{"id":"https://openalex.org/W1995116869","doi":"https://doi.org/10.4018/irmj.2013100104","title":"Engineering Security Agreements Against External Insider Threat","display_name":"Engineering Security Agreements Against External Insider Threat","publication_year":2013,"publication_date":"2013-10-01","ids":{"openalex":"https://openalex.org/W1995116869","doi":"https://doi.org/10.4018/irmj.2013100104","mag":"1995116869"},"language":"en","primary_location":{"id":"doi:10.4018/irmj.2013100104","is_oa":true,"landing_page_url":"https://doi.org/10.4018/irmj.2013100104","pdf_url":"https://www.igi-global.com/ViewTitle.aspx?TitleId=99713&isxn=9781466634718","source":{"id":"https://openalex.org/S114639657","display_name":"Information Resources Management Journal","issn_l":"1040-1628","issn":["1040-1628","1533-7979"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Resources Management Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://www.igi-global.com/ViewTitle.aspx?TitleId=99713&isxn=9781466634718","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063050195","display_name":"Virginia N. L. Franqueira","orcid":"https://orcid.org/0000-0003-1332-9115"},"institutions":[{"id":"https://openalex.org/I185852735","display_name":"University of Lancashire","ror":"https://ror.org/010jbqd54","country_code":"GB","type":"education","lineage":["https://openalex.org/I185852735"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Virginia N. L. Franqueira","raw_affiliation_strings":["Department of Computing, University of Central Lancashire, Preston, UK","Department of Computing, University of Central Lancashire, Preston, UK#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing, University of Central Lancashire, Preston, UK","institution_ids":["https://openalex.org/I185852735"]},{"raw_affiliation_string":"Department of Computing, University of Central Lancashire, Preston, UK#TAB#","institution_ids":["https://openalex.org/I185852735"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015341413","display_name":"Andr\u00e9 van Cleeff","orcid":null},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Andr\u00e9 van Cleeff","raw_affiliation_strings":["Department of Computer Science, University of Twente, Enschede, The Netherlands","(Department of Computer Science, University of Twente, Enschede, The Netherlands)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Twente, Enschede, The Netherlands","institution_ids":["https://openalex.org/I94624287"]},{"raw_affiliation_string":"(Department of Computer Science, University of Twente, Enschede, The Netherlands)","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109045451","display_name":"Pascal van Eck","orcid":null},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Pascal van Eck","raw_affiliation_strings":["Department of Computer Science, University of Twente, Enschede, The Netherlands","(Department of Computer Science, University of Twente, Enschede, The Netherlands)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Twente, Enschede, The Netherlands","institution_ids":["https://openalex.org/I94624287"]},{"raw_affiliation_string":"(Department of Computer Science, University of Twente, Enschede, The Netherlands)","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000853046","display_name":"Roel Wieringa","orcid":"https://orcid.org/0000-0003-2121-9928"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Roel J. Wieringa","raw_affiliation_strings":["Department of Computer Science, University of Twente, Enschede, The Netherlands","(Department of Computer Science, University of Twente, Enschede, The Netherlands)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Twente, Enschede, The Netherlands","institution_ids":["https://openalex.org/I94624287"]},{"raw_affiliation_string":"(Department of Computer Science, University of Twente, Enschede, The Netherlands)","institution_ids":["https://openalex.org/I94624287"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.15806898,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"26","issue":"4","first_page":"66","last_page":"91"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11912","display_name":"Outsourcing and Supply Chain Management","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.6816063523292542},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6607546806335449},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.6276715397834778},{"id":"https://openalex.org/keywords/negotiation","display_name":"Negotiation","score":0.5778980851173401},{"id":"https://openalex.org/keywords/outsourcing","display_name":"Outsourcing","score":0.5527881979942322},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5526533722877502},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.49076494574546814},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.41807079315185547},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4149138927459717},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.3632497489452362},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.34465301036834717},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.23157250881195068},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.19678038358688354}],"concepts":[{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.6816063523292542},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6607546806335449},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.6276715397834778},{"id":"https://openalex.org/C199776023","wikidata":"https://www.wikidata.org/wiki/Q202875","display_name":"Negotiation","level":2,"score":0.5778980851173401},{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.5527881979942322},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5526533722877502},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.49076494574546814},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.41807079315185547},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4149138927459717},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3632497489452362},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.34465301036834717},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.23157250881195068},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.19678038358688354},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.4018/irmj.2013100104","is_oa":true,"landing_page_url":"https://doi.org/10.4018/irmj.2013100104","pdf_url":"https://www.igi-global.com/ViewTitle.aspx?TitleId=99713&isxn=9781466634718","source":{"id":"https://openalex.org/S114639657","display_name":"Information Resources Management Journal","issn_l":"1040-1628","issn":["1040-1628","1533-7979"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Resources Management Journal","raw_type":"journal-article"},{"id":"pmh:oai:ris.utwente.nl:openaire_cris_publications/33cb4f42-a551-4638-8fe7-b541857c25c0","is_oa":false,"landing_page_url":"https://research.utwente.nl/en/publications/33cb4f42-a551-4638-8fe7-b541857c25c0","pdf_url":null,"source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Nunes Leal Franqueira, V, van Cleeff, A, van Eck, P & Wieringa, R J 2013, 'Engineering security agreements against external insider threat', Information resources management journal, vol. 26, no. 4, pp. 66-91. https://doi.org/10.4018/irmj.2013100104","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:kar.kent.ac.uk:77191","is_oa":false,"landing_page_url":"https://doi.org/10.4018/irmj.2013100104>)","pdf_url":null,"source":{"id":"https://openalex.org/S4377196264","display_name":"Kent Academic Repository (University of Kent)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I20581793","host_organization_name":"University of Kent","host_organization_lineage":["https://openalex.org/I20581793"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:RePEc:igg:rmj000:v:26:y:2013:i:4:p:66-91","is_oa":false,"landing_page_url":"https://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/irmj.2013100104","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:clok.uclan.ac.uk:9750","is_oa":false,"landing_page_url":"http://www.igi-global.com/article/engineering-security-agreements-against-external-insider-threat/99713","pdf_url":null,"source":{"id":"https://openalex.org/S4306402361","display_name":"CLOK (University of Central Lancashire)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I185852735","host_organization_name":"University of Lancashire","host_organization_lineage":["https://openalex.org/I185852735"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"doi:10.4018/irmj.2013100104","is_oa":true,"landing_page_url":"https://doi.org/10.4018/irmj.2013100104","pdf_url":"https://www.igi-global.com/ViewTitle.aspx?TitleId=99713&isxn=9781466634718","source":{"id":"https://openalex.org/S114639657","display_name":"Information Resources Management Journal","issn_l":"1040-1628","issn":["1040-1628","1533-7979"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Resources Management Journal","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.49000000953674316,"display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1995116869.pdf","grobid_xml":"https://content.openalex.org/works/W1995116869.grobid-xml"},"referenced_works_count":71,"referenced_works":["https://openalex.org/W11296276","https://openalex.org/W33933511","https://openalex.org/W68204213","https://openalex.org/W133500409","https://openalex.org/W136928878","https://openalex.org/W240281376","https://openalex.org/W301901687","https://openalex.org/W405261606","https://openalex.org/W416981147","https://openalex.org/W657731981","https://openalex.org/W1483421916","https://openalex.org/W1545359924","https://openalex.org/W1559155956","https://openalex.org/W1573538539","https://openalex.org/W1596317180","https://openalex.org/W1599604458","https://openalex.org/W1600126100","https://openalex.org/W1602002062","https://openalex.org/W1947367606","https://openalex.org/W1969312197","https://openalex.org/W1979788971","https://openalex.org/W1979822547","https://openalex.org/W1987858143","https://openalex.org/W1988738133","https://openalex.org/W1992882065","https://openalex.org/W1995157711","https://openalex.org/W2018903369","https://openalex.org/W2030667660","https://openalex.org/W2030782895","https://openalex.org/W2031762774","https://openalex.org/W2052324257","https://openalex.org/W2054254494","https://openalex.org/W2061415013","https://openalex.org/W2069724824","https://openalex.org/W2072248964","https://openalex.org/W2072396673","https://openalex.org/W2072717850","https://openalex.org/W2082812082","https://openalex.org/W2084162600","https://openalex.org/W2084491912","https://openalex.org/W2086110977","https://openalex.org/W2094697343","https://openalex.org/W2097749188","https://openalex.org/W2101173463","https://openalex.org/W2103317919","https://openalex.org/W2109469951","https://openalex.org/W2110329234","https://openalex.org/W2113237548","https://openalex.org/W2120984578","https://openalex.org/W2130790002","https://openalex.org/W2132782658","https://openalex.org/W2140459499","https://openalex.org/W2145618871","https://openalex.org/W2145877517","https://openalex.org/W2147202610","https://openalex.org/W2153561935","https://openalex.org/W2156218005","https://openalex.org/W2164597722","https://openalex.org/W2340738312","https://openalex.org/W2518086933","https://openalex.org/W2611824423","https://openalex.org/W2619779390","https://openalex.org/W3124961742","https://openalex.org/W3149395617","https://openalex.org/W3214373139","https://openalex.org/W4237513903","https://openalex.org/W4238601054","https://openalex.org/W4246622376","https://openalex.org/W4285719527","https://openalex.org/W6681461220","https://openalex.org/W6686593911"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"Companies":[0],"are":[1,50],"increasingly":[2],"engaging":[3],"in":[4,75,92],"complex":[5],"inter-organisational":[6],"networks":[7],"of":[8,41,56,83,89,125,136],"business":[9,30],"and":[10,14,32,111,123,133],"trading":[11],"partners,":[12],"service":[13],"managed":[15],"security":[16,65,90,126],"providers":[17],"to":[18,27,33,38,62,86,107,112,119,129,147],"run":[19],"their":[20],"operations.":[21],"Therefore,":[22],"it":[23],"is":[24],"now":[25],"common":[26],"outsource":[28],"critical":[29],"processes":[31],"completely":[34,52],"move":[35],"IT":[36],"resources":[37],"the":[39,64,72,81,109],"custody":[40],"third":[42],"parties.":[43],"Such":[44],"extended":[45],"enterprises":[46],"create":[47],"individuals":[48],"who":[49],"neither":[51],"insiders":[53],"nor":[54],"outsiders":[55],"a":[57,99],"company,":[58],"requiring":[59],"new":[60],"solutions":[61],"mitigate":[63],"threat":[66,85],"they":[67],"cause.":[68],"This":[69],"paper":[70,141],"improves":[71],"method":[73],"introduced":[74],"Franqueira":[76],"et":[77],"al.":[78],"(2012)":[79],"for":[80],"analysis":[82,110],"such":[84],"support":[87],"negotiation":[88],"agreements":[91],"B2B":[93],"contracts.":[94],"The":[95,140],"method,":[96],"illustrated":[97],"via":[98],"manufacturer-retailer":[100],"example,":[101],"has":[102],"three":[103],"main":[104],"ingredients:":[105],"modelling":[106],"scope":[108],"identify":[113],"external":[114,137],"insider":[115,138],"roles,":[116],"access":[117],"matrix":[118],"obtain":[120],"need-to-know":[121],"requirements,":[122],"reverse-engineering":[124],"best":[127],"practices":[128],"analyse":[130],"both":[131],"pose-threat":[132],"enforce-security":[134],"perspectives":[135],"roles.":[139],"also":[142],"proposes":[143],"future":[144],"research":[145],"directions":[146],"overcome":[148],"challenges":[149],"identified.":[150]},"counts_by_year":[{"year":2017,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2016-06-24T00:00:00"}