{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T16:27:40Z","timestamp":1785428860566,"version":"3.56.0"},"reference-count":13,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,10]]},"DOI":"10.1109\/ccst.2011.6095894","type":"proceedings-article","created":{"date-parts":[[2011,12,15]],"date-time":"2011-12-15T17:02:53Z","timestamp":1323968573000},"page":"1-5","source":"Crossref","is-referenced-by-count":8,"title":["Physical and Logical Security management organization model based on ISO 31000 and ISO 27001"],"prefix":"10.1109","author":[{"given":"Koldo","family":"Pecina","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ricardo","family":"Estremera","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alfonso","family":"Bilbao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Enrique","family":"Bilbao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"13","year":"0"},{"key":"11","year":"2009","journal-title":"Common Criteria for Information Technology Security Evaluation"},{"key":"12","year":"0"},{"key":"3","year":"0","journal-title":"Risk Analysis and Management Methodology for Information Systems"},{"key":"2","article-title":"A risk management method based on the AS\/NZS 4360 Standard","author":"bilbao","year":"2008","journal-title":"Proceedings International Carnahan Conference on Security Technology"},{"key":"1","article-title":"TUAR, a model of Risk Analysis in the Security Field","author":"alfonso","year":"1992","journal-title":"Proceedings International Carnahan Conference on Security Technology"},{"key":"10","year":"2008","journal-title":"Information Security Risk Management"},{"key":"7","article-title":"HB 436:2004 - Risk management guidelines. Companion to AS\/NZS 4360:2004","year":"2004","journal-title":"Standards Australia Limited\/Standards New Zealand"},{"key":"6","article-title":"AS\/NZS 4360:2004 Standard - Risk Management","year":"2004","journal-title":"Standards Australia Limited\/Standards New Zealand"},{"key":"5","year":"0","journal-title":"ISO 31000 Risk Management Principles and Guidelines"},{"key":"4","year":"0","journal-title":"Information Security Management Systems - Requirements"},{"key":"9","year":"2005","journal-title":"Code of Practice for Information Security Management"},{"key":"8","year":"2005","journal-title":"Information Security Management Systems - Requirements"}],"event":{"name":"2011 International Carnahan Conference on Security Technology (ICCST)","location":"Barcelona, Spain","start":{"date-parts":[[2011,10,18]]},"end":{"date-parts":[[2011,10,21]]}},"container-title":["2011 Carnahan Conference on Security Technology"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6088023\/6095872\/06095894.pdf?arnumber=6095894","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,21]],"date-time":"2017-03-21T09:14:37Z","timestamp":1490087677000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6095894\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,10]]},"references-count":13,"URL":"https:\/\/doi.org\/10.1109\/ccst.2011.6095894","relation":{},"subject":[],"published":{"date-parts":[[2011,10]]}}}