{"id":"https://openalex.org/W2940106403","doi":"https://doi.org/10.1080/17517575.2019.1605000","title":"Dying of a hundred good symptoms: why good security can still fail - a literature review and analysis","display_name":"Dying of a hundred good symptoms: why good security can still fail - a literature review and analysis","publication_year":2019,"publication_date":"2019-04-16","ids":{"openalex":"https://openalex.org/W2940106403","doi":"https://doi.org/10.1080/17517575.2019.1605000","mag":"2940106403"},"language":"en","primary_location":{"id":"doi:10.1080/17517575.2019.1605000","is_oa":false,"landing_page_url":"https://doi.org/10.1080/17517575.2019.1605000","pdf_url":null,"source":{"id":"https://openalex.org/S24861202","display_name":"Enterprise Information Systems","issn_l":"1751-7575","issn":["1751-7575","1751-7583"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Enterprise Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://qmro.qmul.ac.uk/xmlui/bitstream/123456789/93055/2/He%20Dying%20of%20a%20hundred%202019%20Accepted.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052326426","display_name":"Paul Loft","orcid":null},"institutions":[{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Paul Loft","raw_affiliation_strings":["School of Computer Science and Informatics, De Montfort University, Leicester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Informatics, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067747030","display_name":"Ying He","orcid":"https://orcid.org/0000-0003-2023-5547"},"institutions":[{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Ying He","raw_affiliation_strings":["School of Computer Science and Informatics, De Montfort University, Leicester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Informatics, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035745103","display_name":"Helge Janicke","orcid":"https://orcid.org/0000-0002-1345-2829"},"institutions":[{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Helge Janicke","raw_affiliation_strings":["School of Computer Science and Informatics, De Montfort University, Leicester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Informatics, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054296137","display_name":"Isabel Wagner","orcid":"https://orcid.org/0000-0003-0242-6278"},"institutions":[{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Isabel Wagner","raw_affiliation_strings":["School of Computer Science and Informatics, De Montfort University, Leicester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Informatics, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5067747030"],"corresponding_institution_ids":["https://openalex.org/I66943878"],"apc_list":null,"apc_paid":null,"fwci":1.9203,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.89720756,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"15","issue":"4","first_page":"448","last_page":"473"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/enterprise-information-security-architecture","display_name":"Enterprise information security architecture","score":0.8301465511322021},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5975773930549622},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.5931511521339417},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.5666012763977051},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.5652040243148804},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.5117911696434021},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4929380416870117},{"id":"https://openalex.org/keywords/enterprise-architecture","display_name":"Enterprise architecture","score":0.46977871656417847},{"id":"https://openalex.org/keywords/standard-of-good-practice","display_name":"Standard of Good Practice","score":0.4332549273967743},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.42833593487739563},{"id":"https://openalex.org/keywords/information-security-standards","display_name":"Information security standards","score":0.4166645407676697},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.3860001266002655},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.3508550226688385},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.34813809394836426},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3370330333709717},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.32423704862594604},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.12535563111305237},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.07018822431564331}],"concepts":[{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.8301465511322021},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5975773930549622},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.5931511521339417},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.5666012763977051},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.5652040243148804},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5117911696434021},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4929380416870117},{"id":"https://openalex.org/C10590034","wikidata":"https://www.wikidata.org/wiki/Q1048431","display_name":"Enterprise architecture","level":3,"score":0.46977871656417847},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.4332549273967743},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.42833593487739563},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.4166645407676697},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3860001266002655},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3508550226688385},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.34813809394836426},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3370330333709717},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.32423704862594604},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.12535563111305237},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.07018822431564331},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1080/17517575.2019.1605000","is_oa":false,"landing_page_url":"https://doi.org/10.1080/17517575.2019.1605000","pdf_url":null,"source":{"id":"https://openalex.org/S24861202","display_name":"Enterprise Information Systems","issn_l":"1751-7575","issn":["1751-7575","1751-7583"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Enterprise Information Systems","raw_type":"journal-article"},{"id":"pmh:oai:qmro.qmul.ac.uk:123456789/93055","is_oa":true,"landing_page_url":"https://qmro.qmul.ac.uk/xmlui/handle/123456789/93055","pdf_url":"https://qmro.qmul.ac.uk/xmlui/bitstream/123456789/93055/2/He%20Dying%20of%20a%20hundred%202019%20Accepted.pdf","source":{"id":"https://openalex.org/S4306400530","display_name":"Queen Mary Research Online (Queen Mary University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I166337079","host_organization_name":"Queen Mary University of London","host_organization_lineage":["https://openalex.org/I166337079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"pmh:oai:dora.dmu.ac.uk:2086/17710","is_oa":true,"landing_page_url":"https://www.dora.dmu.ac.uk/handle/2086/17710","pdf_url":null,"source":{"id":"https://openalex.org/S4306400394","display_name":"DMU Open Research Archive (De Montfort University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66943878","host_organization_name":"De Montfort University","host_organization_lineage":["https://openalex.org/I66943878"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"pmh:oai:qmro.qmul.ac.uk:123456789/93055","is_oa":true,"landing_page_url":"https://qmro.qmul.ac.uk/xmlui/handle/123456789/93055","pdf_url":"https://qmro.qmul.ac.uk/xmlui/bitstream/123456789/93055/2/He%20Dying%20of%20a%20hundred%202019%20Accepted.pdf","source":{"id":"https://openalex.org/S4306400530","display_name":"Queen Mary Research Online (Queen Mary University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I166337079","host_organization_name":"Queen Mary University of London","host_organization_lineage":["https://openalex.org/I166337079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.49000000953674316}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2940106403.pdf","grobid_xml":"https://content.openalex.org/works/W2940106403.grobid-xml"},"referenced_works_count":62,"referenced_works":["https://openalex.org/W1480398813","https://openalex.org/W1533444565","https://openalex.org/W1619436502","https://openalex.org/W1648161041","https://openalex.org/W1742813727","https://openalex.org/W1963975383","https://openalex.org/W1976164643","https://openalex.org/W1979290264","https://openalex.org/W1982182878","https://openalex.org/W1982735390","https://openalex.org/W1988595062","https://openalex.org/W2008114694","https://openalex.org/W2008670908","https://openalex.org/W2009007713","https://openalex.org/W2010715175","https://openalex.org/W2010902645","https://openalex.org/W2012708617","https://openalex.org/W2017328197","https://openalex.org/W2017871810","https://openalex.org/W2018238365","https://openalex.org/W2027666102","https://openalex.org/W2038756665","https://openalex.org/W2041047503","https://openalex.org/W2041127762","https://openalex.org/W2041479909","https://openalex.org/W2063141940","https://openalex.org/W2073428522","https://openalex.org/W2079790393","https://openalex.org/W2082804124","https://openalex.org/W2084558738","https://openalex.org/W2095490685","https://openalex.org/W2099945435","https://openalex.org/W2102585133","https://openalex.org/W2121187544","https://openalex.org/W2124035628","https://openalex.org/W2126467281","https://openalex.org/W2136036556","https://openalex.org/W2141205571","https://openalex.org/W2165772165","https://openalex.org/W2174850379","https://openalex.org/W2275195092","https://openalex.org/W2276368824","https://openalex.org/W2283405117","https://openalex.org/W2291759867","https://openalex.org/W2314132902","https://openalex.org/W2328911403","https://openalex.org/W2492578998","https://openalex.org/W2535149452","https://openalex.org/W2539003776","https://openalex.org/W2539822473","https://openalex.org/W2545338436","https://openalex.org/W2554589817","https://openalex.org/W2559094099","https://openalex.org/W2564147261","https://openalex.org/W2586363962","https://openalex.org/W2592976175","https://openalex.org/W2601972109","https://openalex.org/W2627093154","https://openalex.org/W3121480663","https://openalex.org/W3197629409","https://openalex.org/W4251934665","https://openalex.org/W4252374882"],"related_works":["https://openalex.org/W40842196","https://openalex.org/W2049188895","https://openalex.org/W2126017555","https://openalex.org/W2584162156","https://openalex.org/W2483557577","https://openalex.org/W2000891179","https://openalex.org/W2003676537","https://openalex.org/W1567258312","https://openalex.org/W3005750480","https://openalex.org/W2188290711"],"abstract_inverted_index":{"Many":[0],"organizations":[1],"suffer":[2],"serious":[3],"information":[4,48,78],"security":[5,15,29,49,79],"incidents,":[6],"despite":[7],"having":[8],"taken":[9],"positive":[10],"steps":[11],"towards":[12],"achieving":[13],"good":[14],"standards.":[16],"The":[17],"authors":[18],"hypothesize":[19],"that":[20,39],"these":[21],"issues":[22],"are":[23,93],"often":[24],"as":[25,54],"a":[26,83],"result":[27],"of":[28,77],"arrangements":[30],"not":[31],"being":[32],"sufficiently":[33],"integrated":[34],"with":[35,86],"businesses.":[36],"We":[37],"believe":[38],"adopting":[40],"an":[41,55,97],"enterprise":[42],"architecture":[43],"(EA)":[44],"approach":[45,85],"to":[46,53],"implementing":[47],"\u2013":[50,61],"commonly":[51],"referred":[52],"\u2018Enterprise":[56],"Information":[57],"Security":[58],"Architecture\u2019":[59],"(EISA)":[60],"will":[62],"deliver":[63],"substantial":[64],"benefits.":[65],"Our":[66],"paper":[67],"has":[68],"reviewed":[69],"and":[70,81],"analyzed":[71],"literature":[72],"concerning":[73],"the":[74],"root":[75],"causes":[76],"incidents":[80],"describes":[82],"novel":[84],"8":[87],"domains":[88],"for":[89],"ensuring":[90],"critical":[91],"factors":[92],"considered":[94],"when":[95],"building":[96],"EISA":[98],"framework.":[99]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}