{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,23]],"date-time":"2026-02-23T17:46:44Z","timestamp":1771868804691,"version":"3.50.1"},"reference-count":71,"publisher":"Informa UK Limited","issue":"4","content-domain":{"domain":["www.tandfonline.com"],"crossmark-restriction":true},"short-container-title":["Enterprise Information Systems"],"published-print":{"date-parts":[[2021,4,21]]},"DOI":"10.1080\/17517575.2019.1605000","type":"journal-article","created":{"date-parts":[[2019,4,16]],"date-time":"2019-04-16T09:18:36Z","timestamp":1555406316000},"page":"448-473","update-policy":"https:\/\/doi.org\/10.1080\/tandf_crossmark_01","source":"Crossref","is-referenced-by-count":8,"title":["Dying of a hundred good symptoms: why good security can still fail - a literature review and analysis"],"prefix":"10.1080","volume":"15","author":[{"given":"Paul","family":"Loft","sequence":"first","affiliation":[{"name":"School of Computer Science and Informatics, De Montfort University, Leicester, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ying","family":"He","sequence":"additional","affiliation":[{"name":"School of Computer Science and Informatics, De Montfort University, Leicester, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Helge","family":"Janicke","sequence":"additional","affiliation":[{"name":"School of Computer Science and Informatics, De Montfort University, Leicester, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Isabel","family":"Wagner","sequence":"additional","affiliation":[{"name":"School of Computer Science and Informatics, De Montfort University, Leicester, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"301","published-online":{"date-parts":[[2019,4,16]]},"reference":[{"key":"cit0001","doi-asserted-by":"publisher","DOI":"10.1007\/s11235-017-0345-9"},{"key":"cit0002","doi-asserted-by":"publisher","DOI":"10.1109\/TENCON.2005.301322"},{"key":"cit0003","doi-asserted-by":"publisher","DOI":"10.3390\/s141222754"},{"key":"cit0004","doi-asserted-by":"publisher","DOI":"10.1109\/ICITeS.2012.6216677"},{"key":"cit0005","volume-title":"2015 Second International Conference on Computing Technology and Information Management (ICCTIM 2015), Johor, Malaysia","author":"Alumark A.","year":"2015"},{"key":"cit0006","doi-asserted-by":"publisher","DOI":"10.1049\/cp.2014.0965"},{"key":"cit0007","doi-asserted-by":"publisher","DOI":"10.1080\/10408340500526766"},{"key":"cit0008","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2010.10.010"},{"key":"cit0009","doi-asserted-by":"publisher","DOI":"10.1109\/EDOCW.2006.28"},{"key":"cit0010","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSec.2012.6246173"},{"key":"cit0011","doi-asserted-by":"publisher","DOI":"10.1109\/ICISE.2010.5691153"},{"key":"cit0012","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2006.73"},{"key":"cit0013","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2006.313729"},{"key":"cit0014","doi-asserted-by":"publisher","DOI":"10.1191\/1478088706qp063oa"},{"key":"cit0015","first-page":"8","volume-title":"Enabling Technologies: Infrastructure for Collaborative Enterprise, 2005. 14th IEEE International Workshops on","author":"Brunette","year":"2005"},{"key":"cit0016","doi-asserted-by":"publisher","DOI":"10.1109\/ISIC.2012.6449761"},{"key":"cit0017","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.08.004"},{"key":"cit0018","doi-asserted-by":"publisher","DOI":"10.1197\/jamia.M2195"},{"key":"cit0019","doi-asserted-by":"publisher","DOI":"10.1145\/2885990.2886003"},{"key":"cit0020","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2015.92"},{"key":"cit0021","doi-asserted-by":"publisher","DOI":"10.1016\/j.giq.2009.04.004"},{"key":"cit0022","first-page":"984","volume-title":"INCOSE International Symposium","volume":"21","author":"Farroha B. S.","year":"2011"},{"key":"cit0023","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2008.69"},{"key":"cit0024","unstructured":"\u201cGartner Enterprise Architecture Process: Evolution 2005 - GartnerEA.pdf.\u201d Accessed 27 January 2017. http:\/\/www.idi.ntnu.no\/emner\/tdt4175\/pdfs\/GartnerEA.pdf"},{"key":"cit0025","doi-asserted-by":"publisher","DOI":"10.1109\/SECURWARE.2009.24"},{"key":"cit0026","doi-asserted-by":"publisher","DOI":"10.1145\/2390231.2390249"},{"key":"cit0027","doi-asserted-by":"publisher","DOI":"10.4018\/IJCAC.2017010101"},{"key":"cit0028","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-0105-3"},{"key":"cit0029","volume-title":"Computer and Cyber Security: Principles, Algorithm, Applications, and Perspectives","author":"Gupta B. B.","year":"2018"},{"key":"cit0030","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2009.6"},{"key":"cit0031","doi-asserted-by":"publisher","DOI":"10.1109\/FiCloud.2014.56"},{"key":"cit0032","first-page":"1","volume-title":"Application of Information and Communication Technologies (AICT), 2013 7th International Conference on","author":"Jafarov Z.","year":"2013"},{"key":"cit0033","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2015.15"},{"key":"cit0034","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2005.241"},{"key":"cit0035","first-page":"15","author":"Kerschbaum F.","year":"2008","journal-title":"Enterprise Information Systems"},{"key":"cit0036","doi-asserted-by":"publisher","DOI":"10.1109\/INFRKM.2010.5466918"},{"key":"cit0037","unstructured":"Kitchenham, B., and S. Charters. 2007. \u201cGuidelines for Performing Systematic Literature Reviews in Software Engineering (Version 2.3).\u201d Technical Report EBSE-2007-01, Keele Univ., EBSE."},{"key":"cit0038","doi-asserted-by":"publisher","DOI":"10.1109\/SocialCom.2013.88"},{"key":"cit0039","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-017-4452-0"},{"key":"cit0040","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1109\/ICCSNA.2010.5588795","volume-title":"Communication Systems, Networks and Applications (ICCSNA), 2010 Second International Conference on, 1","author":"Li X.","year":"2010"},{"key":"cit0041","first-page":"1","volume-title":"System Sciences, 2009. HICSS\u201909. 42nd Hawaii International Conference on","author":"Luethi M.","year":"2009"},{"key":"cit0042","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.07.003"},{"issue":"4","key":"cit0043","volume":"9","author":"Michelberger P.","year":"2012","journal-title":"Acta Polytechnica Hungarica"},{"key":"cit0044","doi-asserted-by":"publisher","DOI":"10.1007\/s10799-013-0156-y"},{"key":"cit0045","volume-title":"QSR International Pty Ltd. Version 10","author":"NVivo qualitative data analysis Software","year":"2014"},{"key":"cit0046","doi-asserted-by":"publisher","DOI":"10.1145\/1655168.1655170"},{"key":"cit0047","doi-asserted-by":"publisher","DOI":"10.1109\/ICISA.2010.5480261"},{"key":"cit0048","doi-asserted-by":"publisher","DOI":"10.1145\/3005714"},{"key":"cit0049","doi-asserted-by":"publisher","DOI":"10.1145\/1107622.1107653"},{"key":"cit0050","doi-asserted-by":"publisher","DOI":"10.1109\/APCASE.2015.74"},{"key":"cit0051","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2015.1063315"},{"key":"cit0052","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2007.86"},{"key":"cit0053","doi-asserted-by":"publisher","DOI":"10.1109\/ICET.2005.1558935"},{"key":"cit0054","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2010.12.089"},{"key":"cit0055","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2015.7412064"},{"key":"cit0056","doi-asserted-by":"publisher","DOI":"10.1108\/09685220910993962"},{"key":"cit0057","doi-asserted-by":"publisher","DOI":"10.1145\/1626195.1626205"},{"key":"cit0058","first-page":"1","volume-title":"System Sciences, 2009. HICSS\u201909. 42nd Hawaii International Conference on","author":"Sommestad T.","year":"2009"},{"key":"cit0059","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2015.11.009"},{"key":"cit0060","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.11.031"},{"key":"cit0061","doi-asserted-by":"publisher","DOI":"10.1109\/FITME.2008.30"},{"key":"cit0062","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2009.5402639"},{"key":"cit0063","doi-asserted-by":"publisher","DOI":"10.1109\/ESEM.2009.5314218"},{"key":"cit0064","doi-asserted-by":"publisher","DOI":"10.1108\/02635570810876787"},{"key":"cit0065","doi-asserted-by":"publisher","DOI":"10.1057\/ejis.2013.27"},{"key":"cit0066","doi-asserted-by":"publisher","DOI":"10.1080\/17517575.2015.1091951"},{"key":"cit0067","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC.2012.187"},{"key":"cit0068","doi-asserted-by":"publisher","DOI":"10.1109\/IAS.2009.53"},{"key":"cit0069","volume-title":"Principles of Information Security","author":"Whitman M. E.","year":"2012","edition":"4"},{"key":"cit0070","doi-asserted-by":"publisher","DOI":"10.1080\/17517575.2016.1253874"},{"key":"cit0071","doi-asserted-by":"publisher","DOI":"10.1080\/17517575.2017.1308559"}],"container-title":["Enterprise Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.tandfonline.com\/doi\/pdf\/10.1080\/17517575.2019.1605000","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,2]],"date-time":"2021-04-02T06:40:52Z","timestamp":1617345652000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.tandfonline.com\/doi\/full\/10.1080\/17517575.2019.1605000"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,4,16]]},"references-count":71,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2021,4,21]]}},"alternative-id":["10.1080\/17517575.2019.1605000"],"URL":"https:\/\/doi.org\/10.1080\/17517575.2019.1605000","relation":{},"ISSN":["1751-7575","1751-7583"],"issn-type":[{"value":"1751-7575","type":"print"},{"value":"1751-7583","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,4,16]]},"assertion":[{"value":"The publishing and review policy for this title is described in its Aims & Scope.","order":1,"name":"peerreview_statement","label":"Peer Review Statement"},{"value":"http:\/\/www.tandfonline.com\/action\/journalInformation?show=aimsScope&journalCode=teis20","URL":"http:\/\/www.tandfonline.com\/action\/journalInformation?show=aimsScope&journalCode=teis20","order":2,"name":"aims_and_scope_url","label":"Aim & Scope"},{"value":"2018-09-17","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2019-04-04","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2019-04-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}