{"id":"https://openalex.org/W7124437600","doi":"https://doi.org/10.1080/19393555.2026.2616290","title":"A preliminary study on Information Security management maturity in MalaysianIT firms","display_name":"A preliminary study on Information Security management maturity in MalaysianIT firms","publication_year":2026,"publication_date":"2026-01-16","ids":{"openalex":"https://openalex.org/W7124437600","doi":"https://doi.org/10.1080/19393555.2026.2616290"},"language":"en","primary_location":{"id":"doi:10.1080/19393555.2026.2616290","is_oa":false,"landing_page_url":"https://doi.org/10.1080/19393555.2026.2616290","pdf_url":null,"source":{"id":"https://openalex.org/S39280739","display_name":"Information Security Journal A Global Perspective","issn_l":"1939-3547","issn":["1939-3547","1939-3555"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Security Journal: A Global Perspective","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086268764","display_name":"Qamarul Nazrin Harun","orcid":"https://orcid.org/0000-0003-1645-0607"},"institutions":[{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Qamarul Nazrin Harun","raw_affiliation_strings":["Universiti Teknologi MARA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi MARA","institution_ids":["https://openalex.org/I82724352"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006084397","display_name":"Muhamad Khairulnizam Zaini","orcid":"https://orcid.org/0000-0001-6054-5756"},"institutions":[{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":true,"raw_author_name":"Muhamad Khairulnizam Zaini","raw_affiliation_strings":["Universiti Teknologi MARA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi MARA","institution_ids":["https://openalex.org/I82724352"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5095778642","display_name":"Siti Zaleha Abd Goni","orcid":null},"institutions":[{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Siti Zaleha Abd Goni","raw_affiliation_strings":["Universiti Teknologi MARA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi MARA","institution_ids":["https://openalex.org/I82724352"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083047943","display_name":"Norhayati Hussin","orcid":"https://orcid.org/0000-0002-3818-1105"},"institutions":[{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Norhayati Hussin","raw_affiliation_strings":["Universiti Teknologi MARA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi MARA","institution_ids":["https://openalex.org/I82724352"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5006084397"],"corresponding_institution_ids":["https://openalex.org/I82724352"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.04419685,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"35","issue":"3","first_page":"449","last_page":"477"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.723800003528595,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.723800003528595,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.02459999918937683,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.008799999952316284,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/maturity","display_name":"Maturity (psychological)","score":0.6915000081062317},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.5557000041007996},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.5192999839782715},{"id":"https://openalex.org/keywords/security-management","display_name":"Security management","score":0.45910000801086426},{"id":"https://openalex.org/keywords/certified-information-security-manager","display_name":"Certified Information Security Manager","score":0.36090001463890076},{"id":"https://openalex.org/keywords/capability-maturity-model","display_name":"Capability Maturity Model","score":0.3547999858856201},{"id":"https://openalex.org/keywords/information-management","display_name":"Information management","score":0.3474999964237213}],"concepts":[{"id":"https://openalex.org/C101433766","wikidata":"https://www.wikidata.org/wiki/Q3543263","display_name":"Maturity (psychological)","level":2,"score":0.6915000081062317},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5989999771118164},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.5557000041007996},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.5192999839782715},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.487199991941452},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.45910000801086426},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45739999413490295},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3912000060081482},{"id":"https://openalex.org/C180823521","wikidata":"https://www.wikidata.org/wiki/Q1662502","display_name":"Certified Information Security Manager","level":5,"score":0.36090001463890076},{"id":"https://openalex.org/C85890633","wikidata":"https://www.wikidata.org/wiki/Q929673","display_name":"Capability Maturity Model","level":3,"score":0.3547999858856201},{"id":"https://openalex.org/C128487930","wikidata":"https://www.wikidata.org/wiki/Q579488","display_name":"Information management","level":2,"score":0.3474999964237213},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3450999855995178},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.3400999903678894},{"id":"https://openalex.org/C29848774","wikidata":"https://www.wikidata.org/wiki/Q61905","display_name":"Management information systems","level":3,"score":0.32510000467300415},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3197000026702881},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.30570000410079956},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2913999855518341},{"id":"https://openalex.org/C40700","wikidata":"https://www.wikidata.org/wiki/Q1411783","display_name":"Industrial organization","level":1,"score":0.2892000079154968},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.28850001096725464},{"id":"https://openalex.org/C47309137","wikidata":"https://www.wikidata.org/wiki/Q7598357","display_name":"Standard of Good Practice","level":5,"score":0.28630000352859497},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.2775000035762787},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.25619998574256897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1080/19393555.2026.2616290","is_oa":false,"landing_page_url":"https://doi.org/10.1080/19393555.2026.2616290","pdf_url":null,"source":{"id":"https://openalex.org/S39280739","display_name":"Information Security Journal A Global Perspective","issn_l":"1939-3547","issn":["1939-3547","1939-3555"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Security Journal: A Global Perspective","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5005767941474915,"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321709","display_name":"Ministry of Higher Education, Malaysia","ror":"https://ror.org/05mcs2t73"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":64,"referenced_works":["https://openalex.org/W1979290264","https://openalex.org/W1987933834","https://openalex.org/W1988782760","https://openalex.org/W1992108413","https://openalex.org/W2043897662","https://openalex.org/W2049188895","https://openalex.org/W2052714158","https://openalex.org/W2081737649","https://openalex.org/W2091860459","https://openalex.org/W2181301463","https://openalex.org/W2337005109","https://openalex.org/W2499471909","https://openalex.org/W2515408668","https://openalex.org/W2609990009","https://openalex.org/W2620913050","https://openalex.org/W2744790096","https://openalex.org/W2793211271","https://openalex.org/W2794886350","https://openalex.org/W2899177703","https://openalex.org/W2947347047","https://openalex.org/W2947486772","https://openalex.org/W2996838844","https://openalex.org/W2998159685","https://openalex.org/W3024069558","https://openalex.org/W3087480072","https://openalex.org/W3110527272","https://openalex.org/W3117535775","https://openalex.org/W3131511396","https://openalex.org/W3158082435","https://openalex.org/W3176667634","https://openalex.org/W3183344050","https://openalex.org/W3183547649","https://openalex.org/W3204540951","https://openalex.org/W4220763094","https://openalex.org/W4223442562","https://openalex.org/W4224142968","https://openalex.org/W4280561662","https://openalex.org/W4280634632","https://openalex.org/W4294308975","https://openalex.org/W4297517569","https://openalex.org/W4306977091","https://openalex.org/W4309933537","https://openalex.org/W4310350766","https://openalex.org/W4312464687","https://openalex.org/W4379157788","https://openalex.org/W4385310317","https://openalex.org/W4387409311","https://openalex.org/W4391452765","https://openalex.org/W4392397442","https://openalex.org/W4392896517","https://openalex.org/W4399115411","https://openalex.org/W4399292865","https://openalex.org/W4399462847","https://openalex.org/W4401151146","https://openalex.org/W4402318401","https://openalex.org/W4403647471","https://openalex.org/W4403882784","https://openalex.org/W4403996836","https://openalex.org/W4405272680","https://openalex.org/W4406233066","https://openalex.org/W4406424146","https://openalex.org/W4408740005","https://openalex.org/W4408936743","https://openalex.org/W6968419995"],"related_works":[],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"findings":[3,181],"from":[4,34],"a":[5,19,87,109,118,174,183],"preliminary":[6],"study":[7,114,155],"on":[8],"Information":[9],"Security":[10,58,65,71],"Management":[11],"Maturity":[12],"(ISMM)":[13],"in":[14,57,192],"Malaysian":[15,151],"IT":[16,32],"companies.":[17],"Using":[18],"qualitative":[20],"research":[21,191],"design,":[22],"semi-structured":[23],"interviews":[24],"were":[25],"conducted":[26],"with":[27],"ten":[28],"(n":[29],"=":[30],"10)":[31],"professionals":[33],"different":[35],"domains":[36],"to":[37,169],"assess":[38],"the":[39,137,146,154,157,180],"adoption":[40],"and":[41,55,79,82,93,103,127,145,166,176,189],"effectiveness":[42],"of":[43,76,107,142],"organizational":[44,124],"security":[45,171],"practices.":[46],"Thematic":[47],"analysis":[48],"identified":[49],"seven":[50],"critical":[51],"themes:":[52],"(1)":[53],"Adaptation":[54],"Flexibility":[56],"Practices,":[59],"(2)":[60],"Cultural":[61],"Influences,":[62],"(3)":[63],"Strategic":[64],"Integration,":[66],"(4)":[67],"Perception":[68],"Gaps,":[69],"(5)":[70],"Resource":[72],"Allocation,":[73],"(6)":[74],"Impact":[75],"Remote":[77],"Work,":[78],"(7)":[80],"Regulation":[81],"Compliance.":[83],"The":[84],"results":[85],"highlight":[86],"persistent":[88],"disconnect":[89],"between":[90,139],"strategic":[91,177],"concepts":[92],"operational":[94],"realities,":[95],"often":[96],"constrained":[97],"by":[98,123,150],"cultural":[99,175],"hierarchies,":[100],"fragmented":[101],"budgeting,":[102],"compliance-driven":[104],"approaches.":[105],"Instead":[106],"assigning":[108],"numerical":[110],"maturity":[111,116,143],"rating,":[112],"this":[113],"views":[115],"as":[117,134,172],"continuous,":[119],"context-dependent":[120],"process":[121],"shaped":[122],"culture,":[125],"governance,":[126],"resource":[128],"limitations.":[129],"These":[130],"insights":[131],"are":[132],"significant":[133],"they":[135],"bridge":[136],"gap":[138],"academic":[140],"interpretations":[141],"models":[144],"practical":[147],"challenges":[148],"faced":[149],"businesses.":[152],"Specifically,":[153],"underscores":[156],"need":[158],"for":[159,185],"locally":[160],"adaptive":[161],"governance":[162],"structures,":[163],"policymaker":[164],"guidance,":[165],"practitioner":[167],"education":[168],"embrace":[170],"both":[173],"priority.":[178],"Collectively,":[179],"provide":[182],"foundation":[184],"future":[186],"empirical":[187],"modeling":[188],"comparative":[190],"evolving":[193],"digital":[194],"economies.":[195]},"counts_by_year":[],"updated_date":"2026-06-14T06:11:07.267592","created_date":"2026-01-17T00:00:00"}