Utilize este identificador para referenciar este registo:
http://hdl.handle.net/10071/31639
Registo completo
Campo DC | Valor | Idioma |
---|---|---|
dc.contributor.author | Fernandes, A. | - |
dc.contributor.author | Cruz, J. | - |
dc.contributor.author | Silva, M. M. da. | - |
dc.contributor.author | Pereira, R. | - |
dc.date.accessioned | 2024-05-02T09:53:12Z | - |
dc.date.available | 2024-05-02T09:53:12Z | - |
dc.date.issued | 2024 | - |
dc.identifier.citation | Fernandes, A., Cruz, J., Silva, M. M. da., & Pereira, R. (2024). Mapping and integrating security and risk standards: A systematic literature review. Journal of Universal Computer Science, 30(4), 433-448. https://doi.org/10.3897/jucs.111677 | - |
dc.identifier.issn | 0948-695X | - |
dc.identifier.uri | http://hdl.handle.net/10071/31639 | - |
dc.description.abstract | Organizations are under increasing pressure to comply with various rules, standards, and policies in today’s regulatory environment. Compliance controls are put in place to avoid legal or regulatory violations, which could lead to severe penalties, loss of reputation, and financial damages. However, these controls may have similar scopes and objectives, resulting in duplicated work and unnecessary costs for the organizations. To address this issue, researchers carry out the mapping and integration of these standards to avoid duplication, streamline compliance efforts, and identify best practices. Our work aims to improve the State-of-the-Art by exploring the main benefits and problems resulting from these processes, as well as identifying methods or artifacts that can be reused in the future. We focus on the fields of Risk, Security, and Business Continuity, as these are critical areas where compliance is crucial for organizations. Through our research, we have found that current methods of generating mapping artifacts are not only cumbersome to execute but also ineffective, as they output a single artifact without the reasoning behind it. | eng |
dc.language.iso | eng | - |
dc.publisher | Graz University of Technology | - |
dc.rights | openAccess | - |
dc.subject | Mapping | eng |
dc.subject | Integration | eng |
dc.subject | Harmonization | eng |
dc.subject | Systematic literature review | eng |
dc.subject | Standards | eng |
dc.subject | Risk | eng |
dc.subject | Security | eng |
dc.subject | Business continuity | eng |
dc.title | Mapping and integrating security and risk standards: A systematic literature review | eng |
dc.type | article | - |
dc.pagination | 433 - 448 | - |
dc.peerreviewed | yes | - |
dc.volume | 30 | - |
dc.number | 4 | - |
dc.date.updated | 2024-05-02T10:50:34Z | - |
dc.description.version | info:eu-repo/semantics/publishedVersion | - |
dc.identifier.doi | 10.3897/jucs.111677 | - |
iscte.identifier.ciencia | https://ciencia.iscte-iul.pt/id/ci-pub-103958 | - |
iscte.journal | Journal of Universal Computer Science | - |
Aparece nas coleções: | IT-RI - Artigos em revistas científicas internacionais com arbitragem científica |
Ficheiros deste registo:
Ficheiro | Tamanho | Formato | |
---|---|---|---|
article_103958.pdf | 196,84 kB | Adobe PDF | Ver/Abrir |
Todos os registos no repositório estão protegidos por leis de copyright, com todos os direitos reservados.