{"id":"https://openalex.org/W7160030687","doi":"https://doi.org/10.7250/csimq.2026-46.03","title":"Advancing a Speech Act-Based Model to Improve Future Quality of Information Security Policies Using Large Language Models","display_name":"Advancing a Speech Act-Based Model to Improve Future Quality of Information Security Policies Using Large Language Models","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7160030687","doi":"https://doi.org/10.7250/csimq.2026-46.03"},"language":"en","primary_location":{"id":"doi:10.7250/csimq.2026-46.03","is_oa":true,"landing_page_url":"https://doi.org/10.7250/csimq.2026-46.03","pdf_url":null,"source":{"id":"https://openalex.org/S4210218084","display_name":"Complex Systems Informatics and Modeling Quarterly","issn_l":"2255-9922","issn":["2255-9922"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314131","host_organization_name":"Riga Technical University","host_organization_lineage":["https://openalex.org/P4310314131"],"host_organization_lineage_names":["Riga Technical University"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Complex Systems Informatics and Modeling Quarterly","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.7250/csimq.2026-46.03","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102891889","display_name":"Fredrik Karlsson","orcid":"https://orcid.org/0000-0002-8611-2649"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Fredrik Karlsson","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-3265-7627","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135213476","display_name":"Shang Gao","orcid":"https://orcid.org/0000-0002-3722-6797"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shang Gao","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-3722-6797","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018388871","display_name":"John Krogstie","orcid":"https://orcid.org/0000-0003-4830-1876"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"John Krogstie","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-4830-1876","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5119600081","display_name":"Leila Aro-Sati","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Leila Aro-Sati","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0001-9207-3236","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5102891889"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82684209,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":"46","first_page":"45","last_page":"66"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8962000012397766,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8962000012397766,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.010099999606609344,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.003599999938160181,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/conceptual-model","display_name":"Conceptual model","score":0.5909000039100647},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.5633999705314636},{"id":"https://openalex.org/keywords/statement","display_name":"Statement (logic)","score":0.4260999858379364},{"id":"https://openalex.org/keywords/logic-model","display_name":"Logic model","score":0.4255000054836273},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.39399999380111694},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.39100000262260437},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3644999861717224},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.34040001034736633},{"id":"https://openalex.org/keywords/modeling-language","display_name":"Modeling language","score":0.33899998664855957}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7117999792098999},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.5909000039100647},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.5633999705314636},{"id":"https://openalex.org/C2777026412","wikidata":"https://www.wikidata.org/wiki/Q2684591","display_name":"Statement (logic)","level":2,"score":0.4260999858379364},{"id":"https://openalex.org/C2775940519","wikidata":"https://www.wikidata.org/wiki/Q17067742","display_name":"Logic model","level":2,"score":0.4255000054836273},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.39399999380111694},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.39100000262260437},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3644999861717224},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.35499998927116394},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.34040001034736633},{"id":"https://openalex.org/C179603123","wikidata":"https://www.wikidata.org/wiki/Q1941921","display_name":"Modeling language","level":3,"score":0.33899998664855957},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.33719998598098755},{"id":"https://openalex.org/C45983554","wikidata":"https://www.wikidata.org/wiki/Q3412851","display_name":"Information quality","level":3,"score":0.3253999948501587},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3244999945163727},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31130000948905945},{"id":"https://openalex.org/C202446494","wikidata":"https://www.wikidata.org/wiki/Q664166","display_name":"Class diagram","level":4,"score":0.30979999899864197},{"id":"https://openalex.org/C6377922","wikidata":"https://www.wikidata.org/wiki/Q302542","display_name":"Deontic logic","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C145644426","wikidata":"https://www.wikidata.org/wiki/Q169411","display_name":"Unified Modeling Language","level":3,"score":0.2957000136375427},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.2946000099182129},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C43091099","wikidata":"https://www.wikidata.org/wiki/Q1067788","display_name":"Through-the-lens metering","level":3,"score":0.2777999937534332},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.27390000224113464},{"id":"https://openalex.org/C177291462","wikidata":"https://www.wikidata.org/wiki/Q423038","display_name":"Active listening","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.2644999921321869},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.26440000534057617},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2630999982357025},{"id":"https://openalex.org/C24756922","wikidata":"https://www.wikidata.org/wiki/Q1757694","display_name":"Data quality","level":3,"score":0.2590000033378601},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.25380000472068787},{"id":"https://openalex.org/C140781008","wikidata":"https://www.wikidata.org/wiki/Q1221081","display_name":"Service quality","level":3,"score":0.2526000142097473}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.7250/csimq.2026-46.03","is_oa":true,"landing_page_url":"https://doi.org/10.7250/csimq.2026-46.03","pdf_url":null,"source":{"id":"https://openalex.org/S4210218084","display_name":"Complex Systems Informatics and Modeling Quarterly","issn_l":"2255-9922","issn":["2255-9922"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314131","host_organization_name":"Riga Technical University","host_organization_lineage":["https://openalex.org/P4310314131"],"host_organization_lineage_names":["Riga Technical University"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Complex Systems Informatics and Modeling Quarterly","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a05545424cba40f4bd19f13bd80db3c3","is_oa":true,"landing_page_url":"https://doaj.org/article/a05545424cba40f4bd19f13bd80db3c3","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Complex Systems Informatics and Modeling Quarterly, Iss 46 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.7250/csimq.2026-46.03","is_oa":true,"landing_page_url":"https://doi.org/10.7250/csimq.2026-46.03","pdf_url":null,"source":{"id":"https://openalex.org/S4210218084","display_name":"Complex Systems Informatics and Modeling Quarterly","issn_l":"2255-9922","issn":["2255-9922"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314131","host_organization_name":"Riga Technical University","host_organization_lineage":["https://openalex.org/P4310314131"],"host_organization_lineage_names":["Riga Technical University"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Complex Systems Informatics and Modeling Quarterly","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.48001348972320557,"id":"https://metadata.un.org/sdg/1","display_name":"No poverty"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W79229537","https://openalex.org/W153108589","https://openalex.org/W1534859880","https://openalex.org/W1536398137","https://openalex.org/W1603962791","https://openalex.org/W1893031858","https://openalex.org/W1923687271","https://openalex.org/W1966669815","https://openalex.org/W1983981789","https://openalex.org/W1998395566","https://openalex.org/W2000667443","https://openalex.org/W2040832659","https://openalex.org/W2043607013","https://openalex.org/W2049188895","https://openalex.org/W2059261709","https://openalex.org/W2071674092","https://openalex.org/W2075886324","https://openalex.org/W2097219834","https://openalex.org/W2117391331","https://openalex.org/W2167207154","https://openalex.org/W2400714225","https://openalex.org/W2464676481","https://openalex.org/W2498310952","https://openalex.org/W2518306363","https://openalex.org/W2542100051","https://openalex.org/W2563326334","https://openalex.org/W2738072326","https://openalex.org/W2762510437","https://openalex.org/W2918161214","https://openalex.org/W2942497499","https://openalex.org/W3089146004","https://openalex.org/W4231043689","https://openalex.org/W4234586526","https://openalex.org/W4235073904","https://openalex.org/W4256010527","https://openalex.org/W4312903631","https://openalex.org/W4319723630","https://openalex.org/W4327500636","https://openalex.org/W4362602364","https://openalex.org/W4392240262","https://openalex.org/W4392353733","https://openalex.org/W4394808619","https://openalex.org/W4400810785","https://openalex.org/W4404347281","https://openalex.org/W4405492959","https://openalex.org/W4406460193","https://openalex.org/W4406958687","https://openalex.org/W4410926079","https://openalex.org/W4414144803","https://openalex.org/W7083578919"],"related_works":[],"abstract_inverted_index":{"Employee":[0],"compliance":[1],"with":[2],"Information":[3],"Security":[4],"Policies":[5],"(ISPs)":[6],"depends":[7],"on":[8,36,106],"communicating":[9],"clear":[10],"and":[11,52,98,142],"comprehensible":[12],"content.":[13],"However,":[14],"existing":[15],"research":[16],"has":[17],"shown":[18],"that":[19],"many":[20],"ISPs":[21,33,76],"are":[22],"of":[23,66,75,88,92,157],"poor":[24],"communicative":[25,90],"quality.":[26],"Large":[27],"Language":[28],"Models":[29],"(LLMs)":[30],"could":[31],"enhance":[32],"if":[34],"fine-tuned":[35],"high-quality":[37],"data,":[38],"but":[39],"to":[40,70,85,101,125,132],"do":[41],"such":[42],"fine-tuning":[43],"requires":[44],"a":[45,59,72,82],"conceptual":[46,73,96],"model":[47,74,104],"for":[48,135],"classifying":[49],"the":[50,54,64,89,103,122,127,137,149],"data":[51],"evaluating":[53],"resulting":[55],"text.":[56],"Therefore,":[57],"as":[58,81,163],"step":[60],"in":[61],"this":[62,67],"direction,":[63],"aim":[65],"article":[68],"is":[69],"develop":[71,102],"using":[77],"Speech":[78],"Act":[79],"Theory":[80],"theoretical":[83],"lens":[84],"enable":[86],"assessments":[87],"quality":[91,162],"ISPs.":[93,116],"We":[94,117],"used":[95,118],"modeling":[97],"document":[99],"analysis":[100],"based":[105],"600":[107],"ISP":[108,160],"statements":[109],"from":[110,121],"ten":[111],"British":[112],"National":[113],"Health":[114],"Service":[115],"selected":[119],"parts":[120],"SEQUAL":[123],"framework":[124],"evaluate":[126],"model.":[128],"The":[129],"evaluation":[130],"pointed":[131],"potential":[133],"areas":[134],"improving":[136],"model\u2019s":[138],"semantic,":[139],"empirical,":[140],"physical,":[141],"deontic":[143],"qualities.":[144],"By":[145],"incorporating":[146],"these":[147],"improvements,":[148],"final":[150],"class":[151],"diagram":[152],"contains":[153],"21":[154],"classes,":[155],"six":[156],"which":[158],"address":[159],"statement":[161],"speech":[164],"acts.":[165]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-05-05T00:00:00"}