{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,5]],"date-time":"2026-01-05T21:54:01Z","timestamp":1767650041536,"version":"3.41.2"},"reference-count":23,"publisher":"Emerald","issue":"3","license":[{"start":{"date-parts":[[2016,6,6]],"date-time":"2016-06-06T00:00:00Z","timestamp":1465171200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.emerald.com\/insight\/site-policies"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["EL"],"published-print":{"date-parts":[[2016,6,6]]},"abstract":"<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Purpose<\/jats:title>\n<jats:p>This paper uses the GB\/T20984-2007 multiplicative method to assess the information security risk of a typical digital library in compliance with the principle and thought of ISO 27000. The purpose of this paper is to testify the feasibility of this method and provide suggestions for improving information security of the digital library.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Design\/methodology\/approach<\/jats:title>\n<jats:p>This paper adopts convenience sampling to select respondents. The assessment of assets is through analyzing digital library-related business and function through a questionnaire which collects data to determine asset types and the importance of asset attributes. The five-point Likert scale questionnaire method is used to identify the threat possibility and its influence on the assets. The 12 respondents include directors and senior network technicians from the editorial department, comic library, children\u2019s library, counseling department and the learning promotion centre. Three different Guttman scale questionnaires, tool testing and on-site inspection are combined to identify and assess vulnerabilities. There were different Guttman scale questionnaires for management personnel, technical personnel and general librarian. In all, 15 management librarians, 7 technical librarians and 72 ordinary librarians answered the vulnerability questionnaire. On-site inspection was conducted on the basis of 11 control domains of ISO 27002. Vulnerabilities were scanned using remote security evaluation system NSFOCUS. The scanning covered ten IP sections and a total of 81 hosts.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Findings<\/jats:title>\n<jats:p>Overall, 2,792 risk scores were obtained. Among them, 282 items (accounting for 10.1 per cent of the total) reached the high risk level; 2 (0.1 per cent) reached the very high risk level. High-risk items involved 26 threat types (accounting for 44.1 per cent of all threat types) and 13 vulnerability types (accounting for 22.1 per cent of all vulnerability types). The evaluation revealed that this digital library faces seven major hidden dangers in information security. The assessment results were well accepted by staff members of this digital library, which testified to the applicability of this method to a Chinese digital library.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Research limitations\/implications<\/jats:title>\n<jats:p>This paper is only a case study of a typical Chinese digital library using a digital library information security assessment method. More case-based explorations are necessary to prove the feasibility of the assessing strategy proposed in this study.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Originality\/value<\/jats:title>\n<jats:p>Based on the findings of recent literature, the authors found that very few researchers have made efforts to develop methods for calculating the indicators for digital library information security risk assessment. On the basis of ISO 27000 and other related information security standards, this case study proposed an operable method of digital library information security risk assessment and used it to assess a the information security of a typical Chinese digital library. This study can offer insights for formulating a digital library information security risk assessment scale.<\/jats:p>\n<\/jats:sec>","DOI":"10.1108\/el-09-2014-0158","type":"journal-article","created":{"date-parts":[[2016,6,1]],"date-time":"2016-06-01T17:05:35Z","timestamp":1464800735000},"page":"471-487","source":"Crossref","is-referenced-by-count":17,"title":["Risk assessment of digital library information security: a case study"],"prefix":"10.1108","volume":"34","author":[{"given":"Zhengbiao","family":"Han","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuiqing","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Huan","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ni","family":"Ren","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"140","reference":[{"issue":"1\/2","key":"key2020121519443339400_ref001","first-page":"1","article-title":"Survey of security challenges in university libraries in southwest Nigeria","volume":"26","year":"2013","journal-title":"Library & Archival Security"},{"issue":"2","key":"key2020121519443339400_ref002","first-page":"296","article-title":"A content-based authorization model for digital libraries","volume":"4","year":"2002","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"issue":"8\/9","key":"key2020121519443339400_ref003","doi-asserted-by":"crossref","first-page":"386","DOI":"10.1108\/01435120410562880","article-title":"Users\u2019 assessment of library security: a Nigerian university case study","volume":"25","year":"2004","journal-title":"Library Management"},{"issue":"1","key":"key2020121519443339400_ref004","doi-asserted-by":"crossref","first-page":"117","DOI":"10.15612\/BD.2012.171","article-title":"Information security issues in a digital library environment: a literature review","volume":"13","year":"2012","journal-title":"Bilgi D\u00fc\u00fcnyas\u0131"},{"issue":"2","key":"key2020121519443339400_ref005","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1145\/265665.265666","article-title":"Digital libraries: a brief introduction","volume":"18","year":"1997","journal-title":"ACM SIGGROUP Bulletin"},{"issue":"3","key":"key2020121519443339400_ref006","first-page":"28","article-title":"Close the gates, lock the windows, bolt the doors: securing library computers","volume":"25","year":"2005","journal-title":"Computers in Libraries"},{"issue":"6","key":"key2020121519443339400_ref007","doi-asserted-by":"crossref","first-page":"379","DOI":"10.1108\/01435129810221001","article-title":"Library security, material theft and mutilation in technological university libraries in Nigeria","volume":"19","year":"1998","journal-title":"Library Management"},{"issue":"4","key":"key2020121519443339400_ref008","doi-asserted-by":"crossref","first-page":"377","DOI":"10.1016\/j.acalib.2006.03.005","article-title":"Privacy and library records","volume":"32","year":"2006","journal-title":"The Journal of Academic Librarianship"},{"key":"key2020121519443339400_ref009","unstructured":"Fan, Q. (2009), \u201cA research in risk assessment of telecommunication industry information security\u201d, Master Dissertation, Tianjin University, Tianjin."},{"issue":"4","key":"key2020121519443339400_ref010","doi-asserted-by":"crossref","first-page":"249","DOI":"10.1108\/10650750610706961","article-title":"Vandals at the gates","volume":"22","year":"2006","journal-title":"OCLC Systems & Services"},{"issue":"2","key":"key2020121519443339400_ref012","doi-asserted-by":"crossref","first-page":"137","DOI":"10.1080\/0361526X.2014.939324","article-title":"Are libraries doing enough to safeguard their patrons\u2019 digital privacy","volume":"67","year":"2014","journal-title":"The Serials Librarian"},{"issue":"2","key":"key2020121519443339400_ref013","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1108\/08880450710773020","article-title":"Theft by library staff","volume":"20","year":"2007","journal-title":"Bottom Line: Managing Library Finances"},{"volume-title":"Information Security Management of Digital Library","year":"2011","key":"key2020121519443339400_ref014"},{"issue":"3","key":"key2020121519443339400_ref016","doi-asserted-by":"crossref","first-page":"232","DOI":"10.1177\/0961000613477676","article-title":"Assessing the status of library information systems security","volume":"45","year":"2013","journal-title":"Journal of Librarianship and Information Science"},{"issue":"3","key":"key2020121519443339400_ref018","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1016\/S1071-5819(02)91024-4","article-title":"Understanding user acceptance of digital libraries: what are the roles of interface characteristics, organizational context, and individual differences","volume":"57","year":"2002","journal-title":"International Journal of Human-Computer Studies"},{"issue":"3","key":"key2020121519443339400_ref019","doi-asserted-by":"crossref","first-page":"402","DOI":"10.1108\/07378831011076657","article-title":"European digital libraries: web security vulnerabilities","volume":"28","year":"2010","journal-title":"Library Hi Tech"},{"volume-title":"Practical Digital Libraries: Books, Bytes, and Bucks","year":"1997","key":"key2020121519443339400_ref020"},{"issue":"3\/4","key":"key2020121519443339400_ref021","first-page":"169","article-title":"Making the library of congress secure: innovation and collaboration","volume":"38","year":"2003","journal-title":"Journal of Library Administration"},{"issue":"1","key":"key2020121519443339400_ref022","first-page":"15","article-title":"Collection security management at university libraries: assessment of its implementation status","volume":"16","year":"2011","journal-title":"Malaysian Journal of Library & Information Science"},{"key":"key2020121519443339400_ref023","unstructured":"Michalko, J., Malpas, C. and Arcolio, A. (2010), \u201cResearch libraries, risk and systemic change\u201d, available at: www.oclc.org\/content\/dam\/research\/publications\/library\/2010\/2010-03.pdf?urlm=162937 (accessed 12 May 2015)."},{"issue":"1","key":"key2020121519443339400_ref024","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1080\/01960075.2011.563132","article-title":"Balanced security controls for 21st century libraries","volume":"24","year":"2011","journal-title":"Library & Archival Security"},{"article-title":"Inspection and quarantine of the People\u2019s Republic of China, standardization administration of the People\u2019s Republic of China","year":"2007","author":"General Administration of Quality Supervision","key":"key2020121519443339400_ref025"},{"issue":"7\/8","key":"key2020121519443339400_ref026","first-page":"33","article-title":"Assessment of information security risk in digital libraries","year":"2010","journal-title":"New Technology of Library and Information Service"}],"container-title":["The Electronic Library"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/www.emeraldinsight.com\/doi\/full-xml\/10.1108\/EL-09-2014-0158","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/EL-09-2014-0158\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/EL-09-2014-0158\/full\/html","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,25]],"date-time":"2025-07-25T01:07:57Z","timestamp":1753405677000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.emerald.com\/el\/article\/34\/3\/471-487\/96157"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,6,6]]},"references-count":23,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2016,6,6]]}},"alternative-id":["10.1108\/EL-09-2014-0158"],"URL":"https:\/\/doi.org\/10.1108\/el-09-2014-0158","relation":{},"ISSN":["0264-0473"],"issn-type":[{"type":"print","value":"0264-0473"}],"subject":[],"published":{"date-parts":[[2016,6,6]]}}}