{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T05:44:59Z","timestamp":1742967899355,"version":"3.40.3"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031423093"},{"type":"electronic","value":"9783031423109"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-42310-9_9","type":"book-chapter","created":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T18:02:27Z","timestamp":1693332147000},"page":"125-138","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Digitalizing Process Assessment Approach: An Illustration with GDPR Compliance Self-assessment for SMEs"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2352-1621","authenticated-orcid":false,"given":"St\u00e9phane","family":"Cortina","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7882-8711","authenticated-orcid":false,"given":"Michel","family":"Picard","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0472-1994","authenticated-orcid":false,"given":"Samuel","family":"Renault","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4294-0848","authenticated-orcid":false,"given":"Philippe","family":"Valoggia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,8,30]]},"reference":[{"doi-asserted-by":"publisher","unstructured":"Hasani, T., Rezania, D., Levallet, N., O\u2019Reilly, N., Mohammadi, M.: Privacy enhancing technology adoption and its impact on SMEs\u2019 performance. Int. J. Eng. Bus. Manag. 15 (2023). https:\/\/doi.org\/10.1177\/18479790231172874","key":"9_CR1","DOI":"10.1177\/18479790231172874"},{"doi-asserted-by":"publisher","unstructured":"Bessen, J.E., Impink, S.M., Reichensperger, L., Seamans, R.: GDPR and the Importance of Data to AI Startups (1 Apr 2020). NYU Stern School of Business, Available at SSRN: https:\/\/ssrn.com\/abstract=3576714 or http:\/\/dx.doi.org\/https:\/\/doi.org\/10.2139\/ssrn.3576714","key":"9_CR2","DOI":"10.2139\/ssrn.3576714"},{"doi-asserted-by":"crossref","unstructured":"Saleem, J., Adebisi, B., Ande, R., Hammoudeh, M.: A state of the art survey-impact of cyber attacks on SME\u2019s. In: Proceedings of the International Conference on Future Networks and Distributed Systems (2017)","key":"9_CR3","DOI":"10.1145\/3102304.3109812"},{"doi-asserted-by":"publisher","unstructured":"Wilson, M., McDonald, S., Button, D., Mcgarry, K.: It won\u2019t happen to me: surveying SME attitudes to cyber-security. J. Comput. Inf. Syst. 1\u201313 (2022). https:\/\/doi.org\/10.1080\/08874417.2022.2067791","key":"9_CR4","DOI":"10.1080\/08874417.2022.2067791"},{"unstructured":"SENTINEL Homepage: https:\/\/sentinel-project.eu\/. Last accessed 17 Apr 2023","key":"9_CR5"},{"key":"9_CR6","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"107","DOI":"10.1007\/978-3-030-85521-5_8","volume-title":"Systems, Software and Services Process Improvement","author":"S Cortina","year":"2021","unstructured":"Cortina, S., Picard, M., Renault, S., Valoggia, P.: Towards a Process-Based Approach to Compliance with GDPR. In: Yilmaz, M., Clarke, P., Messnarz, R., Reiner, M. (eds.) EuroSPI 2021. CCIS, vol. 1442, pp. 107\u2013121. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-85521-5_8"},{"unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (2016)","key":"9_CR7"},{"unstructured":"https:\/\/gdpr.eu\/checklist\/. Last accessed 6 Apr 2023","key":"9_CR8"},{"unstructured":"https:\/\/www.dataprotection.ie\/en\/organisations\/resources-organisations\/self-assessment-checklist. Last accessed 6 Apr 2023","key":"9_CR9"},{"unstructured":"https:\/\/ico.org.uk\/for-organisations\/sme-web-hub\/checklists\/data-protection-self-assessment\/. Last accessed 6 Apr 2023","key":"9_CR10"},{"unstructured":"FORT PRIVACY: Introducing the privacy maturity model framework (2019). Web: https:\/\/www.fortprivacy.ie\/privacy-maturity-model\/. Last accessed 6 Apr 2023","key":"9_CR11"},{"unstructured":"THE MITRE CORPORATION: Privacy Maturity Model (2019). Web: https:\/\/www.mitre.org\/publications. Last accessed 6 Apr 2023","key":"9_CR12"},{"unstructured":"SECURE CONTROLS FRAMEWORK: Security & Privacy Capability Maturity Model (2019). Web: https:\/\/securecontrolsframework.com\/capability-maturity-model\/. Last accessed 6 Apr 2023","key":"9_CR13"},{"doi-asserted-by":"publisher","unstructured":"Laposa, T., Frivaldszky, G.: Data Protection Maturity: An Analysis of Methodological Tools and Frameworks. CEE EDem EGov Days 338(July), 135\u201347 (2020). https:\/\/doi.org\/10.24989\/ocg.338.11","key":"9_CR14","DOI":"10.24989\/ocg.338.11"},{"key":"9_CR15","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"136","DOI":"10.1007\/978-3-030-28005-5_11","volume-title":"Systems, Software and Services Process Improvement","author":"S Cortina","year":"2019","unstructured":"Cortina, S., Valoggia, P., Barafort, B., Renault, A.: Designing a data protection process assessment model based on the GDPR. In: Walker, A., O\u2019Connor, R.V., Messnarz, R. (eds.) EuroSPI 2019. CCIS, vol. 1060, pp. 136\u2013148. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-28005-5_11"},{"doi-asserted-by":"publisher","unstructured":"Trantidou, T., et al.: SENTINEL \u2013 Approachable, tailor-made cybersecurity and data protection for small enterprises. In: 2022 IEEE International Conference on Cyber Security and Resilience (CSR), Jul 2022, pp. 112\u2013117. https:\/\/doi.org\/10.1109\/CSR54599.2022.9850297","key":"9_CR16","DOI":"10.1109\/CSR54599.2022.9850297"},{"unstructured":"ISO\/IEC: ISO\/IEC 33020 information technology\u2014Process assessment\u2014Process measurement framework for assessment of process capability (2015)","key":"9_CR17"},{"unstructured":"ISO\/IEC: ISO\/IEC 33002 Information Technology\u2014Process assessment\u2014Requirements for performing process assessment (2015)","key":"9_CR18"},{"unstructured":"ISO\/IEC: ISO\/IEC 33003 Information Technology \u2014 Process assessment \u2014 Requirements for process measurement frameworks (2015)","key":"9_CR19"},{"unstructured":"ISO\/IEC: ISO\/IEC 33004 Information Technology \u2014 Process assessment \u2014 Requirements for process reference, process assessment and maturity models (2015)","key":"9_CR20"},{"unstructured":"Pries-Heje, J., Johansen, J.: Spi manifesto. European System & Software Process Improvement and Innovation (2010)","key":"9_CR21"},{"doi-asserted-by":"crossref","unstructured":"Barafort, B., Shrestha, A., Cortina, S., Renault, S.: A software artefact to support and au-tomate process assessment: a case study of the evolution of the TIPA\u00ae framework. Comput. Stand. Interfaces 60, 37\u201347 (2018)","key":"9_CR22","DOI":"10.1016\/j.csi.2018.04.009"},{"unstructured":"ENISA: Data Protection Engineering (2022). Available at https:\/\/www.enisa.europa.eu\/publications\/data-protection-engineering","key":"9_CR23"},{"unstructured":"24The Standard Data Protection Model: A method for data protection advising and controlling on the basis of uniform protection goals. In: Conference of the Independent Data Protection Supervisory Authorities of the Federation and the L\u00e4nder, April 2020. Available at https:\/\/www.datenschutzzentrum.de\/uploads\/sdm\/SDM-Methodology_V2.0b.pdf","key":"9_CR24"}],"container-title":["Communications in Computer and Information Science","Systems, Software and Services Process Improvement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-42310-9_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T18:03:29Z","timestamp":1693332209000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-42310-9_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031423093","9783031423109"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-42310-9_9","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"30 August 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"EuroSPI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Software Process Improvement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Grenoble","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 August 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 September 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eurospi2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/conference.eurospi.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Open","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"conference website","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"100","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"47","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"47% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}