{"id":"https://openalex.org/W2901966340","doi":"https://doi.org/10.1093/scipol/scy061","title":"Regulating risks within complex sociotechnical systems: Evidence from critical infrastructure cybersecurity standards","display_name":"Regulating risks within complex sociotechnical systems: Evidence from critical infrastructure cybersecurity standards","publication_year":2018,"publication_date":"2018-09-26","ids":{"openalex":"https://openalex.org/W2901966340","doi":"https://doi.org/10.1093/scipol/scy061","mag":"2901966340"},"language":"en","primary_location":{"id":"doi:10.1093/scipol/scy061","doi":"https://doi.org/10.1093/scipol/scy061","is_oa":false,"landing_page_url":"https://doi.org/10.1093/scipol/scy061","pdf_url":null,"source":{"id":"https://openalex.org/S4210168539","display_name":"Science and Public Policy","issn_l":"0302-3427","issn":["0302-3427","1471-5430"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-c","anvur-class-a","anvur-scientific","cwts-core","jufo-2","ki-jl-1","norway-1","poland-70","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Science and Public Policy","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020551210","display_name":"Aaron Clark\u2010Ginsberg","orcid":"https://orcid.org/0000-0002-4283-0788","observed_orcids":["https://orcid.org/0000-0002-4283-0788"]},"institutions":[{"id":"https://openalex.org/I1309849503","display_name":"RAND Corporation","ror":"https://ror.org/00f2z7n96","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1309849503"]},{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Aaron Clark-Ginsberg","raw_affiliation_strings":["Stanford University, Stanford, CA, USA","The RAND Corporation, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]},{"raw_affiliation_string":"The RAND Corporation, Arlington, VA, USA","institution_ids":["https://openalex.org/I1309849503"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058989213","display_name":"Rebecca M. Slayton","orcid":"https://orcid.org/0000-0002-5234-0870","observed_orcids":["https://orcid.org/0000-0002-5234-0870"]},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rebecca Slayton","raw_affiliation_strings":["Cornell University, Ithaca, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY, USA","institution_ids":["https://openalex.org/I205783295"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5020551210"],"corresponding_institution_ids":["https://openalex.org/I1309849503","https://openalex.org/I97018004"],"apc_list":{"value":4077,"currency":"EUR","value_usd":4608},"apc_paid":null,"fwci":4.5859,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":{"value":0.94469002,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":"46","issue":"3","first_page":"339","last_page":"346"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12185","display_name":"Regulation and Compliance Studies","score":0.7631999850273132,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T12185","display_name":"Regulation and Compliance Studies","score":0.7631999850273132,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.14489999413490295,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.026000000536441803,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/regulatory-influence","display_name":"regulatory influence","score":0.6449999809265137},{"id":"https://openalex.org/keywords/complex-socio-technical-systems","display_name":"complex socio-technical systems","score":0.9369999766349792},{"id":"https://openalex.org/keywords/risk-management","display_name":"risk management","score":0.7170000076293945},{"id":"https://openalex.org/keywords/cybersecurity-standards","display_name":"cybersecurity standards","score":0.6570000052452087},{"id":"https://openalex.org/keywords/critical-infrastructure-protection","display_name":"critical infrastructure protection","score":0.9710000157356262},{"id":"https://openalex.org/keywords/north-american-electric-reliability-corporation","display_name":"NERC","score":0.9100000262260437},{"id":"https://openalex.org/keywords/regulatory-incentives","display_name":"regulatory incentives","score":0.621999979019165},{"id":"https://openalex.org/keywords/regulatory-scope","display_name":"regulatory scope","score":0.9340000152587891},{"id":"https://openalex.org/keywords/regulatory-adaptability","display_name":"regulatory adaptability","score":0.9490000009536743},{"id":"https://openalex.org/keywords/cybersecurity-risk-reduction","display_name":"cybersecurity risk reduction","score":0.4869999885559082}],"concepts":[{"id":"https://openalex.org/C127627568","wikidata":"https://www.wikidata.org/wiki/Q1639361","display_name":"Sociotechnical system","level":2,"score":0.9792497158050537},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.7799830436706543},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6055858135223389},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5143812298774719},{"id":"https://openalex.org/C2779033394","wikidata":"https://www.wikidata.org/wiki/Q5186733","display_name":"Critical infrastructure protection","level":3,"score":0.4790133833885193},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.34562987089157104},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.32699424028396606},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.16935330629348755}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/scipol/scy061","doi":"https://doi.org/10.1093/scipol/scy061","is_oa":false,"landing_page_url":"https://doi.org/10.1093/scipol/scy061","pdf_url":null,"source":{"id":"https://openalex.org/S4210168539","display_name":"Science and Public Policy","issn_l":"0302-3427","issn":["0302-3427","1471-5430"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-c","anvur-class-a","anvur-scientific","cwts-core","jufo-2","ki-jl-1","norway-1","poland-70","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Science and Public Policy","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7207000255584717,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"},{"score":0.47620001435279846,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions"}],"sustainable_development_goals_aurora":[{"score":0.6100000143051147,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":82,"referenced_works":["https://openalex.org/W347706241","https://openalex.org/W586932544","https://openalex.org/W634395816","https://openalex.org/W1508150034","https://openalex.org/W1518443081","https://openalex.org/W1531676076","https://openalex.org/W1564809644","https://openalex.org/W1589608052","https://openalex.org/W1595890742","https://openalex.org/W1849618437","https://openalex.org/W1892922380","https://openalex.org/W1901716047","https://openalex.org/W1924720696","https://openalex.org/W1946112785","https://openalex.org/W1964450454","https://openalex.org/W1966253804","https://openalex.org/W1968540656","https://openalex.org/W1980440958","https://openalex.org/W1980476787","https://openalex.org/W1988466328","https://openalex.org/W1989726598","https://openalex.org/W2001210505","https://openalex.org/W2005813573","https://openalex.org/W2010466188","https://openalex.org/W2014831132","https://openalex.org/W2016945733","https://openalex.org/W2025433727","https://openalex.org/W2027580705","https://openalex.org/W2032416135","https://openalex.org/W2042041877","https://openalex.org/W2069925752","https://openalex.org/W2079106426","https://openalex.org/W2079619603","https://openalex.org/W2088283838","https://openalex.org/W2092400486","https://openalex.org/W2099739542","https://openalex.org/W2105251708","https://openalex.org/W2106557712","https://openalex.org/W2108375716","https://openalex.org/W2109781560","https://openalex.org/W2113188272","https://openalex.org/W2125444661","https://openalex.org/W2138295414","https://openalex.org/W2141613065","https://openalex.org/W2158412536","https://openalex.org/W2160546646","https://openalex.org/W2163284576","https://openalex.org/W2167593612","https://openalex.org/W2251515692","https://openalex.org/W2270405047","https://openalex.org/W2314911175","https://openalex.org/W2317576320","https://openalex.org/W2317590407","https://openalex.org/W2332125581","https://openalex.org/W2340644475","https://openalex.org/W2431232518","https://openalex.org/W2468999896","https://openalex.org/W2495944285","https://openalex.org/W2552999984","https://openalex.org/W2580587497","https://openalex.org/W2751899792","https://openalex.org/W2756149177","https://openalex.org/W2797068669","https://openalex.org/W2798541463","https://openalex.org/W2802576058","https://openalex.org/W2894669166","https://openalex.org/W3021080613","https://openalex.org/W3142658307","https://openalex.org/W3150630789","https://openalex.org/W3216327090","https://openalex.org/W4231406921","https://openalex.org/W4232546845","https://openalex.org/W4237517061","https://openalex.org/W4240494537","https://openalex.org/W4242898472","https://openalex.org/W4244021162","https://openalex.org/W4256243005","https://openalex.org/W4285719527","https://openalex.org/W4319588686","https://openalex.org/W4388316013","https://openalex.org/W7047112858","https://openalex.org/W7054794416"],"related_works":["https://openalex.org/W2001210505","https://openalex.org/W2395989739","https://openalex.org/W7100909980","https://openalex.org/W6946159888","https://openalex.org/W2025918434","https://openalex.org/W6996991867","https://openalex.org/W2807812549","https://openalex.org/W3098900886","https://openalex.org/W2340644475","https://openalex.org/W7046470437"],"abstract_inverted_index":{"Using":[0],"regulations":[1,14,33,75,116,144],"to":[2,40],"reduce":[3],"risks":[4,104],"in":[5],"complex":[6,46],"systems":[7,36,147],"is":[8,59],"controversial,":[9],"with":[10],"some":[11],"arguing":[12],"that":[13,20,37,49,56,114,133,148],"are":[15,22,67],"ineffective,":[16],"while":[17],"others":[18],"argue":[19,55,132],"they":[21,38,79,149],"essential":[23],"even":[24],"if":[25],"imperfect.":[26],"In":[27],"this":[28],"article,":[29],"we":[30,82],"show":[31],"how":[32],"and":[34,65,76,124,145],"the":[35,71,74,77,84,91,102,107,115,146],"aim":[39],"regulate":[41],"function":[42],"together":[43],"as":[44,139],"a":[45,68],"sociotechnical":[47],"system":[48,78],"influences":[50],"risk":[51],"management.":[52],"We":[53,131],"first":[54],"regulatory":[57,134],"influence":[58,135],"shaped":[60],"by":[61,106],"three":[62],"factors\u2014incentives,":[63],"scope,":[64],"adaptability\u2014which":[66],"product":[69],"of":[70,86,89],"interactions":[72,142],"between":[73,143],"regulate.":[80,150],"Next,":[81],"assess":[83],"effect":[85],"one":[87],"set":[88],"regulations,":[90],"North":[92],"American":[93],"Electric":[94],"Reliability":[95],"Corporation\u2019s":[96],"Critical":[97],"Infrastructure":[98],"Protection":[99],"standards,":[100],"on":[101],"cybersecurity":[103,122],"faced":[105],"US":[108],"electric":[109],"grid.":[110],"Our":[111],"assessment":[112],"shows":[113],"reduced":[117],"many":[118],"but":[119],"not":[120],"all":[121],"risks,":[123],"at":[125],"times":[126],"may":[127],"have":[128],"worsened":[129],"them.":[130],"should":[136],"be":[137],"understood":[138],"emergent":[140],"from":[141]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":2}],"updated_date":"2026-10-31T12:09:11.096373","created_date":"2018-11-29T00:00:00"}