{"id":"https://openalex.org/W4415992862","doi":"https://doi.org/10.3390/jcp5040097","title":"Identifying and Modeling Barriers to Compliance with the NIS2 Directive: A DEMATEL Approach","display_name":"Identifying and Modeling Barriers to Compliance with the NIS2 Directive: A DEMATEL Approach","publication_year":2025,"publication_date":"2025-11-07","ids":{"openalex":"https://openalex.org/W4415992862","doi":"https://doi.org/10.3390/jcp5040097"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040097","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040097","pdf_url":"https://www.mdpi.com/2624-800X/5/4/97/pdf?version=1762479402","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/97/pdf?version=1762479402","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120294132","display_name":"Konstantina Mentzelou","orcid":null},"institutions":[{"id":"https://openalex.org/I231025917","display_name":"Hellenic Open University","ror":"https://ror.org/02kq26x23","country_code":"GR","type":"education","lineage":["https://openalex.org/I231025917"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Konstantina Mentzelou","raw_affiliation_strings":["School of Social Sciences, Hellenic Open University, 26335 Patras, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Social Sciences, Hellenic Open University, 26335 Patras, Greece","institution_ids":["https://openalex.org/I231025917"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073619624","display_name":"Panos Chountalas","orcid":"https://orcid.org/0000-0003-3538-5791"},"institutions":[{"id":"https://openalex.org/I154757721","display_name":"University of Piraeus","ror":"https://ror.org/02qs84g94","country_code":"GR","type":"education","lineage":["https://openalex.org/I154757721"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Panos T. Chountalas","raw_affiliation_strings":["Department of Business Administration, University of Piraeus, 18534 Piraeus, Greece"],"raw_orcid":"https://orcid.org/0000-0003-3538-5791","affiliations":[{"raw_affiliation_string":"Department of Business Administration, University of Piraeus, 18534 Piraeus, Greece","institution_ids":["https://openalex.org/I154757721"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082731457","display_name":"Fotis Kitsios","orcid":"https://orcid.org/0000-0001-7269-5567"},"institutions":[{"id":"https://openalex.org/I192756129","display_name":"University of Macedonia","ror":"https://ror.org/05fg6gr82","country_code":"GR","type":"education","lineage":["https://openalex.org/I192756129"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Fotis C. Kitsios","raw_affiliation_strings":["Department of Applied Informatics, University of Macedonia, 54636 Thessaloniki, Greece"],"raw_orcid":"https://orcid.org/0000-0001-7269-5567","affiliations":[{"raw_affiliation_string":"Department of Applied Informatics, University of Macedonia, 54636 Thessaloniki, Greece","institution_ids":["https://openalex.org/I192756129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018123430","display_name":"Anastasios Magoutas","orcid":"https://orcid.org/0000-0002-5974-2127"},"institutions":[{"id":"https://openalex.org/I200777214","display_name":"National and Kapodistrian University of Athens","ror":"https://ror.org/04gnjpq42","country_code":"GR","type":"education","lineage":["https://openalex.org/I200777214"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Anastasios I. Magoutas","raw_affiliation_strings":["Department of Business Administration, National and Kapodistrian University of Athens, 10559 Athens, Greece"],"raw_orcid":"https://orcid.org/0000-0002-5974-2127","affiliations":[{"raw_affiliation_string":"Department of Business Administration, National and Kapodistrian University of Athens, 10559 Athens, Greece","institution_ids":["https://openalex.org/I200777214"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043923219","display_name":"Thomas K. Dasaklis","orcid":"https://orcid.org/0000-0003-1240-4822"},"institutions":[{"id":"https://openalex.org/I231025917","display_name":"Hellenic Open University","ror":"https://ror.org/02kq26x23","country_code":"GR","type":"education","lineage":["https://openalex.org/I231025917"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Thomas K. Dasaklis","raw_affiliation_strings":["School of Social Sciences, Hellenic Open University, 26335 Patras, Greece"],"raw_orcid":"https://orcid.org/0000-0003-1240-4822","affiliations":[{"raw_affiliation_string":"School of Social Sciences, Hellenic Open University, 26335 Patras, Greece","institution_ids":["https://openalex.org/I231025917"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5073619624"],"corresponding_institution_ids":["https://openalex.org/I154757721"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1114},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1114},"fwci":3.9505,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.94774606,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"5","issue":"4","first_page":"97","last_page":"97"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.4593999981880188,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.4593999981880188,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.21150000393390656,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.07450000196695328,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interdependence","display_name":"Interdependence","score":0.6140999794006348},{"id":"https://openalex.org/keywords/directive","display_name":"Directive","score":0.6098999977111816},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.5698999762535095},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.545799970626831},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5212000012397766},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.435699999332428},{"id":"https://openalex.org/keywords/psychological-intervention","display_name":"Psychological intervention","score":0.43369999527931213},{"id":"https://openalex.org/keywords/enabling","display_name":"Enabling","score":0.4244999885559082}],"concepts":[{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6726999878883362},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.6140999794006348},{"id":"https://openalex.org/C2779547435","wikidata":"https://www.wikidata.org/wiki/Q1121492","display_name":"Directive","level":2,"score":0.6098999977111816},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5892000198364258},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5698999762535095},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.5666000247001648},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.545799970626831},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5212000012397766},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.435699999332428},{"id":"https://openalex.org/C27415008","wikidata":"https://www.wikidata.org/wiki/Q7256382","display_name":"Psychological intervention","level":2,"score":0.43369999527931213},{"id":"https://openalex.org/C22607594","wikidata":"https://www.wikidata.org/wiki/Q5375150","display_name":"Enabling","level":2,"score":0.4244999885559082},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.4068000018596649},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.37700000405311584},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.37389999628067017},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3458999991416931},{"id":"https://openalex.org/C2778221768","wikidata":"https://www.wikidata.org/wiki/Q8964474","display_name":"Risk governance","level":3,"score":0.3411000072956085},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.3041999936103821},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C11671645","wikidata":"https://www.wikidata.org/wiki/Q5054567","display_name":"Causal model","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C144400606","wikidata":"https://www.wikidata.org/wiki/Q2412982","display_name":"Causal loop diagram","level":3,"score":0.25870001316070557},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.25699999928474426},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.2533999979496002},{"id":"https://openalex.org/C66204764","wikidata":"https://www.wikidata.org/wiki/Q219416","display_name":"Sustainability","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040097","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040097","pdf_url":"https://www.mdpi.com/2624-800X/5/4/97/pdf?version=1762479402","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:95fdfacadf614b429671b7b524bd8542","is_oa":true,"landing_page_url":"https://doaj.org/article/95fdfacadf614b429671b7b524bd8542","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 97 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040097","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040097","pdf_url":"https://www.mdpi.com/2624-800X/5/4/97/pdf?version=1762479402","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320331361","display_name":"University of Piraeus Research Centre","ror":null}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415992862.pdf"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W1995567704","https://openalex.org/W2071583104","https://openalex.org/W2133866142","https://openalex.org/W2794927838","https://openalex.org/W3012912908","https://openalex.org/W3036448166","https://openalex.org/W3047269693","https://openalex.org/W4205619814","https://openalex.org/W4213020917","https://openalex.org/W4229022947","https://openalex.org/W4300562448","https://openalex.org/W4318185007","https://openalex.org/W4376463582","https://openalex.org/W4382562283","https://openalex.org/W4385692288","https://openalex.org/W4385759416","https://openalex.org/W4386211288","https://openalex.org/W4386408787","https://openalex.org/W4387256216","https://openalex.org/W4388362003","https://openalex.org/W4389370216","https://openalex.org/W4389438560","https://openalex.org/W4391582066","https://openalex.org/W4391900557","https://openalex.org/W4392603211","https://openalex.org/W4399007258","https://openalex.org/W4399290885","https://openalex.org/W4399920744","https://openalex.org/W4400346507","https://openalex.org/W4400649812","https://openalex.org/W4401110439","https://openalex.org/W4401330718","https://openalex.org/W4401496424","https://openalex.org/W4401524765","https://openalex.org/W4403022611","https://openalex.org/W4403202985","https://openalex.org/W4403501116","https://openalex.org/W4403832596","https://openalex.org/W4404142235","https://openalex.org/W4406733200","https://openalex.org/W4409457536","https://openalex.org/W4410117297"],"related_works":[],"abstract_inverted_index":{"The":[0,80,100,168],"implementation":[1,211],"of":[2,9,37,58,62,104,132,162],"the":[3,7,13,59,107,130,152,160,163,183,193],"NIS2":[4,63,210],"Directive":[5],"expands":[6],"scope":[8],"cybersecurity":[10,218],"regulation":[11],"across":[12],"European":[14],"Union,":[15],"placing":[16],"new":[17],"demands":[18],"on":[19,66,217],"both":[20],"essential":[21],"and":[22,43,49,75,83,95,106,123,138,146,165,178,189,202,212],"important":[23],"entities.":[24],"Despite":[25],"its":[26],"importance,":[27],"organizations":[28],"face":[29],"multiple":[30],"barriers":[31,52,72],"that":[32,117,171],"undermine":[33],"compliance,":[34],"including":[35],"lack":[36,103],"awareness,":[38],"technical":[39],"complexity,":[40],"financial":[41,124],"constraints,":[42],"regulatory":[44],"uncertainty.":[45],"This":[46],"study":[47,199],"identifies":[48],"models":[50],"these":[51,133],"to":[53,91,96,214],"provide":[54],"a":[55,67],"clearer":[56],"view":[57],"systemic":[60],"challenges":[61],"implementation.":[64],"Building":[65],"structured":[68],"literature":[69],"review,":[70],"fourteen":[71],"were":[73],"defined":[74],"validated":[76],"through":[77],"expert":[78],"input.":[79],"Decision-Making":[81],"Trial":[82],"Evaluation":[84],"Laboratory":[85],"(DEMATEL)":[86],"method":[87],"was":[88],"then":[89],"applied":[90],"examine":[92],"their":[93],"interdependencies":[94],"map":[97],"causal":[98,115,134],"relationships.":[99],"analysis":[101],"highlights":[102],"awareness":[105],"evolving":[108],"threat":[109],"landscape":[110],"as":[111,127,151],"key":[112],"drivers":[113],"(i.e.,":[114,156],"factors)":[116],"reinforce":[118],"each":[119],"other.":[120],"Technical":[121],"complexity":[122],"constraints":[125],"act":[126],"mediators":[128],"transmitting":[129],"influence":[131],"factors":[135],"toward":[136],"operational":[137],"governance":[139,219],"failures.":[140],"Operational":[141],"disruptions,":[142],"high":[143],"reporting":[144],"costs,":[145],"inadequate":[147],"risk":[148,179],"assessment":[149],"emerge":[150],"most":[153],"dependent":[154],"outcomes":[155],"effect":[157],"factors),":[158],"absorbing":[159],"impact":[161],"driving":[164],"mediating":[166],"factors.":[167],"findings":[169],"suggest":[170],"interventions":[172],"targeted":[173],"at":[174],"awareness-building,":[175],"resource":[176],"allocation,":[177],"management":[180],"capacity":[181],"have":[182],"greatest":[184],"leverage":[185],"for":[186,209],"improving":[187],"compliance":[188],"resilience.":[190],"By":[191],"clarifying":[192],"cause-and-effect":[194],"dynamics":[195],"among":[196],"barriers,":[197],"this":[198],"supports":[200],"policymakers":[201],"managers":[203],"in":[204,220],"designing":[205],"more":[206],"effective":[207],"strategies":[208],"contributes":[213],"current":[215],"debates":[216],"critical":[221],"infrastructures.":[222]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-11-07T00:00:00"}