{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,16]],"date-time":"2025-10-16T20:38:03Z","timestamp":1760647083492,"version":"3.37.3"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61803318"],"award-info":[{"award-number":["61803318"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2944615","type":"journal-article","created":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T02:18:26Z","timestamp":1569896306000},"page":"142147-142175","source":"Crossref","is-referenced-by-count":12,"title":["Real-Time Information Security Incident Management: A Case Study Using the IS-CHEC Technique"],"prefix":"10.1109","volume":"7","author":[{"given":"Mark","family":"Evans","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2023-5547","authenticated-orcid":false,"given":"Ying","family":"He","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cunjin","family":"Luo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Iryna","family":"Yevseyeva","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1345-2829","authenticated-orcid":false,"given":"Helge","family":"Janicke","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Efpraxia","family":"Zamani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Leandros A.","family":"Maglaras","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1111\/j.1365-2575.2004.00162.x"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.ssci.2017.07.008"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2007.08.011"},{"journal-title":"2014 Data Breach Investigations Report","first-page":"1","year":"2014","key":"ref32"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1080\/09617353.2016.1148920"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/EDUCON.2018.8363488"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1108\/09685221011035223","article-title":"Understanding and transforming organizational security culture","volume":"18","author":"furnell","year":"2010","journal-title":"Inf Manage Comput Secur"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2008.10.005"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2018.09.004"},{"article-title":"Directorate\/programme NHS digital external IG delivery project IG incident reporting document reference project manager status final owner annual information governance (IG) incident trends (2015&#x2013;2016)","year":"2015","author":"burleigh","key":"ref34"},{"key":"ref28","first-page":"217","article-title":"Human aspects of information assurance: A questionnaire-based quantitative approach to assessment","author":"frangopoulos","year":"2014","journal-title":"Proc HAIS"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.4108\/eai.15-5-2018.154769"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1177\/0165551517748288"},{"journal-title":"Payment Card Industry Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) Version 3 2","year":"2016","key":"ref2"},{"journal-title":"Managing Information System Security","year":"2013","key":"ref1"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.sbspro.2014.07.133"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-01-2016-0006"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-07-2016-0054"},{"article-title":"Cyber security breaches survey 2017: Main report","year":"2017","author":"klahr","key":"ref24"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1108\/09685221011095245"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1108\/OIR-11-2015-0358"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.12.006"},{"journal-title":"2017 Cost of Data Breach Study Global Overview","year":"2017","key":"ref50"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781139062367"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2927195"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1108\/09593849910301621"},{"key":"ref12","first-page":"175","author":"chandler","year":"2006","journal-title":"Human Reliability Analysis Methods Selection Guidance for NASA"},{"journal-title":"Behind Human Error","year":"2010","author":"johannesen","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1080\/09617353.2015.11691047"},{"key":"ref15","first-page":"33","article-title":"The effect of organisational culture on employee security behaviour: A qualitative study","author":"connolly","year":"0","journal-title":"The Effect of Organisational Culture on Employee Security Behaviour A Qualitative Study"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2015.508"},{"key":"ref17","first-page":"163","article-title":"Cultivating and assessing an organizational information security culture; An empirical study analyzing human factors and change management principles toward building information security culture view project cultivating and assessing an organizational information security culture; An empirical study","volume":"9","author":"alhogail","year":"2015","journal-title":"Artic Int J Secur Appl"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3098986"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-72817-9_10"},{"article-title":"Part 3: Cyber security and risk assessment?: HRA where art thou?","year":"2013","author":"gertman","key":"ref4"},{"journal-title":"Data Security and Protection Toolkit","year":"2019","key":"ref3"},{"key":"ref6","first-page":"78","article-title":"Review of human reliability assessment methods","author":"bell","year":"2009","journal-title":"Health and Safety Laboratory"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(93)90012-T"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2019.04.019"},{"key":"ref7","first-page":"911","article-title":"Analysis of published public sector information security incidents and breaches to establish the proportions of human error","author":"evans","year":"2018","journal-title":"Proc 12th Int Conf Hum Aspects Inf Secur Assurance (HAISA)"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1093\/intqhc\/mzx181"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.09.002"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-12-2018-0147"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1657"},{"journal-title":"RCA Improving Root Cause Analyses and Actions to Prevent Harm","year":"2015","key":"ref48"},{"article-title":"A user manual for the heart human reliability assessment method","year":"1992","author":"williams","key":"ref47"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1002\/smj.722"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1177\/875647939000600106"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1177\/160940690200100202"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1108\/13522750310470055"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08853242.pdf?arnumber=8853242","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,8,10]],"date-time":"2021-08-10T19:40:50Z","timestamp":1628624450000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8853242\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2944615","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2019]]}}}