M. (2015). Inter-organisational information sharing: Between a rock and a hard place. In: Proceedings of the Ninth International Symposium on Human Aspects of Information Security & Assurance (HAISA 2015). Paper presented at International Symposium on Human Aspects of Information Security & Assurance (HAISA 2015), Mytilene (on the island of Lesvos), Greece, 1-3 July 2015. (pp. 71-81). Plymouth UK: Plymouth University. [BibTeX]
- Karlsson, F. , Goldkuhl, G. & Hedström, K. (2015). Practice-Based Discourse Analysis of InfoSec Policies. In: Hannes Federrath, Dieter Gollmann, ICT systems security and privacy protection 30th IFIP TC 11 International Conference, SEC 2015, Hamburg, Germany, May 26-28, 2015, Proceedings. Paper presented at IFIP SEC 2015 International Conference on ICT Systems Security and Privacy Protection, Hamburg, Germany, May 26–28, 2015. (pp. 297-310). Boston: Springer International Publishing. [BibTeX]
- Karlsson, F. , Linander, F. & von Schéele, F. (2014). A conceptual framework for time distortion analysis in method components. In: Exploring Modelling Methods for Systems Analysis and Design (EMMSAD'14). Paper presented at Exploring Modelling Methods for Systems Analysis and Design(EMMSAD'14), Thessaloniki, Greece, June 16-20, 2014. (pp. 454-463). Berlin Heidelberg: Springer Berlin/Heidelberg. [BibTeX]
- Karlsson, F. & Hedström, K. (2014). End user development and information security culture. In: Theo Tryfonas, Ioannis Askoxylakis, Human Aspects of Information Security, Privacy, and Trust. Paper presented at Second International Conference, HAS 2014, Held as Part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014. (pp. 246-257). Springer publications. [BibTeX]
- Karlsson, F. , Goldkuhl, G. & Hedström, K. (2014). Practice-Based Discourse Analysis of Information Security Policy in Health Care. Paper presented at 11th Scandinavian Workshop on E-government (SWEG 2014), Linköping, Sweden, February 4-5, 2014. [BibTeX]
- Hedström, K. , Persson, A. & Karlsson, F. (2012). Swedish e-health: from policy to practice. Paper presented at 9th Scandinavian Workshop on E-government (SWEG 2012), Copenhagen, Denmark, February 9-10. [BibTeX]
- Holgersson, J. & Karlsson, F. (2012). Understanding business employees’ conditions for participating in public e-service development. In: European Conference on Information Systems 2012. Paper presented at European Conference on Information Systems 2012 (ECIS), 11-13 June 2012, Barcelona, Spain. AIS Electronic Library. [BibTeX]
- Hedström, K. , Melin, U. , Karlsson, F. & Kolkowska, E. (2011). Availability in Practice. Paper presented at Workshop on Information Security & Privacy (SIGSEC), International Conference on Information Systems (ICIS 2011), Shanghai, China, December 4-7, 2011. [BibTeX]
- Holgersson, J. & Karlsson, F. (2011). Exploring citizens’ possibilities to participate in public e-service development. In: J.-L. Chappelet, O. Glassey, M. Janssen, A. Macintosh, J. Scholl, E. Tambouris, M. A. Wimmer, Electronic government and electronic participation joint proceedings of ongoing research and projects of IFIP EGOV and ePart 2011. Paper presented at IFIP EGov 2011, 29 August – 1 September, 2011, Delft, Netherlands. Linz: TRAUNER Verlag. [BibTeX]
- Wistrand, K. , Karlsson, F. & Ågerfalk, P. J. (2010). Exploring the role of method rationale in the context of teaching information systems development methods. In: George A. Papadopoulos ..., Information systems development towards a service provision society. Paper presented at 17th International Conference on Information Systems Development, (ISD2008), Paphos, Cyprus, 25–27 August 2008. (pp. 801-809). Heidelberg: Springer. [BibTeX]
- Karlsson, F. & Hedström, K. (2010). Negotiating a systems development method. In: George A. Papadopoulos ..., Information systems development towards a service provision society. Paper presented at 17th International Conference on Information Systems Development, (ISD2008), Paphos, Cyprus, 25–27 August 2008. (pp. 491-499). Heidelberg: Springer. [BibTeX]
- Holgersson, J. , Söderström, E. , Karlsson, F. & Hedström, K. (2010). Towards a roadmap for user involvement in e-government service development. In: Maria A. Wimmer, Jean-Loup Chappelet, Marijn Janssen, Hans J. Scholl, Electronic government. Paper presented at 9th IFIP WG 8.5 International Conference, EGOV 2010, Lausanne, Switzerland, August 29 - September 2, 2010. (pp. 251-262). Berlin, Germany: Springer. [BibTeX]
- Hedström, K. , Dhillon, G. & Karlsson, F. (2010). Using actor network theory to understand information security management. In: Kai Rannenberg, Vijay Varadharajan, Christian Weber, Security and privacy silver linings in the cloud. Paper presented at 25th IFIP TC 11 International Information Security Conference, SEC 2010, Held as Part of WCC 2010, Brisbane, Australia, September 20-23, 2010. (pp. 43-54). Berlin, Germany: Springer. [BibTeX]
- Oscarson, P. & Karlsson, F. (2009). A National Model for Information Classification. In: AIS SIGSEC Workshop on Information Security & Privacy (WISP2009). Paper presented at AIS SIGSEC Workshop on Information Security & Privacy (WISP2009), Phoenix, USA, 2009. [BibTeX]
- Kolkowska, E. , Hedström, K. & Karlsson, F. (2009). Information security goals in a Swedish hospital. In: Gurpreet Dhillon, Security, assurance and privacy organizational challenges. Paper presented at 8th Annual Security Conference, 15-16 April 2009, Las Vegas, USA. (pp. Article no. 16- [BibTeX]
- Karlsson, F. (2008). A wiki-based approach to method tailoring. In: Pär J. Ågerfalk, Harry Delugach, Mikael Lind, Proceedings of the 3rd international conference on the pragmatic web innovating the interactive society. Paper presented at 3rd International Conference on the Pragmatic Web (ICPW2008). (pp. 13-22). New York: ACM. [BibTeX]
- Karlsson, F. & Hedström, K. (2008). Exploring the conceptual structure of security rationale. Paper presented at WISP 2008, Dec. 13, Paris, France. [BibTeX]
- Hedström, K. & Karlsson, F. (2008). Facing moving targets?. In: Enrico Ferro, H. Jochen Scholl, Maria A. Wimmer, Electronic government proceedings of ongoing research and projects of EGOV 08. Paper presented at 7th International Conference, EGOV 2008, Turin, Italy, August 31 - September 5. (pp. 62-69). Linz: Trauner Verlag. [BibTeX]
- Kolkowska, E. , Hedström, K. & Karlsson, F. (2008). Information Security Goals in a Swedish Hospital. In: The 31st Information Systems Research Seminar in Scandinavia. Paper presented at IRIS31. [BibTeX]
- Karlsson, F. & Ågerfalk, P. J. (2008). Method configuration: the eXtreme programming case. In: Pekka Abrahamsson ..., Agile processes in software engineering and extreme programming. Paper presented at 9th International Conference, XP 2008, Limerick, Ireland, June 10-14, 2008. (pp. 32-41). Berlin: Springer. [BibTeX]
- Karlsson, F. (2008). Method Tailoring as Negotiation. In: CAiSE Forum, volume 344 of CEUR Workshop Proceedings. Paper presented at The 20th International Conference on Advanced Information Systems Engineering (CAiSE'08), Montpellier, France, 18-20 June, 2008. Amsterdam, Netherlands: Elsevier. [BibTeX]
- Hedström, K. & Karlsson, F. (2008). Shooting on a moving target?. In: EGOV 2008. [BibTeX]
- Karlsson, F. (2008). Using two heads in practice. In: Proceedings of the 4th international workshop on End-user software engineering, (WEUSE '08). Paper presented at International Conference on Software Engineering, ICSE. (pp. 43-47). New York: ACM. [BibTeX]
- Al-Haydar, S. & Karlsson, F. (2007). Cultural aspects in global systems development: an analytical tool. Paper presented at The 30th Information Systems Research Seminar in Scandinavia. [BibTeX]
- Ågerfalk, P. J. , Brinkkemper, S. , Gonzalez-Perez, C. , Henderson-Sellers, B. , Karlsson, F. , Kelly, S. & Ralyté, J. (2007). Modularization constructs in method engineering: towards common ground?. In: Jolita Ralyte, Sjaak Brinkkemper, Brian Henderson-Sellers, Situational method engineering fundamentals and experiences. Paper presented at IFIP WG 8.1 Working Conference on Situational Method Engineering (ME07), 12-14 September 2007, Geneva, Switzerland. (pp. 359-368). Berlin: Springer. [BibTeX]
- Karlsson, F. & Ågerfalk, P. J. (2007). Multi-grounded action research in method engineering: the MMC case. In: Jolita Ralyte, Sjaak Brinkkemper, Brian Henderson-Sellers, Situational method engineering fundamentals and experiences. Paper presented at IFIP WG 8.1 working conference, 12-14 September, Geneva, Switzerland. (pp. 19-32). Berlin: Springer. [BibTeX]
- Hedström, K. & Karlsson, F. (2006). Developing Information and Communication Technologies for Health Care - Design Principles. Paper presented at Workshop on medical informatics, Copenhagen, Denmark, 2006. [BibTeX]
- Lagsten, J. & Karlsson, F. (2006). Multiparadigm analysis: clarity into information systems evaluation. Paper presented at The 13th European Conference on Information Technology Evaluation (ECITE 2006). [BibTeX]
- Karlsson, F. (2005). Method Components From the Horizon of Activity Theory. In: Bubenko, Janis, Promote IT 2005 proceedings of the fifth Conference for the Promotion of Research in IT at New Universities and University Colleges in Sweden : Borlänge, Sweden 11-13 May, 2005. Paper presented at Promote IT 2005, Borlänge, 11-13 May. Lund: Studentlitteratur AB. [BibTeX]
- Karlsson, F. (2005). Method configuration: a systems development project revisited. Paper presented at The Fourteenth International Conference on Information Systems Development (ISD´2005 ). [BibTeX]
- Karlsson, F. & Ågerfalk, P. (2005). Method-user-centred method configuration. Paper presented at Situational Requirements Engineering Processes – Methods, Techniques and Tools to Support Situation-Specific Requirements Engineering Processes (SREP’05). [BibTeX]
- Karlsson, F. & Wistrand, K. (2005). Supporting collaborative actions through method engineering: exploring the potential of activity theory. Paper presented at Action in Language, Organisations and Information Systems (ALOIS 2005). [BibTeX]
- Karlsson, F. & Wistrand, K. (2004). MC Sandbox: Tool Support for Method Configuration. Paper presented at The Ninth CAiSE/IFIP 8.1/EUNO, Evaluation of Modelling Methods in Systems Analysis and Design 2004 (EMMSAD’04), Riga, Latvia, Jun 7-8, 2004. [BibTeX]
- Karlsson, F. (2004). Method Components: Applied. In: Bubenko, Janis, Promote IT 2004 proceedings of the fourth Conference for the Promotion of Research in IT at New Universities and University Colleges in Sweden : 5-7 May, 2004, Karlstad University, Sweden. P. 2. Paper presented at Promote IT 2004, Karlstad, May 5-7. Karlstad: Karlstad University Press. [BibTeX]
- Wistrand, K. & Karlsson, F. (2004). Method components: rationale revealed. Paper presented at The 16th International Conference on Advanced Information Systems Engineering, CAiSE 2004. [BibTeX]
- Ågerfalk, P. , Wistrand, K. , Karlsson, F. , Börjesson, G. , Elmberg, M. & Möller, K. (2003). Flexibile Processes and Method Configuration: Outline of a Joint Industry-Academia Research Project. In: Hammoudi S.,Filipe J.,Piattini M.,Camp O., ICEIS 2003 - Proceedings of the 5th International Conference on Enterprise Information Systems. Paper presented at 5th International Conference on Enterprise Information Systems (ICEIS 2003), Angers, France, April 23-26, 2003. (pp. 519-522). Angers, France: Escola Superior de Tecnologia do Instituto Politecnico de Setubal. [BibTeX]
- Karlsson, F. (2003). On The Empirical Grounding of Meta-Method for Method Configuration: The Personnel System. In: Proceedings of Promote IT 2003. Paper presented at Promote IT 2003, Visby, 5-7 May. [BibTeX]
- Karlsson, F. (2002). Bridging the Gap: between Method for Method Configuration and Situational Method Engineering. Paper presented at Promote IT 2002, Skövde, 22-24 April. [BibTeX]
- Karlsson, F. (2001). Internet-based Software Artefacts A Trigger for Rethinking Process Configuration: A Trigger for Rethinking Process Configuration. In: Proceedings of Conference for the Promotion of Research in IT at New Universities and at University Colleges in Sweden, 23-25 April 2001, Ronneby, Sweden.. Paper presented at Promote IT 2001, Ronneby, 23-25 April. [BibTeX]
- Karlsson, F. , Ågerfalk, P. & Hjalmarsson, A. (2001). Process Configuration with Development Tracks and Generic Project Types. Paper presented at Evaluation of Modelling Methods in Systems Analysis and Design 2001 (EMMSAD'01), Interlaken, Switzerland, 5-7 September. Borås: [BibTeX]
Conference proceedings (editor)
- Dhillon, G. (ed.) , Karlsson, F. (ed.) , Hedström, K. (ed.) & Zúquete, A. (ed.) (2019). ICT Systems Security and Privacy Protection. Cham, Switzerland: Springer (IFIP Advances in Information and Communication Technology 562). [BibTeX]
- Karlsson, F. (ed.) , Dhillon, G. (ed.) , Harnesk, D. (ed.) , Kolkowska, E. (ed.) & Hedström, K. (ed.) (2011). Proceedings of the 2011 European Security Conference (ESC’11): Exploring emergent frontiers in identity and privacy management. Örebro: Örebro university. [BibTeX]
Manuscripts
- Havstorm, T. E. , Karlsson, F. & Gao, S. Being Agile and doing Agile is not the Same : Analyzing Software Development Method Cargo Cult Behaviour. [BibTeX]
- Rostami, E. , Karlsson, F. & Gao, S. Policy components - a conceptual model for modularizing and tailoring of information security policies. [BibTeX]
- Rostami, E. , Karlsson, F. , Kolkowska, E. & Gao, S. Towards software for tailoring information security policies to organizations’ different target groups. [BibTeX]
Reports
- Hellberg, A. , Islam, S. & Karlsson, F. (2018). Säkerhet vid molnlösningar. Karlstad: Myndigheten för samhällsskydd och beredskap. [BibTeX]
- Andersson, A. , Hedström, K. & Karlsson, F. (2016). Terminologi och begrepp inom informationssäkerhet: Hur man skapar en språkgemenskap. Karlstad: Myndigheten för samhällsskydd och beredskap (MSB). [BibTeX]
- Karlsson, F. (2011). Att analysera värderingar bakom informationssäkerhet. Karlstad: Myndigheten för samhällsskydd och beredskap (MSB). [BibTeX]
- Karlsson, F. , Kolkowska, E. & Hedström, K. (2011). En översikt av informationssäkerhet i Sverige. Stockholm: . [BibTeX]
- Karlsson, F. , Kolkowska, E. & Hedström, K. (2011). En översikt av informationssäkerhetsforskning i Sverige. Stockholm: . [BibTeX]