{"id":"https://openalex.org/W4281756643","doi":"https://doi.org/10.1108/ocj-08-2021-0020","title":"Toward enhancing the information base on costs of cyber incidents: implications from literature and a large-scale survey conducted in Germany","display_name":"Toward enhancing the information base on costs of cyber incidents: implications from literature and a large-scale survey conducted in Germany","publication_year":2022,"publication_date":"2022-05-29","ids":{"openalex":"https://openalex.org/W4281756643","doi":"https://doi.org/10.1108/ocj-08-2021-0020"},"language":"en","primary_location":{"id":"doi:10.1108/ocj-08-2021-0020","doi":"https://doi.org/10.1108/ocj-08-2021-0020","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ocj-08-2021-0020","pdf_url":"https://www.emerald.com/insight/content/doi/10.1108/OCJ-08-2021-0020/full/pdf?title=toward-enhancing-the-information-base-on-costs-of-cyber-incidents-implications-from-literature-and-a-large-scale-survey-conducted-in-germany","source":{"id":"https://openalex.org/S4210238175","display_name":"Organizational Cybersecurity Journal Practice Process and People","issn_l":"2635-0270","issn":["2635-0270","2635-0289"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Organizational Cybersecurity Journal: Practice, Process and People","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.emerald.com/insight/content/doi/10.1108/OCJ-08-2021-0020/full/pdf?title=toward-enhancing-the-information-base-on-costs-of-cyber-incidents-implications-from-literature-and-a-large-scale-survey-conducted-in-germany","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087934974","display_name":"Bennet Simon von Skarczinski","orcid":"https://orcid.org/0000-0002-8095-1660","observed_orcids":["https://orcid.org/0000-0002-8095-1660"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bennet Simon von Skarczinski","raw_affiliation_strings":["Cybersecurity and Privacy, PricewaterhouseCoopers GmbH, Hannover, Germany"],"raw_orcid":"https://orcid.org/0000-0002-8095-1660","affiliations":[{"raw_affiliation_string":"Cybersecurity and Privacy, PricewaterhouseCoopers GmbH, Hannover, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028478282","display_name":"Arne Drei\u00dfigacker","orcid":"https://orcid.org/0000-0003-4393-0171","observed_orcids":["https://orcid.org/0000-0003-4393-0171"]},"institutions":[{"id":"https://openalex.org/I4210133624","display_name":"Criminological Research Institute of Lower Saxony","ror":"https://ror.org/04kthgc59","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210133624"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Arne Drei\u00dfigacker","raw_affiliation_strings":["Criminological Research Institute of Lower Saxony, Hannover, Germany"],"raw_orcid":"https://orcid.org/0000-0003-4393-0171","affiliations":[{"raw_affiliation_string":"Criminological Research Institute of Lower Saxony, Hannover, Germany","institution_ids":["https://openalex.org/I4210133624"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069819524","display_name":"Frank Teuteberg","orcid":"https://orcid.org/0000-0003-3870-6642","observed_orcids":["https://orcid.org/0000-0003-3870-6642"]},"institutions":[{"id":"https://openalex.org/I170658231","display_name":"Osnabr\u00fcck University","ror":"https://ror.org/04qmmjx98","country_code":"DE","type":"education","lineage":["https://openalex.org/I170658231"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Frank Teuteberg","raw_affiliation_strings":["University of Osnabr\u00fcck, Osnabr\u00fcck, Germany"],"raw_orcid":"https://orcid.org/0000-0003-3870-6642","affiliations":[{"raw_affiliation_string":"University of Osnabr\u00fcck, Osnabr\u00fcck, Germany","institution_ids":["https://openalex.org/I170658231"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2063,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.80741121,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":97},"biblio":{"volume":"2","issue":"2","first_page":"79","last_page":"112"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/attack-types","display_name":"attack types","score":0.6669999957084656},{"id":"https://openalex.org/keywords/industry-type","display_name":"industry type","score":0.7459999918937683},{"id":"https://openalex.org/keywords/board-members","display_name":"board members","score":0.6200000047683716},{"id":"https://openalex.org/keywords/it-managers","display_name":"IT managers","score":0.8640000224113464},{"id":"https://openalex.org/keywords/cybersecurity-decision-making","display_name":"cybersecurity decision-making","score":0.5899999737739563},{"id":"https://openalex.org/keywords/cost-benefit-analysis","display_name":"cost-benefit analysis","score":0.5580000281333923}],"concepts":[{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.5514057874679565},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5313521027565002},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.5150504112243652},{"id":"https://openalex.org/C2776950860","wikidata":"https://www.wikidata.org/wiki/Q2914681","display_name":"Originality","level":3,"score":0.5026612281799316},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4800516366958618},{"id":"https://openalex.org/C154775046","wikidata":"https://www.wikidata.org/wiki/Q188","display_name":"German","level":2,"score":0.4733602702617645},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.46221843361854553},{"id":"https://openalex.org/C6964187","wikidata":"https://www.wikidata.org/wiki/Q659256","display_name":"Indirect costs","level":2,"score":0.44015997648239136},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.3789069652557373},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.33214157819747925},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.33141255378723145},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.24081087112426758},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.17463791370391846},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.13926652073860168},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C11012388","wikidata":"https://www.wikidata.org/wiki/Q170658","display_name":"Creativity","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1108/ocj-08-2021-0020","doi":"https://doi.org/10.1108/ocj-08-2021-0020","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ocj-08-2021-0020","pdf_url":"https://www.emerald.com/insight/content/doi/10.1108/OCJ-08-2021-0020/full/pdf?title=toward-enhancing-the-information-base-on-costs-of-cyber-incidents-implications-from-literature-and-a-large-scale-survey-conducted-in-germany","source":{"id":"https://openalex.org/S4210238175","display_name":"Organizational Cybersecurity Journal Practice Process and People","issn_l":"2635-0270","issn":["2635-0270","2635-0289"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Organizational Cybersecurity Journal: Practice, Process and People","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c6ee3aa6fc804b06b2cc66d309c24ca9","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/c6ee3aa6fc804b06b2cc66d309c24ca9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Organizational Cybersecurity Journal, Vol 2, Iss 2, Pp 79-112 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1108/ocj-08-2021-0020","doi":"https://doi.org/10.1108/ocj-08-2021-0020","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ocj-08-2021-0020","pdf_url":"https://www.emerald.com/insight/content/doi/10.1108/OCJ-08-2021-0020/full/pdf?title=toward-enhancing-the-information-base-on-costs-of-cyber-incidents-implications-from-literature-and-a-large-scale-survey-conducted-in-germany","source":{"id":"https://openalex.org/S4210238175","display_name":"Organizational Cybersecurity Journal Practice Process and People","issn_l":"2635-0270","issn":["2635-0270","2635-0289"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Organizational Cybersecurity Journal: Practice, Process and People","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[{"display_name":"Observational Study","id":"https://openalex.org/study-designs/observational-study"}],"awards":[{"id":"https://openalex.org/G8739087146","display_name":null,"funder_award_id":"BMWi-VID5-090168623-01-1/2017","funder_id":"https://openalex.org/F4320323803","funder_display_name":"Bundesministerium f\u00fcr Wirtschaft und Energie"}],"funders":[{"id":"https://openalex.org/F4320323803","display_name":"Bundesministerium f\u00fcr Wirtschaft und Energie","ror":"https://ror.org/02vgg2808"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4281756643.pdf","grobid_xml":"https://content.openalex.org/works/W4281756643.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W73401331","https://openalex.org/W81569797","https://openalex.org/W147884860","https://openalex.org/W195544187","https://openalex.org/W315231380","https://openalex.org/W1412796528","https://openalex.org/W1515345759","https://openalex.org/W1533444565","https://openalex.org/W1602619638","https://openalex.org/W1894149009","https://openalex.org/W2009847152","https://openalex.org/W2025332121","https://openalex.org/W2037557484","https://openalex.org/W2049520899","https://openalex.org/W2058012887","https://openalex.org/W2078175444","https://openalex.org/W2107966619","https://openalex.org/W2108770903","https://openalex.org/W2121719297","https://openalex.org/W2150175719","https://openalex.org/W2212850102","https://openalex.org/W2292723020","https://openalex.org/W2508605860","https://openalex.org/W2533064512","https://openalex.org/W2550763266","https://openalex.org/W2557946170","https://openalex.org/W2565682512","https://openalex.org/W2567397062","https://openalex.org/W2614476522","https://openalex.org/W2727490449","https://openalex.org/W2751187090","https://openalex.org/W2791637761","https://openalex.org/W2794220480","https://openalex.org/W2804181952","https://openalex.org/W2896921551","https://openalex.org/W2951675045","https://openalex.org/W3008706722","https://openalex.org/W3029914026","https://openalex.org/W3082230323","https://openalex.org/W3118621797","https://openalex.org/W3122863827","https://openalex.org/W3158201466","https://openalex.org/W3176926175","https://openalex.org/W4239605813"],"related_works":["https://openalex.org/W2902590383","https://openalex.org/W7030266594","https://openalex.org/W4391673245","https://openalex.org/W3168786567","https://openalex.org/W3027798630","https://openalex.org/W4254436628","https://openalex.org/W7004858455","https://openalex.org/W2508605860","https://openalex.org/W4205125320","https://openalex.org/W3033583635"],"abstract_inverted_index":{"Purpose":[0],"Literature":[1],"repeatedly":[2],"complains":[3],"about":[4],"the":[5,11,59,65,69,78,102,107,130,133,151,192,212,220,225,235],"lack":[6],"of":[7,13,37,71,81,153,215,234],"empirical":[8,47,131,227],"data":[9,25,48],"on":[10,49,68,124,219,242],"costs":[12,70,82,97,178,214],"cyber":[14,72,216],"incidents":[15],"within":[16,83,106],"organizations.":[17,95,244],"Simultaneously,":[18],"managers":[19,44],"urgently":[20],"require":[21],"transparent":[22],"and":[23,31,51,61,86,120,129,143,177,185,198,232],"reliable":[24],"in":[26,229],"order":[27],"to":[28,41,63,101,157,180,189],"make":[29],"well-informed":[30],"cost-benefit":[32],"optimized":[33],"decisions.":[34],"The":[35,75,147,206],"purpose":[36],"this":[38,223],"paper":[39],"is":[40,224],"(1)":[42],"provide":[43],"with":[45,92],"differentiated":[46,209],"costs,":[50,159],"(2)":[52],"derive":[53],"an":[54,136],"activity":[55,137],"plan":[56,138],"for":[57],"organizations,":[58],"government":[60],"academia":[62],"improve":[64],"information":[66,241],"base":[67],"incidents.":[73],"Design/methodology/approach":[74],"authors":[76,134,207],"analyze":[77],"benchmark":[79],"potential":[80],"existing":[84],"literature":[85],"conduct":[87],"a":[88,162],"large-scale":[89],"interview":[90],"survey":[91,228],"5,000":[93],"German":[94,243],"These":[96],"are":[98,170],"directly":[99],"assignable":[100],"most":[103],"severe":[104],"incident":[105],"last":[108],"12":[109],"months,":[110],"further":[111,140],"categorized":[112],"into":[113,211],"attack":[114,181],"types,":[115,182],"cost":[116,240],"items,":[117],"employee":[118,183],"classes":[119],"industry":[121],"types.":[122],"Based":[123],"previous":[125],"literature,":[126],"expert":[127],"interviews":[128],"results,":[132],"draft":[135],"containing":[139],"research":[141],"questions":[142],"action":[144],"items.":[145],"Findings":[146],"findings":[148,193],"indicate":[149,194],"that":[150,195],"majority":[152],"organizations":[154,169],"suffer":[155],"little":[156],"no":[158],"whereas":[160],"only":[161],"small":[163],"proportion":[164],"suffers":[165],"high":[166],"costs.":[167],"However,":[168],"not":[171],"affected":[172],"equally":[173],"since":[174],"prevalence":[175],"rates":[176],"according":[179],"classes,":[184],"other":[186],"variables":[187],"tend":[188],"vary.":[190],"Moreover,":[191],"board":[196],"members":[197],"IS/IT-managers":[199],"show":[200],"partly":[201],"different":[202],"response":[203],"behaviors.":[204],"Originality/value":[205],"present":[208],"insights":[210],"direct":[213],"incidents,":[217],"based":[218],"authors'":[221],"knowledge,":[222],"largest":[226],"continental":[230],"Europe":[231],"one":[233],"first":[236],"surveys":[237],"providing":[238],"in-depth":[239]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2022-06-13T00:00:00"}