{"id":"https://openalex.org/W23579156","doi":null,"title":"The Interrelationship Between Objectives and Practices in Information Security Management.","display_name":"The Interrelationship Between Objectives and Practices in Information Security Management.","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W23579156","mag":"23579156"},"language":"en","primary_location":{"id":"pmh:oai:aisel.aisnet.org:amcis2005-1992","doi":null,"is_oa":false,"landing_page_url":"http://aisel.aisnet.org/amcis2005/444","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AMCIS 2005 Proceedings","raw_type":"text"},"volume":null,"type":"article","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034135974","display_name":"Qingxiong Ma","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qingxiong Ma","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"John Pearson","orcid":"https://orcid.org/0000-0002-9876-7837","observed_orcids":["https://orcid.org/0000-0002-9876-7837"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"John Pearson","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-9876-7837","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00587372,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"444","last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security-management","display_name":"information security management","score":0.9940000176429749},{"id":"https://openalex.org/keywords/security-objectives","display_name":"security objectives","score":0.9779999852180481},{"id":"https://openalex.org/keywords/security-practices","display_name":"security practices","score":0.9829999804496765},{"id":"https://openalex.org/keywords/confidentiality","display_name":"confidentiality","score":0.7699999809265137},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.9139999747276306},{"id":"https://openalex.org/keywords/data-sensitivity","display_name":"data sensitivity","score":0.6069999933242798},{"id":"https://openalex.org/keywords/security-policy","display_name":"security policy","score":0.8410000205039978},{"id":"https://openalex.org/keywords/organizational-security","display_name":"organizational security","score":0.8389999866485596},{"id":"https://openalex.org/keywords/accountability","display_name":"accountability","score":0.7440000176429749},{"id":"https://openalex.org/keywords/integrity","display_name":"integrity","score":0.8220000267028809},{"id":"https://openalex.org/keywords/security-program-implementation","display_name":"security program implementation","score":0.49300000071525574}],"concepts":[{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.7944505214691162},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.7398248314857483},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.7374540567398071},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.6728817224502563},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.6515880823135376},{"id":"https://openalex.org/C39358052","wikidata":"https://www.wikidata.org/wiki/Q2578632","display_name":"Information security audit","level":5,"score":0.6331300735473633},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.5673757791519165},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.5644745826721191},{"id":"https://openalex.org/C52420254","wikidata":"https://www.wikidata.org/wiki/Q7445028","display_name":"Security convergence","level":5,"score":0.5439633131027222},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5129823088645935},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.49002087116241455},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4873000383377075},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4817619323730469},{"id":"https://openalex.org/C169537543","wikidata":"https://www.wikidata.org/wiki/Q1056312","display_name":"Certified Information Systems Security Professional","level":5,"score":0.46290266513824463},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.44174379110336304},{"id":"https://openalex.org/C111153917","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management system","level":5,"score":0.4405186176300049},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.44010382890701294},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.2919127941131592},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.2327919900417328},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.07227510213851929},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:aisel.aisnet.org:amcis2005-1992","doi":null,"is_oa":false,"landing_page_url":"http://aisel.aisnet.org/amcis2005/444","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a-star","anvur-scientific","cwts-core","dongbi-a","fnege-1","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AMCIS 2005 Proceedings","raw_type":"text"},{"id":"mag:23579156","doi":null,"is_oa":false,"landing_page_url":"http://dblp.uni-trier.de/db/conf/amcis/amcis2005.html#MaP05","pdf_url":null,"source":{"id":"https://openalex.org/S4306417665","display_name":"Americas Conference on Information Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Americas Conference on Information Systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[{"display_name":"Observational Study","id":"https://openalex.org/study-designs/observational-study"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W40842196","https://openalex.org/W224488695","https://openalex.org/W1548264801","https://openalex.org/W1573266937","https://openalex.org/W1997603734","https://openalex.org/W2050965286","https://openalex.org/W2063182047","https://openalex.org/W2119587968","https://openalex.org/W2182775993"],"related_works":["https://openalex.org/W2093796625","https://openalex.org/W2238193775","https://openalex.org/W1812922669","https://openalex.org/W2949584734","https://openalex.org/W7019968700","https://openalex.org/W7065868367","https://openalex.org/W7042784895","https://openalex.org/W3204540951","https://openalex.org/W3167945803","https://openalex.org/W3159252384"],"abstract_inverted_index":{"To":[0],"help":[1],"practitioners":[2],"effectively":[3],"implement":[4],"security":[5,12,28,44,50,56,73,80,85,104],"programs,":[6],"we":[7],"explored":[8],"the":[9,23,39,49,55,65,72,78,98],"interrelationship":[10],"between":[11],"objectives":[13,57,86,105],"and":[14,68,92],"practices":[15,81],"by":[16],"conducting":[17],"a":[18],"canonical":[19],"analysis":[20],"based":[21],"on":[22,84,116],"data":[24],"from":[25],"354":[26],"certified":[27],"professionals.":[29],"We":[30],"found":[31],"that":[32,82],"for":[33],"moderately":[34],"information-sensitive":[35,63],"organizations,":[36,48,64,77],"\u201cConfidentiality\u201d":[37],"had":[38],"highest":[40],"correlation":[41],"with":[42],"information":[43,103],"practices.":[45,74],"In":[46,75],"these":[47,76],"practice":[51,100],"contributing":[52,101],"most":[53],"to":[54,102],"was":[58,97],"\u201cAccess":[59,88,95],"Control\u201d.":[60],"For":[61],"highly":[62],"\u201cConfidentiality\u201d,":[66],"\u201cAccountability,\u201d":[67],"\u201cIntegrity\u201d":[69],"together":[70],"determine":[71],"major":[79],"impact":[83],"are:":[87],"Control\u201d,":[89],"\u201cOrganizational":[90],"Security\u201d,":[91],"\u201cSecurity":[93],"Policy\u201d.":[94],"Control\u201d":[96],"only":[99],"in":[106,111],"both":[107],"groups.":[108],"The":[109],"items":[110],"this":[112],"dimension":[113],"focused":[114],"mainly":[115],"technical":[117],"controls.":[118]},"counts_by_year":[],"updated_date":"2026-10-12T09:40:04.860316","created_date":"2016-06-24T00:00:00"}