This thesis is about communication between the emergency services and the logistics sector by means of information technology (IT), during incidents with hazardous substances on the road. The Dutch emergency services need information to deal effectively with this kind of incidents. Some of this information is in the possession of logistics companies, i.e. carriers. The fire brigade (one of the emergency services) receives nowadays this information in the form of a paper bill of lading at the time of arrival at the scene of the incident. It would be an improvement if the paper bill were replaced by a digital one (eCMR). This eCMR should be available to the emergency services at the same time as the incident is reported to the (112) alarm centre. In this study, possible improvement options are researched. All these options make use of the existing IT infrastructures of the logistics companies and the emergency services. Moreover, they meet the requirements, set in the in 2020 published Guidelines for the use of RID/ADR/ADN 5.4.0.2 of the UNECE about this subject.
Finally some recommendations are formulated, in particular to the ministry of Justice and Safety.

With the rise of globalisation, countries have become more connected financially and global cross-border investment flows have become more common. FDI is an important form of cross-border flow which is responsible for the spread of technology across countries and is the main source of external finance for emerging countries. In the last two decades, FDI has increased tremendously. But this has been accompanied by fears about outward FDI taking away production activities and jobs away from the home country. I look at how outward FDI affects home country investment. One can intuitively understand that a dollar of money spent abroad means a dollar less to invest in the domestic economy. Based on the theory of the financially constrained firm, I hypothesize that outward FDI reduces domestic fixed capital investment and R&D spending. I also develop a theoretical framework to distinguish the varying effects of outward FDI on domestic investment across traditional and R&D-intensive industries.By using industry-level panel data for 18 OECD countries covering the period 1995-2009, I regressed the shares of Gross Fixed Capital Formation (GFCF) and R&D spending separately on the share of outward FDI both for all industries as well as specifically for traditional and R&D-intensive industries. While, outward FDI had a negative effect on domestic capital investments at the aggregate level, it did not have any significant effect while looking at specific industry types. This could be because of the reduced sample size in the individual types. Outward FDI had a negative effect on domestic R&D spending at the aggregate level and for R&D-intensive industries, but it had a positive effect for traditional industries. Thus, while fears about outward FDI taking away domestic fixed capital investments are valid, outward FDI can have both a positive and negative effect on R&D expenditure, depending on the type of industry. These results can help MNCs make strategic investment decisions taking into account their effect on their home country industry. It can also help policymakers formulate tax and industrial policies to promote home country investments.

The information security (IS) risk assessment process is an essential part to organisation's their protection of digital assets. However, the fast changing IS environment causes for limited knowledge of eventualities, dependencies and values of systems and phenomena. Consequently, the IS risk assessment process is depending on the judgment of cybersecurity professionals to complement the incomplete knowledge. The outset of this research is to understand how cybersecurity professionals provide judgment when they experience uncertainty about the IS environment. First, the perception of uncertainty with cybersecurity professionals is analysed, guided by the theory on perceived environmental uncertainty. Second, the judgment operations of the cybersecurity professionals are analysed, guided by the theory on judgment heuristics. These two concepts are synthesised against the backdrop of the ISO27005 information security risk asessment methodology, that serves as different components of the information security environment. The results show that cybersecurity professionals perceive uncertainty about the IS environment in which it is difficult to: grasp the different interrelations in the organisation’s landscape of information and information systems, assign accurate values to the occurrence of changes/events in the IS environment and to determine the impact from changes/events to the organisation. This uncertainty is caused by the complexity and dynamism dimensions within the organisation’s IS environment. Indicated factors attributed to these dimensions are shadow IT, the innovation processes within an organisation and the organisational structuring. The judgment operations of the cybersecurity professionals are partly explained with the help from judgment heuristics. The data shows that the selective accessibility model is predominantly used to provide judgment about the IS environment during risk assessments. Thereby heavily relying on the information provided to them from different sources, consequently staying close to the initial values. The availability and representative heuristic are also identified but are referenced in fewer instances. This would suggest that the cybersecurity professional assess the information more on a case–by–case basis, rather than providing judgment based on similarity or the ease with which a scenario is retrieved from memory. Aside from the identified heuristics, the cybersecurity professional is observed not to be included in the final judgment. In such cases the uncertainty is then accepted because it is not part of their responsibility. Additionally, the security policy and philosophy paradigm shift from prevention to detection and response allow the cybersecurity professional to accept that not all IS incidents can be prevented. But that detection and response of IS incidents allow the impact to the organisation to be minimised. Finally the cybersecurity professional also judges the security awareness of the people involved when providing judgment operations during an IS risk assessment.