{"id":"https://openalex.org/W4387310119","doi":"https://doi.org/10.1108/ics-06-2023-0101","title":"Exploring the role of assurance context in system security assurance evaluation: a conceptual model","display_name":"Exploring the role of assurance context in system security assurance evaluation: a conceptual model","publication_year":2023,"publication_date":"2023-10-03","ids":{"openalex":"https://openalex.org/W4387310119","doi":"https://doi.org/10.1108/ics-06-2023-0101"},"language":"en","primary_location":{"id":"doi:10.1108/ics-06-2023-0101","is_oa":false,"landing_page_url":"https://doi.org/10.1108/ics-06-2023-0101","pdf_url":null,"source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hdl.handle.net/11250/3103185","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023668857","display_name":"Shao-Fang Wen","orcid":"https://orcid.org/0000-0002-6228-8367"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Shao-Fang Wen","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035810461","display_name":"Basel Katt","orcid":"https://orcid.org/0000-0002-0177-9496"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Basel Katt","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":null,"apc_paid":null,"fwci":7.4284,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.97088824,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"32","issue":"2","first_page":"159","last_page":"178"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.989799976348877,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9864000082015991,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.6867569088935852},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6689805388450623},{"id":"https://openalex.org/keywords/information-assurance","display_name":"Information assurance","score":0.5588934421539307},{"id":"https://openalex.org/keywords/conceptual-model","display_name":"Conceptual model","score":0.5415738821029663},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5379149913787842},{"id":"https://openalex.org/keywords/conceptual-framework","display_name":"Conceptual framework","score":0.5079415440559387},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.503462016582489},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.49655967950820923},{"id":"https://openalex.org/keywords/quality-assurance","display_name":"Quality assurance","score":0.47241368889808655},{"id":"https://openalex.org/keywords/originality","display_name":"Originality","score":0.41727936267852783},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3955470323562622},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.35619229078292847},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.35602128505706787},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2708853483200073},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2575199604034424},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.2567625045776367},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21268057823181152},{"id":"https://openalex.org/keywords/operations-management","display_name":"Operations management","score":0.17262551188468933},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.1171288788318634},{"id":"https://openalex.org/keywords/qualitative-research","display_name":"Qualitative research","score":0.08020871877670288},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.0716812014579773}],"concepts":[{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.6867569088935852},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6689805388450623},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.5588934421539307},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.5415738821029663},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5379149913787842},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.5079415440559387},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.503462016582489},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.49655967950820923},{"id":"https://openalex.org/C106436119","wikidata":"https://www.wikidata.org/wiki/Q836575","display_name":"Quality assurance","level":3,"score":0.47241368889808655},{"id":"https://openalex.org/C2776950860","wikidata":"https://www.wikidata.org/wiki/Q2914681","display_name":"Originality","level":3,"score":0.41727936267852783},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3955470323562622},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.35619229078292847},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.35602128505706787},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2708853483200073},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2575199604034424},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2567625045776367},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21268057823181152},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.17262551188468933},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.1171288788318634},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.08020871877670288},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0716812014579773},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C2778618615","wikidata":"https://www.wikidata.org/wiki/Q4008393","display_name":"External quality assessment","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1108/ics-06-2023-0101","is_oa":false,"landing_page_url":"https://doi.org/10.1108/ics-06-2023-0101","pdf_url":null,"source":{"id":"https://openalex.org/S4210195545","display_name":"Information and Computer Security","issn_l":"2056-4961","issn":["2056-4961","2056-497X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information & Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:ntnuopen.ntnu.no:11250/3103185","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/3103185","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information and Computer Security","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:ntnuopen.ntnu.no:11250/3103185","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/3103185","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information and Computer Security","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5699999928474426,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W330158273","https://openalex.org/W1501147246","https://openalex.org/W1569705287","https://openalex.org/W1882088395","https://openalex.org/W1967661515","https://openalex.org/W1979586866","https://openalex.org/W1991953824","https://openalex.org/W2017206266","https://openalex.org/W2032652700","https://openalex.org/W2064072875","https://openalex.org/W2064538718","https://openalex.org/W2078536701","https://openalex.org/W2113778324","https://openalex.org/W2118281476","https://openalex.org/W2125718981","https://openalex.org/W2148277253","https://openalex.org/W2149160185","https://openalex.org/W2156730552","https://openalex.org/W2420107722","https://openalex.org/W2780375555","https://openalex.org/W2797343713","https://openalex.org/W2938882454","https://openalex.org/W2963957220","https://openalex.org/W3005675401","https://openalex.org/W3006841465","https://openalex.org/W3007382840","https://openalex.org/W3014024865","https://openalex.org/W3039459450","https://openalex.org/W3046679832","https://openalex.org/W3125084155","https://openalex.org/W3203841480","https://openalex.org/W4300874687"],"related_works":["https://openalex.org/W2111290067","https://openalex.org/W4391024416","https://openalex.org/W1945599074","https://openalex.org/W2354489789","https://openalex.org/W3213607208","https://openalex.org/W2548786942","https://openalex.org/W2373668370","https://openalex.org/W2161017395","https://openalex.org/W2315110999","https://openalex.org/W3188047445"],"abstract_inverted_index":{"Purpose":[0],"Security":[1],"assurance":[2,30,45,58,77,88,108,130,148],"evaluation":[3,62,121],"(SAE)":[4],"is":[5,22,28],"a":[6,52,103],"well-established":[7],"approach":[8],"for":[9,105],"assessing":[10],"the":[11,29,42,57,61,69,72,76,96,107,120,127,142],"effectiveness":[12],"of":[13,44,75,129,147],"security":[14,83,157],"measures":[15],"in":[16,25,32,47],"systems.":[17],"However,":[18],"one":[19],"aspect":[20],"that":[21],"often":[23],"overlooked":[24],"these":[26],"evaluations":[27],"context":[31,46,59,109],"which":[33],"they":[34],"are":[35],"conducted.":[36],"This":[37],"paper":[38],"aims":[39],"to":[40,55,135,153],"explore":[41],"role":[43],"system":[48,80,156],"SAEs":[49,111],"and":[50,87,90,112,145,159],"proposes":[51],"conceptual":[53,66,98],"model":[54,67],"integrate":[56],"into":[60,110,115,126],"process.":[63],"Design/methodology/approach":[64],"The":[65],"highlights":[68],"interrelationships":[70],"between":[71],"various":[73],"elements":[74],"context,":[78,131],"including":[79],"boundaries,":[81],"stakeholders,":[82],"concerns,":[84],"regulatory":[85,91],"compliance":[86],"assumptions":[89],"compliance.":[92],"Findings":[93],"By":[94,124],"introducing":[95],"proposed":[97],"model,":[99],"this":[100,132],"research":[101,133],"provides":[102],"framework":[104],"incorporating":[106],"offers":[113],"insights":[114],"how":[116,139],"it":[117,140],"can":[118],"influence":[119],"outcomes.":[122],"Originality/value":[123],"delving":[125],"concept":[128],"seeks":[134],"shed":[136],"light":[137],"on":[138],"influences":[141],"scope,":[143],"methodologies":[144],"outcomes":[146],"evaluations,":[149],"ultimately":[150],"enabling":[151],"organizations":[152],"strengthen":[154],"their":[155],"postures":[158],"mitigate":[160],"risks":[161],"effectively.":[162]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}