{"id":"https://openalex.org/W583063965","doi":null,"title":"The Incident Prevention Team: A proactive approach to Information Security","display_name":"The Incident Prevention Team: A proactive approach to Information Security","publication_year":2015,"publication_date":"2015-01-20","ids":{"openalex":"https://openalex.org/W583063965","mag":"583063965"},"language":"en","primary_location":{"id":"pmh:oai:tudelft.nl:uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","doi":null,"is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","pdf_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"master thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014644375","display_name":"Nelson Miguel da Costa Martins Pereira","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Nelson Miguel da Costa Martins Pereira","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5014644375"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/incident-prevention","display_name":"incident prevention","score":0.9610000252723694},{"id":"https://openalex.org/keywords/incident-response","display_name":"incident response","score":0.7730000019073486},{"id":"https://openalex.org/keywords/information-security-risk-management","display_name":"information security risk management","score":0.9129999876022339},{"id":"https://openalex.org/keywords/precursors","display_name":"precursors","score":0.6790000200271606},{"id":"https://openalex.org/keywords/sociotechnical-systems","display_name":"socio-technical systems","score":0.7269999980926514},{"id":"https://openalex.org/keywords/information-security-controls","display_name":"information security controls","score":0.6389999985694885},{"id":"https://openalex.org/keywords/proactive-risk-assessment","display_name":"proactive risk assessment","score":0.5540000200271606}],"concepts":[{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.7724776864051819},{"id":"https://openalex.org/C2780952636","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident management","level":2,"score":0.739998459815979},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6628431081771851},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.5571531653404236},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5434783101081848},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5372775197029114},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.5087164044380188},{"id":"https://openalex.org/C81146079","wikidata":"https://www.wikidata.org/wiki/Q7336283","display_name":"Risk management information systems","level":4,"score":0.5030631422996521},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4921378493309021},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.4804486930370331},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.46747469902038574},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.45681843161582947},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.44808685779571533},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4433426856994629},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.4327285885810852},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.4276268482208252},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.3657194674015045},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3436551094055176},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.30045366287231445},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.19794616103172302},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.19629094004631042},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.19549432396888733},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.07730990648269653},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:tudelft.nl:uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","doi":null,"is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","pdf_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"master thesis"},{"id":"mag:583063965","doi":null,"is_oa":false,"landing_page_url":"http://repository.tudelft.nl/assets/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c/Thesis_Report_NMPereira_OnlineVersion_Final.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:tudelft.nl:uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","doi":null,"is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","pdf_url":"http://resolver.tudelft.nl/uuid:21c6b579-a25b-4395-ba88-786e5f1eb33c","source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"master thesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W583063965.pdf","grobid_xml":"https://content.openalex.org/works/W583063965.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W656816734","https://openalex.org/W1524011181","https://openalex.org/W1576321807","https://openalex.org/W1599283610","https://openalex.org/W1601929078","https://openalex.org/W1607548417","https://openalex.org/W1978129800","https://openalex.org/W1979340895","https://openalex.org/W1985826978","https://openalex.org/W2003676537","https://openalex.org/W2006253146","https://openalex.org/W2012594940","https://openalex.org/W2016313192","https://openalex.org/W2018663138","https://openalex.org/W2022133889","https://openalex.org/W2022542575","https://openalex.org/W2031828672","https://openalex.org/W2031999883","https://openalex.org/W2037104605","https://openalex.org/W2037697692","https://openalex.org/W2044008035","https://openalex.org/W2056075452","https://openalex.org/W2062114445","https://openalex.org/W2075093277","https://openalex.org/W2087952459","https://openalex.org/W2089527867","https://openalex.org/W2091494072","https://openalex.org/W2098802318","https://openalex.org/W2101129520","https://openalex.org/W2104012143","https://openalex.org/W2116342695","https://openalex.org/W2138073666","https://openalex.org/W2148210717","https://openalex.org/W2167285821","https://openalex.org/W2170135113","https://openalex.org/W2261046105","https://openalex.org/W2369295637","https://openalex.org/W2425223984","https://openalex.org/W2614505876","https://openalex.org/W2617200927","https://openalex.org/W3126997768"],"related_works":["https://openalex.org/W4409181674","https://openalex.org/W2326259386","https://openalex.org/W7036913268","https://openalex.org/W2279010643","https://openalex.org/W2098448189","https://openalex.org/W4311142913","https://openalex.org/W7098136277","https://openalex.org/W2031911638","https://openalex.org/W2104840983","https://openalex.org/W4391144530"],"abstract_inverted_index":{"Information":[0,14,29,39,92,102,188,227,293,320,362,394,426,452,492,558,595],"Security":[1,15,40,93,103,189,228,321,363,395,427,453,493,559,596],"is":[2,118,159,179,462,469],"an":[3,86,214,393,422,425,470,504],"important":[4],"aspect":[5],"of":[6,38,85,145,164,169,257,286,352,365,398,459,465,491,557,576],"decision":[7],"making":[8,542],"in":[9,61,91,134,231,236,319,348,454],"organisations":[10,96,112],"today.":[11,132],"Organisations":[12,475],"use":[13,222,271,283,328],"Risk":[16,94,229,322,494],"Management":[17,230],"to":[18,21,25,53,70,99,113,121,183,206,220,225,273,300,308,314,408,433,450,483,512,516,539,553,585,598],"assess,":[19],"respond":[20],"and":[22,35,45,142,148,181,261,289,295,333,378,403,420,441,488,506,520,580],"monitor":[23],"risk":[24,146,259,387,396,515],"its":[26,486],"information":[27,80,171,196,223,276,369,384,400],"systems.":[28,157],"systems":[30,34],"are":[31,50,68,97,202],"complex":[32],"technical":[33],"the":[36,58,83,89,139,166,177,199,244,250,255,258,275,279,284,302,316,329,338,344,349,360,366,381,386,399,409,436,442,463,479,498,510,514,518,525,531,543,554,562,574],"management":[37,147,260],"depends":[41],"on":[42,79,106,124,564],"technology,":[43],"processes":[44],"people.":[46],"Incident":[47,311,330,345,356,374,438,480,499,526,565],"Response":[48,331],"Teams":[49],"set":[51],"up":[52],"manage":[54],"cyber":[55,548],"incidents.":[56,192,208,549],"However,":[57],"increasing":[59],"trends":[60],"incidents":[62],"reported,":[63],"indicate":[64],"that":[65,176,435],"these":[66,75],"controls":[67,76,104,190],"failing":[69],"achieve":[71,451],"their":[72],"goals,":[73],"because,":[74],"primarily":[77],"focus":[78,123,563],"available":[81,197,224,277],"after":[82],"occurrence":[84],"incident.":[87,280],"Despite":[88],"efforts":[90],"Management,":[95],"unable":[98,182],"implement":[100],"effective":[101],"based":[105],"dynamic":[107],"information.":[108,303,588,600],"In":[109,324],"order":[110],"for":[111,155,385,472,569,594],"effectively":[114,204],"mitigate":[115],"risk,":[116],"there":[117],"a":[119,160,447],"need":[120],"also":[122,590],"incident":[125,129,149,200,215,262,339,412,443,533,587],"prevention":[126,216,340,413,444],"along":[127],"with":[128,298,424,561],"response":[130,150,263,534],"practiced":[131],"Therefore,":[133,524],"this":[135,237,241,305,325,353,460],"research,":[136,326,560],"we":[137,265,270,282,327],"assess":[138],"Technical,":[140],"Institutional":[141],"Process":[143],"aspects":[144],"process,":[151,264],"using":[152,243,368,417],"TIP":[153],"Design":[154,245],"socio-technical":[156],"This":[158,550,589],"systematic,":[161],"design-oriented":[162],"way":[163],"analysing":[165],"current":[167,361],"state":[168],"organisation\u2019s":[170,532],"system":[172,401],"security.":[173],"We":[174,239,571],"conclude":[175,434],"process":[178,217,341,414,445,508,535],"retrospective":[180],"proactively":[184,221],"prevent":[185,207],"incidents,":[186],"thereby":[187,541],"lag":[191],"Furthermore,":[193],"precursors,":[194],"i.e.":[195],"before":[198,278],"occurs,":[201],"not":[203],"used":[205],"The":[209,355,373,411,429,456],"research":[210,242,306,461,551],"goal,":[211],"\u201cHow":[212],"can":[213,476],"be":[218,234],"developed":[219],"complement":[226],"organisations?\u201d":[232],"will":[233,529],"answered":[235],"research.":[238,474],"structure":[240,586],"Science":[246],"Research":[247],"Cycle.":[248],"With":[249],"various":[251],"requirements,":[252],"generated":[253],"from":[254,291,536],"analysis":[256],"generate":[266],"design":[267],"ingredients.":[268],"Firstly,":[269],"precursors":[272],"determine":[274],"Secondly,":[281],"concepts":[285],"trigger,":[287],"template":[288],"twitch":[290],"Vigilant":[292],"Systems":[294],"extend":[296,334],"it":[297,335,502,582],"tweak,":[299],"interpret":[301,599],"Finally,":[304],"proposes":[307],"establish":[309],"\u201cThe":[310],"Prevention":[312,346,357,375,439,481,500,527,566],"Team\u201d":[313],"bridge":[315],"gap":[317],"described":[318],"Management.":[323,495],"Lifecycle":[332],"by":[336,343,421,567,583],"developing":[337],"followed":[342],"Team":[347,358,376,440,482,528],"preparation":[350],"phase":[351],"lifecycle.":[354],"assesses":[359],"status":[364],"organisation":[367,511,544],"affecting":[370],"external":[371,521],"organisations.":[372,455],"scans":[377],"then":[379,391],"prioritises":[380],"most":[382],"relevant":[383],"assessment":[388,397],"process.":[389],"It":[390],"performs":[392],"affected":[402],"finally":[404],"recommends":[405],"control":[406],"strategies":[407],"management.":[410],"was":[415],"evaluated":[416],"two":[418],"scenarios":[419],"interview":[423],"expert.":[428],"validation":[430],"encourages":[431],"us":[432],"proposed":[437],"provide":[446],"proactive":[448],"method":[449],"main":[457],"limitation":[458],"lack":[464],"empirical":[466],"testing,":[467],"which":[468],"opportunity":[471],"further":[473,572],"easily":[477],"incorporate":[478],"fulfil":[484],"both":[485,517],"strategic":[487],"operational":[489],"requirements":[490],"By":[496],"establishing":[497],"Team,":[501],"creates":[503],"agile":[505],"structured":[507],"within":[509],"understand":[513],"internal":[519],"environment":[522],"proactively.":[523],"transform":[530],"being":[537],"reactive":[538],"proactive,":[540],"resilient":[545],"against":[546],"potential":[547],"contributes":[552],"existing":[555],"field":[556],"scanning":[568],"precursors.":[570],"combine,":[573],"elements":[575],"\u201ctrigger\u201d,":[577],"\u201ctemplate\u201d,":[578],"\u201ctwitch\u201d":[579],"extends":[581],"\u201ctweak\u201d":[584],"offers":[591],"new":[592],"ways":[593],"professionals":[597]},"counts_by_year":[{"year":2015,"cited_by_count":1}],"updated_date":"2026-08-30T07:30:35.949966","created_date":"2016-06-24T00:00:00"}