{"id":"https://openalex.org/W2168670961","doi":"https://doi.org/10.1108/09685220710831143","title":"Toward viable information security reporting systems","display_name":"Toward viable information security reporting systems","publication_year":2007,"publication_date":"2007-09-29","ids":{"openalex":"https://openalex.org/W2168670961","doi":"https://doi.org/10.1108/09685220710831143","mag":"2168670961"},"language":"en","primary_location":{"id":"doi:10.1108/09685220710831143","is_oa":false,"landing_page_url":"https://doi.org/10.1108/09685220710831143","pdf_url":null,"source":{"id":"https://openalex.org/S204075876","display_name":"Information Management & Computer Security","issn_l":"0968-5227","issn":["0968-5227","1758-5805"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Management & Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077738960","display_name":"Finn Olav Sveen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149720","display_name":"Diputaci\u00f3n Foral de Gipuzkoa","ror":"https://ror.org/05bvkb649","country_code":"ES","type":"government","lineage":["https://openalex.org/I4210149720"]},{"id":"https://openalex.org/I88155538","display_name":"Universidad de Navarra","ror":"https://ror.org/02rxc7m23","country_code":"ES","type":"education","lineage":["https://openalex.org/I88155538"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Finn Olav Sveen","raw_affiliation_strings":["Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain","(Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain","institution_ids":["https://openalex.org/I4210149720"]},{"raw_affiliation_string":"(Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain)","institution_ids":["https://openalex.org/I88155538"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110432658","display_name":"Jose M. Sarriegi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149720","display_name":"Diputaci\u00f3n Foral de Gipuzkoa","ror":"https://ror.org/05bvkb649","country_code":"ES","type":"government","lineage":["https://openalex.org/I4210149720"]},{"id":"https://openalex.org/I88155538","display_name":"Universidad de Navarra","ror":"https://ror.org/02rxc7m23","country_code":"ES","type":"education","lineage":["https://openalex.org/I88155538"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jose M. Sarriegi","raw_affiliation_strings":["Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain","(Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain","institution_ids":["https://openalex.org/I4210149720"]},{"raw_affiliation_string":"(Department of Industrial Management, Faculty of Technology, TECNUN, University of Navarra, Gipuzkoa, Spain)","institution_ids":["https://openalex.org/I88155538"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110504006","display_name":"Eliot Rich","orcid":null},"institutions":[{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eliot Rich","raw_affiliation_strings":["Department of Information Technology Management, School of Business, University at Albany, Albany, New York, USA","(Department of Information Technology Management, School of Business, University at Albany, Albany, New York, USA)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Technology Management, School of Business, University at Albany, Albany, New York, USA","institution_ids":["https://openalex.org/I392282"]},{"raw_affiliation_string":"(Department of Information Technology Management, School of Business, University at Albany, Albany, New York, USA)","institution_ids":["https://openalex.org/I392282"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102802658","display_name":"Jos\u00e9 J. Gonz\u00e1lez","orcid":"https://orcid.org/0000-0002-1056-2758"},"institutions":[{"id":"https://openalex.org/I200650556","display_name":"University of Agder","ror":"https://ror.org/03x297z98","country_code":"NO","type":"education","lineage":["https://openalex.org/I200650556"]},{"id":"https://openalex.org/I4210127026","display_name":"Ko-Aks (Norway)","ror":"https://ror.org/036jhyh48","country_code":"NO","type":"company","lineage":["https://openalex.org/I4210127026"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Jose J. Gonzalez","raw_affiliation_strings":["Faculty of Engineering and Science, Faculty of Engineering and Science, Agder University College, Grimstad, Norway","Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gj\u00f8vik, Norway","Faculty of Engineering and Science, Faculty of Engineering and Science, Agder University College, Grimstad, Norway; Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Science, Faculty of Engineering and Science, Agder University College, Grimstad, Norway","institution_ids":["https://openalex.org/I200650556"]},{"raw_affiliation_string":"Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I4210127026"]},{"raw_affiliation_string":"Faculty of Engineering and Science, Faculty of Engineering and Science, Agder University College, Grimstad, Norway; Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gj\u00f8vik, Norway","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.234,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.97230885,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"15","issue":"5","first_page":"408","last_page":"419"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11810","display_name":"Complex Systems and Decision Making","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.9466999769210815,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.6366046667098999},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.6253491640090942},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6214053630828857},{"id":"https://openalex.org/keywords/incident-report","display_name":"Incident report","score":0.5532525777816772},{"id":"https://openalex.org/keywords/originality","display_name":"Originality","score":0.5028409361839294},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4776833653450012},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4681827127933502},{"id":"https://openalex.org/keywords/information-system","display_name":"Information system","score":0.4430433511734009},{"id":"https://openalex.org/keywords/affect","display_name":"Affect (linguistics)","score":0.42472535371780396},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4232999384403229},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4103464186191559},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38990673422813416},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11435297131538391},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.10392501950263977}],"concepts":[{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.6366046667098999},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.6253491640090942},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6214053630828857},{"id":"https://openalex.org/C2909164965","wikidata":"https://www.wikidata.org/wiki/Q6014597","display_name":"Incident report","level":2,"score":0.5532525777816772},{"id":"https://openalex.org/C2776950860","wikidata":"https://www.wikidata.org/wiki/Q2914681","display_name":"Originality","level":3,"score":0.5028409361839294},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4776833653450012},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4681827127933502},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.4430433511734009},{"id":"https://openalex.org/C2776035688","wikidata":"https://www.wikidata.org/wiki/Q1606558","display_name":"Affect (linguistics)","level":2,"score":0.42472535371780396},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4232999384403229},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4103464186191559},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38990673422813416},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11435297131538391},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.10392501950263977},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C11012388","wikidata":"https://www.wikidata.org/wiki/Q170658","display_name":"Creativity","level":2,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1108/09685220710831143","is_oa":false,"landing_page_url":"https://doi.org/10.1108/09685220710831143","pdf_url":null,"source":{"id":"https://openalex.org/S204075876","display_name":"Information Management & Computer Security","issn_l":"0968-5227","issn":["0968-5227","1758-5805"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Management & Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5600000023841858}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W54942354","https://openalex.org/W1495486087","https://openalex.org/W1533643658","https://openalex.org/W1607548417","https://openalex.org/W1996373657","https://openalex.org/W2016309271","https://openalex.org/W2034283895","https://openalex.org/W2059206267","https://openalex.org/W2060821979","https://openalex.org/W2068414390","https://openalex.org/W2083839828","https://openalex.org/W2085173095","https://openalex.org/W2088469825","https://openalex.org/W2128872389","https://openalex.org/W2151217917","https://openalex.org/W2610191465","https://openalex.org/W2741441153","https://openalex.org/W3109579030","https://openalex.org/W3122062862","https://openalex.org/W4231905468","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W3204723561","https://openalex.org/W3199928954","https://openalex.org/W1991606108","https://openalex.org/W4251008024","https://openalex.org/W1132449169","https://openalex.org/W4236345345","https://openalex.org/W4206206623","https://openalex.org/W2935302227","https://openalex.org/W136373522","https://openalex.org/W1561922874"],"abstract_inverted_index":{"Purpose":[0],"This":[1],"research":[2],"paper":[3],"aims":[4],"to":[5,83,102,132],"examine":[6],"how":[7,13,104],"incident\u2010reporting":[8,38,48,106,140],"systems":[9,223],"function":[10],"and":[11,20,36,74,117,231],"particularly":[12],"the":[14,21,47,86,133,144,148,190,198],"steady":[15],"growth":[16,23],"of":[17,24,56,128,150,158,215],"high\u2010priority":[18,37],"incidents":[19,26],"semi\u2010exponential":[22],"low\u2010priority":[25],"affect":[27,34,219],"reporting":[28,59,210,222],"effectiveness.":[29],"Social":[30],"pressures":[31],"that":[32,218],"can":[33],"low\u2010":[35],"rates":[39],"are":[40,53,229],"also":[41,62],"examined.":[42],"Design/methodology/approach":[43],"The":[44,88,98,183],"authors":[45,89],"reviewed":[46],"system":[49,93,107],"literature.":[50],"As":[51],"there":[52],"few":[54],"studies":[55],"information":[57,195,208,220],"security":[58,209,221],"systems,":[60],"they":[61],"considered":[63],"safety\u2010reporting":[64],"systems.":[65,211],"These":[66],"have":[67,125],"been":[68],"in":[69,85,185,194],"use":[70],"for":[71,175,204],"many":[72],"years":[73],"much":[75],"is":[76,81,100,130,142,169,224],"known":[77],"about":[78],"them.":[79],"Safety":[80],"used":[82,101],"\u201cfill":[84],"gaps\u201d.":[87],"then":[90],"constructed":[91],"a":[92,138,155,202],"dynamics":[94],"computer":[95],"simulation":[96,234],"model.":[97],"model":[99,199],"test":[103],"an":[105],"reacts":[108],"under":[109],"different":[110,227],"conditions.":[111],"Findings":[112],"Incident":[113],"reporters":[114],"face":[115],"incentives":[116],"disincentives":[118],"based":[119],"on":[120,122,163],"effects":[121],"through\u2010put":[123],"but":[124],"limited":[126],"knowledge":[127],"what":[129],"important":[131],"organization's":[134],"security.":[135,196],"Even":[136],"if":[137],"successful":[139],"policy":[141],"developed,":[143],"organization":[145],"may":[146,187],"become":[147],"victim":[149],"its":[151],"own":[152],"success,":[153],"as":[154,192],"growing":[156],"volume":[157],"reports":[159],"put":[160],"higher":[161],"pressure":[162],"incident\u2010handling":[164],"resources.":[165],"Continuously":[166,171],"hiring":[167],"personnel":[168],"unsustainable.":[170],"improving":[172],"automated":[173],"tools":[174],"incident":[176],"response":[177],"promises":[178],"more":[179],"leverage.":[180],"Research":[181],"limitations/implications":[182],"challenges":[184],"safety":[186],"not":[188],"be":[189],"same":[191],"those":[193],"However,":[197],"does":[200],"provide":[201],"starting\u2010point":[203],"further":[205],"enquiries":[206],"into":[207],"Originality/value":[212],"An":[213],"examination":[214],"basic":[216],"factors":[217],"provided.":[225],"Four":[226],"policies":[228],"presented":[230],"examined":[232],"through":[233],"scenarios.":[235]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}