{"id":"https://openalex.org/W3185522234","doi":"https://doi.org/10.1109/metroind4.0iot51437.2021.9488471","title":"Towards a Practical Information Security Maturity Evaluation Method focused on People, Process and Technology","display_name":"Towards a Practical Information Security Maturity Evaluation Method focused on People, Process and Technology","publication_year":2021,"publication_date":"2021-06-07","ids":{"openalex":"https://openalex.org/W3185522234","doi":"https://doi.org/10.1109/metroind4.0iot51437.2021.9488471","mag":"3185522234"},"language":"en","primary_location":{"id":"doi:10.1109/metroind4.0iot51437.2021.9488471","is_oa":false,"landing_page_url":"https://doi.org/10.1109/metroind4.0iot51437.2021.9488471","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Workshop on Metrology for Industry 4.0 & IoT (MetroInd4.0&IoT)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038742950","display_name":"Davidson R. Boccardo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Davidson R. Boccardo","raw_affiliation_strings":["Clavis Information Security, Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Clavis Information Security, Rio de Janeiro, Brazil","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009382265","display_name":"Lucila M. S. Bento","orcid":"https://orcid.org/0000-0002-3688-5838"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lucila M. S. Bento","raw_affiliation_strings":["Armor Shield Innovation Co, Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Armor Shield Innovation Co, Rio de Janeiro, Brazil","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101126215","display_name":"Fernando H. Costa","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fernando H. Costa","raw_affiliation_strings":["Clavis Information Security, Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Clavis Information Security, Rio de Janeiro, Brazil","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5113,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.60871529,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"721","last_page":"726"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9908000230789185,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/maturity","display_name":"Maturity (psychological)","score":0.8041821122169495},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.6504093408584595},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6334806680679321},{"id":"https://openalex.org/keywords/capability-maturity-model","display_name":"Capability Maturity Model","score":0.6216826438903809},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.590384840965271},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5854777693748474},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5506746172904968},{"id":"https://openalex.org/keywords/safeguard","display_name":"Safeguard","score":0.5375800728797913},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5005841255187988},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.4975934326648712},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.4365612864494324},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4330076575279236},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.42373979091644287},{"id":"https://openalex.org/keywords/information-security-audit","display_name":"Information security audit","score":0.4220965504646301},{"id":"https://openalex.org/keywords/information-technology","display_name":"Information technology","score":0.4133767783641815},{"id":"https://openalex.org/keywords/certified-information-systems-security-professional","display_name":"Certified Information Systems Security Professional","score":0.412850558757782},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.33717605471611023},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.2806893587112427},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2760106325149536},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.16048792004585266},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.153886616230011},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.14708474278450012}],"concepts":[{"id":"https://openalex.org/C101433766","wikidata":"https://www.wikidata.org/wiki/Q3543263","display_name":"Maturity (psychological)","level":2,"score":0.8041821122169495},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6504093408584595},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6334806680679321},{"id":"https://openalex.org/C85890633","wikidata":"https://www.wikidata.org/wiki/Q929673","display_name":"Capability Maturity Model","level":3,"score":0.6216826438903809},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.590384840965271},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5854777693748474},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5506746172904968},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.5375800728797913},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5005841255187988},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.4975934326648712},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.4365612864494324},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4330076575279236},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.42373979091644287},{"id":"https://openalex.org/C39358052","wikidata":"https://www.wikidata.org/wiki/Q2578632","display_name":"Information security audit","level":5,"score":0.4220965504646301},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.4133767783641815},{"id":"https://openalex.org/C169537543","wikidata":"https://www.wikidata.org/wiki/Q1056312","display_name":"Certified Information Systems Security Professional","level":5,"score":0.412850558757782},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.33717605471611023},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2806893587112427},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2760106325149536},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.16048792004585266},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.153886616230011},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.14708474278450012},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C155202549","wikidata":"https://www.wikidata.org/wiki/Q178803","display_name":"International trade","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C138496976","wikidata":"https://www.wikidata.org/wiki/Q175002","display_name":"Developmental psychology","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/metroind4.0iot51437.2021.9488471","is_oa":false,"landing_page_url":"https://doi.org/10.1109/metroind4.0iot51437.2021.9488471","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE International Workshop on Metrology for Industry 4.0 & IoT (MetroInd4.0&IoT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4668532732","display_name":null,"funder_award_id":"E-26/260.165/2019","funder_id":"https://openalex.org/F4320322749","funder_display_name":"Funda\u00e7\u00e3o Carlos Chagas Filho de Amparo \u00e0 Pesquisa do Estado do Rio de Janeiro"}],"funders":[{"id":"https://openalex.org/F4320322749","display_name":"Funda\u00e7\u00e3o Carlos Chagas Filho de Amparo \u00e0 Pesquisa do Estado do Rio de Janeiro","ror":"https://ror.org/03kk0s825"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W159412958","https://openalex.org/W286115392","https://openalex.org/W1549342539","https://openalex.org/W1589416557","https://openalex.org/W1977534227","https://openalex.org/W2084044852","https://openalex.org/W2139048111","https://openalex.org/W2330650066","https://openalex.org/W2486645354","https://openalex.org/W2528756803","https://openalex.org/W2572590934","https://openalex.org/W2591870995","https://openalex.org/W2625105999","https://openalex.org/W2788686690","https://openalex.org/W2811199479","https://openalex.org/W3034690165","https://openalex.org/W3036521665","https://openalex.org/W4295706279","https://openalex.org/W6606395523"],"related_works":["https://openalex.org/W2232533402","https://openalex.org/W2584162156","https://openalex.org/W4230178451","https://openalex.org/W4237950461","https://openalex.org/W4234945028","https://openalex.org/W4251414465","https://openalex.org/W2497647994","https://openalex.org/W1988974780","https://openalex.org/W2483557577","https://openalex.org/W815057058"],"abstract_inverted_index":{"Organizations":[0],"are":[1],"faced":[2],"with":[3,52],"an":[4,69],"increased":[5],"number":[6],"of":[7,62],"security-related":[8],"challenges":[9],"and":[10,16,33,60],"need":[11],"to":[12,50,71],"safeguard":[13],"their":[14,63,78],"information":[15,40],"assets.":[17],"The":[18],"challenge":[19],"is":[20],"even":[21],"greater":[22],"for":[23,31],"Industry":[24,75],"4.0,":[25,76],"as":[26,45],"it":[27],"adopts":[28],"advanced":[29],"technologies":[30],"automation":[32],"data":[34],"exchange.":[35],"In":[36],"this":[37],"context,":[38],"the":[39,58],"security":[41,64,79],"controls":[42],"assessment":[43],"emerges":[44],"a":[46,82],"fast,":[47],"comprehensive":[48],"way":[49,84],"deal":[51],"cybersecurity":[53],"analysis,":[54],"helping":[55],"organizations":[56],"measure":[57],"effectiveness":[59],"adequacy":[61],"controls.":[65],"This":[66],"paper":[67],"presents":[68],"approach":[70],"help":[72],"organizations,":[73],"including":[74],"improve":[77],"maturity":[80],"in":[81],"fast-paced":[83],"based":[85],"on":[86],"well-recognized":[87],"frameworks.":[88]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}