{"id":"https://openalex.org/W121248595","doi":null,"title":"Beyond Technical Aspects of Information Security: Risk Culture as a Success Factor for IT Risk Management","display_name":"Beyond Technical Aspects of Information Security: Risk Culture as a Success Factor for IT Risk Management","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W121248595","mag":"121248595"},"language":"en","primary_location":{"id":"pmh:oai:aisel.aisnet.org:amcis2005-1974","doi":null,"is_oa":false,"landing_page_url":"http://aisel.aisnet.org/cgi/viewcontent.cgi?article=1974&context=amcis2005","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AMCIS 2005 Proceedings","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082349855","display_name":"Stefanie Jahner","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stefanie Jahner","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5077586272","display_name":"Helmut Krcmar","orcid":"https://orcid.org/0000-0002-2754-8493","observed_orcids":["https://orcid.org/0000-0002-2754-8493","https://orcid.org/0000-0001-9724-4922"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Helmut Krcmar","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-2754-8493","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1522,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.84402344,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"462","last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/risk-culture","display_name":"risk culture","score":0.9520000219345093},{"id":"https://openalex.org/keywords/it-risk-management","display_name":"IT risk management","score":0.9980000257492065},{"id":"https://openalex.org/keywords/organizational-culture","display_name":"organizational culture","score":0.8149999976158142},{"id":"https://openalex.org/keywords/cultural-gap","display_name":"cultural gap","score":0.527999997138977},{"id":"https://openalex.org/keywords/risk-management-framework","display_name":"risk management framework","score":0.6549999713897705},{"id":"https://openalex.org/keywords/top-management-involvement","display_name":"top management involvement","score":0.8410000205039978},{"id":"https://openalex.org/keywords/communication-campaigns","display_name":"communication campaigns","score":0.9020000100135803},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.7369999885559082},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":0.41200000047683716}],"concepts":[{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.7272511720657349},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6093069314956665},{"id":"https://openalex.org/C164403151","wikidata":"https://www.wikidata.org/wiki/Q7336280","display_name":"Risk management framework","level":4,"score":0.5538752675056458},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5443013906478882},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.529121994972229},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.5245487689971924},{"id":"https://openalex.org/C95609273","wikidata":"https://www.wikidata.org/wiki/Q5975208","display_name":"IT risk management","level":3,"score":0.5174922943115234},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.5102131366729736},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4961012303829193},{"id":"https://openalex.org/C81146079","wikidata":"https://www.wikidata.org/wiki/Q7336283","display_name":"Risk management information systems","level":4,"score":0.4812981188297272},{"id":"https://openalex.org/C50440223","wikidata":"https://www.wikidata.org/wiki/Q1475848","display_name":"Risk factor","level":2,"score":0.4371950030326843},{"id":"https://openalex.org/C168785665","wikidata":"https://www.wikidata.org/wiki/Q5428720","display_name":"Factor analysis of information risk","level":5,"score":0.430832177400589},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.42378100752830505},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4193086624145508},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.4146636724472046},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3619312644004822},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.34112367033958435},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.32092979550361633},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.27262401580810547},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.18918338418006897},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.07991424202919006},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:aisel.aisnet.org:amcis2005-1974","doi":null,"is_oa":false,"landing_page_url":"http://aisel.aisnet.org/cgi/viewcontent.cgi?article=1974&context=amcis2005","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AMCIS 2005 Proceedings","raw_type":"text"},{"id":"mag:121248595","doi":null,"is_oa":false,"landing_page_url":"http://dblp.uni-trier.de/db/conf/amcis/amcis2005.html#JahnerK05","pdf_url":null,"source":{"id":"https://openalex.org/S4306417665","display_name":"Americas Conference on Information Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Americas Conference on Information Systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W1584564756","https://openalex.org/W1838112905","https://openalex.org/W2037202491","https://openalex.org/W2081683552","https://openalex.org/W2144903746","https://openalex.org/W3124872368"],"related_works":["https://openalex.org/W7099759941","https://openalex.org/W3047918821","https://openalex.org/W3003596427","https://openalex.org/W2989378355","https://openalex.org/W4403221140","https://openalex.org/W2984980388","https://openalex.org/W2110888429","https://openalex.org/W2800856860","https://openalex.org/W4232459","https://openalex.org/W7205708549"],"abstract_inverted_index":{"Increasing":[0],"numbers":[1],"of":[2,16,56,66,93,125],"security":[3],"incidents":[4],"such":[5,145],"as":[6,89,146],"malware":[7],"or":[8,151],"hacker":[9],"attacks":[10],"prompt":[11],"companies":[12],"to":[13,36],"spend":[14],"billions":[15],"dollars":[17],"on":[18,50,112],"protecting":[19],"their":[20],"information":[21],"systems.":[22],"In":[23],"this":[24,113],"context":[25],"IT":[26,52,96],"risk":[27,87,97,109,128,143],"management":[28,98],"(ITRM)":[29],"has":[30,47,70],"become":[31],"an":[32,90,94,131],"important":[33,139],"organizational":[34],"function":[35],"control":[37],"internal":[38],"and":[39,59,74,99],"external":[40],"risks":[41,53,69],"associated":[42],"with":[43],"IT.":[44],"Much":[45],"effort":[46],"been":[48,72],"put":[49],"mitigating":[51],"by":[54],"means":[55],"physical,":[57],"procedural,":[58],"technological":[60],"solutions.":[61],"However,":[62],"the":[63,107,122,134],"socio-cultural":[64],"perspective":[65],"managing":[67],"these":[68],"largely":[71],"ignored":[73],"thus":[75],"a":[76,101,117,126],"\u201ccultural":[77],"gap\u201d":[78],"in":[79,130],"ITRM":[80],"can":[81],"be":[82],"identified.":[83],"This":[84],"paper":[85],"introduces":[86],"culture":[88,129,144],"essential":[91],"component":[92],"integrated":[95],"presents":[100],"theoretically":[102],"motivated":[103],"framework":[104,114],"for":[105,141],"analyzing":[106],"construct":[108],"culture.":[110],"Based":[111],"we":[115,137],"conducted":[116],"case":[118],"study":[119],"that":[120],"underpins":[121],"crucial":[123],"role":[124],"vital":[127],"organization.":[132],"From":[133],"empirical":[135],"findings":[136],"derived":[138],"factors":[140],"establishing":[142],"(among":[147],"others)":[148],"communication":[149],"campaigns":[150],"top-management":[152],"involvement.":[153]},"counts_by_year":[{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2016-06-24T00:00:00"}