{"id":"https://openalex.org/W3159979075","doi":"https://doi.org/10.3390/electronics10101168","title":"Cyber Third-Party Risk Management: A Comparison of Non-Intrusive Risk Scoring Reports","display_name":"Cyber Third-Party Risk Management: A Comparison of Non-Intrusive Risk Scoring Reports","publication_year":2021,"publication_date":"2021-05-13","ids":{"openalex":"https://openalex.org/W3159979075","doi":"https://doi.org/10.3390/electronics10101168","mag":"3159979075"},"language":"en","primary_location":{"id":"doi:10.3390/electronics10101168","doi":"https://doi.org/10.3390/electronics10101168","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics10101168","pdf_url":"https://www.mdpi.com/2079-9292/10/10/1168/pdf?version=1620961080","source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2079-9292/10/10/1168/pdf?version=1620961080","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010984118","display_name":"Omer F. Keskin","orcid":"https://orcid.org/0000-0003-1015-3652","observed_orcids":["https://orcid.org/0000-0003-1015-3652"]},"institutions":[{"id":"https://openalex.org/I1327163397","display_name":"State University of New York","ror":"https://ror.org/01q1z8k08","country_code":"US","type":"education","lineage":["https://openalex.org/I1327163397"]},{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Omer F. Keskin","raw_affiliation_strings":["College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA","institution_ids":["https://openalex.org/I1327163397","https://openalex.org/I392282"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079402034","display_name":"Kevin Matthe Caramancion","orcid":"https://orcid.org/0000-0003-1332-3426","observed_orcids":["https://orcid.org/0000-0003-1332-3426"]},"institutions":[{"id":"https://openalex.org/I1327163397","display_name":"State University of New York","ror":"https://ror.org/01q1z8k08","country_code":"US","type":"education","lineage":["https://openalex.org/I1327163397"]},{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Matthe Caramancion","raw_affiliation_strings":["College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA","institution_ids":["https://openalex.org/I1327163397","https://openalex.org/I392282"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085220464","display_name":"Irem Tatar","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1327163397","display_name":"State University of New York","ror":"https://ror.org/01q1z8k08","country_code":"US","type":"education","lineage":["https://openalex.org/I1327163397"]},{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Irem Tatar","raw_affiliation_strings":["College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA","institution_ids":["https://openalex.org/I1327163397","https://openalex.org/I392282"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Owais Raza","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1327163397","display_name":"State University of New York","ror":"https://ror.org/01q1z8k08","country_code":"US","type":"education","lineage":["https://openalex.org/I1327163397"]},{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Owais Raza","raw_affiliation_strings":["College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA","institution_ids":["https://openalex.org/I1327163397","https://openalex.org/I392282"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034254520","display_name":"Unal Tatar","orcid":"https://orcid.org/0000-0001-8233-9566","observed_orcids":["https://orcid.org/0000-0001-8233-9566"]},"institutions":[{"id":"https://openalex.org/I1327163397","display_name":"State University of New York","ror":"https://ror.org/01q1z8k08","country_code":"US","type":"education","lineage":["https://openalex.org/I1327163397"]},{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Unal Tatar","raw_affiliation_strings":["College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Emergency Preparedness, Homeland Security and Cybersecurity, University at Albany, State University of New York, Albany, NY 12203, USA","institution_ids":["https://openalex.org/I1327163397","https://openalex.org/I392282"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5034254520"],"corresponding_institution_ids":["https://openalex.org/I1327163397","https://openalex.org/I392282"],"apc_list":{"value":1800,"currency":"CHF","value_usd":1944},"apc_paid":{"value":1800,"currency":"CHF","value_usd":1944},"fwci":7.2045,"has_fulltext":true,"cited_by_count":89,"citation_normalized_percentile":{"value":0.97123369,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":"10","issue":"10","first_page":"1168","last_page":"1168"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.003000000026077032,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/publicly-available-information","display_name":"publicly available information","score":0.5450000166893005},{"id":"https://openalex.org/keywords/risk-score-comparison","display_name":"risk score comparison","score":0.44600000977516174}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7381202578544617},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5888589024543762},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.5482776761054993},{"id":"https://openalex.org/C2983583741","wikidata":"https://www.wikidata.org/wiki/Q16785388","display_name":"Third party","level":2,"score":0.5377794504165649},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5369410514831543},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.5339725017547607},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5314819812774658},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.4476340711116791},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.43405503034591675},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4288941025733948},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4249066710472107},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.1917954385280609},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08720698952674866},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/electronics10101168","doi":"https://doi.org/10.3390/electronics10101168","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics10101168","pdf_url":"https://www.mdpi.com/2079-9292/10/10/1168/pdf?version=1620961080","source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},{"id":"pmh:oai:scholarsarchive.library.albany.edu:ehc_fac_scholar-1002","doi":null,"is_oa":true,"landing_page_url":"https://scholarsarchive.library.albany.edu/ehc_fac_scholar/2","pdf_url":null,"source":{"id":"https://openalex.org/S4377196508","display_name":"Scholars Archive - University at Albany (University at Albany, State University of New York)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I392282","host_organization_name":"University at Albany, State University of New York","host_organization_lineage":["https://openalex.org/I392282"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Emergency Preparedness, Homeland Security, and Cybersecurity Faculty Scholarship","raw_type":"text"},{"id":"pmh:oai:doaj.org/article:711d00e875df4613b3382400b3146e82","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/711d00e875df4613b3382400b3146e82","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Electronics, Vol 10, Iss 1168, p 1168 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/electronics10101168","doi":"https://doi.org/10.3390/electronics10101168","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics10101168","pdf_url":"https://www.mdpi.com/2079-9292/10/10/1168/pdf?version=1620961080","source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2202998322","display_name":"CRII: SaTC: Graph-based Probabilistic Cyber Risk Modeling","funder_award_id":"1948261","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3159979075.pdf","grobid_xml":"https://content.openalex.org/works/W3159979075.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W1415990210","https://openalex.org/W1634924361","https://openalex.org/W2012575823","https://openalex.org/W2062265701","https://openalex.org/W2070141321","https://openalex.org/W2082372830","https://openalex.org/W2110309767","https://openalex.org/W2147704565","https://openalex.org/W2561247258","https://openalex.org/W2580877740","https://openalex.org/W2726910570","https://openalex.org/W2761323174","https://openalex.org/W2766411424","https://openalex.org/W2781731163","https://openalex.org/W2806469549","https://openalex.org/W2889335660","https://openalex.org/W2903774181","https://openalex.org/W2911160660","https://openalex.org/W2931658733","https://openalex.org/W2933444190","https://openalex.org/W2944518559","https://openalex.org/W2964769731","https://openalex.org/W2971454195","https://openalex.org/W2972665319","https://openalex.org/W2978348882","https://openalex.org/W2990181228","https://openalex.org/W2991138398","https://openalex.org/W3000385461","https://openalex.org/W3017089210","https://openalex.org/W3037279876","https://openalex.org/W3037627566","https://openalex.org/W3049000473","https://openalex.org/W3134520564","https://openalex.org/W3186379692","https://openalex.org/W6770381254"],"related_works":["https://openalex.org/W4415003625","https://openalex.org/W4413227759","https://openalex.org/W7112000695","https://openalex.org/W7164823150","https://openalex.org/W4308200766","https://openalex.org/W7166413236","https://openalex.org/W2941175079","https://openalex.org/W7204101386","https://openalex.org/W4413523070","https://openalex.org/W4390679784"],"abstract_inverted_index":{"Cybersecurity":[0],"is":[1,44,192],"a":[2,45,58,84,175,193],"concern":[3],"for":[4,143,161],"organizations":[5,24],"in":[6,49],"this":[7,138],"era.":[8],"However,":[9],"strengthening":[10],"the":[11,50,69,125,134,140,155,162,165,171,196,198],"security":[12,60,200],"of":[13,83,133,167,174],"an":[14,66,106],"organization\u2019s":[15,107],"internal":[16],"network":[17],"may":[18,32,78],"not":[19,203],"be":[20,79],"sufficient":[21],"since":[22],"modern":[23],"depend":[25],"on":[26],"third":[27,85],"parties,":[28],"and":[29,62,76,90,151,159,183],"these":[30],"dependencies":[31],"open":[33],"new":[34,47],"attack":[35],"paths":[36],"to":[37,93,101,104,118,153,180],"cybercriminals.":[38],"Cyber":[39],"Third-Party":[40],"Risk":[41],"Management":[42],"(C-TPRM)":[43],"relatively":[46],"concept":[48],"business":[51],"world.":[52],"All":[53],"vendors":[54],"or":[55],"partners":[56],"possess":[57],"potential":[59],"vulnerability":[61],"threat.":[63],"Even":[64],"if":[65,190],"organization":[67,177],"has":[68],"best":[70],"cybersecurity":[71,97,108,172],"practice,":[72],"its":[73],"data,":[74],"customers,":[75],"reputation":[77],"at":[80],"risk":[81],"because":[82],"party.":[86],"Organizations":[87],"seek":[88],"effective":[89],"efficient":[91],"methods":[92,103,115,142,169],"assess":[94,105],"their":[95],"partners\u2019":[96],"risks.":[98],"In":[99,137],"addition":[100],"intrusive":[102],"risks,":[109],"such":[110],"as":[111],"penetration":[112],"testing,":[113],"non-intrusive":[114],"are":[116,149],"emerging":[117],"conduct":[119],"C-TPRM":[120,144],"more":[121],"easily":[122],"by":[123,146],"synthesizing":[124],"publicly":[126],"available":[127],"information":[128],"without":[129],"requiring":[130],"any":[131],"involvement":[132],"subject":[135],"organization.":[136],"study,":[139],"existing":[141],"built":[145],"different":[147,168],"companies":[148],"presented":[150],"compared":[152,179],"discover":[154],"commonly":[156],"used":[157],"indicators":[158],"criteria":[160],"assessments.":[163],"Additionally,":[164],"results":[166,186],"assessing":[170],"risks":[173],"specific":[176],"were":[178],"examine":[181],"reliability":[182],"consistency.":[184],"The":[185],"showed":[187],"that":[188],"even":[189],"there":[191],"similarity":[194],"among":[195],"results,":[197],"provided":[199],"scores":[201],"do":[202],"entirely":[204],"converge.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":26},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":28},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-05-24T00:00:00"}
