{"id":"https://openalex.org/W3004617639","doi":"https://doi.org/10.1108/ics-02-2019-0033","title":"What do we know about information security governance?","display_name":"What do we know about information security governance?","publication_year":2020,"publication_date":"2020-01-25","ids":{"openalex":"https://openalex.org/W3004617639","doi":"https://doi.org/10.1108/ics-02-2019-0033","mag":"3004617639"},"language":"en","primary_location":{"id":"doi:10.1108/ics-02-2019-0033","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ics-02-2019-0033","pdf_url":"https://www.emerald.com/insight/content/doi/10.1108/ICS-02-2019-0033/full/pdf?title=what-do-we-know-about-information-security-governance-from-the-basement-to-the-boardroom-towards-digital-security-governance","source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.emerald.com/insight/content/doi/10.1108/ICS-02-2019-0033/full/pdf?title=what-do-we-know-about-information-security-governance-from-the-basement-to-the-boardroom-towards-digital-security-governance","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066295000","display_name":"Stef Schinagl","orcid":"https://orcid.org/0000-0002-4455-7287"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Stef Schinagl","raw_affiliation_strings":["Vrije Universiteit Amsterdam School of Business and Economics, , Amsterdam,","School of Business and Economics, Vrije Universiteit Amsterdam, Amsterdam, The Netherlands"],"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam School of Business and Economics, , Amsterdam,","institution_ids":["https://openalex.org/I865915315"]},{"raw_affiliation_string":"School of Business and Economics, Vrije Universiteit Amsterdam, Amsterdam, The Netherlands","institution_ids":["https://openalex.org/I865915315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031785181","display_name":"A. Shahim","orcid":null},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Abbas Shahim","raw_affiliation_strings":["Vrije Universiteit Amsterdam School of Business and Economics, , Amsterdam,","School of Business and Economics, Vrije Universiteit Amsterdam, Amsterdam, The Netherlands"],"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam School of Business and Economics, , Amsterdam,","institution_ids":["https://openalex.org/I865915315"]},{"raw_affiliation_string":"School of Business and Economics, Vrije Universiteit Amsterdam, Amsterdam, The Netherlands","institution_ids":["https://openalex.org/I865915315"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5066295000"],"corresponding_institution_ids":["https://openalex.org/I865915315"],"apc_list":null,"apc_paid":null,"fwci":7.5124,"has_fulltext":false,"cited_by_count":49,"citation_normalized_percentile":{"value":0.97251393,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"28","issue":"2","first_page":"261","last_page":"292"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.6026390790939331},{"id":"https://openalex.org/keywords/originality","display_name":"Originality","score":0.5636205077171326},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5042470693588257},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.48729026317596436},{"id":"https://openalex.org/keywords/value","display_name":"Value (mathematics)","score":0.4474428594112396},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.38719648122787476},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.3600466251373291},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.35602501034736633},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.3063114285469055},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.264398455619812},{"id":"https://openalex.org/keywords/qualitative-research","display_name":"Qualitative research","score":0.10839289426803589},{"id":"https://openalex.org/keywords/social-science","display_name":"Social science","score":0.09624680876731873}],"concepts":[{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.6026390790939331},{"id":"https://openalex.org/C2776950860","wikidata":"https://www.wikidata.org/wiki/Q2914681","display_name":"Originality","level":3,"score":0.5636205077171326},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5042470693588257},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.48729026317596436},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.4474428594112396},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.38719648122787476},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.3600466251373291},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.35602501034736633},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.3063114285469055},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.264398455619812},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.10839289426803589},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.09624680876731873},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1108/ics-02-2019-0033","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ics-02-2019-0033","pdf_url":"https://www.emerald.com/insight/content/doi/10.1108/ICS-02-2019-0033/full/pdf?title=what-do-we-know-about-information-security-governance-from-the-basement-to-the-boardroom-towards-digital-security-governance","source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:research.vu.nl:openaire_cris_publications/ca0547ac-2e9d-4cda-889f-fd6bd193812c","is_oa":true,"landing_page_url":"https://research.vu.nl/en/publications/ca0547ac-2e9d-4cda-889f-fd6bd193812c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Schinagl, S & Shahim, A 2020, 'What do we know about information security governance? \u201cFrom the basement to the boardroom\u201d: towards digital security governance', Information and Computer Security, vol. 28, no. 2, pp. 261-292. https://doi.org/10.1108/ICS-02-2019-0033","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"doi:10.1108/ics-02-2019-0033","is_oa":true,"landing_page_url":"https://doi.org/10.1108/ics-02-2019-0033","pdf_url":"https://www.emerald.com/insight/content/doi/10.1108/ICS-02-2019-0033/full/pdf?title=what-do-we-know-about-information-security-governance-from-the-basement-to-the-boardroom-towards-digital-security-governance","source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.6899999976158142,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3004617639.pdf","grobid_xml":"https://content.openalex.org/works/W3004617639.grobid-xml"},"referenced_works_count":81,"referenced_works":["https://openalex.org/W47747804","https://openalex.org/W1532001233","https://openalex.org/W1571735688","https://openalex.org/W1715414298","https://openalex.org/W1968584218","https://openalex.org/W1978807326","https://openalex.org/W1986793627","https://openalex.org/W1988269019","https://openalex.org/W1988456457","https://openalex.org/W1994065885","https://openalex.org/W1997901747","https://openalex.org/W2000891179","https://openalex.org/W2005013836","https://openalex.org/W2008556210","https://openalex.org/W2022140071","https://openalex.org/W2044935933","https://openalex.org/W2045532242","https://openalex.org/W2049183845","https://openalex.org/W2057280625","https://openalex.org/W2058640412","https://openalex.org/W2063466632","https://openalex.org/W2064294101","https://openalex.org/W2076664845","https://openalex.org/W2082804124","https://openalex.org/W2087952459","https://openalex.org/W2108388346","https://openalex.org/W2109904891","https://openalex.org/W2118559537","https://openalex.org/W2119068246","https://openalex.org/W2122413203","https://openalex.org/W2129085046","https://openalex.org/W2141814526","https://openalex.org/W2149739119","https://openalex.org/W2165312609","https://openalex.org/W2167857801","https://openalex.org/W2174850379","https://openalex.org/W2184363587","https://openalex.org/W2277337407","https://openalex.org/W2278109028","https://openalex.org/W2303075053","https://openalex.org/W2336964007","https://openalex.org/W2419134065","https://openalex.org/W2516800336","https://openalex.org/W2517222954","https://openalex.org/W2518237992","https://openalex.org/W2531406546","https://openalex.org/W2534056287","https://openalex.org/W2549796333","https://openalex.org/W2593852442","https://openalex.org/W2598748854","https://openalex.org/W2601447320","https://openalex.org/W2615709448","https://openalex.org/W2617816955","https://openalex.org/W2619847881","https://openalex.org/W2620034723","https://openalex.org/W2626526019","https://openalex.org/W2738072326","https://openalex.org/W2763213239","https://openalex.org/W2767228426","https://openalex.org/W2770791791","https://openalex.org/W2783552687","https://openalex.org/W2791808572","https://openalex.org/W2792347597","https://openalex.org/W2792865795","https://openalex.org/W2811973125","https://openalex.org/W2884627574","https://openalex.org/W2887214859","https://openalex.org/W2892670700","https://openalex.org/W2896612212","https://openalex.org/W2900622889","https://openalex.org/W2942661344","https://openalex.org/W2980110915","https://openalex.org/W4238226847","https://openalex.org/W6608251939","https://openalex.org/W6630690391","https://openalex.org/W6633696576","https://openalex.org/W6678043189","https://openalex.org/W6744472370","https://openalex.org/W6757539500","https://openalex.org/W6769123220","https://openalex.org/W6980284880"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2593155302","https://openalex.org/W2041415459","https://openalex.org/W2072812638","https://openalex.org/W3126095231","https://openalex.org/W2352855287","https://openalex.org/W2378906650","https://openalex.org/W2384288445","https://openalex.org/W2382526412","https://openalex.org/W4200071106"],"abstract_inverted_index":{"Purpose":[0],"This":[1,64,175,201,229],"paper":[2,58,65,176,202,230],"aims":[3],"to":[4,42,50,85,105,109,151,205,214,235,247],"review":[5,248],"the":[6,14,19,22,28,39,83,86,95,113,132,164,239,244,251],"information":[7],"security":[8,68,192,217],"governance":[9],"(ISG)":[10],"literature":[11,46],"and":[12,27,134,179,190,216,218,249],"emphasises":[13],"tensions":[15],"that":[16,67,93,115,130,155,161,207],"exist":[17],"at":[18],"intersection":[20],"of":[21,31,38,112,123,136,187],"rapidly":[23],"changing":[24],"business":[25,79,226],"climate":[26],"current":[29],"body":[30],"knowledge":[32,154],"on":[33],"ISG.":[34],"Design/methodology/approach":[35],"The":[36,89,121],"intention":[37],"authors":[40],"was":[41],"conduct":[43],"a":[44,72,77,126,141,157,184,219,232],"systematic":[45],"review.":[47],"However,":[48],"owing":[49],"limited":[51],"empirical":[52],"papers":[53],"in":[54,140,170,221],"ISG":[55,138,171,236,252],"research,":[56],"this":[57,145,242],"is":[59,92,97,125,243],"more":[60],"conceptually":[61],"organised.":[62],"Findings":[63],"shows":[66],"has":[69],"shifted":[70],"from":[71],"narrow-focused":[73],"isolated":[74],"issue":[75,80],"towards":[76],"strategic":[78],"with":[81,212],"\u201cfrom":[82],"basement":[84],"boardroom\u201d":[87],"implications.":[88],"key":[90],"takeaway":[91],"protecting":[94],"organisation":[96],"important,":[98],"but":[99],"organizations":[100],"must":[101],"also":[102],"develop":[103],"strategies":[104],"ensure":[106],"resilient":[107],"businesses":[108],"take":[110],"advantage":[111],"opportunities":[114],"digitalization":[116],"can":[117],"bring.":[118],"Research":[119],"limitations/implications":[120],"concept":[122],"DSG":[124],"new":[127],"research":[128],"territory":[129],"addresses":[131],"limitations":[133],"gaps":[135],"traditional":[137],"approaches":[139,169,193],"digital":[142],"context.":[143],"To":[144,238],"extent,":[146],"organisational":[147],"theories":[148],"are":[149,194],"suggested":[150],"help":[152],"build":[153],"offers":[156],"deeper":[158,185],"understanding":[159,186],"than":[160],"provided":[162],"by":[163,182,197],"too":[165],"often":[166],"used":[167],"practical":[168],"research.":[172,237],"Practical":[173],"implications":[174,200],"supports":[177],"practitioners":[178],"decision":[180],"makers":[181],"providing":[183],"how":[188],"organisations":[189],"their":[191],"actually":[195],"affected":[196],"digitalisation.":[198],"Social":[199],"helps":[203],"individuals":[204],"understand":[206],"they":[208,224],"have":[209],"increasing":[210],"rights":[211],"regard":[213],"privacy":[215],"say":[220],"what":[222],"parties":[223],"assign":[225],"to.":[227],"Originality/value":[228],"makes":[231],"novel":[233],"contribution":[234],"authors\u2019":[240],"knowledge,":[241],"first":[245],"attempt":[246],"structure":[250],"literature.":[253]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":3}],"updated_date":"2026-04-14T08:04:32.555800","created_date":"2020-02-14T00:00:00"}