{"id":"https://openalex.org/W2977607712","doi":"https://doi.org/10.23919/contel52528.2021.9495982","title":"A Critical View on CIS Controls","display_name":"A Critical View on CIS Controls","publication_year":2021,"publication_date":"2021-06-30","ids":{"openalex":"https://openalex.org/W2977607712","doi":"https://doi.org/10.23919/contel52528.2021.9495982","mag":"2977607712"},"language":"en","primary_location":{"id":"doi:10.23919/contel52528.2021.9495982","is_oa":false,"landing_page_url":"https://doi.org/10.23919/contel52528.2021.9495982","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 16th International Conference on Telecommunications (ConTEL)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1910.01721","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023734196","display_name":"Stjepan Gro\u0161","orcid":"https://orcid.org/0000-0001-6619-2859"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":true,"raw_author_name":"Stjepan Gros","raw_affiliation_strings":["Laboratory for Information Security and Privacy Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","Faculty of Electrical Engineering and Computing, University of Zagreb;"],"affiliations":[{"raw_affiliation_string":"Laboratory for Information Security and Privacy Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]},{"raw_affiliation_string":"Faculty of Electrical Engineering and Computing, University of Zagreb;","institution_ids":["https://openalex.org/I181343428"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5023734196"],"corresponding_institution_ids":["https://openalex.org/I181343428"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.00307371,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"122","last_page":"128"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9175999760627747,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9175999760627747,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9049000144004822,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/minor","display_name":"Minor (academic)","score":0.6820511221885681},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6044000387191772},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4980778694152832},{"id":"https://openalex.org/keywords/epistemology","display_name":"Epistemology","score":0.45689794421195984},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.4454555809497833},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3772616982460022},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.2626883387565613},{"id":"https://openalex.org/keywords/philosophy","display_name":"Philosophy","score":0.2083791196346283},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.16029682755470276},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.07947298884391785}],"concepts":[{"id":"https://openalex.org/C2779760435","wikidata":"https://www.wikidata.org/wiki/Q5396169","display_name":"Minor (academic)","level":2,"score":0.6820511221885681},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6044000387191772},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4980778694152832},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.45689794421195984},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.4454555809497833},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3772616982460022},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2626883387565613},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.2083791196346283},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.16029682755470276},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.07947298884391785},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.23919/contel52528.2021.9495982","is_oa":false,"landing_page_url":"https://doi.org/10.23919/contel52528.2021.9495982","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 16th International Conference on Telecommunications (ConTEL)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1910.01721","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1910.01721","pdf_url":"https://arxiv.org/pdf/1910.01721","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"mag:2977607712","is_oa":true,"landing_page_url":"https://arxiv.org/abs/1910.01721","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1910.01721","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1910.01721","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1910.01721","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1910.01721","pdf_url":"https://arxiv.org/pdf/1910.01721","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2977607712.pdf","grobid_xml":"https://content.openalex.org/works/W2977607712.grobid-xml"},"referenced_works_count":2,"referenced_works":["https://openalex.org/W2619374218","https://openalex.org/W2802396184"],"related_works":["https://openalex.org/W2039177359","https://openalex.org/W2007013696","https://openalex.org/W2493654895","https://openalex.org/W2019209026","https://openalex.org/W1548389832","https://openalex.org/W2253398178","https://openalex.org/W19402904","https://openalex.org/W2181592926","https://openalex.org/W119676111","https://openalex.org/W1963853353","https://openalex.org/W2184206935","https://openalex.org/W2519797425","https://openalex.org/W2326663188","https://openalex.org/W2320578786","https://openalex.org/W1011653926","https://openalex.org/W17416682","https://openalex.org/W2046674263","https://openalex.org/W2077262281","https://openalex.org/W2036709337","https://openalex.org/W2187184545"],"abstract_inverted_index":{"CIS":[0,64,68,99,143,153],"Controls":[1,65,69,154],"is":[2,37,46,55,121,137,140],"a":[3,19,38,57],"set":[4],"of":[5,17,21,41,60,63,111],"20":[6],"controls":[7],"and":[8,49,66,89,113,144],"171":[9],"sub-controls":[10],"that":[11,26,122,134,142],"were":[12],"created":[13],"with":[14],"an":[15],"idea":[16],"having":[18],"list":[20],"something":[22,141],"to":[23,151,157],"implement":[24],"so":[25],"organizations":[27,76],"can":[28],"increase":[29],"their":[30],"security.":[31],"While":[32],"good":[33],"in":[34,47,116],"theory,":[35],"it":[36,51],"big":[39],"question":[40],"how":[42],"viable":[43,155],"this":[44,94,130],"approach":[45,112],"practice,":[48],"does":[50],"really":[52],"help.":[53],"There":[54],"only":[56],"minor":[58],"number":[59],"critical":[61],"views":[62],"since":[67],"are":[70,78,83,105],"marketed":[71],"by":[72,86],"two":[73],"very":[74,79],"influential":[75],"they":[77,104,149],"popular.":[80],"Yet,":[81],"there":[82],"alternatives":[84],"published":[85],"ISO,":[87],"NIST":[88],"even":[90],"PCI":[91],"consortium.":[92],"In":[93],"paper":[95],"we":[96],"critically":[97],"assess":[98],"Controls,":[100],"assumptions":[101],"on":[102],"which":[103],"based":[106],"as":[107,109],"well":[108],"validity":[110],"claims":[114],"made":[115],"its":[117],"favor.":[118],"The":[119],"conclusion":[120],"scientific":[123],"community":[124],"should":[125,146],"be":[126],"more":[127,135],"active":[128],"regarding":[129],"topic,":[131],"but":[132],"also":[133],"material":[136],"necessary.":[138],"This":[139],"SANS":[145],"support":[147],"if":[148],"want":[150],"make":[152],"alternative":[156],"other":[158],"approaches.":[159]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2026-02-11T14:41:00.668223","created_date":"2025-10-10T00:00:00"}
