<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03408622</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-16T20:49:53+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Semi-automated Information Security Risk Assessment Framework for Analyzing Enterprises Security Maturity Level</title>
            <author role="aut">
              <persName>
                <forename type="first">Blerton</forename>
                <surname>Abazi</surname>
              </persName>
              <email type="md5">3588b5a82bdaa352f30953ca7dbb57f2</email>
              <email type="domain">ubt-uni.net</email>
              <idno type="idhal" notation="numeric">1115300</idno>
              <idno type="halauthorid" notation="string">2325041-1115300</idno>
              <affiliation ref="#struct-1079622"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Andrea</forename>
                <surname>Kő</surname>
              </persName>
              <email type="md5">be428f3a7ca6c1bf90a49dac35c8097c</email>
              <email type="domain">uni-corvinus.hu</email>
              <idno type="idhal" notation="numeric">1115301</idno>
              <idno type="halauthorid" notation="string">2285570-1115301</idno>
              <affiliation ref="#struct-332259"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2021-10-29 11:31:39</date>
              <date type="whenModified">2021-11-03 03:39:58</date>
              <date type="whenReleased">2021-11-02 10:51:01</date>
              <date type="whenProduced">2019-12-16</date>
              <date type="whenEndEmbargoed">2022-01-01</date>
              <ref type="file" target="https://hal.science/hal-03408622v1/document">
                <date notBefore="2022-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-03408622v1/file/493186_1_En_13_Chapter.pdf" id="file-3408622-2989003">
                <date notBefore="2022-01-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03408622</idno>
            <idno type="halUri">https://hal.science/hal-03408622</idno>
            <idno type="halBibtex">abazi:hal-03408622</idno>
            <idno type="halRefHtml">&lt;i&gt;13th International Conference on Research and Practical Issues of Enterprise Information Systems (CONFENIS)&lt;/i&gt;, Dec 2019, Prague, Czech Republic. pp.141-152, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-030-37632-1_13"&gt;&amp;#x27E8;10.1007/978-3-030-37632-1_13&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">13th International Conference on Research and Practical Issues of Enterprise Information Systems (CONFENIS), Dec 2019, Prague, Czech Republic. pp.141-152, &amp;#x27E8;10.1007/978-3-030-37632-1_13&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-3408622-2989003"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="SHS">Sciences de l'Homme et de la Société</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-LNBIP" corresp="IFIP">LNBIP Proceedings</idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC8" corresp="IFIP-TC">IFIP-TC8: Information Systems</idno>
            <idno type="stamp" n="IFIP-WG8-9" corresp="IFIP-WG">WG8-9: Enterprise Information Systems</idno>
            <idno type="stamp" n="IFIP-CONFENIS">IFIP-CONFENIS</idno>
            <idno type="stamp" n="IFIP-LNBIP-375" corresp="IFIP-LNBIP">Research and Practical Issues of Enterprise Information Systems - CONFENIS</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 4: Security and Privacy Issues</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Semi-automated Information Security Risk Assessment Framework for Analyzing Enterprises Security Maturity Level</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Blerton</forename>
                    <surname>Abazi</surname>
                  </persName>
                  <email type="md5">3588b5a82bdaa352f30953ca7dbb57f2</email>
                  <email type="domain">ubt-uni.net</email>
                  <idno type="idhal" notation="numeric">1115300</idno>
                  <idno type="halauthorid" notation="string">2325041-1115300</idno>
                  <affiliation ref="#struct-1079622"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Andrea</forename>
                    <surname>Kő</surname>
                  </persName>
                  <email type="md5">be428f3a7ca6c1bf90a49dac35c8097c</email>
                  <email type="domain">uni-corvinus.hu</email>
                  <idno type="idhal" notation="numeric">1115301</idno>
                  <idno type="halauthorid" notation="string">2285570-1115301</idno>
                  <affiliation ref="#struct-332259"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Business Information Processing</title>
                <meeting>
                  <title>13th International Conference on Research and Practical Issues of Enterprise Information Systems (CONFENIS)</title>
                  <date type="start">2019-12-16</date>
                  <date type="end">2019-12-17</date>
                  <settlement>Prague</settlement>
                  <country key="CZ">Czech Republic</country>
                </meeting>
                <editor>Petr Doucek</editor>
                <editor>Josef Basl</editor>
                <editor>A Min Tjoa</editor>
                <editor>Maria Raffai</editor>
                <editor>Antonin Pavlicek</editor>
                <editor>Katrin Detter</editor>
                <imprint>
                  <publisher>Springer International Publishing</publisher>
                  <biblScope unit="serie">Research and Practical Issues of Enterprise Information Systems</biblScope>
                  <biblScope unit="volume">LNBIP-375</biblScope>
                  <biblScope unit="pp">141-152</biblScope>
                  <date type="datePub">2019</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-030-37632-1_13</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">ISO 27001</term>
                <term xml:lang="en">Enterprises</term>
                <term xml:lang="en">Risk assessment</term>
                <term xml:lang="en">Information security and privacy</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halDomain" n="shs.info">Humanities and Social Sciences/Library and information sciences</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>While organizations spend millions of dollars on developing security systems at the highest level, one of the most significant areas of weaknesses, and loss remain their employees. Lack of employee training and security expertise, therefore, can cause huge loss, despite other measure being put in place. Cyberattacks are often able to commit cybercrime due to a lack of qualified cyber-security staff and the limited number of IT staff employed to keep pace with continuing security development and advancement. Testing, training and employing staff therefore is a critical measure for all organizations to reduce the vulnerabilities yet seems to be an area still not fully addressed. Businesses and organizations need to provide training to promote understanding for staff at every level, so they are aware of their roles and responsibilities in protecting against security threats. However, this is a colossal undertaking, and until this learning gap is resolved, financial institutions must continue to fight and efficiently manage cybersecurity threats. The aim of the current research paper is to present and propose a semi-automated risk assessment framework and a security maturity model, which can be helpful for auditors, security officers and managers. It is based on the ISO 27001 and utilize the relevant standards as well. The related risk management solution is a web-based software application. The current study targeted information security in Kosovo, specifically in the banking sector, IT industry and insurance field.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 8</org>
              <org type="consortium">WG 8.9</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-1079622" status="VALID">
          <orgName>University for Business and Technology [Prishtina]</orgName>
          <orgName type="acronym">UBT</orgName>
          <desc>
            <address>
              <country key="XK"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-332259" status="VALID">
          <idno type="ROR">https://ror.org/01vxfm326</idno>
          <orgName>Corvinus University of Budapest</orgName>
          <desc>
            <address>
              <addrLine>1093 Budapest, Fővám tér 8.</addrLine>
              <country key="HU"/>
            </address>
            <ref type="url">http://www.uni-corvinus.hu</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>