{"id":"https://openalex.org/W2037670362","doi":"https://doi.org/10.1016/j.csi.2007.10.002","title":"Standardising business application security assessments with pattern-driven audit automations","display_name":"Standardising business application security assessments with pattern-driven audit automations","publication_year":2007,"publication_date":"2007-11-26","ids":{"openalex":"https://openalex.org/W2037670362","doi":"https://doi.org/10.1016/j.csi.2007.10.002","mag":"2037670362"},"language":"en","primary_location":{"id":"doi:10.1016/j.csi.2007.10.002","doi":"https://doi.org/10.1016/j.csi.2007.10.002","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.csi.2007.10.002","pdf_url":null,"source":{"id":"https://openalex.org/S119630662","display_name":"Computer Standards & Interfaces","issn_l":"0920-5489","issn":["0920-5489","1872-7018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-70","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Standards & Interfaces","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084471326","display_name":"Theo Tryfonas","orcid":"https://orcid.org/0000-0003-4024-8003","observed_orcids":["https://orcid.org/0000-0003-4024-8003"]},"institutions":[{"id":"https://openalex.org/I4405265726","display_name":"University of Glamorgan","ror":"https://ror.org/05jsvx592","country_code":"GB","type":"education","lineage":["https://openalex.org/I128993996","https://openalex.org/I4405265726"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Theodore Tryfonas","raw_affiliation_strings":["Information Security Research Group, Faculty of Advanced Technology, University of Glamorgan, United Kingdom","Information Security Research Group, Faculty of Advanced Technology, University of Glamorgan, United Kingdom#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Research Group, Faculty of Advanced Technology, University of Glamorgan, United Kingdom","institution_ids":["https://openalex.org/I4405265726"]},{"raw_affiliation_string":"Information Security Research Group, Faculty of Advanced Technology, University of Glamorgan, United Kingdom#TAB#","institution_ids":["https://openalex.org/I4405265726"]}]},{"author_position":"last","author":{"id":null,"display_name":"Bob Kearney","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bob Kearney","raw_affiliation_strings":["Professional Services, Gamma Enterprise Technologies, Woodland Hills, CA, USA","Professional Services, Gamma Enterprise Technologies, Woodland Hills, CA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Professional Services, Gamma Enterprise Technologies, Woodland Hills, CA, USA","institution_ids":[]},{"raw_affiliation_string":"Professional Services, Gamma Enterprise Technologies, Woodland Hills, CA, USA#TAB#","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5084471326"],"corresponding_institution_ids":["https://openalex.org/I4405265726"],"apc_list":{"value":2670,"currency":"USD","value_usd":2670},"apc_paid":null,"fwci":0.9755,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.84231662,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":97},"biblio":{"volume":"30","issue":"4","first_page":"262","last_page":"270"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.36250001192092896,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.36250001192092896,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.1404999941587448,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.052299998700618744,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/audit-automation","display_name":"audit automation","score":0.8230000138282776},{"id":"https://openalex.org/keywords/security-design-patterns","display_name":"security design patterns","score":0.8389999866485596},{"id":"https://openalex.org/keywords/it-audit","display_name":"information systems auditing","score":0.6399999856948853},{"id":"https://openalex.org/keywords/standardization","display_name":"standardization","score":0.6809999942779541},{"id":"https://openalex.org/keywords/enterprise-resource-planning","display_name":"enterprise resource planning","score":0.8040000200271606},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"corporate governance","score":0.7979999780654907},{"id":"https://openalex.org/keywords/sarbanes-oxley-act","display_name":"Sarbanes-Oxley Act","score":0.9610000252723694}],"concepts":[{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6679614782333374},{"id":"https://openalex.org/C39358052","wikidata":"https://www.wikidata.org/wiki/Q2578632","display_name":"Information security audit","level":5,"score":0.616132915019989},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5649523138999939},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.556050717830658},{"id":"https://openalex.org/C177309310","wikidata":"https://www.wikidata.org/wiki/Q758917","display_name":"Information technology audit","level":5,"score":0.5402564406394958},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.4551643133163452},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4486704170703888},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.40409862995147705},{"id":"https://openalex.org/C170856484","wikidata":"https://www.wikidata.org/wiki/Q6452684","display_name":"Internal audit","level":3,"score":0.4006797671318054},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.386495441198349},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.36680835485458374},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3508174419403076},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3465624749660492},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3315313458442688},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.32808929681777954},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.16659832000732422},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14912930130958557},{"id":"https://openalex.org/C191602146","wikidata":"https://www.wikidata.org/wiki/Q6269489","display_name":"Joint audit","level":4,"score":0.12610110640525818},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.08736538887023926},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.csi.2007.10.002","doi":"https://doi.org/10.1016/j.csi.2007.10.002","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.csi.2007.10.002","pdf_url":null,"source":{"id":"https://openalex.org/S119630662","display_name":"Computer Standards & Interfaces","issn_l":"0920-5489","issn":["0920-5489","1872-7018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-70","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Standards & Interfaces","raw_type":"journal-article"},{"id":"pmh:oai:research-information.bris.ac.uk:openaire_cris_publications/21c3c30b-d2ef-4eed-a631-e80a1cfef4d4","doi":null,"is_oa":false,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/21c3c30b-d2ef-4eed-a631-e80a1cfef4d4","pdf_url":null,"source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Tryfonas, T & Kearney, B 2008, 'Standardising business application security assessments with pattern-driven audit automations', Computer Standards and Interfaces, vol. 30, no. 4, pp. 262 - 270. https://doi.org/10.1016/j.csi.2007.10.002","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W3261618","https://openalex.org/W400969945","https://openalex.org/W617329964","https://openalex.org/W652748195","https://openalex.org/W1498306255","https://openalex.org/W1515796738","https://openalex.org/W1521422937","https://openalex.org/W1615511242","https://openalex.org/W1649645444","https://openalex.org/W2104065059","https://openalex.org/W2104555438","https://openalex.org/W2120214216","https://openalex.org/W2134521102","https://openalex.org/W2505768305","https://openalex.org/W2563485765","https://openalex.org/W2589180140"],"related_works":["https://openalex.org/W1988384194","https://openalex.org/W2335199877","https://openalex.org/W7221619260","https://openalex.org/W4205746881","https://openalex.org/W4319241473","https://openalex.org/W7169850167","https://openalex.org/W2509886826","https://openalex.org/W3023988590","https://openalex.org/W1976331977","https://openalex.org/W2295782376"],"abstract_inverted_index":null,"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":2},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2016-06-24T00:00:00"}