{"id":"https://openalex.org/W4392813265","doi":"https://doi.org/10.1002/spe.3327","title":"Organizations' readiness for insider attacks: A process\u2010oriented approach","display_name":"Organizations' readiness for insider attacks: A process\u2010oriented approach","publication_year":2024,"publication_date":"2024-03-14","ids":{"openalex":"https://openalex.org/W4392813265","doi":"https://doi.org/10.1002/spe.3327"},"language":"en","primary_location":{"id":"doi:10.1002/spe.3327","is_oa":false,"landing_page_url":"https://doi.org/10.1002/spe.3327","pdf_url":null,"source":{"id":"https://openalex.org/S122199241","display_name":"Software Practice and Experience","issn_l":"0038-0644","issn":["0038-0644","1097-024X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software: Practice and Experience","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102762464","display_name":"Azzah AlGhamdi","orcid":"https://orcid.org/0000-0001-9047-1727"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]},{"id":"https://openalex.org/I4210112716","display_name":"Imam Abdulrahman Al Faisal Hospital","ror":"https://ror.org/01v1wt982","country_code":"SA","type":"healthcare","lineage":["https://openalex.org/I4210112716","https://openalex.org/I4517696"]},{"id":"https://openalex.org/I76571253","display_name":"Imam Abdulrahman Bin Faisal University","ror":"https://ror.org/038cy8j79","country_code":"SA","type":"education","lineage":["https://openalex.org/I76571253"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Azzah A. AlGhamdi","raw_affiliation_strings":["Department of Computer Information Systems Imam Abdulrahman Bin Faisal University  AlKhobar Saudi Arabia","Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Department of Computer Information Systems, Imam Abdulrahman Bin Faisal University, AlKhobar, Saudi Arabia","Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-9047-1727","affiliations":[{"raw_affiliation_string":"Department of Computer Information Systems Imam Abdulrahman Bin Faisal University  AlKhobar Saudi Arabia","institution_ids":["https://openalex.org/I4210112716","https://openalex.org/I76571253"]},{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Department of Computer Information Systems, Imam Abdulrahman Bin Faisal University, AlKhobar, Saudi Arabia","institution_ids":["https://openalex.org/I76571253"]},{"raw_affiliation_string":"Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041382184","display_name":"Mahmood Niazi","orcid":"https://orcid.org/0000-0001-7318-7644"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mahmood Niazi","raw_affiliation_strings":["Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014589730","display_name":"Mohammad Alshayeb","orcid":"https://orcid.org/0000-0001-7950-0099"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mohammad Alshayeb","raw_affiliation_strings":["Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-7950-0099","affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007816848","display_name":"Sajjad Mahmood","orcid":"https://orcid.org/0000-0001-5786-5118"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Sajjad Mahmood","raw_affiliation_strings":["Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-5786-5118","affiliations":[{"raw_affiliation_string":"Department of Information and Computer Science King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems King Fahd University of Petroleum and Minerals  Dhahran Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Department of Information and Computer Science, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Interdisciplinary Research Centre for Intelligent Secure Systems, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5102762464"],"corresponding_institution_ids":["https://openalex.org/I134085113","https://openalex.org/I4210112716","https://openalex.org/I76571253"],"apc_list":{"value":4430,"currency":"USD","value_usd":4430},"apc_paid":null,"fwci":0.6214,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.72141113,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":97},"biblio":{"volume":"54","issue":"8","first_page":"1565","last_page":"1589"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11891","display_name":"Big Data and Business Intelligence","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.724230945110321},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.6856303215026855},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5832585096359253},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.5728434324264526},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5104871988296509},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.45274198055267334},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.39177265763282776},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3597508668899536},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.12351563572883606},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09013161063194275}],"concepts":[{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.724230945110321},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.6856303215026855},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5832585096359253},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5728434324264526},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5104871988296509},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.45274198055267334},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.39177265763282776},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3597508668899536},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.12351563572883606},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09013161063194275},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/spe.3327","is_oa":false,"landing_page_url":"https://doi.org/10.1002/spe.3327","pdf_url":null,"source":{"id":"https://openalex.org/S122199241","display_name":"Software Practice and Experience","issn_l":"0038-0644","issn":["0038-0644","1097-024X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320595","host_organization_name":"Wiley","host_organization_lineage":["https://openalex.org/P4310320595"],"host_organization_lineage_names":["Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Software: Practice and Experience","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5400000214576721}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W25096446","https://openalex.org/W1678518841","https://openalex.org/W1862271745","https://openalex.org/W2006376235","https://openalex.org/W2013970737","https://openalex.org/W2020729428","https://openalex.org/W2033943395","https://openalex.org/W2052827706","https://openalex.org/W2056786770","https://openalex.org/W2095818413","https://openalex.org/W2096632950","https://openalex.org/W2120947134","https://openalex.org/W2123521920","https://openalex.org/W2136492526","https://openalex.org/W2159671817","https://openalex.org/W2262816253","https://openalex.org/W2315113356","https://openalex.org/W2483945477","https://openalex.org/W2503510109","https://openalex.org/W2507315740","https://openalex.org/W2553751163","https://openalex.org/W2735864825","https://openalex.org/W2778865020","https://openalex.org/W2790664081","https://openalex.org/W2804537277","https://openalex.org/W2809859173","https://openalex.org/W2888633298","https://openalex.org/W2920929998","https://openalex.org/W3015461804","https://openalex.org/W3018405402","https://openalex.org/W3030742098","https://openalex.org/W3045880080","https://openalex.org/W3108159510","https://openalex.org/W3129683244","https://openalex.org/W3215802769","https://openalex.org/W4288083473","https://openalex.org/W4288640565","https://openalex.org/W4309491067","https://openalex.org/W4313481727"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"Abstract":[0],"Context":[1],"Organizations":[2],"constantly":[3],"strive":[4],"to":[5,89,98,120,128,134,149,156],"protect":[6,90,99],"their":[7],"assets":[8],"from":[9,34,40,94,101],"outsider":[10,78],"attacks":[11,44,48,65,103,173],"by":[12],"implementing":[13],"various":[14],"security":[15],"controls,":[16],"such":[17,87,102],"as":[18],"data":[19],"encryption":[20],"algorithms,":[21],"intrusion":[22],"detection":[23],"software,":[24],"firewalls,":[25],"and":[26,51,70,187,195,205],"antivirus":[27],"programs.":[28],"Unfortunately,":[29],"attackers":[30,59,88],"strike":[31],"not":[32],"only":[33],"outside":[35],"the":[36,52,107,213],"organization":[37,82],"but":[38],"also":[39],"within.":[41],"Such":[42],"internal":[43],"are":[45,57],"called":[46],"insider":[47,58,61,122,140,161,172,177,221,235],"or":[49,60],"threats,":[50],"people":[53],"responsible":[54],"for":[55,139,174],"them":[56],"threat":[62],"agents.":[63],"Insider":[64],"pose":[66],"more":[67],"significant":[68],"risks":[69],"can":[71,153,216,227],"result":[72],"in":[73],"greater":[74],"organizational":[75,131],"losses":[76],"than":[77],"attacks.":[79,123,141,162,222,236],"Thus,":[80],"every":[81],"should":[83],"be":[84,154],"vigilant":[85],"regarding":[86],"its":[91],"valuable":[92],"resources":[93],"harm.":[95],"Finding":[96],"solutions":[97,119],"organizations":[100,229],"is":[104],"critical.":[105],"Despite":[106],"importance":[108],"of":[109,171],"this":[110],"topic,":[111],"little":[112],"research":[113],"has":[114],"been":[115],"conducted":[116,144],"on":[117],"providing":[118],"mitigate":[121],"Objective":[124],"This":[125,198],"study":[126],"aims":[127],"develop":[129],"an":[130,136],"readiness":[132,138,159,179,219],"model":[133,180,199,215,226],"assess":[135,157],"organization's":[137],"Method":[142],"We":[143],"a":[145,231],"multivocal":[146],"literature":[147],"review":[148],"identify":[150,217],"practices":[151,164,186],"that":[152,212],"used":[155],"organizations'":[158,218],"against":[160,220,234],"These":[163],"were":[165],"grouped":[166],"into":[167],"different":[168],"knowledge":[169,188],"areas":[170],"organizations.":[175],"The":[176,208,224],"attack":[178],"was":[181,200],"developed":[182],"using":[183],"identified":[184],"best":[185],"areas:":[189],"compliance,":[190],"top":[191],"management,":[192],"human":[193],"resources,":[194],"technical.":[196],"Results":[197],"evaluated":[201],"at":[202],"two":[203],"levels\u2014academic":[204],"real\u2010world":[206],"environments.":[207],"evaluation":[209],"results":[210],"show":[211],"proposed":[214,225],"Conclusion":[223],"guide":[228],"through":[230],"secure":[232],"environment":[233]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}