{"id":"https://openalex.org/W3131632839","doi":"https://doi.org/10.5220/0010332902660274","title":"Cybersecurity for SMEs: Introducing the Human Element into Socio-technical Cybersecurity Risk Assessment","display_name":"Cybersecurity for SMEs: Introducing the Human Element into Socio-technical Cybersecurity Risk Assessment","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3131632839","doi":"https://doi.org/10.5220/0010332902660274","mag":"3131632839"},"language":"en","primary_location":{"id":"doi:10.5220/0010332902660274","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0010332902660274","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.5220/0010332902660274","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047153258","display_name":"Costas Boletsis","orcid":"https://orcid.org/0000-0003-2741-8127"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]},{"id":"https://openalex.org/I4387930215","display_name":"SINTEF Digital","ror":"https://ror.org/028m52w57","country_code":null,"type":"facility","lineage":["https://openalex.org/I173888879","https://openalex.org/I4387930215"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Costas Boletsis","raw_affiliation_strings":["SINTEF Digital, Oslo, Norway, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SINTEF Digital, Oslo, Norway, --- Select a Country ---","institution_ids":["https://openalex.org/I173888879","https://openalex.org/I4387930215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037781335","display_name":"Ragnhild Halvorsrud","orcid":"https://orcid.org/0000-0002-3774-4287"},"institutions":[{"id":"https://openalex.org/I173888879","display_name":"SINTEF","ror":"https://ror.org/01f677e56","country_code":"NO","type":"facility","lineage":["https://openalex.org/I173888879"]},{"id":"https://openalex.org/I4387930215","display_name":"SINTEF Digital","ror":"https://ror.org/028m52w57","country_code":null,"type":"facility","lineage":["https://openalex.org/I173888879","https://openalex.org/I4387930215"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Ragnhild Halvorsrud","raw_affiliation_strings":["SINTEF Digital, Oslo, Norway, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SINTEF Digital, Oslo, Norway, --- Select a Country ---","institution_ids":["https://openalex.org/I173888879","https://openalex.org/I4387930215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041055715","display_name":"Brian Pickering","orcid":"https://orcid.org/0000-0002-6815-2938"},"institutions":[{"id":"https://openalex.org/I43439940","display_name":"University of Southampton","ror":"https://ror.org/01ryk1543","country_code":"GB","type":"education","lineage":["https://openalex.org/I43439940"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"J. Pickering","raw_affiliation_strings":["IT Innovation Centre, University of Southampton, Southampton, U.K., --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IT Innovation Centre, University of Southampton, Southampton, U.K., --- Select a Country ---","institution_ids":["https://openalex.org/I43439940"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103221858","display_name":"Stephen Phillips","orcid":"https://orcid.org/0000-0002-7901-0839"},"institutions":[{"id":"https://openalex.org/I43439940","display_name":"University of Southampton","ror":"https://ror.org/01ryk1543","country_code":"GB","type":"education","lineage":["https://openalex.org/I43439940"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Stephen Phillips","raw_affiliation_strings":["IT Innovation Centre, University of Southampton, Southampton, U.K., --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IT Innovation Centre, University of Southampton, Southampton, U.K., --- Select a Country ---","institution_ids":["https://openalex.org/I43439940"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077694971","display_name":"Mike Surridge","orcid":"https://orcid.org/0000-0003-1485-7024"},"institutions":[{"id":"https://openalex.org/I43439940","display_name":"University of Southampton","ror":"https://ror.org/01ryk1543","country_code":"GB","type":"education","lineage":["https://openalex.org/I43439940"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mike Surridge","raw_affiliation_strings":["IT Innovation Centre, University of Southampton, Southampton, U.K., --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IT Innovation Centre, University of Southampton, Southampton, U.K., --- Select a Country ---","institution_ids":["https://openalex.org/I43439940"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":10.6152,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.98309714,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"266","last_page":"274"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7134212851524353},{"id":"https://openalex.org/keywords/element","display_name":"Element (criminal law)","score":0.6375582814216614},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5453616380691528},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.4392744302749634}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7134212851524353},{"id":"https://openalex.org/C200288055","wikidata":"https://www.wikidata.org/wiki/Q2621792","display_name":"Element (criminal law)","level":2,"score":0.6375582814216614},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5453616380691528},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.4392744302749634},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5220/0010332902660274","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0010332902660274","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.soton.ac.uk:485488","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306401019","display_name":"ePrints Soton (University of Southampton)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I43439940","host_organization_name":"University of Southampton","host_organization_lineage":["https://openalex.org/I43439940"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"}],"best_oa_location":{"id":"doi:10.5220/0010332902660274","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0010332902660274","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4563915914","display_name":"Democratizing a Cyber Security Toolkit for SMEs and MEs","funder_award_id":"883188","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W56793145","https://openalex.org/W153849647","https://openalex.org/W1990513740","https://openalex.org/W1997349812","https://openalex.org/W2023956388","https://openalex.org/W2042623444","https://openalex.org/W2056558428","https://openalex.org/W2080453063","https://openalex.org/W2091939813","https://openalex.org/W2102635611","https://openalex.org/W2108982337","https://openalex.org/W2135795051","https://openalex.org/W2146144825","https://openalex.org/W2156799558","https://openalex.org/W2164018875","https://openalex.org/W2512447981","https://openalex.org/W2539297736","https://openalex.org/W2546665280","https://openalex.org/W2557098197","https://openalex.org/W2560743042","https://openalex.org/W2562138109","https://openalex.org/W2806749285","https://openalex.org/W2958638923","https://openalex.org/W2979644663","https://openalex.org/W2980956924","https://openalex.org/W2993383518","https://openalex.org/W3022249433","https://openalex.org/W3037693502","https://openalex.org/W3041010581","https://openalex.org/W3041903505","https://openalex.org/W3046867527","https://openalex.org/W4230037425","https://openalex.org/W4232685510","https://openalex.org/W4234078722","https://openalex.org/W4298167969"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2478288626","https://openalex.org/W4391913857","https://openalex.org/W2350741829","https://openalex.org/W2530322880"],"abstract_inverted_index":{"Small":[0],"and":[1,11,38,43,80,90,113,145,163,169],"medium-sized":[2],"enterprises":[3],"(SMEs)":[4],"rarely":[5],"conduct":[6],"a":[7,30,47,66,108,142,154],"thorough":[8],"cyber-risk":[9,23],"assessment":[10],"they":[12],"may":[13],"face":[14],"various":[15],"internal":[16],"issues":[17],"when":[18],"attempting":[19],"to":[20,34,75,82,157,166],"set":[21],"up":[22],"strategies.":[24],"In":[25],"this":[26],"work,":[27],"we":[28,97,149],"apply":[29],"user":[31,62,121],"journey":[32],"approach":[33],"model":[35],"human":[36],"behaviour":[37],"visually":[39],"map":[40],"SMEs\u2019":[41],"practices":[42],"threats,":[44],"along":[45],"with":[46],"visualisation":[48,114],"of":[49,68,115,120,161],"the":[50,57,61,137],"socio-technical":[51,133],"actor":[52],"network,":[53],"targeted":[54],"specifically":[55],"at":[56],"risks":[58],"highlighted":[59],"in":[60,118,173],"journey.":[63],"By":[64,135],"using":[65],"combination":[67],"cybersecurity-related":[69],"visualisations,":[70],"our":[71],"goals":[72],"are:":[73],"i)":[74],"raise":[76,167],"awareness":[77,168],"about":[78],"cybersecurity,":[79],"ii)":[81],"improve":[83],"communication":[84],"among":[85],"IT":[86],"personnel,":[87],"security":[88],"experts,":[89],"non-technical":[91],"personnel.":[92],"To":[93],"achieve":[94],"these":[95],"goals,":[96],"combine":[98],"two":[99],"modelling":[100,112],"languages:":[101],"Customer":[102],"Journey":[103],"Modelling":[104],"Language":[105],"(CJML)":[106],"is":[107,127,153],"visual":[109],"language":[110],"for":[111,132],"work":[116],"processes":[117],"terms":[119],"journeys.":[122],"System":[123],"Security":[124],"Modeller":[125],"(SSM)":[126],"an":[128],"asset-based":[129],"risk-analysis":[130],"tool":[131],"systems.":[134],"demonstrating":[136],"languages\u2019":[138],"supplementary":[139],"nature":[140],"through":[141],"threat":[143],"scenario":[144],"considering":[146],"related":[147],"theories,":[148],"believe":[150],"that":[151],"there":[152],"sound":[155],"basis":[156],"warrant":[158],"further":[159],"validation":[160],"CJML":[162],"SSM":[164],"together":[165],"handle":[170],"cyber":[171],"threats":[172],"SMEs.":[174]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}