{"id":"https://openalex.org/W2340040915","doi":null,"title":"IT Governanace: A Manager's Guide to Data Security and ISO27001/ISO 27002","display_name":"IT Governanace: A Manager's Guide to Data Security and ISO27001/ISO 27002","publication_year":2008,"publication_date":"2008-05-03","ids":{"openalex":"https://openalex.org/W2340040915","mag":"2340040915"},"language":"en","primary_location":{"id":"mag:2340040915","doi":null,"is_oa":false,"landing_page_url":"https://dl.acm.org/citation.cfm?id=1481582","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"book","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082570030","display_name":"Alan Calder","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alan Calder","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5047943581","display_name":"Steve Watkins","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steve Watkins","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.5458,"has_fulltext":false,"cited_by_count":34,"citation_normalized_percentile":{"value":0.94888889,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.6234999895095825,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.6234999895095825,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.37040001153945923,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13034","display_name":"Information Systems Education and Curriculum Development","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/it-governance","display_name":"IT governance","score":0.9919999837875366},{"id":"https://openalex.org/keywords/data-security","display_name":"data security","score":0.7919999957084656},{"id":"https://openalex.org/keywords/information-security-management-system","display_name":"information security management system","score":0.8999999761581421},{"id":"https://openalex.org/keywords/iso-iec-27001","display_name":"ISO/IEC 27001","score":0.9520000219345093},{"id":"https://openalex.org/keywords/iso-iec-27002","display_name":"ISO/IEC 27002","score":0.9929999709129333},{"id":"https://openalex.org/keywords/sarbanes-oxley-act","display_name":"Sarbanes-Oxley Act","score":0.9810000061988831},{"id":"https://openalex.org/keywords/combined-code","display_name":"Combined Code","score":0.6970000267028809},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"corporate governance","score":0.6119999885559082},{"id":"https://openalex.org/keywords/regulatory-compliance","display_name":"regulatory compliance","score":0.6990000009536743},{"id":"https://openalex.org/keywords/privacy-regulation","display_name":"privacy regulation","score":0.621999979019165},{"id":"https://openalex.org/keywords/computer-misuse","display_name":"computer misuse","score":0.5680000185966492},{"id":"https://openalex.org/keywords/online-fraud","display_name":"online fraud","score":0.49300000071525574}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.7169878482818604},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.6741441488265991},{"id":"https://openalex.org/C2776723946","wikidata":"https://www.wikidata.org/wiki/Q544025","display_name":"COBIT","level":3,"score":0.5367428660392761},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5312991142272949},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.5219156742095947},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.5182035565376282},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.4489228427410126},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.4239528775215149},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.4194291830062866},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.41653379797935486},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41448521614074707},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.3394126892089844},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3299500346183777},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2100805640220642},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.20105814933776855},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.1841745376586914},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.1733606457710266},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.15755778551101685},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.1367608606815338},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.11855599284172058},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2340040915","doi":null,"is_oa":false,"landing_page_url":"https://dl.acm.org/citation.cfm?id=1481582","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.47620001435279846,"display_name":"Peace, justice, and strong institutions"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7047763760","https://openalex.org/W4400312595","https://openalex.org/W2245898089","https://openalex.org/W3214849218","https://openalex.org/W1547406939","https://openalex.org/W160643344","https://openalex.org/W231903425","https://openalex.org/W2605832708","https://openalex.org/W2729827590","https://openalex.org/W6940952201"],"abstract_inverted_index":{"Information":[0],"is":[1],"widely":[2],"regarded":[3],"as":[4],"the":[5,68,72,75,79,83,85],"lifeblood":[6],"of":[7,16,59,89],"modern":[8],"business,":[9],"but":[10],"organizations":[11],"are":[12,120],"facing":[13],"a":[14],"flood":[15],"threats":[17],"to":[18,31,52,101,113],"such":[19],"intellectual":[20],"capital":[21],"from":[22],"hackers,":[23],"viruses,":[24],"and":[25,34,44,57,74,78,94,103,124],"online":[26],"fraud.":[27],"Directors":[28],"must":[29],"respond":[30],"increasingly":[32],"complex":[33],"competing":[35],"demands":[36],"regarding":[37],"data":[38,95],"protection,":[39],"privacy":[40],"regulations,":[41],"computer":[42],"misuse,":[43],"investigatory":[45],"regulations.":[46],"IT":[47,117],"Governance":[48],"will":[49],"be":[50],"valuable":[51],"board":[53],"members,":[54],"executives,":[55],"owners":[56],"managers":[58],"any":[60],"business":[61],"or":[62],"organization":[63],"that":[64,115],"depends":[65],"on":[66],"information.Covering":[67],"Sarbanes-Oxley":[69],"Act":[70],"(in":[71,82],"US)":[73],"Turnbull":[76],"Report":[77],"Combined":[80],"Code":[81],"UK),":[84],"book":[86],"examines":[87],"standards":[88],"best":[90],"practice":[91],"for":[92,98],"compliance":[93],"security.":[96],"Written":[97],"companies":[99],"looking":[100],"protect":[102],"enhance":[104],"their":[105,116],"information":[106],"security":[107,118],"management":[108],"systems,":[109],"it":[110],"allows":[111],"them":[112],"ensure":[114],"strategies":[119],"coordinated,":[121],"coherent,":[122],"comprehensive":[123],"cost":[125],"effective.":[126]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":6},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":5}],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2016-06-24T00:00:00"}