{"id":"https://openalex.org/W4409380872","doi":"https://doi.org/10.1080/01972243.2025.2475311","title":"Sources of security risk information: What do professionals rely on for their risk assessment?","display_name":"Sources of security risk information: What do professionals rely on for their risk assessment?","publication_year":2025,"publication_date":"2025-04-11","ids":{"openalex":"https://openalex.org/W4409380872","doi":"https://doi.org/10.1080/01972243.2025.2475311"},"language":"en","primary_location":{"id":"doi:10.1080/01972243.2025.2475311","is_oa":false,"landing_page_url":"https://doi.org/10.1080/01972243.2025.2475311","pdf_url":null,"source":{"id":"https://openalex.org/S144363146","display_name":"The Information Society","issn_l":"0197-2243","issn":["0197-2243","1087-6537"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547","https://openalex.org/P4310320449"],"host_organization_lineage_names":["Taylor & Francis","Informa"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Information Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/318576/1/318576.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051952810","display_name":"Johan de Wit","orcid":"https://orcid.org/0000-0003-0958-3700"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Johan de Wit","raw_affiliation_strings":["Faculty of Technology, Policy, and Management, Delft Technical University"],"raw_orcid":"https://orcid.org/0000-0003-0958-3700","affiliations":[{"raw_affiliation_string":"Faculty of Technology, Policy, and Management, Delft Technical University","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083595076","display_name":"Wolter Pieters","orcid":"https://orcid.org/0000-0003-3985-4452"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Wolter Pieters","raw_affiliation_strings":["Behavioural Science Institute, Radboud University"],"raw_orcid":"https://orcid.org/0000-0003-3985-4452","affiliations":[{"raw_affiliation_string":"Behavioural Science Institute, Radboud University","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030622925","display_name":"Pieter van Gelder","orcid":"https://orcid.org/0000-0002-0001-0351"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Pieter van Gelder","raw_affiliation_strings":["Faculty of Technology, Policy, and Management, Delft Technical University"],"raw_orcid":"https://orcid.org/0000-0002-0001-0351","affiliations":[{"raw_affiliation_string":"Faculty of Technology, Policy, and Management, Delft Technical University","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5051952810"],"corresponding_institution_ids":["https://openalex.org/I98358874"],"apc_list":null,"apc_paid":null,"fwci":1.3134,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.82859068,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"41","issue":"3","first_page":"157","last_page":"172"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11573","display_name":"Risk Perception and Management","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9868000149726868,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.5172458291053772},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4759999215602875},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.47240370512008667},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.46805188059806824},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.43419113755226135},{"id":"https://openalex.org/keywords/risk-communication","display_name":"Risk communication","score":0.41661885380744934},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.35860222578048706},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3082014322280884}],"concepts":[{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.5172458291053772},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4759999215602875},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.47240370512008667},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.46805188059806824},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.43419113755226135},{"id":"https://openalex.org/C3017634809","wikidata":"https://www.wikidata.org/wiki/Q84862664","display_name":"Risk communication","level":2,"score":0.41661885380744934},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.35860222578048706},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3082014322280884}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1080/01972243.2025.2475311","is_oa":false,"landing_page_url":"https://doi.org/10.1080/01972243.2025.2475311","pdf_url":null,"source":{"id":"https://openalex.org/S144363146","display_name":"The Information Society","issn_l":"0197-2243","issn":["0197-2243","1087-6537"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547","https://openalex.org/P4310320449"],"host_organization_lineage_names":["Taylor & Francis","Informa"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Information Society","raw_type":"journal-article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/318576","is_oa":true,"landing_page_url":"https://hdl.handle.net/2066/318576","pdf_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/318576/1/318576.pdf","source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article / Letter to editor"}],"best_oa_location":{"id":"pmh:oai:repository.ubn.ru.nl:2066/318576","is_oa":true,"landing_page_url":"https://hdl.handle.net/2066/318576","pdf_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/318576/1/318576.pdf","source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article / Letter to editor"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409380872.pdf","grobid_xml":"https://content.openalex.org/works/W4409380872.grobid-xml"},"referenced_works_count":69,"referenced_works":["https://openalex.org/W121769888","https://openalex.org/W190823361","https://openalex.org/W624266443","https://openalex.org/W1485377847","https://openalex.org/W1495637187","https://openalex.org/W1519009131","https://openalex.org/W1607253146","https://openalex.org/W1623168575","https://openalex.org/W1713230559","https://openalex.org/W1968404735","https://openalex.org/W1975482862","https://openalex.org/W1985146552","https://openalex.org/W1987398095","https://openalex.org/W1991162355","https://openalex.org/W1995041120","https://openalex.org/W2002737934","https://openalex.org/W2004050437","https://openalex.org/W2005732925","https://openalex.org/W2014071948","https://openalex.org/W2027784005","https://openalex.org/W2042814312","https://openalex.org/W2046690910","https://openalex.org/W2050983728","https://openalex.org/W2053597171","https://openalex.org/W2063431930","https://openalex.org/W2072431063","https://openalex.org/W2087596448","https://openalex.org/W2091333932","https://openalex.org/W2115714947","https://openalex.org/W2120552548","https://openalex.org/W2132470305","https://openalex.org/W2136407476","https://openalex.org/W2140543255","https://openalex.org/W2143924623","https://openalex.org/W2149966915","https://openalex.org/W2150964509","https://openalex.org/W2160554939","https://openalex.org/W2166862286","https://openalex.org/W2167366201","https://openalex.org/W2169613734","https://openalex.org/W2332550897","https://openalex.org/W2344461567","https://openalex.org/W2477591619","https://openalex.org/W2500863075","https://openalex.org/W2537669654","https://openalex.org/W2585626331","https://openalex.org/W2780319076","https://openalex.org/W2788755666","https://openalex.org/W2791584848","https://openalex.org/W2796638516","https://openalex.org/W2892859754","https://openalex.org/W2906369603","https://openalex.org/W2954795796","https://openalex.org/W2960103808","https://openalex.org/W2992961216","https://openalex.org/W3006352228","https://openalex.org/W3046749279","https://openalex.org/W3093656768","https://openalex.org/W3099392579","https://openalex.org/W3106536117","https://openalex.org/W3125210271","https://openalex.org/W3215367316","https://openalex.org/W4232022686","https://openalex.org/W4241782141","https://openalex.org/W4254177783","https://openalex.org/W4308752211","https://openalex.org/W4367845884","https://openalex.org/W4383342659","https://openalex.org/W4388156124"],"related_works":["https://openalex.org/W2417158417","https://openalex.org/W2162350346","https://openalex.org/W2000498638","https://openalex.org/W2085558045","https://openalex.org/W4210784828","https://openalex.org/W2013166250","https://openalex.org/W3193040745","https://openalex.org/W2967550622","https://openalex.org/W1973232003","https://openalex.org/W51752556"],"abstract_inverted_index":{"Security":[0],"risks,":[1],"such":[2],"as":[3,111],"sabotage":[4],"and":[5,13,33,63,85,89,132,144,153],"cyberattacks,":[6],"are":[7,81,138,145],"an":[8],"increasing":[9],"threat":[10],"to":[11],"business":[12],"government":[14],"processes.":[15],"They":[16],"originate":[17],"from":[18,172],"malicious":[19],"human":[20],"action,":[21],"of":[22,35,72,77,124,128,135,161,168,170,189],"which":[23],"often":[24],"exact":[25],"historical":[26],"information":[27,56,80,171],"is":[28,38,87,92,95,116],"lacking.":[29],"Thus,":[30],"the":[31,39,55,61,102,165,177],"judgment":[32],"assessment":[34],"security":[36,43,78,99,119,181],"professionals":[37],"primary":[40],"input":[41],"for":[42,67,105,141,179],"risk":[44,79,182],"management,":[45],"a":[46,125,185],"subjective":[47],"probabilistic":[48],"approach.":[49],"In":[50],"this":[51,68],"study,":[52],"we":[53],"explore":[54],"sources":[57],"professionals,":[58],"in":[59,150],"both":[60,129],"physical":[62],"cybersecurity":[64],"domain,":[65],"use":[66,91,115,134,169],"purpose,":[69],"improving":[70],"understanding":[71],"their":[73,83,90],"daily":[74,133,151],"praxis.":[75],"Sources":[76],"collected,":[82],"quality":[84,131,143],"trustworthiness":[86],"assessed,":[88],"analyzed.":[93],"Quality":[94],"assessed":[96,130],"by":[97,184],"experienced":[98],"practitioners":[100],"applying":[101],"NATO":[103],"system":[104],"intelligence":[106],"evaluation,":[107],"with":[108],"source":[109,162],"intention":[110,163],"additional":[112,159],"criterion.":[113],"Actual":[114],"analyzed":[117],"among":[118],"professionals.":[120],"The":[121,158],"results":[122],"consist":[123],"comparative":[126],"ranking":[127],"sources.":[136,190],"Experts":[137],"ranked":[139],"first":[140],"perceived":[142],"also":[146],"most":[147],"relied":[148],"upon":[149],"praxis,":[152],"individual/personal":[154],"experience":[155],"comes":[156],"second.":[157],"criterion":[160],"explained":[164],"lower":[166],"level":[167],"science.":[173],"This":[174],"study":[175],"provides":[176],"basis":[178],"enhancing":[180],"management":[183],"more":[186],"conscious":[187],"selection":[188]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-04-12T00:00:00"}
