{"id":"https://openalex.org/W3046546040","doi":"https://doi.org/10.2308/isys-2020-065","title":"Information Security Assurance and the Role of Security Configuration Management: Substantive and Symbolic Perspectives","display_name":"Information Security Assurance and the Role of Security Configuration Management: Substantive and Symbolic Perspectives","publication_year":2021,"publication_date":"2021-07-19","ids":{"openalex":"https://openalex.org/W3046546040","doi":"https://doi.org/10.2308/isys-2020-065","mag":"3046546040"},"language":"en","primary_location":{"id":"doi:10.2308/isys-2020-065","is_oa":false,"landing_page_url":"https://doi.org/10.2308/isys-2020-065","pdf_url":null,"source":{"id":"https://openalex.org/S82262387","display_name":"Journal of Information Systems","issn_l":"0888-7985","issn":["0888-7985","1558-7959"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316290","host_organization_name":"American Accounting Association","host_organization_lineage":["https://openalex.org/P4310316290"],"host_organization_lineage_names":["American Accounting Association"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087918045","display_name":"Chia-Ming Sun","orcid":"https://orcid.org/0000-0002-7859-2865"},"institutions":[{"id":"https://openalex.org/I75357094","display_name":"National Yunlin University of Science and Technology","ror":"https://ror.org/04qkq2m54","country_code":"TW","type":"education","lineage":["https://openalex.org/I75357094"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chia-Ming Sun","raw_affiliation_strings":["National Yunlin University of Science and Technology"],"raw_orcid":"https://orcid.org/0000-0002-7859-2865","affiliations":[{"raw_affiliation_string":"National Yunlin University of Science and Technology","institution_ids":["https://openalex.org/I75357094"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036388214","display_name":"Yen-Yao Wang","orcid":"https://orcid.org/0000-0001-6047-4126"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yen-Yao Wang","raw_affiliation_strings":["Auburn University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Auburn University","institution_ids":["https://openalex.org/I82497590"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073020668","display_name":"Chen-Bin Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I898250095","display_name":"Industrial and Commercial Bank of China","ror":"https://ror.org/02zcab046","country_code":"CN","type":"other","lineage":["https://openalex.org/I898250095"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen-Bin Yang","raw_affiliation_strings":["Taichung Commercial Bank"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Taichung Commercial Bank","institution_ids":["https://openalex.org/I898250095"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8535,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.77517385,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"36","issue":"1","first_page":"181","last_page":"199"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.5979238748550415},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.5570501089096069},{"id":"https://openalex.org/keywords/information-assurance","display_name":"Information assurance","score":0.5535609126091003},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5439020395278931},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4523587226867676},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.4414879381656647},{"id":"https://openalex.org/keywords/remedial-education","display_name":"Remedial education","score":0.4353399872779846},{"id":"https://openalex.org/keywords/information-security-management","display_name":"Information security management","score":0.42241692543029785},{"id":"https://openalex.org/keywords/controllability","display_name":"Controllability","score":0.41221725940704346},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.382941335439682},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.35995036363601685},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3482854962348938},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.2300921082496643},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2193388044834137},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.20187178254127502},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.18302810192108154},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09991270303726196},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.09710365533828735}],"concepts":[{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.5979238748550415},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.5570501089096069},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.5535609126091003},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5439020395278931},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4523587226867676},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4414879381656647},{"id":"https://openalex.org/C100207952","wikidata":"https://www.wikidata.org/wiki/Q7311597","display_name":"Remedial education","level":2,"score":0.4353399872779846},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.42241692543029785},{"id":"https://openalex.org/C48209547","wikidata":"https://www.wikidata.org/wiki/Q1331104","display_name":"Controllability","level":2,"score":0.41221725940704346},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.382941335439682},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.35995036363601685},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3482854962348938},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2300921082496643},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2193388044834137},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.20187178254127502},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.18302810192108154},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09991270303726196},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.09710365533828735},{"id":"https://openalex.org/C28826006","wikidata":"https://www.wikidata.org/wiki/Q33521","display_name":"Applied mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.2308/isys-2020-065","is_oa":false,"landing_page_url":"https://doi.org/10.2308/isys-2020-065","pdf_url":null,"source":{"id":"https://openalex.org/S82262387","display_name":"Journal of Information Systems","issn_l":"0888-7985","issn":["0888-7985","1558-7959"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316290","host_organization_name":"American Accounting Association","host_organization_lineage":["https://openalex.org/P4310316290"],"host_organization_lineage_names":["American Accounting Association"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems","raw_type":"journal-article"},{"id":"pmh:oai:aisel.aisnet.org:amcis2020-1258","is_oa":false,"landing_page_url":"https://aisel.aisnet.org/amcis2020/info_security_privacy/info_security_privacy/20","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AMCIS 2020 Proceedings","raw_type":"text"},{"id":"pmh:oai:aisel.aisnet.org:amcis2020-1465","is_oa":false,"landing_page_url":"https://aisel.aisnet.org/cgi/viewcontent.cgi?article=1465&context=amcis2020","pdf_url":null,"source":{"id":"https://openalex.org/S30879505","display_name":"Journal of the Association for Information Systems","issn_l":"1536-9323","issn":["1536-9323"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310321080","host_organization_name":"Association for Information Systems","host_organization_lineage":["https://openalex.org/P4310321080"],"host_organization_lineage_names":["Association for Information Systems"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AMCIS 2020 Proceedings","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1922849872","https://openalex.org/W1996565101","https://openalex.org/W2026491614","https://openalex.org/W2032652700","https://openalex.org/W2055633582","https://openalex.org/W2062228572","https://openalex.org/W2080179975","https://openalex.org/W2125336328","https://openalex.org/W2133446051","https://openalex.org/W2134496831","https://openalex.org/W2141951329","https://openalex.org/W2166886466","https://openalex.org/W2178752563","https://openalex.org/W2557778508","https://openalex.org/W2560034573","https://openalex.org/W2606873965","https://openalex.org/W2618772563","https://openalex.org/W2738072326","https://openalex.org/W2803110595","https://openalex.org/W2804319051","https://openalex.org/W2895747795","https://openalex.org/W2920463907","https://openalex.org/W2963303535","https://openalex.org/W3094207509","https://openalex.org/W3122167728"],"related_works":["https://openalex.org/W2508914475","https://openalex.org/W3174494040","https://openalex.org/W2120971814","https://openalex.org/W2777401565","https://openalex.org/W3154625549","https://openalex.org/W2391901998","https://openalex.org/W1986947466","https://openalex.org/W2365912134","https://openalex.org/W2351247954","https://openalex.org/W3196275927"],"abstract_inverted_index":{"ABSTRACT":[0],"This":[1],"paper":[2],"explores":[3],"whether":[4],"IT":[5,78],"and":[6,15,22,35,50,56,79,88,103,105,116],"audit":[7,80],"professionals":[8,81],"have":[9],"different":[10],"perceptions":[11],"of":[12,18,25,33],"the":[13,23,77],"substantive":[14,55],"symbolic":[16,57],"perspectives":[17,58],"information":[19,90,99],"security":[20,26,91,100],"assurance":[21],"role":[24,72],"configuration":[27],"management":[28],"(SCM)":[29],"using":[30],"a":[31,70],"mixture":[32],"qualitative":[34],"quantitative":[36],"approaches.":[37],"Importance":[38],"performance":[39],"analysis":[40],"(IPA)":[41],"is":[42],"utilized":[43],"to":[44],"identify":[45],"differences":[46],"in":[47,73,86],"perceived":[48,51],"importance":[49],"controllability":[52],"from":[53],"both":[54,114],"between":[59,76],"these":[60],"two":[61],"professional":[62],"groups.":[63],"Our":[64],"results":[65],"suggest":[66],"that":[67],"SCM":[68],"plays":[69],"vital":[71],"maintaining":[74],"consistency":[75],"by":[82],"enhancing":[83],"their":[84],"confidence":[85],"controlling":[87],"managing":[89],"control":[92],"sets.":[93],"IPA":[94],"also":[95],"helps":[96],"determine":[97],"an":[98],"program's":[101],"strengths":[102],"weaknesses":[104],"supports":[106],"remedial":[107],"strategic":[108],"actions":[109],"more":[110],"efficiently.":[111],"Implications":[112],"for":[113],"research":[115],"practice":[117],"are":[118],"discussed.":[119]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}