{"id":"https://openalex.org/W2000891179","doi":"https://doi.org/10.1016/j.im.2008.12.007","title":"Information security management standards: Problems and solutions","display_name":"Information security management standards: Problems and solutions","publication_year":2009,"publication_date":"2009-05-21","ids":{"openalex":"https://openalex.org/W2000891179","doi":"https://doi.org/10.1016/j.im.2008.12.007","mag":"2000891179"},"language":"en","primary_location":{"id":"doi:10.1016/j.im.2008.12.007","doi":"https://doi.org/10.1016/j.im.2008.12.007","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.im.2008.12.007","pdf_url":null,"source":{"id":"https://openalex.org/S38883057","display_name":"Information & Management","issn_l":"0378-7206","issn":["0378-7206","1872-7530"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-b","fnege-1","jufo-2","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Management","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.25405/ncl.34191054","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058697220","display_name":"Mikko T. Siponen","orcid":"https://orcid.org/0000-0001-7041-1313","observed_orcids":["https://orcid.org/0000-0001-7041-1313"]},"institutions":[{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":true,"raw_author_name":"Mikko Siponen","raw_affiliation_strings":["University of Oulu, IS Security Research Center and Department of Information Processing Science, Linnanmaa, P.O. Box 3000, FIN-90014, Finland","University of Oulu, IS Security Research Center and Department of Information Processing Science, Linnanmaa, P.O. Box 3000, FIN-90014, Finland#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oulu, IS Security Research Center and Department of Information Processing Science, Linnanmaa, P.O. Box 3000, FIN-90014, Finland","institution_ids":["https://openalex.org/I98381234"]},{"raw_affiliation_string":"University of Oulu, IS Security Research Center and Department of Information Processing Science, Linnanmaa, P.O. Box 3000, FIN-90014, Finland#TAB#","institution_ids":["https://openalex.org/I98381234"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109267318","display_name":"Robert Willison","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I180519160","display_name":"Copenhagen Business School","ror":"https://ror.org/04sppb023","country_code":"DK","type":"education","lineage":["https://openalex.org/I180519160"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Robert Willison","raw_affiliation_strings":["Copenhagen Business School, Howitzvej 60, DK 2000, Frederiksberg, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Copenhagen Business School, Howitzvej 60, DK 2000, Frederiksberg, Denmark","institution_ids":["https://openalex.org/I180519160"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5058697220"],"corresponding_institution_ids":["https://openalex.org/I98381234"],"apc_list":{"value":4540,"currency":"USD","value_usd":4540},"apc_paid":null,"fwci":25.298,"has_fulltext":false,"cited_by_count":352,"citation_normalized_percentile":{"value":0.99520625,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"46","issue":"5","first_page":"267","last_page":"270"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.004800000227987766,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13164","display_name":"Quality and Management Systems","score":0.003800000064074993,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iso-iec-17799","display_name":"ISO 17799","score":0.9779999852180481},{"id":"https://openalex.org/keywords/sse-cmm","display_name":"SSE-CMM","score":0.9710000157356262},{"id":"https://openalex.org/keywords/standard-validation","display_name":"standard validation","score":0.6600000262260437},{"id":"https://openalex.org/keywords/security-requirements","display_name":"security requirements","score":0.45100000500679016},{"id":"https://openalex.org/keywords/organizational-differences","display_name":"organizational differences","score":0.6150000095367432},{"id":"https://openalex.org/keywords/information-security-certification","display_name":"information security certification","score":0.6179999709129333}],"concepts":[{"id":"https://openalex.org/C111153917","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management system","level":5,"score":0.8101128339767456},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.7926976680755615},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.7346872091293335},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.7020038366317749},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6822161674499512},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.6790797710418701},{"id":"https://openalex.org/C114351632","wikidata":"https://www.wikidata.org/wiki/Q5974820","display_name":"ITIL security management","level":5,"score":0.6740182042121887},{"id":"https://openalex.org/C169537543","wikidata":"https://www.wikidata.org/wiki/Q1056312","display_name":"Certified Information Systems Security Professional","level":5,"score":0.5465545058250427},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.5184433460235596},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4836919903755188},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.4766407907009125},{"id":"https://openalex.org/C2988319471","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information systems security","level":4,"score":0.47344326972961426},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4510674476623535},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.4409840703010559},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.37636545300483704},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3641800284385681},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.35819804668426514},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.34976911544799805},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.3262938857078552},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2927491068840027},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2575022578239441},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.11452874541282654},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.08040541410446167},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":8,"locations":[{"id":"doi:10.1016/j.im.2008.12.007","doi":"https://doi.org/10.1016/j.im.2008.12.007","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.im.2008.12.007","pdf_url":null,"source":{"id":"https://openalex.org/S38883057","display_name":"Information & Management","issn_l":"0378-7206","issn":["0378-7206","1872-7530"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-class-a","anvur-scientific","ccf-c","cwts-core","dongbi-b","fnege-1","jufo-2","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Management","raw_type":"journal-article"},{"id":"pmh:oai:research-api.cbs.dk:openaire_cris_publications/f5b4a5b0-f54c-11de-ae57-000ea68e967b","doi":null,"is_oa":false,"landing_page_url":"https://research.cbs.dk/en/publications/f5b4a5b0-f54c-11de-ae57-000ea68e967b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401458","display_name":"CBS Research Portal (Copenhagen Business School)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I180519160","host_organization_name":"Copenhagen Business School","host_organization_lineage":["https://openalex.org/I180519160"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Siponen, M & Willison, R 2009, 'Information Security Management Standards : Problems and Solutions', Information & Management, vol. 46, no. 5, pp. 267-270.","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.624.7089","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.624.7089","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.pacis-net.org/file/2003/papers/security/284.pdf","raw_type":"text"},{"id":"pmh:oai:aisel.aisnet.org:pacis2003-1104","doi":null,"is_oa":false,"landing_page_url":"http://aisel.aisnet.org/pacis2003/105","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"PACIS 2003 Proceedings","raw_type":"text"},{"id":"pmh:oai:nrl.northumbria.ac.uk:3788","doi":null,"is_oa":false,"landing_page_url":"http://nrl.northumbria.ac.uk/3788/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401884","display_name":"Northumbria Research Link (Northumbria University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I32394136","host_organization_name":"Northumbria University","host_organization_lineage":["https://openalex.org/I32394136"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"doi:10.25405/ncl.34191054","doi":"https://doi.org/10.25405/ncl.34191054","is_oa":true,"landing_page_url":"https://doi.org/10.25405/ncl.34191054","pdf_url":null,"source":{"id":"https://openalex.org/S4306402485","display_name":"Newcastle University ePrints (Newcastle Univesity)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I84884186","host_organization_name":"Newcastle University","host_organization_lineage":["https://openalex.org/I84884186"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.25405/ncl.34191054.v1","doi":"https://doi.org/10.25405/ncl.34191054.v1","is_oa":true,"landing_page_url":"https://doi.org/10.25405/ncl.34191054.v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306402485","display_name":"Newcastle University ePrints (Newcastle Univesity)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I84884186","host_organization_name":"Newcastle University","host_organization_lineage":["https://openalex.org/I84884186"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"mag:2404777904","doi":null,"is_oa":false,"landing_page_url":"http://dblp.uni-trier.de/db/conf/pacis/pacis2003.html#Siponen03","pdf_url":null,"source":{"id":"https://openalex.org/S4306420657","display_name":"Pacific Asia Conference on Information Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Pacific Asia Conference on Information Systems","raw_type":null}],"best_oa_location":{"id":"doi:10.25405/ncl.34191054","doi":"https://doi.org/10.25405/ncl.34191054","is_oa":true,"landing_page_url":"https://doi.org/10.25405/ncl.34191054","pdf_url":null,"source":{"id":"https://openalex.org/S4306402485","display_name":"Newcastle University ePrints (Newcastle Univesity)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I84884186","host_organization_name":"Newcastle University","host_organization_lineage":["https://openalex.org/I84884186"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W256019955","https://openalex.org/W629611620","https://openalex.org/W1411254273","https://openalex.org/W1510733794","https://openalex.org/W1511284091","https://openalex.org/W1515264191","https://openalex.org/W1531869710","https://openalex.org/W1546039474","https://openalex.org/W1548764298","https://openalex.org/W1566168400","https://openalex.org/W1578929691","https://openalex.org/W1581127248","https://openalex.org/W1582174699","https://openalex.org/W1791587663","https://openalex.org/W1872541261","https://openalex.org/W1873857048","https://openalex.org/W1966021446","https://openalex.org/W1967426972","https://openalex.org/W1968259381","https://openalex.org/W1969317601","https://openalex.org/W1972167346","https://openalex.org/W1976878590","https://openalex.org/W1977756901","https://openalex.org/W1985221117","https://openalex.org/W1992657524","https://openalex.org/W1997603734","https://openalex.org/W2000667443","https://openalex.org/W2003240526","https://openalex.org/W2007785820","https://openalex.org/W2024643361","https://openalex.org/W2029822360","https://openalex.org/W2032464833","https://openalex.org/W2034203949","https://openalex.org/W2051932867","https://openalex.org/W2063380184","https://openalex.org/W2067978381","https://openalex.org/W2070036949","https://openalex.org/W2072047708","https://openalex.org/W2073275508","https://openalex.org/W2080682680","https://openalex.org/W2104134129","https://openalex.org/W2115143168","https://openalex.org/W2118376079","https://openalex.org/W2151461605","https://openalex.org/W2158342889","https://openalex.org/W2171113940","https://openalex.org/W2375280882","https://openalex.org/W2464097489","https://openalex.org/W2483614485","https://openalex.org/W2493983855","https://openalex.org/W2495922688","https://openalex.org/W2496708470","https://openalex.org/W2971284870","https://openalex.org/W3022650179","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W40842196","https://openalex.org/W2485755110","https://openalex.org/W7095534555","https://openalex.org/W2005170618","https://openalex.org/W1978129800","https://openalex.org/W2984768951","https://openalex.org/W928268844","https://openalex.org/W2367336646","https://openalex.org/W2895613106","https://openalex.org/W4247037893"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":17},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":22},{"year":2022,"cited_by_count":25},{"year":2021,"cited_by_count":23},{"year":2020,"cited_by_count":21},{"year":2019,"cited_by_count":29},{"year":2018,"cited_by_count":20},{"year":2017,"cited_by_count":21},{"year":2016,"cited_by_count":13},{"year":2015,"cited_by_count":24},{"year":2014,"cited_by_count":29},{"year":2013,"cited_by_count":25},{"year":2012,"cited_by_count":23}],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2016-06-24T00:00:00"}