{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T15:15:30Z","timestamp":1783091730070,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":27,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,8,17]],"date-time":"2021-08-17T00:00:00Z","timestamp":1629158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,8,17]]},"DOI":"10.1145\/3465481.3470038","type":"proceedings-article","created":{"date-parts":[[2021,8,16]],"date-time":"2021-08-16T18:07:25Z","timestamp":1629137245000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Practitioners\u2019 Views on Cybersecurity Control Adoption and Effectiveness"],"prefix":"10.1145","author":[{"given":"Louise","family":"Axon","sequence":"first","affiliation":[{"name":"University of Oxford, GB"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Arnau","family":"Erola","sequence":"additional","affiliation":[{"name":"University of Oxford, GB"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alastair","family":"Janse van Rensburg","sequence":"additional","affiliation":[{"name":"University of Oxford, GB"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jason R. C.","family":"Nurse","sequence":"additional","affiliation":[{"name":"University of Kent, GB"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Goldsmith","sequence":"additional","affiliation":[{"name":"University of Oxford, GB"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sadie","family":"Creese","sequence":"additional","affiliation":[{"name":"University of Oxford, GB"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,8,17]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n.d.]. ISO\/IEC 27002 Code of practice for information security controls. https:\/\/www.iso27001security.com\/html\/27002.html [accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314058.3317730"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.05.009"},{"key":"e_1_3_2_1_4_1","unstructured":"National Cyber\u00a0Security Centre. [n.d.]. 10 Steps to Cyber Security. https:\/\/www.ncsc.gov.uk\/collection\/10-steps-to-cyber-security[accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_5_1","unstructured":"National Cyber\u00a0Security Centre. [n.d.]. Cyber Essentials. https:\/\/www.cyberessentials.ncsc.gov.uk\/ [accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_6_1","unstructured":"Cylon. 2019. Signal from noise: how to win customers and influence cisos. https:\/\/blog.cylonlab.com\/signal-from-noise-how-to-win-customers-and-influence-cisos[accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243794"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314058.3317725"},{"key":"e_1_3_2_1_9_1","volume-title":"Enforce for Optimal Risk Mitigation. In 2019 IEEE Conference on Communications and Network Security (CNS). IEEE, 160\u2013168","author":"Dutta Ashutosh","year":"2019","unstructured":"Ashutosh Dutta and Ehab Al-Shaer. 2019. \u201cWhat\u201d,\u201cWhere\u201d, and \u201cWhy\u201d Cybersecurity Controls to Enforce for Optimal Risk Mitigation. In 2019 IEEE Conference on Communications and Network Security (CNS). IEEE, 160\u2013168."},{"key":"e_1_3_2_1_10_1","unstructured":"Center for Internet\u00a0Security. [n.d.]. Cybersecurity Best Practices. https:\/\/www.cisecurity.org\/cybersecurity-best-practices\/[accessed on 01\/12\/2020]."},{"key":"e_1_3_2_1_11_1","unstructured":"SANS\/Center for Internet\u00a0Security. [n.d.]. 20 Critical security controls. https:\/\/www.cisecurity.org\/controls\/ [accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2017.8228643"},{"key":"e_1_3_2_1_13_1","unstructured":"ISACA. [n.d.]. COBIT 5. https:\/\/www.isaca.org\/cobit\/ [accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_14_1","volume-title":"Likert scales: how to (ab) use them. Medical education 38, 12","author":"Susan Jamieson","year":"2004","unstructured":"Susan Jamieson 2004. Likert scales: how to (ab) use them. Medical education 38, 12 (2004), 1217\u20131218."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10257-016-0306-y"},{"key":"e_1_3_2_1_16_1","volume-title":"Template analysis. Qualitative Methods and Analysis in Organisational Research: A Practical Guide","author":"King Nigel","year":"1998","unstructured":"Nigel King. 1998. Template analysis. Qualitative Methods and Analysis in Organisational Research: A Practical Guide (1998)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2018.597"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1177\/2158244019853908"},{"key":"e_1_3_2_1_19_1","unstructured":"Marsh. [n.d.]. 2019 Cyber Catalyst Designations: 17 Cybersecurity Solutions Chosen. https:\/\/www.marsh.com\/us\/services\/cyber-risk\/cyber-catalyst.html[accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA49311.2020.9139703"},{"key":"e_1_3_2_1_21_1","unstructured":"National\u00a0Institute of Standards and Technology. [n.d.]. Cybersecurity Framework. https:\/\/www.nist.gov\/cyberframework [accessed on 07\/02\/2020]."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2160718.2160721"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.03.009"},{"key":"e_1_3_2_1_25_1","volume-title":"Cyber security controls effectiveness: a qualitative assessment of cyber essentials","author":"Such M","unstructured":"Jose\u00a0M Such, John Vidler, Timothy Seabrook, and Awais Rashid. 2015. Cyber security controls effectiveness: a qualitative assessment of cyber essentials. Lancaster University."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-017-0059-y"},{"key":"e_1_3_2_1_27_1","unstructured":"Daniel Woods and Tyler Moore. 2019. Does insurance have a future in governing cybersecurity?IEEE Security and Privacy Magazine(2019)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1080\/23738871.2017.1360927"}],"event":{"name":"ARES 2021: The 16th International Conference on Availability, Reliability and Security","location":"Vienna Austria","acronym":"ARES 2021"},"container-title":["Proceedings of the 16th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465481.3470038","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3465481.3470038","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:17:24Z","timestamp":1750191444000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465481.3470038"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,17]]},"references-count":27,"alternative-id":["10.1145\/3465481.3470038","10.1145\/3465481"],"URL":"https:\/\/doi.org\/10.1145\/3465481.3470038","relation":{},"subject":[],"published":{"date-parts":[[2021,8,17]]},"assertion":[{"value":"2021-08-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}