{"id":"https://openalex.org/W2165827705","doi":"https://doi.org/10.1145/2751957.2751960","title":"Using Stakeholder Knowledge for Data Quality Assessment in IS Security Risk Management Processes","display_name":"Using Stakeholder Knowledge for Data Quality Assessment in IS Security Risk Management Processes","publication_year":2015,"publication_date":"2015-06-02","ids":{"openalex":"https://openalex.org/W2165827705","doi":"https://doi.org/10.1145/2751957.2751960","mag":"2165827705"},"language":"en","primary_location":{"id":"doi:10.1145/2751957.2751960","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2751957.2751960","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 ACM SIGMIS Conference on Computers and People Research","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010063260","display_name":"Christian Sillaber","orcid":null},"institutions":[{"id":"https://openalex.org/I190249584","display_name":"Universit\u00e4t Innsbruck","ror":"https://ror.org/054pv6659","country_code":"AT","type":"education","lineage":["https://openalex.org/I190249584"]}],"countries":["AT"],"is_corresponding":true,"raw_author_name":"Christian Sillaber","raw_affiliation_strings":["University of Innsbruck, Innsbruck, Austria"],"affiliations":[{"raw_affiliation_string":"University of Innsbruck, Innsbruck, Austria","institution_ids":["https://openalex.org/I190249584"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037343322","display_name":"Ruth Breu","orcid":"https://orcid.org/0000-0001-7093-4341"},"institutions":[{"id":"https://openalex.org/I190249584","display_name":"Universit\u00e4t Innsbruck","ror":"https://ror.org/054pv6659","country_code":"AT","type":"education","lineage":["https://openalex.org/I190249584"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Ruth Breu","raw_affiliation_strings":["University of Innsbruck, Innsbruck, Austria"],"affiliations":[{"raw_affiliation_string":"University of Innsbruck, Innsbruck, Austria","institution_ids":["https://openalex.org/I190249584"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5010063260"],"corresponding_institution_ids":["https://openalex.org/I190249584"],"apc_list":null,"apc_paid":null,"fwci":0.7946,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.81272213,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"153","last_page":"159"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.991100013256073,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.7066097259521484},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.5510287880897522},{"id":"https://openalex.org/keywords/stakeholder","display_name":"Stakeholder","score":0.5473263263702393},{"id":"https://openalex.org/keywords/security-management","display_name":"Security management","score":0.5257633328437805},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.5116703510284424},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.5012133121490479},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.45679569244384766},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4481451213359833},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.43024811148643494},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.42705225944519043},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.38524141907691956},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1861427128314972},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.139559805393219},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.07703348994255066}],"concepts":[{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.7066097259521484},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.5510287880897522},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.5473263263702393},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.5257633328437805},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5116703510284424},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.5012133121490479},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.45679569244384766},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4481451213359833},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.43024811148643494},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.42705225944519043},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.38524141907691956},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1861427128314972},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.139559805393219},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.07703348994255066},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2751957.2751960","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2751957.2751960","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 ACM SIGMIS Conference on Computers and People Research","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W38876016","https://openalex.org/W834895598","https://openalex.org/W1507365153","https://openalex.org/W1536398137","https://openalex.org/W1589815886","https://openalex.org/W1602619638","https://openalex.org/W1963803712","https://openalex.org/W1993575476","https://openalex.org/W2012352432","https://openalex.org/W2013587720","https://openalex.org/W2041797760","https://openalex.org/W2054994890","https://openalex.org/W2063431930","https://openalex.org/W2109026747","https://openalex.org/W2110461478","https://openalex.org/W2110710386","https://openalex.org/W2125336328","https://openalex.org/W2128555200","https://openalex.org/W2143472739","https://openalex.org/W2154257511","https://openalex.org/W2170899042","https://openalex.org/W2973442464","https://openalex.org/W2997683334","https://openalex.org/W3006975230","https://openalex.org/W4376545170"],"related_works":["https://openalex.org/W4256374004","https://openalex.org/W1964692067","https://openalex.org/W3048948897","https://openalex.org/W2015505306","https://openalex.org/W330653092","https://openalex.org/W2062353301","https://openalex.org/W2384723023","https://openalex.org/W4321844648","https://openalex.org/W2358770215","https://openalex.org/W4246428902"],"abstract_inverted_index":{"The":[0,139],"availability":[1],"of":[2,6,51,72,97,183,186,198,221],"high":[3],"quality":[4,43,61,66,146],"documentation":[5,40,71,130,187,203,223],"the":[7,30,37,46,52,69,83,95,106,120,143,153,166,180,190,196,205,219],"IS":[8,20,53,84,201],"as":[9,11,165],"well":[10],"knowledgeable":[12],"stakeholders":[13,79],"are":[14],"an":[15,73,98],"important":[16,168],"prerequisite":[17],"for":[18,135,152,218],"successful":[19],"security":[21,39,47,70,100,137,155,171,202,206,222],"risk":[22,49,101,157,173,208,213],"management":[23,102,158,174,209],"processes.":[24],"However,":[25],"little":[26,176],"is":[27,177],"known":[28,178],"about":[29,36,82,179],"relationship":[31],"between":[32,119],"stakeholders,":[33],"their":[34,92],"knowledge":[35],"IS,":[38],"and":[41,48,87,126,156,172,207,211],"how":[42],"aspects":[44],"influence":[45],"properties":[50],"under":[54,85],"investigation.":[55],"We":[56,115],"developed":[57],"a":[58,112,132,216],"structured":[59],"data":[60,145],"assessment":[62,147],"process":[63,103,148,210],"to":[64],"identify":[65],"issues":[67],"in":[68,94,111,170,204],"information":[74],"system.":[75],"For":[76],"this,":[77],"organizational":[78,191],"were":[80,89,131],"interviewed":[81],"investigation":[86],"models":[88,121],"created":[90,122,128],"from":[91,123,129],"description":[93],"context":[96],"ongoing":[99,154],"process.":[104,159],"Then,":[105],"research":[107,162],"model":[108],"was":[109],"evaluated":[110],"case":[113],"study.":[114],"found":[116],"that":[117,142],"contradictions":[118],"stakeholder":[124],"interviews":[125],"those":[127],"good":[133],"indicator":[134],"potential":[136],"risks.":[138],"findings":[140],"indicate":[141],"proposed":[144],"provides":[149,212],"valuable":[150],"inputs":[151],"While":[160],"current":[161],"considers":[163],"users":[164],"most":[167],"resource":[169],"processes,":[175],"hidden":[181],"value":[182],"various":[184],"entities":[185],"available":[188],"at":[189],"level.":[192],"This":[193],"study":[194],"highlights":[195],"importance":[197],"utilizing":[199],"existing":[200],"managers":[214],"with":[215],"toolset":[217],"prioritization":[220],"driven":[224],"improvement":[225],"activities.":[226]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}