{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T01:21:17Z","timestamp":1777512077095,"version":"3.51.4"},"publisher-location":"Cham","reference-count":44,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030799755","type":"print"},{"value":"9783030799762","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-79976-2_9","type":"book-chapter","created":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T18:06:14Z","timestamp":1625162774000},"page":"154-169","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Benefits and Challenges in Information Security Certification \u2013 A Systematic Literature Review"],"prefix":"10.1007","author":[{"given":"Mike","family":"Hulshof","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maya","family":"Daneva","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,7,2]]},"reference":[{"key":"9_CR1","first-page":"2012","volume":"1\u201310","author":"T Ros\u00e1rio","year":"2012","unstructured":"Ros\u00e1rio, T., et al.: Formalization of the IT audit management process. EDOCW 1\u201310, 2012 (2012)","journal-title":"EDOCW"},{"issue":"1","key":"9_CR2","first-page":"1","volume":"34","author":"M Majdalawieh","year":"2017","unstructured":"Majdalawieh, M., et al.: Paradigm shift in information systems auditing. Eletronic Libr. 34(1), 1\u20135 (2017)","journal-title":"Eletronic Libr."},{"key":"9_CR3","unstructured":"Felley, G., Dornberger, R.: How to efficiently conduct an IT audit - In the perspective of research, consulting and teaching. In: IMSCI 2016 - 10th International Multi-Conference on Society, Cybernetics and Informatics, Proceedings, pp. 29\u201333 (2016)"},{"issue":"3","key":"9_CR4","first-page":"514","volume":"79","author":"S Ali","year":"2015","unstructured":"Ali, S., et al.: Application integration and audit control in organisational merger: case of Oman. J. Theor. Appl. Inf. Technol. 79(3), 514\u2013527 (2015)","journal-title":"J. Theor. Appl. Inf. Technol."},{"issue":"1\u20136","key":"9_CR5","first-page":"2018","volume":"1","author":"BR Aditya","year":"2018","unstructured":"Aditya, B.R., et al.: Toward Modern IT audit- current issues and literature review. ICST 1(1\u20136), 2018 (2018)","journal-title":"ICST"},{"key":"9_CR6","doi-asserted-by":"crossref","unstructured":"Aditya, B.R., et al.: The role of IT audit in the era of digital transformation. IOP Conf. Ser. Mater. Sci. Eng. 407(1) (2018)","DOI":"10.1088\/1757-899X\/407\/1\/012164"},{"key":"9_CR7","unstructured":"Salminen, H.: Success factors and pitfalls in security certifications. In: European Conference on Information Warfare and Security, ECCWS, pp. 811\u2013818 (2019)"},{"issue":"6","key":"9_CR8","doi-asserted-by":"publisher","first-page":"2852","DOI":"10.1007\/s10664-016-9492-y","volume":"22","author":"M Kuhrmann","year":"2017","unstructured":"Kuhrmann, M., Fern\u00e1ndez, D.M., Daneva, M.: On the pragmatic design of literature studies in software engineering: an experience-based guideline. Empir. Softw. Eng. 22(6), 2852\u20132891 (2017). https:\/\/doi.org\/10.1007\/s10664-016-9492-y","journal-title":"Empir. Softw. Eng."},{"issue":"10","key":"9_CR9","doi-asserted-by":"publisher","first-page":"1161","DOI":"10.1108\/IJOPM-01-2015-0041","volume":"36","author":"J Ni","year":"2016","unstructured":"Ni, J., et al.: Why be first if it doesn\u2019t pay? The case of early adopters of C-TPAT supply chain security certification. Int. J. Oper. Prod. Manag. 36(10), 1161\u20131181 (2016)","journal-title":"Int. J. Oper. Prod. Manag."},{"key":"9_CR10","doi-asserted-by":"crossref","unstructured":"Lateef, A., et al.: Information audit as an important tool in organizational management: a review of literature. Bus. Inf. Rev. 36(1) (2019)","DOI":"10.1177\/0266382119831458"},{"issue":"3","key":"9_CR11","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/s10799-018-00297-3","volume":"20","author":"JK Deane","year":"2019","unstructured":"Deane, J.K., Goldberg, D.M., Rakes, T.R., Rees, L.P.: The effect of information security certification announcements on the market value of the firm. Inf. Technol. Manage. 20(3), 107\u2013121 (2019). https:\/\/doi.org\/10.1007\/s10799-018-00297-3","journal-title":"Inf. Technol. Manage."},{"key":"9_CR12","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1016\/j.accinf.2016.12.003","volume":"24","author":"M Axelsen","year":"2017","unstructured":"Axelsen, M., et al.: Explaining the information systems auditor role in the public sector financial audit. Int. J. Account. Inf. Syst. 24, 15\u201331 (2017)","journal-title":"Int. J. Account. Inf. Syst."},{"issue":"6","key":"9_CR13","doi-asserted-by":"publisher","first-page":"849","DOI":"10.1108\/14637150810916026","volume":"14","author":"MR Doomun","year":"2008","unstructured":"Doomun, M.R.: Multi-level information system security in outsourcing domain. Bus. Process Manag. J. 14(6), 849\u2013857 (2008)","journal-title":"Bus. Process Manag. J."},{"issue":"3","key":"9_CR14","doi-asserted-by":"publisher","first-page":"200","DOI":"10.1080\/07317131.2012.681284","volume":"29","author":"R Kilzer","year":"2012","unstructured":"Kilzer, R.: Information audit: keys for understanding the academic library. Tech. Serv. Q. 29(3), 200\u2013206 (2012)","journal-title":"Tech. Serv. Q."},{"issue":"4","key":"9_CR15","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1109\/MC.2018.2888766","volume":"52","author":"JM Such","year":"2019","unstructured":"Such, J.M., et al.: Basic cyber hygiene: does it work? Computer 52(4), 21\u201331 (2019)","journal-title":"Computer"},{"key":"9_CR16","first-page":"463","volume":"23","author":"JW Merhout","year":"2008","unstructured":"Merhout, J.W., et al.: Information technology auditing: a value-added IT governance partnership between IT management and audit. Commun. Assoc. Inf. Syst. 23, 463\u2013482 (2008)","journal-title":"Commun. Assoc. Inf. Syst."},{"key":"9_CR17","doi-asserted-by":"crossref","unstructured":"Lotz, V., et al.: Towards security certification schemas for the internet of services. In: NTMS 2012 Conference and Workshops (2012)","DOI":"10.1109\/NTMS.2012.6208771"},{"key":"9_CR18","unstructured":"Vidler, J.M., et al.: Cyber security control effectiveness: a qualitative assessment of cyber essentials. Secur. Lancaster 1\u201328 (2015)"},{"key":"9_CR19","doi-asserted-by":"publisher","unstructured":"Di Cerbo, F., Bezzi, M., Kaluvuri, S.P., Sabetta, A., Trabelsi, S., Lotz, V.: Towards a trustworthy service marketplace for the future internet. In: \u00c1lvarez, F., et al. (eds.) FIA 2012. LNCS, vol. 7281, pp. 105\u2013116. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-30241-1_10","DOI":"10.1007\/978-3-642-30241-1_10"},{"key":"9_CR20","unstructured":"European Union Agency for Network and Information Security, \u201cReview of Cyber Hygiene Practices,\u201d ENISA Website, no. December, p. 25 (2016)"},{"issue":"3","key":"9_CR21","doi-asserted-by":"publisher","first-page":"150","DOI":"10.1016\/j.ijinfomgt.2007.09.003","volume":"28","author":"S Buchanan","year":"2008","unstructured":"Buchanan, S., et al.: The information audit: theory versus practice. Int. J. Inf. Manage. 28(3), 150\u2013160 (2008)","journal-title":"Int. J. Inf. Manage."},{"key":"9_CR22","doi-asserted-by":"crossref","unstructured":"Ariffin, I., et al.: Information audit in electricity utilities: roles, methodologies, issues and challenges. In: ICCOINS 2014 (2014)","DOI":"10.1109\/ICCOINS.2014.6868421"},{"key":"9_CR23","doi-asserted-by":"crossref","unstructured":"Kanellou, A., et al.: Auditing in enterprise system environment: a synthesis. J. Enterprise Inf. Manag. 24(6), 494\u2013519 (2011)","DOI":"10.1108\/17410391111166549"},{"key":"9_CR24","doi-asserted-by":"crossref","unstructured":"Rahaman, S., et al.: Security certification in payment card industry: testbeds, measurements, and recommendations. In: ACM CCCS, 2019, pp. 481\u2013498 (2019)","DOI":"10.1145\/3319535.3363195"},{"key":"9_CR25","doi-asserted-by":"crossref","unstructured":"Lope Abdul Rahman, A.A., et al.: Measuring sustainability for an effective Information System audit from public organization perspective. In: RCIS 2015 (2015)","DOI":"10.1109\/RCIS.2015.7128862"},{"key":"9_CR26","doi-asserted-by":"crossref","unstructured":"Di Giulio, C., et al.: Cloud security certifications: a comparison to improve cloud service provider security. In: ACM CPS (2017)","DOI":"10.1145\/3018896.3025169"},{"key":"9_CR27","doi-asserted-by":"crossref","unstructured":"Di Giulio, C., et al.: Cloud standards in comparison: are new security frameworks improving cloud security?. In: CLOUD 2017, vol. 2017-June, pp. 50\u201357 (2017)","DOI":"10.1109\/CLOUD.2017.16"},{"issue":"10","key":"9_CR28","first-page":"9","volume":"21","author":"BM Brosgol","year":"2008","unstructured":"Brosgol, B.M.: Safety and security: certification issues and technologies. CrossTalk 21(10), 9\u201314 (2008)","journal-title":"CrossTalk"},{"key":"9_CR29","unstructured":"Schierholz, R., et al.: Security certification - a critical review. In: ISA Automation Week 2010: Technology and Solutions Event, pp. 156\u2013178 (2010)"},{"key":"9_CR30","doi-asserted-by":"crossref","unstructured":"Smith, B., et al.: Challenges for protecting the privacy of health information: required certification can leave common vulnerabilities undetected. In: CCCS 2010, pp. 1\u201312 (2010)","DOI":"10.1145\/1866914.1866916"},{"key":"9_CR31","doi-asserted-by":"crossref","unstructured":"Taubenberger, S., et al.: Problem analysis of traditional IT-security risk assessment methods - an experience report from the insurance and auditing domain. In: IFIP AICT 2011, vol. 354, pp. 259\u2013270 (2011)","DOI":"10.1007\/978-3-642-21424-0_21"},{"key":"9_CR32","unstructured":"Schierholz, R., et al.: Security Certification-A critical review (2010)"},{"key":"9_CR33","unstructured":"Lovaas, P., et al.: IT audit challenges for small and medium- sized financial institutions. In: Annual Symposium Information Assurance & Secure Knowledge Management, pp. 16\u201322 (2012)"},{"key":"9_CR34","unstructured":"Bukhsh, F.A., et al.: Information audit for knowledge discovery: a systematic literature review. In: CEUR Workshop Proceedings, vol. 2383 (2019)"},{"issue":"5","key":"9_CR35","first-page":"196","volume":"4","author":"YH Yeghaneh","year":"2015","unstructured":"Yeghaneh, Y.H., et al.: Factors affecting information technology audit quality. J. Invest. Manag. 4(5), 196 (2015)","journal-title":"J. Invest. Manag."},{"key":"9_CR36","series-title":"Lecture Notes in Business Information Processing","doi-asserted-by":"publisher","first-page":"187","DOI":"10.1007\/978-3-642-38366-3_16","volume-title":"Business Information Systems","author":"T Ros\u00e1rio","year":"2013","unstructured":"Ros\u00e1rio, T., Pereira, R., da Silva, M.M.: IT audit management architecture and process model. In: Abramowicz, W. (ed.) BIS 2013. LNBIP, vol. 157, pp. 187\u2013198. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-38366-3_16"},{"issue":"1","key":"9_CR37","doi-asserted-by":"publisher","first-page":"1380","DOI":"10.1016\/j.ijinfomgt.2016.10.001","volume":"37","author":"RB Frost","year":"2017","unstructured":"Frost, R.B., et al.: Revisiting the information audit: a systematic literature review and synthesis. Int. J. Inf. Manage. 37(1), 1380\u20131390 (2017)","journal-title":"Int. J. Inf. Manage."},{"issue":"4","key":"9_CR38","doi-asserted-by":"publisher","first-page":"377","DOI":"10.1108\/MAJ-07-2017-1595","volume":"33","author":"MS Islam","year":"2018","unstructured":"Islam, M.S., et al.: Factors associated with security\/cybersecurity audit by internal audit function: an international study. Manag. Audit. J. 33(4), 377\u2013409 (2018)","journal-title":"Manag. Audit. J."},{"key":"9_CR39","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1016\/j.csi.2015.06.005","volume":"42","author":"DC Chou","year":"2015","unstructured":"Chou, D.C.: Cloud computing risk and audit issues. Comput. Stand. Interfaces 42, 137\u2013142 (2015)","journal-title":"Comput. Stand. Interfaces"},{"issue":"1","key":"9_CR40","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1111\/j.1467-8691.2009.00511.x","volume":"18","author":"EW Hallgren","year":"2009","unstructured":"Hallgren, E.W.: How to use an innovation audit as a learning tool: a case study of enhancing high-involvement innovation. Creat. Innov. Manag. 18(1), 48\u201358 (2009)","journal-title":"Creat. Innov. Manag."},{"issue":"1","key":"9_CR41","first-page":"7","volume":"30","author":"AC Dzuranin","year":"2016","unstructured":"Dzuranin, A.C., et al.: The current state and future direction of IT audit: challenges and opportunities. J. Inf. Syst. 30(1), 7\u201320 (2016)","journal-title":"J. Inf. Syst."},{"key":"9_CR42","doi-asserted-by":"crossref","unstructured":"Brand, D.: A global look at IT audit best practices. EDPACS 54(2) (2016)","DOI":"10.1080\/07366981.2016.1195675"},{"key":"9_CR43","doi-asserted-by":"crossref","unstructured":"Zororo, T.: IT Governance assurance and consulting: a compelling need for today\u2019s IT auditors. EDPACS 49(6) (2014)","DOI":"10.1080\/07366981.2014.910978"},{"key":"9_CR44","doi-asserted-by":"crossref","unstructured":"Kitchenham et al.: Evidence-Based Software Engineering and Systematic Reviews. Chapman and Hall\/CRC (2015)","DOI":"10.1201\/b19467"}],"container-title":["Lecture Notes in Business Information Processing","Business Modeling and Software Design"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-79976-2_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T18:26:39Z","timestamp":1625163999000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-79976-2_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030799755","9783030799762"],"references-count":44,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-79976-2_9","relation":{},"ISSN":["1865-1348","1865-1356"],"issn-type":[{"value":"1865-1348","type":"print"},{"value":"1865-1356","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"2 July 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"BMSD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Business Modeling and Software Design","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sofia","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bulgaria","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 July 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 July 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"bmsd2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.is-bmsd.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}