{"id":"https://openalex.org/W4416213039","doi":"https://doi.org/10.3390/jcp5040099","title":"Zero Trust in Practice: A Mixed-Methods Study Under the TOE Framework","display_name":"Zero Trust in Practice: A Mixed-Methods Study Under the TOE Framework","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W4416213039","doi":"https://doi.org/10.3390/jcp5040099"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040099","pdf_url":"https://www.mdpi.com/2624-800X/5/4/99/pdf?version=1763126162","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/99/pdf?version=1763126162","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066727267","display_name":"Ang\u00e9lica Pigola","orcid":"https://orcid.org/0000-0002-7222-5589"},"institutions":[{"id":"https://openalex.org/I181391015","display_name":"Universidade Estadual de Campinas (UNICAMP)","ror":"https://ror.org/04wffgt70","country_code":"BR","type":"education","lineage":["https://openalex.org/I181391015"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Ang\u00e9lica Pigola","raw_affiliation_strings":["School of Applied Sciences, State University of Campinas, 1300 Pedro Zaccaria St., Limeira 13484-350, S\u00e3o Paulo, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-7222-5589","affiliations":[{"raw_affiliation_string":"School of Applied Sciences, State University of Campinas, 1300 Pedro Zaccaria St., Limeira 13484-350, S\u00e3o Paulo, Brazil","institution_ids":["https://openalex.org/I181391015"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015659355","display_name":"Fernando de Souza Meirelles","orcid":"https://orcid.org/0000-0002-0631-9800"},"institutions":[{"id":"https://openalex.org/I44202434","display_name":"Funda\u00e7\u00e3o Getulio Vargas","ror":"https://ror.org/01evzkn27","country_code":"BR","type":"education","lineage":["https://openalex.org/I44202434"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Fernando de Souza Meirelles","raw_affiliation_strings":["Doctoral Program in Information Technology Management, Escola de Administra\u00e7\u00e3o de Empresas de S\u00e3o Paulo Funda\u00e7\u00e3o Getulio Vargas, FGV_EAESP, 9 de Julho Avenue, 2029, S\u00e3o Paulo 01313-902, S\u00e3o Paulo, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-0631-9800","affiliations":[{"raw_affiliation_string":"Doctoral Program in Information Technology Management, Escola de Administra\u00e7\u00e3o de Empresas de S\u00e3o Paulo Funda\u00e7\u00e3o Getulio Vargas, FGV_EAESP, 9 de Julho Avenue, 2029, S\u00e3o Paulo 01313-902, S\u00e3o Paulo, Brazil","institution_ids":["https://openalex.org/I44202434"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5066727267"],"corresponding_institution_ids":["https://openalex.org/I181391015"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1082},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1082},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.4451221,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":"4","first_page":"99","last_page":"99"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7576000094413757,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7576000094413757,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.0471000000834465,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.03500000014901161,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6437000036239624},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.5174000263214111},{"id":"https://openalex.org/keywords/structural-equation-modeling","display_name":"Structural equation modeling","score":0.48919999599456787},{"id":"https://openalex.org/keywords/organizational-culture","display_name":"Organizational culture","score":0.4575999975204468},{"id":"https://openalex.org/keywords/maturity","display_name":"Maturity (psychological)","score":0.4334999918937683},{"id":"https://openalex.org/keywords/strategy-implementation","display_name":"Strategy implementation","score":0.41839998960494995},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.39730000495910645},{"id":"https://openalex.org/keywords/capability-maturity-model","display_name":"Capability Maturity Model","score":0.3971000015735626},{"id":"https://openalex.org/keywords/phase","display_name":"Phase (matter)","score":0.384799987077713},{"id":"https://openalex.org/keywords/senior-management","display_name":"Senior management","score":0.38350000977516174}],"concepts":[{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6437000036239624},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5174000263214111},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5120000243186951},{"id":"https://openalex.org/C71104824","wikidata":"https://www.wikidata.org/wiki/Q1476639","display_name":"Structural equation modeling","level":2,"score":0.48919999599456787},{"id":"https://openalex.org/C67674302","wikidata":"https://www.wikidata.org/wiki/Q730573","display_name":"Organizational culture","level":2,"score":0.4575999975204468},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4564000070095062},{"id":"https://openalex.org/C101433766","wikidata":"https://www.wikidata.org/wiki/Q3543263","display_name":"Maturity (psychological)","level":2,"score":0.4334999918937683},{"id":"https://openalex.org/C2780637533","wikidata":"https://www.wikidata.org/wiki/Q25047722","display_name":"Strategy implementation","level":2,"score":0.41839998960494995},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.41670000553131104},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.4027000069618225},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.39730000495910645},{"id":"https://openalex.org/C85890633","wikidata":"https://www.wikidata.org/wiki/Q929673","display_name":"Capability Maturity Model","level":3,"score":0.3971000015735626},{"id":"https://openalex.org/C44280652","wikidata":"https://www.wikidata.org/wiki/Q104837","display_name":"Phase (matter)","level":2,"score":0.384799987077713},{"id":"https://openalex.org/C2780257311","wikidata":"https://www.wikidata.org/wiki/Q2563977","display_name":"Senior management","level":2,"score":0.38350000977516174},{"id":"https://openalex.org/C129011618","wikidata":"https://www.wikidata.org/wiki/Q7621821","display_name":"Strategic alignment","level":4,"score":0.38100001215934753},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.37770000100135803},{"id":"https://openalex.org/C87156501","wikidata":"https://www.wikidata.org/wiki/Q7268708","display_name":"Qualitative property","level":2,"score":0.376800000667572},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.33230000734329224},{"id":"https://openalex.org/C198477413","wikidata":"https://www.wikidata.org/wiki/Q7647069","display_name":"Survey data collection","level":2,"score":0.31769999861717224},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.30869999527931213},{"id":"https://openalex.org/C195969713","wikidata":"https://www.wikidata.org/wiki/Q1481177","display_name":"Management styles","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.29019999504089355},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C86275758","wikidata":"https://www.wikidata.org/wiki/Q376657","display_name":"Strategic management","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C182566","wikidata":"https://www.wikidata.org/wiki/Q759524","display_name":"Organizational structure","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.28519999980926514},{"id":"https://openalex.org/C160682292","wikidata":"https://www.wikidata.org/wiki/Q999897","display_name":"Middle management","level":2,"score":0.2808000147342682},{"id":"https://openalex.org/C106033793","wikidata":"https://www.wikidata.org/wiki/Q457332","display_name":"Ambidexterity","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.2676999866962433},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.26089999079704285},{"id":"https://openalex.org/C38834483","wikidata":"https://www.wikidata.org/wiki/Q17000223","display_name":"Traction (geology)","level":2,"score":0.2533999979496002},{"id":"https://openalex.org/C94617000","wikidata":"https://www.wikidata.org/wiki/Q639854","display_name":"Qualitative comparative analysis","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040099","pdf_url":"https://www.mdpi.com/2624-800X/5/4/99/pdf?version=1763126162","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:cbf7308f0393485c827f0e96aae9040f","is_oa":true,"landing_page_url":"https://doaj.org/article/cbf7308f0393485c827f0e96aae9040f","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 99 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040099","pdf_url":"https://www.mdpi.com/2624-800X/5/4/99/pdf?version=1763126162","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321091","display_name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","ror":"https://ror.org/00x0ma614"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416213039.pdf","grobid_xml":"https://content.openalex.org/works/W4416213039.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0,184],"study":[1],"examines":[2],"the":[3,8,15,71,84,101,138,155,188,196],"adoption":[4,214],"and":[5,51,93,100,119,145,162,180,209,215],"implementation":[6,103,130,182,194],"of":[7,54,104,140,212],"Zero":[9,224],"Trust":[10,225],"(ZT)":[11],"cybersecurity":[12,49,202],"paradigm":[13],"using":[14],"Technology\u2013Organization\u2013Environment":[16],"(TOE)":[17],"framework.":[18],"While":[19],"ZT":[20,168,193,213],"is":[21,186],"gaining":[22],"traction":[23],"as":[24,108],"a":[25,40,52],"security":[26,91],"model,":[27],"many":[28],"organizations":[29],"struggle":[30],"to":[31,66,82,127,165,175,190,201,222],"align":[32],"strategic":[33,98],"intent":[34],"with":[35,48],"effective":[36,129],"implementation.":[37],"We":[38],"adopted":[39],"sequential":[41],"mixed-methods":[42],"design":[43],"combining":[44],"27":[45],"semi-structured":[46],"interviews":[47],"professionals":[50],"survey":[53],"267":[55],"experts":[56],"across":[57],"industries.":[58],"The":[59,152],"qualitative":[60],"phase":[61,73],"used":[62],"an":[63,109],"inductive":[64],"approach":[65],"identify":[67],"organizational":[68,115],"challenges,":[69],"whereas":[70],"quantitative":[72],"employed":[74],"Partial":[75],"Least":[76],"Squares":[77],"Structural":[78],"Equation":[79],"Modeling":[80],"(PLS-SEM)":[81],"test":[83],"hypothesized":[85],"relationships.":[86],"Results":[87],"show":[88],"that":[89],"information":[90],"culture":[92],"investment":[94],"significantly":[95],"influence":[96],"both":[97],"alignment":[99],"technical":[102],"ZT.":[105],"Implementation":[106],"acted":[107],"intermediary":[110],"mechanism":[111],"through":[112,195],"which":[113],"these":[114,173],"factors":[116],"affected":[117],"governance":[118],"compliance":[120],"outcomes.":[121,151],"Strategic":[122],"commitment":[123],"alone":[124],"was":[125],"insufficient":[126],"drive":[128],"without":[131],"strong":[132],"cultural":[133,158],"support.":[134],"Qualitative":[135],"insights":[136,174],"underscored":[137],"importance":[139],"leadership":[141],"engagement,":[142],"cross-functional":[143],"collaboration,":[144],"legacy":[146],"infrastructure":[147],"readiness":[148],"in":[149],"shaping":[150],"findings":[153],"emphasize":[154],"need":[156],"for":[157,219],"alignment,":[159],"targeted":[160],"investments,":[161],"process":[163],"maturity":[164],"ensure":[166],"successful":[167],"adoption.":[169],"Organizations":[170],"can":[171],"leverage":[172],"prioritize":[176],"resources,":[177],"strengthen":[178],"governance,":[179],"reduce":[181],"friction.":[183],"research":[185],"among":[187],"first":[189],"empirically":[191],"investigate":[192],"TOE":[197],"lens.":[198],"It":[199],"contributes":[200],"management":[203],"literature":[204],"by":[205],"integrating":[206],"strategic,":[207],"cultural,":[208],"operational":[210],"dimensions":[211],"offers":[216],"practical":[217],"guidance":[218],"decision-makers":[220],"seeking":[221],"institutionalize":[223],"principles.":[226]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-11-14T00:00:00"}