{"id":"https://openalex.org/W4392223637","doi":"https://doi.org/10.1016/j.cose.2024.103964","title":"From COBIT to ISO 42001: Evaluating cybersecurity frameworks for opportunities, risks, and regulatory compliance in commercializing large language models","display_name":"From COBIT to ISO 42001: Evaluating cybersecurity frameworks for opportunities, risks, and regulatory compliance in commercializing large language models","publication_year":2024,"publication_date":"2024-06-22","ids":{"openalex":"https://openalex.org/W4392223637","doi":"https://doi.org/10.1016/j.cose.2024.103964"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2024.103964","doi":"https://doi.org/10.1016/j.cose.2024.103964","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.103964","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2024.103964","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024454231","display_name":"Timothy R. McIntosh","orcid":"https://orcid.org/0000-0003-0836-4266","observed_orcids":["https://orcid.org/0000-0003-0836-4266"]},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Timothy R. McIntosh","raw_affiliation_strings":["Cyberoo Pty Ltd, Surrey Hills, NSW, Australia","La Trobe University, Bundoora, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0836-4266","affiliations":[{"raw_affiliation_string":"Cyberoo Pty Ltd, Surrey Hills, NSW, Australia","institution_ids":[]},{"raw_affiliation_string":"La Trobe University, Bundoora, VIC, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037915797","display_name":"Teo Su\u0161njak","orcid":"https://orcid.org/0000-0001-9416-1435","observed_orcids":["https://orcid.org/0000-0001-9416-1435"]},"institutions":[{"id":"https://openalex.org/I51158804","display_name":"Massey University","ror":"https://ror.org/052czxv31","country_code":"NZ","type":"education","lineage":["https://openalex.org/I51158804"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Teo Susnjak","raw_affiliation_strings":["Massey University, Auckland, New Zealand"],"raw_orcid":"https://orcid.org/0000-0001-9416-1435","affiliations":[{"raw_affiliation_string":"Massey University, Auckland, New Zealand","institution_ids":["https://openalex.org/I51158804"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100392689","display_name":"Tong Liu","orcid":"https://orcid.org/0000-0003-3047-1148","observed_orcids":["https://orcid.org/0000-0003-3047-1148"]},"institutions":[{"id":"https://openalex.org/I51158804","display_name":"Massey University","ror":"https://ror.org/052czxv31","country_code":"NZ","type":"education","lineage":["https://openalex.org/I51158804"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Tong Liu","raw_affiliation_strings":["Massey University, Auckland, New Zealand"],"raw_orcid":"https://orcid.org/0000-0003-3047-1148","affiliations":[{"raw_affiliation_string":"Massey University, Auckland, New Zealand","institution_ids":["https://openalex.org/I51158804"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074086920","display_name":"Paul Watters","orcid":"https://orcid.org/0000-0002-1399-7175","observed_orcids":["https://orcid.org/0000-0002-1399-7175"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Paul Watters","raw_affiliation_strings":["Cyberstronomy Pty Ltd, Ballarat, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1399-7175","affiliations":[{"raw_affiliation_string":"Cyberstronomy Pty Ltd, Ballarat, VIC, Australia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052950957","display_name":"Dan Xu","orcid":"https://orcid.org/0009-0004-3930-7381","observed_orcids":["https://orcid.org/0009-0004-3930-7381"]},"institutions":[{"id":"https://openalex.org/I190461672","display_name":"Australia and New Zealand Banking Group","ror":"https://ror.org/012d8w472","country_code":"AU","type":"other","lineage":["https://openalex.org/I190461672"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dan Xu","raw_affiliation_strings":["ANZ Bank, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0009-0004-3930-7381","affiliations":[{"raw_affiliation_string":"ANZ Bank, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I190461672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075003388","display_name":"Dongwei Liu","orcid":"https://orcid.org/0009-0007-5984-4610","observed_orcids":["https://orcid.org/0009-0007-5984-4610"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dongwei Liu","raw_affiliation_strings":["Coles Group, Hawthorn East, VIC, Australia"],"raw_orcid":"https://orcid.org/0009-0007-5984-4610","affiliations":[{"raw_affiliation_string":"Coles Group, Hawthorn East, VIC, Australia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019592682","display_name":"Raza Nowrozy","orcid":"https://orcid.org/0000-0002-9886-0978","observed_orcids":["https://orcid.org/0000-0002-9886-0978"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Raza Nowrozy","raw_affiliation_strings":["Untapped Holdings, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9886-0978","affiliations":[{"raw_affiliation_string":"Untapped Holdings, Melbourne, VIC, Australia","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053757316","display_name":"Malka N. Halgamuge","orcid":"https://orcid.org/0000-0001-9994-3778","observed_orcids":["https://orcid.org/0000-0001-9994-3778"]},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Malka N. Halgamuge","raw_affiliation_strings":["RMIT University, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9994-3778","affiliations":[{"raw_affiliation_string":"RMIT University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I82951845"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5024454231"],"corresponding_institution_ids":["https://openalex.org/I196829312"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":38.6266,"has_fulltext":true,"cited_by_count":150,"citation_normalized_percentile":{"value":0.99892759,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"144","issue":null,"first_page":"103964","last_page":"103964"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.6875,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.6875,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.1671999990940094,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.06629999727010727,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.9729999899864197},{"id":"https://openalex.org/keywords/cybersecurity-governance","display_name":"cybersecurity governance","score":0.7689999938011169},{"id":"https://openalex.org/keywords/cobit-2019","display_name":"COBIT 2019","score":0.9850000143051147},{"id":"https://openalex.org/keywords/nist-csf-2-0","display_name":"NIST CSF 2.0","score":0.925000011920929},{"id":"https://openalex.org/keywords/ai-management-systems","display_name":"AI management systems","score":0.7919999957084656},{"id":"https://openalex.org/keywords/regulatory-compliance","display_name":"regulatory compliance","score":0.8080000281333923},{"id":"https://openalex.org/keywords/eu-ai-act","display_name":"EU AI Act","score":0.8199999928474426},{"id":"https://openalex.org/keywords/human-in-the-loop-validation","display_name":"human-in-the-loop validation","score":0.7409999966621399}],"concepts":[{"id":"https://openalex.org/C2776723946","wikidata":"https://www.wikidata.org/wiki/Q544025","display_name":"COBIT","level":3,"score":0.8957905769348145},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5678172707557678},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.5667968392372131},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.5044893026351929},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.4481986463069916},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3873351812362671},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3869735896587372},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3775337338447571},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.37275582551956177},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3395668864250183},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.11978867650032043},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.10439366102218628},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0}],"mesh":[],"locations_count":7,"locations":[{"id":"doi:10.1016/j.cose.2024.103964","doi":"https://doi.org/10.1016/j.cose.2024.103964","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.103964","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2402.15770","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2402.15770","pdf_url":"https://arxiv.org/pdf/2402.15770","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:figshare.com:article/26210234","doi":null,"is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/From_COBIT_to_ISO_42001_Evaluating_cybersecurity_frameworks_for_opportunities_risks_and_regulatory_compliance_in_commercializing_large_language_models/26210234","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"pmh:oai:mro.massey.ac.nz:10179/71652","doi":null,"is_oa":true,"landing_page_url":"https://mro.massey.ac.nz/handle/10179/71652","pdf_url":null,"source":{"id":"https://openalex.org/S4306402588","display_name":"Massey Research Online (Massey University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I51158804","host_organization_name":"Massey University","host_organization_lineage":["https://openalex.org/I51158804"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal article"},{"id":"doi:10.48550/arxiv.2402.15770","doi":"https://doi.org/10.48550/arxiv.2402.15770","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2402.15770","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.26181/26210234","doi":"https://doi.org/10.26181/26210234","is_oa":true,"landing_page_url":"https://doi.org/10.26181/26210234","pdf_url":null,"source":{"id":"https://openalex.org/S7407052018","display_name":"La Trobe University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I196829312","host_organization_name":"La Trobe University","host_organization_lineage":["https://openalex.org/I196829312"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.26181/26210234.v1","doi":"https://doi.org/10.26181/26210234.v1","is_oa":true,"landing_page_url":"https://doi.org/10.26181/26210234.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407052018","display_name":"La Trobe University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I196829312","host_organization_name":"La Trobe University","host_organization_lineage":["https://openalex.org/I196829312"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2024.103964","doi":"https://doi.org/10.1016/j.cose.2024.103964","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.103964","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392223637.pdf","grobid_xml":"https://content.openalex.org/works/W4392223637.grobid-xml"},"referenced_works_count":106,"referenced_works":["https://openalex.org/W1965541483","https://openalex.org/W1979594128","https://openalex.org/W2285762765","https://openalex.org/W2605474162","https://openalex.org/W2754797537","https://openalex.org/W2760953822","https://openalex.org/W2763172890","https://openalex.org/W2793038341","https://openalex.org/W2803110595","https://openalex.org/W2884960840","https://openalex.org/W2898933733","https://openalex.org/W2911340629","https://openalex.org/W2912172640","https://openalex.org/W2955815373","https://openalex.org/W2964956842","https://openalex.org/W2967884193","https://openalex.org/W2990714382","https://openalex.org/W2995746035","https://openalex.org/W3015900024","https://openalex.org/W3021952542","https://openalex.org/W3024599342","https://openalex.org/W3030593508","https://openalex.org/W3034175800","https://openalex.org/W3036277201","https://openalex.org/W3093937504","https://openalex.org/W3097527727","https://openalex.org/W3110918311","https://openalex.org/W3158968632","https://openalex.org/W3161183279","https://openalex.org/W3169023925","https://openalex.org/W3172430963","https://openalex.org/W3173714054","https://openalex.org/W3179692608","https://openalex.org/W3186712761","https://openalex.org/W3196833029","https://openalex.org/W3197944870","https://openalex.org/W3199576648","https://openalex.org/W3201567054","https://openalex.org/W3206355868","https://openalex.org/W3208458410","https://openalex.org/W4210344620","https://openalex.org/W4224091938","https://openalex.org/W4226112058","https://openalex.org/W4232523505","https://openalex.org/W4233764902","https://openalex.org/W4238940777","https://openalex.org/W4245295157","https://openalex.org/W4247995773","https://openalex.org/W4253484211","https://openalex.org/W4254162870","https://openalex.org/W4254526386","https://openalex.org/W4281727218","https://openalex.org/W4285090724","https://openalex.org/W4286587339","https://openalex.org/W4295884144","https://openalex.org/W4308200766","https://openalex.org/W4309674289","https://openalex.org/W4312338735","https://openalex.org/W4312933794","https://openalex.org/W4313635475","https://openalex.org/W4317435009","https://openalex.org/W4317525075","https://openalex.org/W4323655724","https://openalex.org/W4362704894","https://openalex.org/W4365454186","https://openalex.org/W4367017370","https://openalex.org/W4378233455","https://openalex.org/W4378982489","https://openalex.org/W4379032263","https://openalex.org/W4379382625","https://openalex.org/W4382246105","https://openalex.org/W4383346782","https://openalex.org/W4384071683","https://openalex.org/W4385452929","https://openalex.org/W4385571034","https://openalex.org/W4385571596","https://openalex.org/W4385688303","https://openalex.org/W4385755118","https://openalex.org/W4385847487","https://openalex.org/W4385988359","https://openalex.org/W4386114340","https://openalex.org/W4386141641","https://openalex.org/W4386290290","https://openalex.org/W4386568918","https://openalex.org/W4386579498","https://openalex.org/W4386697160","https://openalex.org/W4387178161","https://openalex.org/W4387294588","https://openalex.org/W4387328594","https://openalex.org/W4387428001","https://openalex.org/W4387665659","https://openalex.org/W4387846596","https://openalex.org/W4388691793","https://openalex.org/W4392908117","https://openalex.org/W4393157467","https://openalex.org/W4396534976","https://openalex.org/W4406984555","https://openalex.org/W4410342726","https://openalex.org/W6697654324","https://openalex.org/W6752385350","https://openalex.org/W6788096648","https://openalex.org/W6795310592","https://openalex.org/W6842495660","https://openalex.org/W6847238968","https://openalex.org/W6849000845","https://openalex.org/W7133219248"],"related_works":["https://openalex.org/W7043265657","https://openalex.org/W7221775044","https://openalex.org/W4413886408","https://openalex.org/W4399598171","https://openalex.org/W7167631347","https://openalex.org/W4415678860","https://openalex.org/W4404649015","https://openalex.org/W4414365087","https://openalex.org/W7219234648","https://openalex.org/W4414647603"],"abstract_inverted_index":{"This":[0],"study":[1],"investigated":[2],"the":[3,25,31,59,82,108,132,171,180],"integration":[4,65,182],"readiness":[5],"of":[6,73,174,183],"four":[7],"predominant":[8],"cybersecurity":[9,158,175],"Governance,":[10],"Risk":[11],"and":[12,24,34,47,55,128,141,163,167],"Compliance":[13],"(GRC)":[14],"frameworks":[15,120,159,177],"-":[16,29],"NIST":[17],"CSF":[18],"2.0,":[19],"COBIT":[20,102],"2019,":[21],"ISO":[22,27,84],"27001:2022,":[23],"latest":[26],"42001:2023":[28],"for":[30,63,88,98,144,156,170],"opportunities,":[32,100],"risks,":[33],"regulatory":[35],"compliance":[36],"when":[37],"adopting":[38],"Large":[39],"Language":[40],"Models":[41],"(LLMs),":[42],"using":[43],"qualitative":[44],"content":[45],"analysis":[46,78],"expert":[48],"validation.":[49],"Our":[50],"analysis,":[51],"with":[52,67,107,136],"both":[53],"LLMs":[54],"human":[56],"experts":[57],"in":[58,69],"loop,":[60],"uncovered":[61],"potential":[62],"LLM":[64,70,99,165],"together":[66],"inadequacies":[68],"risk":[71],"oversight":[72],"those":[74],"frameworks.":[75],"Comparative":[76],"gap":[77],"has":[79],"highlighted":[80],"that":[81,117],"new":[83],"42001:2023,":[85],"specifically":[86],"designed":[87],"Artificial":[89],"Intelligence":[90],"(AI)":[91],"management":[92],"systems,":[93],"provided":[94],"most":[95,105],"comprehensive":[96],"facilitation":[97],"whereas":[101],"2019":[103],"aligned":[104],"closely":[106],"European":[109],"Union":[110],"AI":[111],"Act.":[112],"Nonetheless,":[113],"our":[114],"findings":[115],"suggested":[116],"all":[118],"evaluated":[119],"would":[121],"benefit":[122],"from":[123],"enhancements":[124],"to":[125,160,178],"more":[126,129],"effectively":[127],"comprehensively":[130],"address":[131],"multifaceted":[133],"risks":[134],"associated":[135],"LLMs,":[137],"indicating":[138],"a":[139],"critical":[140],"time-sensitive":[142],"need":[143],"their":[145],"continuous":[146,172],"evolution.":[147],"We":[148],"propose":[149],"integrating":[150],"human-expert-in-the-loop":[151],"validation":[152],"processes":[153],"as":[154],"crucial":[155],"enhancing":[157],"support":[161,179],"secure":[162,181],"compliant":[164],"integration,":[166],"discuss":[168],"implications":[169],"evolution":[173],"GRC":[176],"LLMs.":[184]},"counts_by_year":[{"year":2026,"cited_by_count":57},{"year":2025,"cited_by_count":62},{"year":2024,"cited_by_count":31}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2024-02-28T00:00:00"}