{"id":"https://openalex.org/W3030106500","doi":"https://doi.org/10.1145/3386723.3387843","title":"IT Security and IT Governance Alignment","display_name":"IT Security and IT Governance Alignment","publication_year":2020,"publication_date":"2020-03-31","ids":{"openalex":"https://openalex.org/W3030106500","doi":"https://doi.org/10.1145/3386723.3387843","mag":"3030106500"},"language":"en","primary_location":{"id":"doi:10.1145/3386723.3387843","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3386723.3387843","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd International Conference on Networking, Information Systems & Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053580532","display_name":"Norli Shariffuddin","orcid":null},"institutions":[{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Norli Shariffuddin","raw_affiliation_strings":["Universiti Teknologi MARA (UiTM), Shah Alam, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi MARA (UiTM), Shah Alam, Malaysia","institution_ids":["https://openalex.org/I82724352"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065335604","display_name":"Azlinah Mohamed","orcid":"https://orcid.org/0000-0002-4582-8763"},"institutions":[{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Azlinah Mohamed","raw_affiliation_strings":["Universiti Teknologi MARA (UiTM), Shah Alam, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi MARA (UiTM), Shah Alam, Malaysia","institution_ids":["https://openalex.org/I82724352"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I82724352"],"apc_list":null,"apc_paid":null,"fwci":1.7087,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.81556604,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11891","display_name":"Big Data and Business Intelligence","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.6750348806381226},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6361491680145264},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.5602136254310608},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.5200657248497009},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.5064674615859985},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4470778703689575},{"id":"https://openalex.org/keywords/sustainability","display_name":"Sustainability","score":0.4276018738746643},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4157334566116333},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.4067554473876953},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.40044093132019043}],"concepts":[{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.6750348806381226},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6361491680145264},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.5602136254310608},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5200657248497009},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.5064674615859985},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4470778703689575},{"id":"https://openalex.org/C66204764","wikidata":"https://www.wikidata.org/wiki/Q219416","display_name":"Sustainability","level":2,"score":0.4276018738746643},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4157334566116333},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4067554473876953},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.40044093132019043},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3386723.3387843","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3386723.3387843","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd International Conference on Networking, Information Systems & Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":68,"referenced_works":["https://openalex.org/W119627825","https://openalex.org/W610069515","https://openalex.org/W1495768301","https://openalex.org/W1506691352","https://openalex.org/W1557917188","https://openalex.org/W1590922450","https://openalex.org/W1906951560","https://openalex.org/W1933154585","https://openalex.org/W1993802356","https://openalex.org/W2004590611","https://openalex.org/W2004699332","https://openalex.org/W2007105267","https://openalex.org/W2019558715","https://openalex.org/W2027642255","https://openalex.org/W2068046153","https://openalex.org/W2088439851","https://openalex.org/W2089527867","https://openalex.org/W2094741359","https://openalex.org/W2149739119","https://openalex.org/W2156582951","https://openalex.org/W2162776220","https://openalex.org/W2169718214","https://openalex.org/W2262486124","https://openalex.org/W2285943860","https://openalex.org/W2291365655","https://openalex.org/W2295151404","https://openalex.org/W2303075053","https://openalex.org/W2311009932","https://openalex.org/W2344820972","https://openalex.org/W2498227950","https://openalex.org/W2516930304","https://openalex.org/W2518621695","https://openalex.org/W2541012338","https://openalex.org/W2549207543","https://openalex.org/W2588719667","https://openalex.org/W2591304547","https://openalex.org/W2601324832","https://openalex.org/W2604823987","https://openalex.org/W2612440889","https://openalex.org/W2613341523","https://openalex.org/W2614419084","https://openalex.org/W2622918351","https://openalex.org/W2746431160","https://openalex.org/W2753182097","https://openalex.org/W2762149334","https://openalex.org/W2766270833","https://openalex.org/W2772619384","https://openalex.org/W2782487918","https://openalex.org/W2788534277","https://openalex.org/W2803495417","https://openalex.org/W2804073276","https://openalex.org/W2806173450","https://openalex.org/W2811114102","https://openalex.org/W2823669719","https://openalex.org/W2889662085","https://openalex.org/W2892449090","https://openalex.org/W2896632748","https://openalex.org/W2896932566","https://openalex.org/W2902269021","https://openalex.org/W2959649622","https://openalex.org/W2992892313","https://openalex.org/W2996686710","https://openalex.org/W4315815301","https://openalex.org/W6604895022","https://openalex.org/W6737885470","https://openalex.org/W6766258171","https://openalex.org/W6771058123","https://openalex.org/W7019897380"],"related_works":["https://openalex.org/W1923764247","https://openalex.org/W2114208415","https://openalex.org/W2369233745","https://openalex.org/W2125534874","https://openalex.org/W2611614597","https://openalex.org/W2313821829","https://openalex.org/W2619501344","https://openalex.org/W4386500624","https://openalex.org/W2899303483","https://openalex.org/W4240788009"],"abstract_inverted_index":{"This":[0,159],"paper":[1,160],"review":[2],"and":[3,8,17,40,48,66,81,115,131,156,168,195,206,238,244,246,270,278,292,307],"align":[4,289],"IT":[5,9],"Security":[6],"(ITS)":[7],"Governance":[10],"(ITG)":[11],"that":[12,33,55,108,184,227,273],"would":[13,27,34,74,109],"address":[14],"ITS":[15,80,106,116,154,166,200],"strategic":[16],"its":[18,170,193,302],"operational":[19],"issues.":[20],"These":[21,254],"issues":[22],"if":[23],"not":[24],"addressed":[25],"accordingly,":[26],"lead":[28],"to":[29,76,84,91,102,172,266,288],"a":[30,140,178,250],"financial":[31],"aftermath":[32],"put":[35,259],"the":[36,42,57,70,93,111,122,124,133,175,216,229,240,247,267,282,295],"business":[37],"at":[38,69,192],"risk":[39,232],"jeopardize":[41],"organization's":[43],"sustainability":[44],"in":[45,87,89],"both":[46,290],"short":[47],"long":[49],"run.":[50],"There":[51,138],"have":[52,110],"been":[53],"studies":[54],"show,":[56],"lack":[58,62,148],"of":[59,63,96,113,149,236,242,249,304],"technical":[60,157],"controls,":[61],"solid":[64],"governance":[65],"improper":[67],"oversight":[68],"enterprise":[71],"stakeholders'":[72],"level":[73],"result":[75],"disastrous":[77],"events.":[78],"Thus,":[79,197],"ITG":[82,114,186,261,291],"has":[83],"go":[85],"hand":[86,88],"order":[90],"fortify":[92],"security":[94],"posture":[95],"an":[97,105],"enterprise.":[98],"The":[99,213],"goal":[100],"is":[101,147,286],"roll":[103],"out":[104],"program":[107],"best":[112,117],"practices.":[118],"Rather":[119],"than":[120],"reinventing":[121],"wheel,":[123],"affected":[125],"managers":[126],"or":[127],"organizations":[128],"can":[129],"adopt":[130],"adapt":[132],"existing":[134],"frameworks":[135,143,167,183,201],"available":[136],"easily.":[137],"are":[139,219],"few":[141],"common":[142,165,211],"available,":[144],"however":[145],"there":[146],"essential":[150,231],"elements":[151,198],"especially":[152],"on":[153],"management":[155,221],"controls.":[158],"will":[161,187,202,257,298],"look":[162],"into":[163,260],"these":[164],"lists":[169],"shortcomings":[171],"further":[173],"understand":[174],"need":[176],"for":[177,224,301],"better":[179],"framework.":[180],"In":[181,294],"addition,":[182],"govern":[185],"also":[188],"be":[189,203,258,299],"studied":[190],"looking":[191],"advantages":[194],"disadvantages.":[196],"from":[199],"identified,":[204],"analyzed":[205],"certain":[207],"aspects":[208],"extracted":[209],"as":[210],"themes.":[212],"analysis":[214],"shows,":[215],"themes":[217,256],"depicted":[218],"strong":[220],"support,":[222],"fit":[223],"purpose":[225],"context":[226],"suits":[228],"organization,":[230],"management,":[233],"clearly":[234],"defined":[235],"roles":[237],"responsibilities,":[239],"importance":[241],"training":[243],"awareness":[245],"implementation":[248],"quick":[251],"win":[252],"strategy.":[253],"five":[255],"practice":[262],"blocks":[263],"with":[264],"respect":[265],"Structure,":[268],"Process":[269,277],"Relational":[271],"Mechanisms":[272],"spans":[274],"across":[275],"People,":[276],"Technology":[279],"domains.":[280],"Finally,":[281],"construct":[283],"named":[284],"NORLI":[285,297],"proposed":[287],"ITS.":[293],"future,":[296],"tested":[300],"ease":[303],"use,":[305],"effectiveness":[306],"efficiency.":[308]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}