{"id":"https://openalex.org/W2167842235","doi":null,"title":"A Taxonomy of Operational Cyber Security Risks","display_name":"A Taxonomy of Operational Cyber Security Risks","publication_year":2010,"publication_date":"2010-12-01","ids":{"openalex":"https://openalex.org/W2167842235","mag":"2167842235"},"language":"en","primary_location":{"id":"mag:2167842235","doi":null,"is_oa":false,"landing_page_url":"http://resources.sei.cmu.edu/asset_files/TechnicalNote/2010_004_001_15200.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006242409","display_name":"James J. Cebula","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"James L. Cebula","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5103580076","display_name":"Lisa R. Young","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lisa R. Young","raw_affiliation_strings":["Carnegie Mellon University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.3093,"has_fulltext":false,"cited_by_count":127,"citation_normalized_percentile":{"value":0.94807489,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/risk-taxonomy","display_name":"risk taxonomy","score":0.9909999966621399},{"id":"https://openalex.org/keywords/human-factors-in-security","display_name":"human factors in security","score":0.6349999904632568},{"id":"https://openalex.org/keywords/external-events","display_name":"external events","score":0.9380000233650208},{"id":"https://openalex.org/keywords/federal-information-security-management-act","display_name":"FISMA","score":0.9120000004768372},{"id":"https://openalex.org/keywords/gnu-octave","display_name":"Octave","score":0.8539999723434448}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6435364484786987},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.5059141516685486},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.47998520731925964},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.4728275239467621},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.464036226272583},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4526101350784302},{"id":"https://openalex.org/C2779962950","wikidata":"https://www.wikidata.org/wiki/Q5659376","display_name":"Harmonization","level":2,"score":0.4433360993862152},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.436308890581131},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.41898152232170105},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4145481586456299},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4100314676761627},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3384099006652832},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.22217941284179688},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.12191841006278992},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.07964777946472168},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2167842235","doi":null,"is_oa":false,"landing_page_url":"http://resources.sei.cmu.edu/asset_files/TechnicalNote/2010_004_001_15200.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W2110869317"],"related_works":["https://openalex.org/W2110770770","https://openalex.org/W4406678712","https://openalex.org/W4327630208","https://openalex.org/W4244611685","https://openalex.org/W4401274520","https://openalex.org/W2976175739","https://openalex.org/W7134671394","https://openalex.org/W2763951472","https://openalex.org/W4404412853","https://openalex.org/W3040173143"],"abstract_inverted_index":{"Abstract":[0],":":[1],"This":[2,58],"report":[3,59],"presents":[4],"a":[5],"taxonomy":[6,65],"of":[7,20,30,63,86],"operational":[8,21],"cyber":[9,22],"security":[10,23,70],"risks":[11],"that":[12],"attempts":[13],"to":[14],"identify":[15],"and":[16,34,41,69,88,93,100],"organize":[17],"the":[18,61,64,76,83,94],"sources":[19],"risk":[24,68],"into":[25,50],"four":[26],"classes:":[27],"(1)":[28],"actions":[29],"people,":[31],"(2)":[32],"systems":[33],"technology":[35],"failures,":[36],"(3)":[37],"failed":[38],"internal":[39],"processes,":[40],"(4)":[42],"external":[43],"events.":[44],"Each":[45],"class":[46],"is":[47],"broken":[48],"down":[49],"subclasses,":[51],"which":[52],"are":[53],"described":[54,74],"by":[55,75],"their":[56],"elements.":[57],"discusses":[60],"harmonization":[62],"with":[66],"other":[67],"activities,":[71],"particularly":[72],"those":[73],"Federal":[77],"Information":[78],"Security":[79],"Management":[80],"Act":[81],"(FISMA),":[82],"National":[84],"Institute":[85],"Standards":[87],"Technology":[89],"(NIST)":[90],"Special":[91],"Publications,":[92],"CERT":[95],"Operationally":[96],"Critical":[97],"Threat,":[98],"Asset,":[99],"Vulnerability":[101],"Evaluation":[102],"(SM)":[103],"(OCTAVE":[104],"(trademark))":[105],"method.":[106]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":17},{"year":2019,"cited_by_count":18},{"year":2018,"cited_by_count":13},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":10},{"year":2015,"cited_by_count":10},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":2}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}