{"id":"https://openalex.org/W78376706","doi":null,"title":"The Risk Assessment based on international standards, a credibility evaluation: A case study on international standards of Risk Assessment and Management in the Information Security context","display_name":"The Risk Assessment based on international standards, a credibility evaluation: A case study on international standards of Risk Assessment and Management in the Information Security context","publication_year":2015,"publication_date":"2015-01-01","ids":{"openalex":"https://openalex.org/W78376706","mag":"78376706"},"language":"en","primary_location":{"id":"pmh:oai:DiVA.org:umu-99982","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:umu:diva-99982","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/bachelorThesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:umu:diva-99982","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083493929","display_name":"Daniel Hedian","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel Hedian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5070252612","display_name":"Gil Silva Neto","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gil Silva Neto","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13164","display_name":"Quality and Management Systems","score":0.00430000014603138,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.7260000109672546},{"id":"https://openalex.org/keywords/risk-management","display_name":"risk management","score":0.6629999876022339},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.7680000066757202},{"id":"https://openalex.org/keywords/iso-iec-27005","display_name":"ISO/IEC 27005","score":0.9679999947547913},{"id":"https://openalex.org/keywords/credibility-assessment","display_name":"credibility assessment","score":0.765999972820282},{"id":"https://openalex.org/keywords/international-standards","display_name":"international standards","score":0.6100000143051147},{"id":"https://openalex.org/keywords/risk-assessment-standards","display_name":"risk assessment standards","score":0.7210000157356262},{"id":"https://openalex.org/keywords/risk-assessment-reports","display_name":"risk assessment reports","score":0.7459999918937683},{"id":"https://openalex.org/keywords/swedish-armed-forces","display_name":"Swedish Armed Forces","score":0.8619999885559082},{"id":"https://openalex.org/keywords/stakeholder-consensus","display_name":"stakeholder consensus","score":0.8119999766349792},{"id":"https://openalex.org/keywords/stakeholder-responses","display_name":"stakeholder behavior","score":0.4699999988079071},{"id":"https://openalex.org/keywords/organizational-culture","display_name":"organizational culture","score":0.44999998807907104},{"id":"https://openalex.org/keywords/risk-appetite","display_name":"risk appetite","score":0.33799999952316284},{"id":"https://openalex.org/keywords/risk-tolerance","display_name":"risk tolerance","score":0.34599998593330383}],"concepts":[{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.6605802774429321},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.6575669646263123},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5954013466835022},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5446450710296631},{"id":"https://openalex.org/C95609273","wikidata":"https://www.wikidata.org/wiki/Q5975208","display_name":"IT risk management","level":3,"score":0.5126013159751892},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.41074472665786743},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.40601393580436707},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.40545356273651123},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.38121283054351807},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.34094321727752686},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2640552520751953},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.24545395374298096},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.10341888666152954},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.0},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:DiVA.org:umu-99982","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:umu:diva-99982","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/bachelorThesis"},{"id":"mag:78376706","doi":null,"is_oa":false,"landing_page_url":"http://umu.diva-portal.org/smash/get/diva2:789086/FULLTEXT01.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:DiVA.org:umu-99982","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:umu:diva-99982","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/bachelorThesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":65,"referenced_works":["https://openalex.org/W138991429","https://openalex.org/W186320743","https://openalex.org/W351745186","https://openalex.org/W987159229","https://openalex.org/W1505999675","https://openalex.org/W1527311855","https://openalex.org/W1550467974","https://openalex.org/W1877340241","https://openalex.org/W1970130812","https://openalex.org/W1970553429","https://openalex.org/W1971449183","https://openalex.org/W1971467849","https://openalex.org/W1976538862","https://openalex.org/W1979114516","https://openalex.org/W1979828455","https://openalex.org/W1984804982","https://openalex.org/W1991458027","https://openalex.org/W1996909300","https://openalex.org/W1997358438","https://openalex.org/W2002216780","https://openalex.org/W2008746223","https://openalex.org/W2015709163","https://openalex.org/W2029154761","https://openalex.org/W2033450431","https://openalex.org/W2036755543","https://openalex.org/W2041047503","https://openalex.org/W2042794667","https://openalex.org/W2044966033","https://openalex.org/W2046565558","https://openalex.org/W2050324577","https://openalex.org/W2052202336","https://openalex.org/W2053880955","https://openalex.org/W2060821931","https://openalex.org/W2061035591","https://openalex.org/W2074835322","https://openalex.org/W2075932477","https://openalex.org/W2081208719","https://openalex.org/W2081779205","https://openalex.org/W2099358840","https://openalex.org/W2110309767","https://openalex.org/W2112367785","https://openalex.org/W2113548329","https://openalex.org/W2118374198","https://openalex.org/W2120061261","https://openalex.org/W2125904016","https://openalex.org/W2139203596","https://openalex.org/W2149487688","https://openalex.org/W2154250673","https://openalex.org/W2154909035","https://openalex.org/W2156432811","https://openalex.org/W2162196693","https://openalex.org/W2165249494","https://openalex.org/W2165269254","https://openalex.org/W2165751997","https://openalex.org/W2167928095","https://openalex.org/W2332433940","https://openalex.org/W2505116694","https://openalex.org/W2582377764","https://openalex.org/W2694696181","https://openalex.org/W2774458861","https://openalex.org/W2798930053","https://openalex.org/W2907899433","https://openalex.org/W3144127399","https://openalex.org/W3147181238","https://openalex.org/W3212784711"],"related_works":["https://openalex.org/W2352200975","https://openalex.org/W4362636289","https://openalex.org/W974805002","https://openalex.org/W3028177863","https://openalex.org/W2393039341","https://openalex.org/W4383268740","https://openalex.org/W4225725213","https://openalex.org/W2369275112","https://openalex.org/W2243112217","https://openalex.org/W7167405352"],"abstract_inverted_index":{"Summary":[0],"Organizations":[1],"face":[2,101],"risks":[3,13,430],"regardless":[4],"of":[5,8,29,37,42,63,72,106,121,146,159,198,260,310,323,330,336,358,362,368,371,383,409,412,445,456,462,475,478,484,529],"the":[6,38,64,67,81,87,98,119,122,144,147,157,167,183,190,202,223,236,242,266,278,282,295,300,311,315,331,337,341,355,359,366,369,374,381,384,389,410,413,429,439,443,450,473,482,487,521],"type":[7],"industry":[9],"or":[10,133],"government.":[11],"Historically":[12],"have":[14,77],"been":[15,78],"undertaken":[16],"in":[17,49,173,180,193,217,232,241,294,304,340,431,442,501,523],"various":[18],"processes":[19,95],"and":[20,52,96,140,177,238,302,387,434,449,453,481],"coped":[21],"with":[22,102,163,182,213,345,459],"differently":[23],"by":[24,125,518],"society.":[25],"An":[26],"appropriate":[27],"application":[28],"risk":[30,99,161,199,225,326,352,364,376,403,447,479,489,531,536,538],"management":[31],"is":[32,135,150,264,277,318],"widely":[33],"acknowledged":[34],"as":[35,61,70,128,297,299],"one":[36],"most":[39],"critical":[40],"aspects":[41,455],"undertaking":[43],"business":[44],"activities":[45],"across":[46,108,138],"all":[47],"sectors":[48],"society,":[50],"public":[51],"private.":[53],"In":[54],"order":[55,305,502,524],"to":[56,91,117,155,195,201,222,281,306,344,354,380,426,466,503,525],"carry":[57],"out":[58],"this":[59],"activity":[60],"part":[62,71],"crucial":[65],"actions":[66],"organizations":[68,233],"implement":[69],"their":[73,527,530],"culture,":[74],"many":[75],"standards":[76,85,123,208,237,414,522],"developed":[79],"at":[80],"international":[82,203,262,540],"level.":[83],"These":[84,437],"provide":[86,405,420],"groundwork":[88,496],"for":[89,391,424],"entities":[90,519],"start":[92,427],"implementing":[93],"these":[94,419,468],"reduce":[97],"they":[100],"a":[103,130,164,251,273,291,320,324,363,406,421,432,446,460,463,495,511],"standardized":[104,148,160,204,402,435],"set":[105],"procedures":[107,528],"sectors.":[109],"Risk":[110,170,284],"assessment":[111,149,205,226,312,377,385,448,490,532],"faces":[112],"abundant":[113],"arguments":[114],"that":[115,269,418],"lead":[116],"doubt":[118],"credibility":[120,145,158,197,209,257,411],"implemented":[124],"different":[126,214,308],"organizations,":[127],"not":[129],"single":[131],"method":[132],"definition":[134],"agreed":[136],"upon":[137],"cultural":[139],"sectorial":[141],"barriers.":[142],"Therefore,":[143],"doubted.":[151],"This":[152,248,507],"study":[153,249,254,493,508],"aims":[154],"evaluate":[156,196],"assessments":[162,200],"focus":[165],"on":[166,373,486],"Information":[168],"Security":[169],"Assessment":[171,285],"Standards,":[172],"particular":[174],"ISO":[175,545],"27005":[176],"NIST":[178,270,289,547],"800-30":[179,271],"collaboration":[181],"Swedish":[184],"Armed":[185],"Forces.":[186],"The":[187,207,256,288,328,396,492],"research":[188,332,397],"adapts":[189],"frameworks":[191],"available":[192],"literature":[194],"procedure.":[206,227,436],"will":[210,244],"be":[211,246,348,499,516],"evaluated":[212],"criteria":[215,335],"divided":[216],"five":[218],"categories":[219],"considered":[220,319],"applicable":[221],"standardised":[224,325],"Also,":[228],"input":[229],"from":[230,350],"experts":[231,240],"currently":[234],"employing":[235],"academic":[239],"field":[243],"also":[245,471,509],"utilized.":[247],"utilizes":[250],"qualitative":[252],"case":[253],"approach.":[255],"evaluation":[258],"performance":[259,276],"each":[261],"standard":[263],"similar;":[265],"only":[267],"category":[268,279],"has":[272],"significant":[274],"better":[275],"related":[280,343,379],"final":[283,375,488],"Results":[286],"(Report).":[287],"provides":[290,494,510],"further":[292],"step":[293],"process":[296,313],"well":[298],"guidelines":[301],"templates":[303],"develop":[307,504],"parts":[309],"including":[314],"report,":[316],"which":[317,470,497,514],"best":[321],"practice":[322],"assessment.":[327],"findings":[329],"contradict":[333],"four":[334],"framework":[338,423,513],"found":[339],"literature,":[342],"what":[346],"can":[347,498,515],"learned":[349],"past":[351],"assessments,":[353],"wide":[356],"ranging":[357],"required":[360],"scope":[361],"assessment,":[365,537],"relevance":[367],"disclosure":[370],"information":[372,543],"report":[378],"composition":[382],"group":[386],"finally":[388],"procedure":[390],"finding":[392],"consensus":[393],"among":[394],"stakeholders.":[395],"question":[398],"\u201cHow":[399],"credible":[400],"are":[401],"assessments?\u201d":[404],"holistic":[407],"understanding":[408],"previously":[415],"mentioned,":[416],"determining":[417],"solid":[422],"companies":[425],"assessing":[428],"regulated":[433],"oversee":[438],"problems":[440],"embedded":[441],"subjectivity":[444],"ever-changing":[451],"(intrinsic":[452],"extrinsic)":[454],"stakeholder":[457],"behaviour":[458],"lack":[461,474,483],"systemic":[464],"approach":[465],"solve":[467],"issues,":[469],"include":[472],"proper":[476],"handling":[477],"uncertainty":[480],"transparency":[485],"report.":[491],"used":[500,517],"future":[505],"research.":[506],"grounded":[512],"utilizing":[520],"reflect":[526],"activities.":[533],"Keywords:":[534],"Credibility,":[535],"management,":[539],"standards,":[541],"risk,":[542],"security,":[544],"27005,":[546],"800-30.":[548]},"counts_by_year":[],"updated_date":"2026-08-13T07:04:57.449891","created_date":"2016-06-24T00:00:00"}