@article{Weber, author = {Weber, Kristin}, title = {Data Governance}, series = {IT-Governance}, volume = {6}, journal = {IT-Governance}, number = {13}, pages = {3 -- 8}, language = {de} } @article{EbertWeber, author = {Ebert, Nico and Weber, Kristin}, title = {Sicherheit von Cloud-basierten Plattformen zur Anwendungsintegration}, series = {FHWS Science Journal}, volume = {3(2015)}, journal = {FHWS Science Journal}, number = {2}, url = {http://nbn-resolving.de/urn:nbn:de:bvb:863-opus-2975}, pages = {10 -- 22}, abstract = {Cloud-basierte Plattformen zur Anwendungsintegration versprechen die einfache und kosteng{\"u}nstige Integration zwischen Anwendungen in der Cloud und bestehenden „On-Premise"- Anwendungen. Sie bieten zahlreiche Anwendungsadapter und erlauben den grafischen Entwurf, die Ausf{\"u}hrung und die Verwaltung von komplexen Integrationsprozessen in der Cloud. Allerdings sind sie sicherheitskritische Elemente innerhalb der IT-Architektur, da sie Zugriff auf unterschiedliche Anwendungen und Daten des Unternehmens haben k{\"o}nnen. Daher stellt sich die Frage, inwiefern notwendige Sicherheitsanforderungen durch die Anbieter Cloud-basierter Plattformen erf{\"u}llt werden. In diesem Artikel werden sieben ausgew{\"a}hlte Integrationsplattformen detaillierter betrachtet und anhand der Sicherheitsanforderungen des Bundesamtes f{\"u}r Sicherheit in der Informationstechnik (BSI) bewertet.}, language = {de} } @inproceedings{WeberOttoOesterle, author = {Weber, Kristin and Otto, B. and {\"O}sterle, H.}, title = {Data Governance}, series = {Business Services: Konzepte, Technologien, Anwendungen; Proceedings der 9. Internationalen Tagung Wirtschaftsinformatik, Band 1}, volume = {246}, booktitle = {Business Services: Konzepte, Technologien, Anwendungen; Proceedings der 9. Internationalen Tagung Wirtschaftsinformatik, Band 1}, editor = {Hansen, H. and Karagiannis, D. and Fill, H.}, publisher = {{\"O}sterreichische Computer Gesellschaft}, address = {Wien}, pages = {589 -- 598}, language = {de} } @article{WeberEbert, author = {Weber, Kristin and Ebert, N.}, title = {Cloud-basierte Plattformen zur Anwendungsintegration}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {52}, journal = {HMD Praxis der Wirtschaftsinformatik}, number = {6}, doi = {10.1365/s40702-015-0186-5}, pages = {931 -- 944}, language = {de} } @incollection{WeberOtto, author = {Weber, Kristin and Otto, B.}, title = {Data Governance}, series = {Daten- und Informationsqualit{\"a}t - Auf dem Weg zur Information Excellence}, booktitle = {Daten- und Informationsqualit{\"a}t - Auf dem Weg zur Information Excellence}, editor = {Hildebrand, Knut and Gebauer, M. and Hinrichs, H. and Mielke, M.}, edition = {2}, publisher = {Vieweg+Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1453-1 , 3-8348-1453-9 , 978-3-8348-9953-8}, pages = {277 -- 295}, language = {de} } @incollection{WeberKlotz, author = {Weber, Kristin and Klotz, M.}, title = {Informations- und Datenmanagement}, series = {Handbuch IT-Management - Konzepte, Methoden, L{\"o}sungen und Arbeitshilfen f{\"u}r die Praxis}, booktitle = {Handbuch IT-Management - Konzepte, Methoden, L{\"o}sungen und Arbeitshilfen f{\"u}r die Praxis}, editor = {Tiemeyer, Ernst and Bergmann, Robert}, edition = {5}, publisher = {Hanser}, address = {M{\"u}nchen}, isbn = {978-3-446-43557-5 , 978-3-446-43622-0}, pages = {553 -- 610}, language = {de} } @incollection{WeberOtto, author = {Weber, Kristin and Otto, Boris}, title = {Data Governance}, series = {Daten- und Informationsqualit{\"a}t - Auf dem Weg zur Information Excellence}, booktitle = {Daten- und Informationsqualit{\"a}t - Auf dem Weg zur Information Excellence}, editor = {Hildebrand, Knut and Gebauer, M. and Hinrichs, H. and Mielke, M.}, edition = {3}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-09214-6 , 978-3-658-09213-9}, pages = {269 -- 286}, language = {de} } @book{Weber, author = {Weber, Kristin}, title = {Data Governance-Referenzmodell}, publisher = {Difo-Druck}, address = {Bamberg}, language = {de} } @incollection{WeberEbert, author = {Weber, Kristin and Ebert, N.}, title = {Sicherheit von Cloud-basierten Plattformen zur Anwendungsintegration}, series = {Information Security Day}, booktitle = {Information Security Day}, address = {W{\"u}rzburg}, language = {de} } @incollection{WeberEbert, author = {Weber, Kristin and Ebert, N.}, title = {Integration Platform as a Service in der Praxis}, series = {Multikonferenz Wirtschaftsinformatik (MKWI)}, booktitle = {Multikonferenz Wirtschaftsinformatik (MKWI)}, address = {Ilmenau}, language = {de} } @inproceedings{WeberCheongOttoetal., author = {Weber, Kristin and Cheong, L. and Otto, B. and Chang, V.}, title = {Organising Accountabilities for Data Quality Management}, series = {Proceedings DW2008: Synergien durch Integration und Informationslogistik}, booktitle = {Proceedings DW2008: Synergien durch Integration und Informationslogistik}, editor = {Dinter, B. and Winter, R. and Chamoni, P. and Gronau, P. and Turowski, K.}, publisher = {K{\"o}llen Druck + Verlag}, address = {St. Gallen, Bonn}, pages = {347 -- 359}, language = {en} } @article{Weber, author = {Weber, Kristin}, title = {Rezension „Security Awareness"}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {57}, journal = {HMD Praxis der Wirtschaftsinformatik}, issn = {2198-2775}, pages = {631 -- 633}, abstract = {Der „Faktor Mensch" ist heute im Zeitalter der Digitalisierung wichtiger denn je f{\"u}r die Gew{\"a}hrleistung der Informationssicherheit in Organisationen. Durch geeignete Sensibilisierungsmaßnahmen werden die Anwender zu wertvollen Ressourcen f{\"u}r den Schutz sensibler Informationen und der IT-Infrastruktur. Und obwohl diese Sensibilisierung - oder Information Security Awareness - ein hochaktuelles und relevantes Thema ist, gibt es derzeit sehr wenige deutschsprachige B{\"u}cher dazu auf dem Markt. Grund genug, sich mit einer von zwei Neuerscheinungen der letzten Jahre auseinanderzusetzen.}, language = {de} } @article{WeberOttoOesterle, author = {Weber, Kristin and Otto, B. and {\"O}sterle, H.}, title = {One Size Does Not Fit All}, series = {ACM Journal of Data and Information Quality}, volume = {1}, journal = {ACM Journal of Data and Information Quality}, number = {1}, issn = {1936-1963 , 1936-1955}, pages = {Artikel Nr. 4}, language = {en} } @article{Weber, author = {Weber, Kristin}, title = {Insider Threats}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {57}, journal = {HMD Praxis der Wirtschaftsinformatik}, issn = {2198-2775}, pages = {613 -- 627}, abstract = {Eine große Bedrohung f{\"u}r die Informationssicherheit geht von Mitarbeitern aus, die absichtlich der eigenen Organisation schaden wollen. Mitarbeiter besitzen Zugriffsrechte f{\"u}r sensible Informationen und genießen das Vertrauen des Unternehmens. Werden sie allerdings aufgrund pers{\"o}nlicher Motive oder {\"a}ußerer Umst{\"a}nde zu Whistleblowern, Spionen, Betr{\"u}gern, Saboteuren, Malicious Enablern oder Datendieben, k{\"o}nnen sie großen Schaden anrichten. Dieser Artikel untersucht die Motive sogenannter Malicious Insider und stellt die sechs verschiedenen Typen anhand von realen Beispielen der j{\"u}ngeren Vergangenheit vor. Er zeigt, welche erkennenden, pr{\"a}ventiven und reaktiven Maßnahmen Organisationen ergreifen sollten, um die Risiken durch Attacken von b{\"o}swilligen Insidern zu minimieren. Der Fokus liegt auf den erkennenden Maßnahmen. Durch fr{\"u}hzeitiges Eingreifen werden Mitarbeiter gar nicht erst zu Malicious Insidern. Eine Kombination aus pers{\"o}nlicher Veranlagung (z. B. Introversion, Gier, Kritikunf{\"a}higkeit), Stressfaktoren (z. B. Frustration, Unzufriedenheit) und auff{\"a}lligem Verhalten (z. B. außergew{\"o}hnliche Arbeitszeiten oder Reiseziele) weist h{\"a}ufig auf potentielle T{\"a}ter hin.}, language = {de} } @incollection{MetzgerFertigSchuetzetal., author = {Metzger, Lukas and Fertig, Tobias and Sch{\"u}tz, Andreas E and Weber, Kristin}, title = {Concerning Habits-Gewohnheit f{\"o}rdern zur Erh{\"o}hung der Information Security Awareness}, series = {Faktor Mensch}, booktitle = {Faktor Mensch}, isbn = {978-3-658-34523-5}, pages = {349 -- 364}, language = {en} } @incollection{WeberSchuetzFertig, author = {Weber, Kristin and Sch{\"u}tz, Andreas E and Fertig, Tobias}, title = {Insider Threats-Der Feind in den eigenen Reihen}, series = {Faktor Mensch}, booktitle = {Faktor Mensch}, isbn = {978-3-658-34523-5}, pages = {311 -- 329}, language = {en} } @article{FertigSchuetzWeber, author = {Fertig, Tobias and Sch{\"u}tz, Andreas and Weber, Kristin}, title = {Automated Measuring of Information Security Related Habits}, language = {en} } @book{WeberReinheimer, author = {Weber, Kristin and Reinheimer, Stefan}, title = {Faktor Mensch}, isbn = {978-3-658-34523-5}, language = {en} } @inproceedings{MuellerRosenthalWeber, author = {M{\"u}ller, Nicholas and Rosenthal, Paul and Weber, Kristin}, title = {Introduction to the Minitrack on Security and Privacy Aspects of Human-Computer-Interactions}, series = {Proceedings of the 55th Hawaii International Conference on System Sciences}, booktitle = {Proceedings of the 55th Hawaii International Conference on System Sciences}, language = {en} } @inproceedings{FertigSchuetzWeber, author = {Fertig, Tobias and Sch{\"u}tz, Andreas and Weber, Kristin}, title = {Developing a Maturity Model for Information Security Awareness Using a Polytomous Extension of the Rasch Model}, series = {56th Hawaii International Conference on System Sciences (HICSS-56)}, booktitle = {56th Hawaii International Conference on System Sciences (HICSS-56)}, language = {en} } @article{JanikWeberSchuetzetal., author = {Janik, Maximilian and Weber, Kristin and Sch{\"u}tz, Andreas E and Fertig, Tobias}, title = {Informationssicheres Verhalten automatisiert messen}, series = {DA-CH Security}, journal = {DA-CH Security}, pages = {1 -- 12}, language = {en} } @inproceedings{SchuetzFertigWeber, author = {Sch{\"u}tz, Andreas E and Fertig, Tobias and Weber, Kristin}, title = {Defining a Core Ontology for Medical Devices in Germany to Ensure Semantic Interoperability}, series = {International Conference on Modelling and Development of Intelligent Systems}, booktitle = {International Conference on Modelling and Development of Intelligent Systems}, doi = {10.1007/978-3-030-68527-0_25}, pages = {394 -- 410}, language = {en} } @inproceedings{WeberMuellerRosenthal, author = {Weber, Kristin and M{\"u}ller, Nicholas and Rosenthal, Paul}, title = {Introduction to the Minitrack on Security and Privacy Aspects of Human-Computer-Interactions}, series = {Proceedings of the 54th Hawaii International Conference on System Sciences}, booktitle = {Proceedings of the 54th Hawaii International Conference on System Sciences}, language = {en} } @inproceedings{MuellerRosenthalWeber, author = {M{\"u}ller, Nicholas and Rosenthal, Paul and Weber, Kristin}, title = {Introduction to the Minitrack on Security and Privacy Aspects of Human-Computer-Interactions}, series = {Proceedings of the 53rd Hawaii International Conference on System Sciences}, booktitle = {Proceedings of the 53rd Hawaii International Conference on System Sciences}, language = {en} } @incollection{KlingenbergWeber, author = {Klingenberg, Christiana and Weber, Kristin}, title = {Datenqualit{\"a}t in der Praxis: Einfache Methoden zur Umsetzung des Datenqualit{\"a}tsmanagements}, series = {Daten-und Informationsqualit{\"a}t: Die Grundlage der Digitalisierung}, booktitle = {Daten-und Informationsqualit{\"a}t: Die Grundlage der Digitalisierung}, isbn = {9783446481022}, doi = {10.1007/978-3-658-47317-4_26}, pages = {485 -- 505}, language = {en} } @incollection{WeberSaueressigSchuetz, author = {Weber, Kristin and Saueressig, Gabriele and Sch{\"u}tz, Andreas E}, title = {Informationssicherheit und Datenschutz an Hochschulen organisieren}, series = {Angewandte Forschung in der Wirtschaftsinformatik 2019}, booktitle = {Angewandte Forschung in der Wirtschaftsinformatik 2019}, isbn = {9783944330624}, pages = {51 -- 60}, language = {en} } @book{Weber, author = {Weber, Kristin}, title = {Mensch und Informationssicherheit: Verhalten verstehen, Awareness f{\"o}rdern, Human Hacking erkennen}, isbn = {978-3-446-48040-7}, language = {en} } @incollection{OttoWeber, author = {Otto, Boris and Weber, Kristin}, title = {Data Governance}, series = {Daten-und Informationsqualit{\"a}t: Auf dem Weg zur Information Excellence}, booktitle = {Daten-und Informationsqualit{\"a}t: Auf dem Weg zur Information Excellence}, pages = {269 -- 286}, language = {en} } @inproceedings{MuellerRosenthalWeber, author = {M{\"u}ller, Nicholas and Rosenthal, Paul and Weber, Kristin}, title = {Introduction to the Minitrack on Security and Privacy Aspects of Human-Computer-Interactions}, series = {Proceedings of the 56th Hawaii International Conference on System Sciences}, booktitle = {Proceedings of the 56th Hawaii International Conference on System Sciences}, language = {en} } @article{SchuetzFertigWeberetal., author = {Sch{\"u}tz, Andreas E and Fertig, Tobias and Weber, Kristin and Vu, Henry and Hirth, Matthias and Tran-Gia, Thomas}, title = {Vertrauen ist gut, Blockchain ist besser - Einsatzm{\"o}glichkeiten von Blockchain f{\"u}r Vertrauensprobleme im Crowdsourcing}, series = {HMD Praxis Der Wirtschaftsinformatik}, volume = {55}, journal = {HMD Praxis Der Wirtschaftsinformatik}, doi = {10.1365/s40702-018-00471-9}, pages = {1155 -- 1166}, language = {en} } @inproceedings{FertigSchuetzWeberetal., author = {Fertig, Tobias and Sch{\"u}tz, Andreas E and Weber, Kristin and M{\"u}ller, Nicholas}, title = {Measuring the Impact of E-Learning Platforms on Information Security Awareness}, series = {Learning and Collaboration Technologies. Designing Learning Experiences: 6th International Conference, LCT 2019, Held as Part of the 21st HCI International Conference, HCII 2019, Orlando, FL, USA, July 26-31, 2019, Proceedings, Part I 21}, booktitle = {Learning and Collaboration Technologies. Designing Learning Experiences: 6th International Conference, LCT 2019, Held as Part of the 21st HCI International Conference, HCII 2019, Orlando, FL, USA, July 26-31, 2019, Proceedings, Part I 21}, pages = {26 -- 37}, language = {en} } @inproceedings{SchuetzFertigWeberetal., author = {Sch{\"u}tz, Andreas E and Fertig, Tobias and Weber, Kristin and M{\"u}ller, Nicholas}, title = {How E-Learning Can Facilitate Information Security Awareness}, series = {Learning and Collaboration Technologies. Designing Learning Experiences: 6th International Conference, LCT 2019, Held as Part of the 21st HCI International Conference, HCII 2019, Orlando, FL, USA, July 26-31, 2019, Proceedings, Part I 21}, booktitle = {Learning and Collaboration Technologies. Designing Learning Experiences: 6th International Conference, LCT 2019, Held as Part of the 21st HCI International Conference, HCII 2019, Orlando, FL, USA, July 26-31, 2019, Proceedings, Part I 21}, pages = {390 -- 401}, language = {en} } @inproceedings{FertigSchuetzWeberetal., author = {Fertig, Tobias and Sch{\"u}tz, Andreas E and Weber, Kristin and M{\"u}ller, Nicholas}, title = {Towards an Information Security Awareness Maturity Model}, series = {Learning and Collaboration Technologies. Human and Technology Ecosystems: 7th International Conference, LCT 2020, Held as Part of the 22nd HCI International Conference, HCII 2020, Copenhagen, Denmark, July 19-24, 2020, Proceedings, Part II 22}, booktitle = {Learning and Collaboration Technologies. Human and Technology Ecosystems: 7th International Conference, LCT 2020, Held as Part of the 22nd HCI International Conference, HCII 2020, Copenhagen, Denmark, July 19-24, 2020, Proceedings, Part II 22}, pages = {587 -- 599}, language = {en} } @article{EbertWeberKoruna, author = {Ebert, Nico and Weber, Kristin and Koruna, Stefan}, title = {Integration platform as a service}, series = {Business \& Information Systems Engineering}, volume = {59}, journal = {Business \& Information Systems Engineering}, doi = {10.1007/s12599-017-0486-0}, pages = {375 -- 379}, language = {en} } @article{SchuetzWeber, author = {Sch{\"u}tz, Andreas and Weber, Kristin}, title = {Security Awareness: Nicht nur schulen - {\"u}berzeugen Sie}, series = {DA-CH Security}, journal = {DA-CH Security}, pages = {1 -- 12}, language = {en} } @inproceedings{FertigSchuetzWeber, author = {Fertig, Tobias and Sch{\"u}tz, Andreas Erwin and Weber, Kristin}, title = {Current Issues Of Metrics For Information Security Awareness}, series = {ECIS}, booktitle = {ECIS}, language = {en} } @inproceedings{JanikWeber, author = {Janik, Maximilian and Weber, Kristin}, title = {IT-Sicherheitsanalysen von PLM-Systemen}, series = {DACH Security}, booktitle = {DACH Security}, pages = {202 -- 213}, language = {en} } @inproceedings{WeberSchuetz, author = {Weber, Kristin and Sch{\"u}tz, Andreas E}, title = {ISIS12-Hack: Mitarbeiter sensibilisieren statt informieren}, series = {MKWI}, booktitle = {MKWI}, pages = {1737 -- 1748}, language = {en} } @inproceedings{MuellerRosenthalWeber, author = {M{\"u}ller, Nicholas and Rosenthal, Paul and Weber, Kristin}, title = {Introduction to the Minitrack on Security and Privacy Aspects of Human-Computer-Interactions}, series = {Proceedings of the 58th Hawaii International Conference on System Sciences}, booktitle = {Proceedings of the 58th Hawaii International Conference on System Sciences}, language = {en} } @inproceedings{WeberSchuetzFertigetal., author = {Weber, Kristin and Sch{\"u}tz, Andreas E and Fertig, Tobias and M{\"u}ller, Nicholas}, title = {Exploiting the human factor: social engineering attacks on cryptocurrency users}, series = {Learning and Collaboration Technologies. Human and Technology Ecosystems: 7th International Conference, LCT 2020, Held as Part of the 22nd HCI International Conference, HCII 2020, Copenhagen, Denmark, July 19-24, 2020, Proceedings, Part II 22}, booktitle = {Learning and Collaboration Technologies. Human and Technology Ecosystems: 7th International Conference, LCT 2020, Held as Part of the 22nd HCI International Conference, HCII 2020, Copenhagen, Denmark, July 19-24, 2020, Proceedings, Part II 22}, pages = {650 -- 668}, language = {en} } @book{WeberSchuetzFertig, author = {Weber, Kristin and Sch{\"u}tz, Andreas E and Fertig, Tobias}, title = {Grundlagen und Anwendung von Information Security Awareness: Mitarbeiter zielgerichtet f{\"u}r Informationssicherheit sensibilisieren}, isbn = {978-3-658-26257-0}, language = {en} } @article{ReinheimerWeber, author = {Reinheimer, Stefan and Weber, Kristin}, title = {Faktor Mensch Teil 1-vor-Corona-Phase}, series = {HMD Praxis der Wirtschaftsinformatik}, volume = {57}, journal = {HMD Praxis der Wirtschaftsinformatik}, number = {3}, doi = {10.1365/s40702-020-00619-6}, pages = {369 -- 371}, language = {en} } @incollection{WeberVeitJohannsen, author = {Weber, Kristin and Veit, David and Johannsen, Andreas}, title = {Anforderungen an die IT-Dokumentation aus Sicht von Informationssicherheit und Datenschutz}, series = {Angewandte Forschung in der Wirtschaftsinformatik}, booktitle = {Angewandte Forschung in der Wirtschaftsinformatik}, pages = {103 -- 114}, language = {en} } @inproceedings{SchuetzWeberFertig, author = {Sch{\"u}tz, Andreas Erwin and Weber, Kristin and Fertig, Tobias}, title = {Assessing the Information Security Awareness of University Students}, language = {en} } @book{WeberKlingenberg, author = {Weber, Kristin and Klingenberg, Christiana}, title = {Data Governance: Der Leitfaden f{\"u}r die Praxis}, isbn = {9783446463882}, language = {en} } @article{SchuetzWeberFertig, author = {Sch{\"u}tz, Andreas E and Weber, Kristin and Fertig, Tobias}, title = {Analyze before you sensitize: preparation of a targeted ISA training}, series = {computer}, volume = {3}, journal = {computer}, pages = {4 -- 4}, language = {en} } @incollection{WeberKlotz, author = {Weber, Kristin and Klotz, Michael}, title = {Informations-und Datenmanagement}, series = {Handbuch IT-Management}, volume = {6}, booktitle = {Handbuch IT-Management}, pages = {187 -- 245}, language = {en} } @article{WeberOttoLis, author = {Weber, Kristin and Otto, Boris and Lis, Dominik}, title = {Data Governance}, series = {Daten-und Informationsqualit{\"a}t: Die Grundlage der Digitalisierung}, journal = {Daten-und Informationsqualit{\"a}t: Die Grundlage der Digitalisierung}, pages = {271 -- 291}, language = {en} } @article{KlingenbergWeber, author = {Klingenberg, Christiana and Weber, Kristin}, title = {Kundendatenqualit{\"a}t im Zeitalter der digitalen Transformation}, series = {IT-Governance. Fachzeitschrift des ISACA Germany Chapter eV}, volume = {26}, journal = {IT-Governance. Fachzeitschrift des ISACA Germany Chapter eV}, pages = {7 -- 13}, language = {en} } @incollection{KlingenbergWeber, author = {Klingenberg, Christiana and Weber, Kristin}, title = {Data Governance: Der Leitfaden f{\"u}r die Praxis}, series = {Daten- und Informationsqualit{\"a}t}, booktitle = {Daten- und Informationsqualit{\"a}t}, publisher = {Springer Vieweg}, isbn = {9783446481022}, doi = {10.1007/978-3-658-47317-4_16}, language = {en} }