{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T15:08:26Z","timestamp":1759072106113},"reference-count":23,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,12]]},"DOI":"10.1109\/apscc.2009.5394145","type":"proceedings-article","created":{"date-parts":[[2010,1,26]],"date-time":"2010-01-26T17:34:08Z","timestamp":1264527248000},"page":"23-27","source":"Crossref","is-referenced-by-count":9,"title":["A roadmap to risk-aware business process management"],"prefix":"10.1109","author":[{"given":"Stefan","family":"Jakoubi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas","family":"Neubauer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Simon","family":"Tjoa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Computer security incident handling guide National Institute of Standards and Technology Std","year":"2004","key":"ref10"},{"key":"ref11","article-title":"A Reference Model for Process-oriented IT Risk Management","author":"sackmann","year":"2008","journal-title":"16th European Conference on Information Systems (ECIS '08) Galway Ireland"},{"key":"ref12","article-title":"Selecting Services in Business Process Execution - A Risk-based Approach","author":"sackmann","year":"2009","journal-title":"Business Services Konzepte Technologien Anwendungen Tagung Wirtschaftsinformatik (WI'09)"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s10550-007-0013-9"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2007.15"},{"key":"ref15","first-page":"1","article-title":"AURUM: A Framework for Supporting Information Security Risk Management","author":"ekelhart","year":"2009","journal-title":"Proceedings of the 42nd Hawaii International Conference on System Sciences HICSS2009’ IEEE Computer Society Los Alamitos"},{"key":"ref16","first-page":"113","article-title":"Business Process-based Resource Importance Determination","author":"fenz","year":"2009","journal-title":"Springer accepted for publication"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICONS.2009.8"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/DEXA.2009.71"},{"key":"ref19","first-page":"1596","article-title":"Rope: A methodology for enabling the risk-aware modelling and simulation of business processes","author":"jakoubi","year":"2007","journal-title":"Fifteenth European Conference on Information Systems"},{"journal-title":"Risk Management Guide for Information Technology Systems National Institute of Standards and Technology (NIST) Std","year":"2002","key":"ref4"},{"year":"0","key":"ref3","article-title":"Information technology - Security techniques - Information security risk management, ISO\/IEC Std., 2008"},{"journal-title":"Specification British Standard Institute (BSI) Std","article-title":"Business Continuity Management - Part 2","year":"2007","key":"ref6"},{"journal-title":"British Standard Institute (BSI) Std","article-title":"Business Continuity Management - Part 1: Code of practice","year":"2006","key":"ref5"},{"journal-title":"ISO\/IEC Std","article-title":"Information technology - Security techniques - Guidelines for information and communications technology disaster recovery services","year":"2008","key":"ref8"},{"year":"2008","key":"ref7","article-title":"Good Practice Guidelines"},{"key":"ref2","article-title":"Aris architecture and reference models for business process management","author":"scheer","year":"2000","journal-title":"proceedings of BPM"},{"key":"ref1","first-page":"81","article-title":"Business Process Modelling. Springer, Berlin, 1996, ch","author":"karagiannis","year":"0","journal-title":"Introduction to Business Process Management Systems Concepts"},{"year":"2002","key":"ref9","article-title":"NIST SP800–34: Contingency planning guide for information technology systems"},{"key":"ref20","first-page":"1542","article-title":"Deriving resource requirements applying risk-aware business process modeling and simulation","author":"jakoubi","year":"2008","journal-title":"16th European Conference on Information Systems"},{"journal-title":"Sarbanes-Oxley Act","year":"2002","key":"ref22"},{"year":"2009","key":"ref21","article-title":"Misconceptions on Process Optimization and Simulation"},{"journal-title":"Enterprise Risk Management Executive Summary","year":"2004","key":"ref23"}],"event":{"name":"2009 IEEE Asia-Pacific Services Computing Conference (APSCC)","start":{"date-parts":[[2009,12,7]]},"location":"Singapore, Singapore","end":{"date-parts":[[2009,12,11]]}},"container-title":["2009 IEEE Asia-Pacific Services Computing Conference (APSCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5374429\/5394078\/05394145.pdf?arnumber=5394145","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,19]],"date-time":"2017-03-19T00:41:14Z","timestamp":1489884074000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5394145\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,12]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/apscc.2009.5394145","relation":{},"subject":[],"published":{"date-parts":[[2009,12]]}}}