|
2026 Newspaper Article Moving from heat maps to dollars: a guide to financial cyberrisk quantificationSlapničar, Sergeja, Joshi, Chaitanya and Žust, Uroš (2026, 10 28). Moving from heat maps to dollars: a guide to financial cyberrisk quantification ISACA journal |
|
2026 Newspaper Article From parallel to integrated cyber risk assuranceČular, Marko, Drašček, Matej, Slapničar, Sergeja and Vuko, Tina (2026, 10 20). From parallel to integrated cyber risk assurance Institute of Internal Auditors Singapore Newsletter |
|
2026 Journal Article Which factors improve organizational cyber resilience?Tsen, Elinor, Ko, Ryan KL and Slapničar, Sergeja (2026). Which factors improve organizational cyber resilience?. Journal of Organizational Computing and Electronic Commerce, 36 (4), 1-30. doi: 10.1080/10919392.2026.2736896 |
|
2026 Conference Publication Governing the ungovernable: epistemic opacity of AI and improvisational accountabilityDessalegn, Mihret, Slapničar, Sergeja and Drašček, Matej (2026). Governing the ungovernable: epistemic opacity of AI and improvisational accountability. 3rd International Conference on Auditing and AI, Duisburg, Germany, 3 - 4 September 2026. |
|
2026 Conference Publication Internal auditor’s assurance of Artificial Intelligence: Its enablers and a risk mitigation pathwaySlapničar, Sergeja, Vuko, Tina, Mihret, Dessalegn and Drašček, Matej (2026). Internal auditor’s assurance of Artificial Intelligence: Its enablers and a risk mitigation pathway. 11th Workshop in Audit Quality, Cagliari, Italy, 25 - 26 September 2026. Online: Association Research on Audit Quality. |
|
2026 Journal Article The FABRICS framework: a Bayesian approach to financial quantification of cyber riskSlapničar, Sergeja and Joshi, Chaitanya (2026). The FABRICS framework: a Bayesian approach to financial quantification of cyber risk. Computers and Security, 167 104900, 1-18. doi: 10.1016/j.cose.2026.104900 |
|
2026 Journal Article A rising tide of operational risk: new directions for management control research on core and novel risksOelrich, Sebastian and Slapničar, Sergeja (2026). A rising tide of operational risk: new directions for management control research on core and novel risks. Journal of Management Control, 37 (2), 285-294. doi: 10.1007/s00187-026-00418-y |
|
2026 Conference Publication Does cybersecurity disclosure regulation reduce cyber risk? Evidence from the 2023 SEC RuleNeumann, Alexander, Slapničar, Sergeja and Ragunathan, Vanitha (2026). Does cybersecurity disclosure regulation reduce cyber risk? Evidence from the 2023 SEC Rule. 48th Annual Congress of the European Accounting Association (EAA), Prague, Czechia, 27-29 May 2026. Online: European Accounting Association. |
|
2026 Journal Article Collaborating across boundaries: toward an integrated cyber risk assessment by internal auditors and cybersecurity professionalsSlapničar, Sergeja, Vuko, Tina, Čular, Marko and Drašček, Matej (2026). Collaborating across boundaries: toward an integrated cyber risk assessment by internal auditors and cybersecurity professionals. Contemporary Accounting Research, 43 (2), 1034-1063. doi: 10.1111/1911-3846.70052 |
|
2025 Journal Article The effect of organizational cyber resilience on cyber incident outcomesTsen, Elinor, Ko, Ryan K. L. and Slapnicar, Sergeja (2025). The effect of organizational cyber resilience on cyber incident outcomes. Journal of Cybersecurity, 11 (1) tyaf040, 1-15. doi: 10.1093/cybsec/tyaf040 |
|
2025 Journal Article Cyber risk management: an illusion of a risk-based approachSlapničar, Sergeja, Axelsen, Micheal and Eulerich, Marc (2025). Cyber risk management: an illusion of a risk-based approach. Journal of Management Control, 37 (2), 359-394. doi: 10.1007/s00187-025-00401-z |
|
2025 Journal Article Optimizing supplier cyberrisk assessmentSlapnicar, Sergeja and Vidmar, Tim (2025). Optimizing supplier cyberrisk assessment. ISACA journal, 5 (2025). |
|
2025 Journal Article Process Theory of Supplier Cyber Risk AssessmentSlapnicar, Sergeja, Vidmar, Tim and Tsen, Elinor (2025). Process Theory of Supplier Cyber Risk Assessment. Australasian Journal of Information Systems, 29 (2), 1-33. doi: 10.3127/ajis.v29.5323 |
|
2025 Journal Article Contrasting the optimal resource allocation to cybersecurity controls and cyber insurance using prospect theory versus expected utility theoryJoshi, Chaitanya, Slapničar, Sergeja, Yang, Jinming and Ko, Ryan (2025). Contrasting the optimal resource allocation to cybersecurity controls and cyber insurance using prospect theory versus expected utility theory. Computers and Security, 154 104450, 1-14. doi: 10.1016/j.cose.2025.104450 |
|
2025 Conference Publication Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?Slapnicar, Sergeja, Vuko, Tina, Cular, Marko and Drascek, Matej (2025). Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?. European Accounting Association Congress, Rome, Italy, 28-30 May 2025. European Accounting Association. |
|
2025 Conference Publication Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?Slapničar, S., Vuko, T., Čular, M. and Drašček, M. (2025). Divergent cyber risk assessment by information security managers and internal auditors: Irreconcilable differences or complementary layers?. European Accounting Association Congress, Rome, Italy, 28-30 May 2025. European Accounting Association. |
|
2024 Journal Article Cybersecurity assuranceDrašček, Matej, Slapničar, Sergeja, Vuko, Tina and Čular, Marko (2024). Cybersecurity assurance. Internal Auditor, 20-22. |
|
2024 Journal Article Key drivers of cybersecurity audit effectiveness: A neo-institutional perspectiveVuko Tina, Slapničar Sergeja, Čular Marko and Matej Drašček (2024). Key drivers of cybersecurity audit effectiveness: A neo-institutional perspective. International Journal of Auditing, 29 (1), 188-206. doi: 10.1111/ijau.12365 |
|
2024 Journal Article The three lines model in cybersecurity governance and risk managementBongiovanni, Ivano, Slapničar, Sergeja, Axelsen, Micheal and Stockdale, David (2024). The three lines model in cybersecurity governance and risk management. ISACA Journal, 1 (2024). |
|
2023 Journal Article A pathway model to five lines of accountability in cybersecurity governanceSlapničar, Sergeja, Axelsen, Micheal, Bongiovanni, Ivano and Stockdale, David (2023). A pathway model to five lines of accountability in cybersecurity governance. International Journal of Accounting Information Systems, 51 100642, 100642. doi: 10.1016/j.accinf.2023.100642 |
