id	sid	tid	token	lemma	pos
ajis02-5323	1	1	paper	paper	NOUN
ajis02-5323	1	2	title	title	NOUN
ajis02-5323	1	3	(	(	PUNCT
ajis02-5323	1	4	paper	paper	NOUN
ajis02-5323	1	5	title	title	NOUN
ajis02-5323	1	6	style	style	NOUN
ajis02-5323	1	7	)	)	PUNCT
ajis02-5323	1	8	australasian	australasian	ADJ
ajis02-5323	1	9	journal	journal	NOUN
ajis02-5323	1	10	of	of	ADP
ajis02-5323	1	11	information	information	NOUN
ajis02-5323	1	12	systems	system	NOUN
ajis02-5323	1	13	slapnicar	slapnicar	NOUN
ajis02-5323	1	14	,	,	PUNCT
ajis02-5323	1	15	vidmar	vidmar	NOUN
ajis02-5323	1	16	&	&	CCONJ
ajis02-5323	1	17	tsen	tsen	ADJ
ajis02-5323	1	18	2025	2025	NUM
ajis02-5323	1	19	,	,	PUNCT
ajis02-5323	1	20	vol	vol	NOUN
ajis02-5323	1	21	29	29	NUM
ajis02-5323	1	22	,	,	PUNCT
ajis02-5323	1	23	research	research	NOUN
ajis02-5323	1	24	article	article	NOUN
ajis02-5323	1	25	process	process	NOUN
ajis02-5323	1	26	theory	theory	NOUN
ajis02-5323	1	27	of	of	ADP
ajis02-5323	1	28	supplier	supplier	NOUN
ajis02-5323	1	29	cyber	cyber	NOUN
ajis02-5323	1	30	risk	risk	NOUN
ajis02-5323	1	31	assessment	assessment	NOUN
ajis02-5323	1	32	received	receive	VERB
ajis02-5323	1	33	 	 	SPACE
ajis02-5323	1	34	07	07	NUM
ajis02-5323	1	35	 	 	SPACE
ajis02-5323	1	36	jul	jul	PROPN
ajis02-5323	1	37	 	 	SPACE
ajis02-5323	1	38	2024	2024	NUM
ajis02-5323	1	39	,	,	PUNCT
ajis02-5323	1	40	accepted	accept	VERB
ajis02-5323	1	41	 	 	SPACE
ajis02-5323	1	42	02	02	NUM
ajis02-5323	1	43	 	 	SPACE
ajis02-5323	1	44	mar	mar	PROPN
ajis02-5323	1	45	  	  	SPACE
ajis02-5323	1	46	2025	2025	NUM
ajis02-5323	1	47	 	 	SPACE
ajis02-5323	1	48	after	after	ADP
ajis02-5323	1	49	 	 	SPACE
ajis02-5323	1	50	3	3	NUM
ajis02-5323	1	51	 	 	SPACE
ajis02-5323	1	52	rounds	round	NOUN
ajis02-5323	1	53	 	 	SPACE
ajis02-5323	1	54	of	of	ADP
ajis02-5323	1	55	review	review	NOUN
ajis02-5323	1	56	 	 	SPACE
ajis02-5323	1	57	with	with	ADP
ajis02-5323	1	58	 	 	SPACE
ajis02-5323	1	59	humza	humza	PROPN
ajis02-5323	1	60	 	 	SPACE
ajis02-5323	1	61	naseer	naseer	PROPN
ajis02-5323	1	62	as	as	ADP
ajis02-5323	1	63	accepting	accept	VERB
ajis02-5323	1	64	 	 	SPACE
ajis02-5323	1	65	senior	senior	ADJ
ajis02-5323	1	66	editor	editor	NOUN
ajis02-5323	1	67	,	,	PUNCT
ajis02-5323	1	68	m.	m.	NOUN
ajis02-5323	1	69	davern	davern	PROPN
ajis02-5323	1	70	&	&	CCONJ
ajis02-5323	1	71	s.	s.	PROPN
ajis02-5323	1	72	black	black	PROPN
ajis02-5323	1	73	as	as	ADP
ajis02-5323	1	74	editors	editor	NOUN
ajis02-5323	1	75	in	in	ADP
ajis02-5323	1	76	chief	chief	ADJ
ajis02-5323	1	77	1	1	NUM
ajis02-5323	1	78	process	process	NOUN
ajis02-5323	1	79	theory	theory	NOUN
ajis02-5323	1	80	of	of	ADP
ajis02-5323	1	81	supplier	supplier	NOUN
ajis02-5323	1	82	cyber	cyber	NOUN
ajis02-5323	1	83	risk	risk	NOUN
ajis02-5323	1	84	assessment	assessment	NOUN
ajis02-5323	1	85	sergeja	sergeja	PROPN
ajis02-5323	1	86	slapnicar	slapnicar	NOUN
ajis02-5323	1	87	school	school	NOUN
ajis02-5323	1	88	of	of	ADP
ajis02-5323	1	89	business	business	PROPN
ajis02-5323	1	90	university	university	PROPN
ajis02-5323	1	91	of	of	ADP
ajis02-5323	1	92	queensland	queensland	PROPN
ajis02-5323	1	93	australia	australia	PROPN
ajis02-5323	1	94	tim	tim	PROPN
ajis02-5323	1	95	vidmar	vidmar	PROPN
ajis02-5323	1	96	school	school	NOUN
ajis02-5323	1	97	of	of	ADP
ajis02-5323	1	98	business	business	PROPN
ajis02-5323	1	99	university	university	PROPN
ajis02-5323	1	100	of	of	ADP
ajis02-5323	1	101	queensland	queensland	PROPN
ajis02-5323	1	102	australia	australia	PROPN
ajis02-5323	1	103	elinor	elinor	PROPN
ajis02-5323	1	104	tsen	tsen	PROPN
ajis02-5323	1	105	school	school	PROPN
ajis02-5323	1	106	of	of	ADP
ajis02-5323	1	107	business	business	NOUN
ajis02-5323	1	108	university	university	PROPN
ajis02-5323	1	109	of	of	ADP
ajis02-5323	1	110	queensland	queensland	PROPN
ajis02-5323	1	111	australia	australia	PROPN
ajis02-5323	1	112	email	email	NOUN
ajis02-5323	1	113	:	:	PUNCT
ajis02-5323	1	114	e.tsen@uq.edu.au	e.tsen@uq.edu.au	PROPN
ajis02-5323	1	115	abstract	abstract	ADJ
ajis02-5323	1	116	managing	manage	VERB
ajis02-5323	1	117	cyber	cyber	NOUN
ajis02-5323	1	118	risk	risk	NOUN
ajis02-5323	1	119	in	in	ADP
ajis02-5323	1	120	the	the	DET
ajis02-5323	1	121	supply	supply	NOUN
ajis02-5323	1	122	chain	chain	NOUN
ajis02-5323	1	123	represents	represent	VERB
ajis02-5323	1	124	one	one	NUM
ajis02-5323	1	125	of	of	ADP
ajis02-5323	1	126	the	the	DET
ajis02-5323	1	127	most	most	ADV
ajis02-5323	1	128	significant	significant	ADJ
ajis02-5323	1	129	challenges	challenge	NOUN
ajis02-5323	1	130	in	in	ADP
ajis02-5323	1	131	cyber	cyber	ADJ
ajis02-5323	1	132	risk	risk	NOUN
ajis02-5323	1	133	management	management	NOUN
ajis02-5323	1	134	.	.	PUNCT
ajis02-5323	2	1	the	the	DET
ajis02-5323	2	2	paper	paper	NOUN
ajis02-5323	2	3	studies	study	NOUN
ajis02-5323	2	4	how	how	SCONJ
ajis02-5323	2	5	organizations	organization	NOUN
ajis02-5323	2	6	assess	assess	VERB
ajis02-5323	2	7	supplier	supplier	NOUN
ajis02-5323	2	8	cyber	cyber	NOUN
ajis02-5323	2	9	risk	risk	NOUN
ajis02-5323	2	10	.	.	PUNCT
ajis02-5323	3	1	we	we	PRON
ajis02-5323	3	2	used	use	VERB
ajis02-5323	3	3	a	a	DET
ajis02-5323	3	4	mixed	mixed	ADJ
ajis02-5323	3	5	-	-	PUNCT
ajis02-5323	3	6	method	method	NOUN
ajis02-5323	3	7	approach	approach	NOUN
ajis02-5323	3	8	.	.	PUNCT
ajis02-5323	4	1	we	we	PRON
ajis02-5323	4	2	conducted	conduct	VERB
ajis02-5323	4	3	33	33	NUM
ajis02-5323	4	4	semi	semi	ADJ
ajis02-5323	4	5	-	-	ADJ
ajis02-5323	4	6	structured	structured	ADJ
ajis02-5323	4	7	interviews	interview	NOUN
ajis02-5323	4	8	with	with	ADP
ajis02-5323	4	9	cybersecurity	cybersecurity	NOUN
ajis02-5323	4	10	experts	expert	NOUN
ajis02-5323	4	11	from	from	ADP
ajis02-5323	4	12	various	various	ADJ
ajis02-5323	4	13	organizations	organization	NOUN
ajis02-5323	4	14	closely	closely	ADV
ajis02-5323	4	15	involved	involve	VERB
ajis02-5323	4	16	in	in	ADP
ajis02-5323	4	17	supplier	supplier	NOUN
ajis02-5323	4	18	cyber	cyber	NOUN
ajis02-5323	4	19	risk	risk	NOUN
ajis02-5323	4	20	assessments	assessment	NOUN
ajis02-5323	4	21	,	,	PUNCT
ajis02-5323	4	22	as	as	ADV
ajis02-5323	4	23	well	well	ADV
ajis02-5323	4	24	as	as	ADP
ajis02-5323	4	25	consultants	consultant	NOUN
ajis02-5323	4	26	.	.	PUNCT
ajis02-5323	5	1	we	we	PRON
ajis02-5323	5	2	complemented	complement	VERB
ajis02-5323	5	3	our	our	PRON
ajis02-5323	5	4	qualitative	qualitative	ADJ
ajis02-5323	5	5	findings	finding	NOUN
ajis02-5323	5	6	by	by	ADP
ajis02-5323	5	7	surveying	survey	VERB
ajis02-5323	5	8	53	53	NUM
ajis02-5323	5	9	security	security	NOUN
ajis02-5323	5	10	experts	expert	NOUN
ajis02-5323	5	11	about	about	ADP
ajis02-5323	5	12	their	their	PRON
ajis02-5323	5	13	supplier	supplier	NOUN
ajis02-5323	5	14	cyber	cyber	NOUN
ajis02-5323	5	15	risk	risk	NOUN
ajis02-5323	5	16	assessment	assessment	NOUN
ajis02-5323	5	17	.	.	PUNCT
ajis02-5323	6	1	based	base	VERB
ajis02-5323	6	2	on	on	ADP
ajis02-5323	6	3	the	the	DET
ajis02-5323	6	4	qualitative	qualitative	ADJ
ajis02-5323	6	5	findings	finding	NOUN
ajis02-5323	6	6	,	,	PUNCT
ajis02-5323	6	7	we	we	PRON
ajis02-5323	6	8	formulate	formulate	VERB
ajis02-5323	6	9	a	a	DET
ajis02-5323	6	10	process	process	NOUN
ajis02-5323	6	11	theory	theory	NOUN
ajis02-5323	6	12	of	of	ADP
ajis02-5323	6	13	supplier	supplier	NOUN
ajis02-5323	6	14	cyber	cyber	NOUN
ajis02-5323	6	15	risk	risk	NOUN
ajis02-5323	6	16	assessment	assessment	NOUN
ajis02-5323	6	17	.	.	PUNCT
ajis02-5323	7	1	this	this	DET
ajis02-5323	7	2	theory	theory	NOUN
ajis02-5323	7	3	explains	explain	VERB
ajis02-5323	7	4	how	how	SCONJ
ajis02-5323	7	5	organizations	organization	NOUN
ajis02-5323	7	6	assess	assess	VERB
ajis02-5323	7	7	supplier	supplier	NOUN
ajis02-5323	7	8	cyber	cyber	NOUN
ajis02-5323	7	9	risk	risk	NOUN
ajis02-5323	7	10	and	and	CCONJ
ajis02-5323	7	11	which	which	DET
ajis02-5323	7	12	contextual	contextual	ADJ
ajis02-5323	7	13	factors	factor	NOUN
ajis02-5323	7	14	affect	affect	VERB
ajis02-5323	7	15	the	the	DET
ajis02-5323	7	16	maturity	maturity	NOUN
ajis02-5323	7	17	of	of	ADP
ajis02-5323	7	18	cyber	cyber	ADJ
ajis02-5323	7	19	risk	risk	NOUN
ajis02-5323	7	20	assessment	assessment	NOUN
ajis02-5323	7	21	and	and	CCONJ
ajis02-5323	7	22	monitoring	monitoring	NOUN
ajis02-5323	7	23	.	.	PUNCT
ajis02-5323	8	1	the	the	DET
ajis02-5323	8	2	quantitative	quantitative	ADJ
ajis02-5323	8	3	analysis	analysis	NOUN
ajis02-5323	8	4	supports	support	VERB
ajis02-5323	8	5	the	the	DET
ajis02-5323	8	6	qualitative	qualitative	ADJ
ajis02-5323	8	7	findings	finding	NOUN
ajis02-5323	8	8	and	and	CCONJ
ajis02-5323	8	9	suggests	suggest	VERB
ajis02-5323	8	10	that	that	SCONJ
ajis02-5323	8	11	the	the	DET
ajis02-5323	8	12	process	process	NOUN
ajis02-5323	8	13	can	can	AUX
ajis02-5323	8	14	effectively	effectively	ADV
ajis02-5323	8	15	identify	identify	VERB
ajis02-5323	8	16	risky	risky	ADJ
ajis02-5323	8	17	suppliers	supplier	NOUN
ajis02-5323	8	18	.	.	PUNCT
ajis02-5323	9	1	the	the	DET
ajis02-5323	9	2	paper	paper	NOUN
ajis02-5323	9	3	sheds	shed	VERB
ajis02-5323	9	4	light	light	NOUN
ajis02-5323	9	5	on	on	ADP
ajis02-5323	9	6	challenges	challenge	NOUN
ajis02-5323	9	7	and	and	CCONJ
ajis02-5323	9	8	strategies	strategy	NOUN
ajis02-5323	9	9	associated	associate	VERB
ajis02-5323	9	10	with	with	ADP
ajis02-5323	9	11	supply	supply	NOUN
ajis02-5323	9	12	chain	chain	NOUN
ajis02-5323	9	13	cyber	cyber	NOUN
ajis02-5323	9	14	risk	risk	NOUN
ajis02-5323	9	15	assessment	assessment	NOUN
ajis02-5323	9	16	.	.	PUNCT
ajis02-5323	10	1	the	the	DET
ajis02-5323	10	2	practical	practical	ADJ
ajis02-5323	10	3	implications	implication	NOUN
ajis02-5323	10	4	of	of	ADP
ajis02-5323	10	5	our	our	PRON
ajis02-5323	10	6	findings	finding	NOUN
ajis02-5323	10	7	offer	offer	VERB
ajis02-5323	10	8	actionable	actionable	ADJ
ajis02-5323	10	9	insights	insight	NOUN
ajis02-5323	10	10	for	for	ADP
ajis02-5323	10	11	organizations	organization	NOUN
ajis02-5323	10	12	seeking	seek	VERB
ajis02-5323	10	13	to	to	PART
ajis02-5323	10	14	enhance	enhance	VERB
ajis02-5323	10	15	their	their	PRON
ajis02-5323	10	16	cyber	cyber	ADJ
ajis02-5323	10	17	supply	supply	NOUN
ajis02-5323	10	18	chain	chain	NOUN
ajis02-5323	10	19	risk	risk	NOUN
ajis02-5323	10	20	management	management	NOUN
ajis02-5323	10	21	.	.	PUNCT
ajis02-5323	11	1	keywords	keyword	NOUN
ajis02-5323	11	2	:	:	PUNCT
ajis02-5323	11	3	third	third	ADJ
ajis02-5323	11	4	-	-	PUNCT
ajis02-5323	11	5	party	party	NOUN
ajis02-5323	11	6	cyber	cyber	NOUN
ajis02-5323	11	7	risk	risk	NOUN
ajis02-5323	11	8	,	,	PUNCT
ajis02-5323	11	9	supplier	supplier	NOUN
ajis02-5323	11	10	cyber	cyber	NOUN
ajis02-5323	11	11	risk	risk	NOUN
ajis02-5323	11	12	,	,	PUNCT
ajis02-5323	11	13	cyber	cyber	ADJ
ajis02-5323	11	14	supply	supply	NOUN
ajis02-5323	11	15	-	-	PUNCT
ajis02-5323	11	16	chain	chain	NOUN
ajis02-5323	11	17	risk	risk	NOUN
ajis02-5323	11	18	management	management	NOUN
ajis02-5323	11	19	,	,	PUNCT
ajis02-5323	11	20	risk	risk	NOUN
ajis02-5323	11	21	assessment	assessment	NOUN
ajis02-5323	11	22	,	,	PUNCT
ajis02-5323	11	23	assurance	assurance	NOUN
ajis02-5323	11	24	.	.	PUNCT
ajis02-5323	12	1	1	1	NUM
ajis02-5323	12	2	introduction	introduction	NOUN
ajis02-5323	12	3	cyberattacks	cyberattack	NOUN
ajis02-5323	12	4	targeting	target	VERB
ajis02-5323	12	5	suppliers1	suppliers1	NOUN
ajis02-5323	12	6	have	have	AUX
ajis02-5323	12	7	become	become	VERB
ajis02-5323	12	8	increasingly	increasingly	ADV
ajis02-5323	12	9	common	common	ADJ
ajis02-5323	12	10	,	,	PUNCT
ajis02-5323	12	11	and	and	CCONJ
ajis02-5323	12	12	several	several	ADJ
ajis02-5323	12	13	prominent	prominent	ADJ
ajis02-5323	12	14	cases	case	NOUN
ajis02-5323	12	15	have	have	AUX
ajis02-5323	12	16	garnered	garner	VERB
ajis02-5323	12	17	significant	significant	ADJ
ajis02-5323	12	18	attention	attention	NOUN
ajis02-5323	12	19	in	in	ADP
ajis02-5323	12	20	recent	recent	ADJ
ajis02-5323	12	21	years	year	NOUN
ajis02-5323	12	22	.	.	PUNCT
ajis02-5323	13	1	a	a	DET
ajis02-5323	13	2	common	common	ADJ
ajis02-5323	13	3	belief	belief	NOUN
ajis02-5323	13	4	is	be	AUX
ajis02-5323	13	5	that	that	SCONJ
ajis02-5323	13	6	major	major	ADJ
ajis02-5323	13	7	threats	threat	NOUN
ajis02-5323	13	8	come	come	VERB
ajis02-5323	13	9	from	from	ADP
ajis02-5323	13	10	information	information	NOUN
ajis02-5323	13	11	and	and	CCONJ
ajis02-5323	13	12	communication	communication	NOUN
ajis02-5323	13	13	technology	technology	NOUN
ajis02-5323	13	14	(	(	PUNCT
ajis02-5323	13	15	ict	ict	PROPN
ajis02-5323	13	16	)	)	PUNCT
ajis02-5323	13	17	suppliers	supplier	NOUN
ajis02-5323	13	18	,	,	PUNCT
ajis02-5323	13	19	such	such	ADJ
ajis02-5323	13	20	as	as	ADP
ajis02-5323	13	21	the	the	DET
ajis02-5323	13	22	attack	attack	NOUN
ajis02-5323	13	23	on	on	ADP
ajis02-5323	13	24	solarwinds	solarwind	NOUN
ajis02-5323	13	25	or	or	CCONJ
ajis02-5323	13	26	the	the	DET
ajis02-5323	13	27	notpetya	notpetya	ADJ
ajis02-5323	13	28	attack	attack	NOUN
ajis02-5323	13	29	,	,	PUNCT
ajis02-5323	13	30	in	in	ADP
ajis02-5323	13	31	which	which	PRON
ajis02-5323	13	32	cyber	cyber	NOUN
ajis02-5323	13	33	criminals	criminal	NOUN
ajis02-5323	13	34	gained	gain	VERB
ajis02-5323	13	35	access	access	NOUN
ajis02-5323	13	36	to	to	ADP
ajis02-5323	13	37	major	major	ADJ
ajis02-5323	13	38	global	global	ADJ
ajis02-5323	13	39	corporations	corporation	NOUN
ajis02-5323	13	40	and	and	CCONJ
ajis02-5323	13	41	government	government	NOUN
ajis02-5323	13	42	agencies	agency	NOUN
ajis02-5323	13	43	,	,	PUNCT
ajis02-5323	13	44	causing	cause	VERB
ajis02-5323	13	45	extensive	extensive	ADJ
ajis02-5323	13	46	operational	operational	ADJ
ajis02-5323	13	47	disruptions	disruption	NOUN
ajis02-5323	13	48	and	and	CCONJ
ajis02-5323	13	49	global	global	ADJ
ajis02-5323	13	50	1	1	NUM
ajis02-5323	13	51	for	for	ADP
ajis02-5323	13	52	clarity	clarity	NOUN
ajis02-5323	13	53	,	,	PUNCT
ajis02-5323	13	54	we	we	PRON
ajis02-5323	13	55	use	use	VERB
ajis02-5323	13	56	the	the	DET
ajis02-5323	13	57	word	word	NOUN
ajis02-5323	13	58	supplier	supplier	NOUN
ajis02-5323	13	59	relating	relate	VERB
ajis02-5323	13	60	to	to	ADP
ajis02-5323	13	61	various	various	ADJ
ajis02-5323	13	62	synonyms	synonym	NOUN
ajis02-5323	13	63	:	:	PUNCT
ajis02-5323	13	64	supplier	supplier	NOUN
ajis02-5323	13	65	,	,	PUNCT
ajis02-5323	13	66	which	which	PRON
ajis02-5323	13	67	is	be	AUX
ajis02-5323	13	68	an	an	DET
ajis02-5323	13	69	organization	organization	NOUN
ajis02-5323	13	70	that	that	PRON
ajis02-5323	13	71	enters	enter	VERB
ajis02-5323	13	72	into	into	ADP
ajis02-5323	13	73	an	an	DET
ajis02-5323	13	74	agreement	agreement	NOUN
ajis02-5323	13	75	with	with	ADP
ajis02-5323	13	76	the	the	DET
ajis02-5323	13	77	acquirer	acquirer	NOUN
ajis02-5323	13	78	for	for	ADP
ajis02-5323	13	79	the	the	DET
ajis02-5323	13	80	supply	supply	NOUN
ajis02-5323	13	81	of	of	ADP
ajis02-5323	13	82	a	a	DET
ajis02-5323	13	83	product	product	NOUN
ajis02-5323	13	84	or	or	CCONJ
ajis02-5323	13	85	service	service	NOUN
ajis02-5323	13	86	,	,	PUNCT
ajis02-5323	13	87	vendor	vendor	NOUN
ajis02-5323	13	88	,	,	PUNCT
ajis02-5323	13	89	a	a	DET
ajis02-5323	13	90	commercial	commercial	ADJ
ajis02-5323	13	91	supplier	supplier	NOUN
ajis02-5323	13	92	of	of	ADP
ajis02-5323	13	93	software	software	NOUN
ajis02-5323	13	94	or	or	CCONJ
ajis02-5323	13	95	hardware	hardware	NOUN
ajis02-5323	13	96	,	,	PUNCT
ajis02-5323	13	97	and	and	CCONJ
ajis02-5323	13	98	a	a	DET
ajis02-5323	13	99	third	third	ADJ
ajis02-5323	13	100	-	-	PUNCT
ajis02-5323	13	101	party	party	NOUN
ajis02-5323	13	102	provider	provider	NOUN
ajis02-5323	13	103	who	who	PRON
ajis02-5323	13	104	are	be	AUX
ajis02-5323	13	105	service	service	NOUN
ajis02-5323	13	106	providers	provider	NOUN
ajis02-5323	13	107	,	,	PUNCT
ajis02-5323	13	108	system	system	NOUN
ajis02-5323	13	109	integrators	integrator	NOUN
ajis02-5323	13	110	,	,	PUNCT
ajis02-5323	13	111	vendors	vendor	NOUN
ajis02-5323	13	112	,	,	PUNCT
ajis02-5323	13	113	telecommunications	telecommunication	NOUN
ajis02-5323	13	114	,	,	PUNCT
ajis02-5323	13	115	and	and	CCONJ
ajis02-5323	13	116	infrastructure	infrastructure	NOUN
ajis02-5323	13	117	support	support	NOUN
ajis02-5323	13	118	that	that	PRON
ajis02-5323	13	119	are	be	AUX
ajis02-5323	13	120	external	external	ADJ
ajis02-5323	13	121	to	to	ADP
ajis02-5323	13	122	an	an	DET
ajis02-5323	13	123	organization	organization	NOUN
ajis02-5323	13	124	,	,	PUNCT
ajis02-5323	13	125	as	as	SCONJ
ajis02-5323	13	126	defined	define	VERB
ajis02-5323	13	127	by	by	ADP
ajis02-5323	13	128	the	the	DET
ajis02-5323	13	129	us	us	PROPN
ajis02-5323	13	130	national	national	PROPN
ajis02-5323	13	131	institute	institute	PROPN
ajis02-5323	13	132	of	of	ADP
ajis02-5323	13	133	standards	standard	NOUN
ajis02-5323	13	134	and	and	CCONJ
ajis02-5323	13	135	technology	technology	NOUN
ajis02-5323	13	136	(	(	PUNCT
ajis02-5323	13	137	nist	nist	NOUN
ajis02-5323	13	138	):	):	PUNCT
ajis02-5323	13	139	https://csrc.nist.gov/glossary/term/	https://csrc.nist.gov/glossary/term/	PROPN
ajis02-5323	13	140	https://csrc.nist.gov/glossary/term/	https://csrc.nist.gov/glossary/term/	VERB
ajis02-5323	13	141	australasian	australasian	ADJ
ajis02-5323	13	142	journal	journal	NOUN
ajis02-5323	13	143	of	of	ADP
ajis02-5323	13	144	information	information	NOUN
ajis02-5323	13	145	systems	system	NOUN
ajis02-5323	13	146	slapnicar	slapnicar	NOUN
ajis02-5323	13	147	,	,	PUNCT
ajis02-5323	13	148	vidmar	vidmar	NOUN
ajis02-5323	13	149	&	&	CCONJ
ajis02-5323	13	150	tsen	tsen	ADJ
ajis02-5323	13	151	2025	2025	NUM
ajis02-5323	13	152	,	,	PUNCT
ajis02-5323	13	153	vol	vol	NOUN
ajis02-5323	13	154	29	29	NUM
ajis02-5323	13	155	,	,	PUNCT
ajis02-5323	13	156	research	research	NOUN
ajis02-5323	13	157	article	article	NOUN
ajis02-5323	13	158	process	process	NOUN
ajis02-5323	13	159	theory	theory	NOUN
ajis02-5323	13	160	of	of	ADP
ajis02-5323	13	161	supplier	supplier	NOUN
ajis02-5323	13	162	cyber	cyber	NOUN
ajis02-5323	13	163	risk	risk	NOUN
ajis02-5323	13	164	assessment	assessment	NOUN
ajis02-5323	13	165	2	2	NUM
ajis02-5323	13	166	damage	damage	NOUN
ajis02-5323	13	167	of	of	ADP
ajis02-5323	13	168	tens	ten	NOUN
ajis02-5323	13	169	of	of	ADP
ajis02-5323	13	170	billions	billion	NOUN
ajis02-5323	13	171	of	of	ADP
ajis02-5323	13	172	dollars	dollar	NOUN
ajis02-5323	13	173	(	(	PUNCT
ajis02-5323	13	174	alkhadra	alkhadra	PROPN
ajis02-5323	13	175	et	et	PROPN
ajis02-5323	13	176	al	al	PROPN
ajis02-5323	13	177	.	.	PROPN
ajis02-5323	13	178	,	,	PUNCT
ajis02-5323	13	179	2021	2021	NUM
ajis02-5323	13	180	;	;	PUNCT
ajis02-5323	13	181	crosignani	crosignani	PROPN
ajis02-5323	13	182	et	et	PROPN
ajis02-5323	13	183	al	al	PROPN
ajis02-5323	13	184	.	.	PROPN
ajis02-5323	13	185	,	,	PUNCT
ajis02-5323	13	186	2023	2023	NUM
ajis02-5323	13	187	;	;	PUNCT
ajis02-5323	13	188	wolff	wolff	NOUN
ajis02-5323	13	189	,	,	PUNCT
ajis02-5323	13	190	2021	2021	NUM
ajis02-5323	13	191	)	)	PUNCT
ajis02-5323	13	192	.	.	PUNCT
ajis02-5323	14	1	however	however	ADV
ajis02-5323	14	2	,	,	PUNCT
ajis02-5323	14	3	a	a	DET
ajis02-5323	14	4	severe	severe	ADJ
ajis02-5323	14	5	cyberattack	cyberattack	NOUN
ajis02-5323	14	6	on	on	ADP
ajis02-5323	14	7	an	an	DET
ajis02-5323	14	8	organization	organization	NOUN
ajis02-5323	14	9	can	can	AUX
ajis02-5323	14	10	also	also	ADV
ajis02-5323	14	11	be	be	AUX
ajis02-5323	14	12	launched	launch	VERB
ajis02-5323	14	13	through	through	ADP
ajis02-5323	14	14	a	a	DET
ajis02-5323	14	15	micro	micro	ADJ
ajis02-5323	14	16	provider	provider	NOUN
ajis02-5323	14	17	,	,	PUNCT
ajis02-5323	14	18	such	such	ADJ
ajis02-5323	14	19	as	as	ADP
ajis02-5323	14	20	a	a	DET
ajis02-5323	14	21	heating	heating	NOUN
ajis02-5323	14	22	,	,	PUNCT
ajis02-5323	14	23	ventilation	ventilation	NOUN
ajis02-5323	14	24	and	and	CCONJ
ajis02-5323	14	25	air	air	NOUN
ajis02-5323	14	26	-	-	PUNCT
ajis02-5323	14	27	conditioning	conditioning	NOUN
ajis02-5323	14	28	vendor	vendor	NOUN
ajis02-5323	14	29	in	in	ADP
ajis02-5323	14	30	the	the	DET
ajis02-5323	14	31	attack	attack	NOUN
ajis02-5323	14	32	on	on	ADP
ajis02-5323	14	33	target	target	NOUN
ajis02-5323	14	34	(	(	PUNCT
ajis02-5323	14	35	simon	simon	PROPN
ajis02-5323	14	36	and	and	CCONJ
ajis02-5323	14	37	omar	omar	PROPN
ajis02-5323	14	38	,	,	PUNCT
ajis02-5323	14	39	2020	2020	NUM
ajis02-5323	14	40	)	)	PUNCT
ajis02-5323	14	41	.	.	PUNCT
ajis02-5323	15	1	in	in	ADP
ajis02-5323	15	2	the	the	DET
ajis02-5323	15	3	analysis	analysis	NOUN
ajis02-5323	15	4	of	of	ADP
ajis02-5323	15	5	1,397	1,397	NUM
ajis02-5323	15	6	cyber	cyber	ADJ
ajis02-5323	15	7	incidents	incident	NOUN
ajis02-5323	15	8	from	from	ADP
ajis02-5323	15	9	2000	2000	NUM
ajis02-5323	15	10	to	to	ADP
ajis02-5323	15	11	2020	2020	NUM
ajis02-5323	15	12	,	,	PUNCT
ajis02-5323	15	13	benaroch	benaroch	NOUN
ajis02-5323	15	14	(	(	PUNCT
ajis02-5323	15	15	2021	2021	NUM
ajis02-5323	15	16	)	)	PUNCT
ajis02-5323	15	17	found	find	VERB
ajis02-5323	15	18	that	that	SCONJ
ajis02-5323	15	19	suppliers	supplier	NOUN
ajis02-5323	15	20	caused	cause	VERB
ajis02-5323	15	21	18	18	NUM
ajis02-5323	15	22	%	%	NOUN
ajis02-5323	15	23	of	of	ADP
ajis02-5323	15	24	these	these	DET
ajis02-5323	15	25	incidents	incident	NOUN
ajis02-5323	15	26	.	.	PUNCT
ajis02-5323	16	1	the	the	DET
ajis02-5323	16	2	attacks	attack	NOUN
ajis02-5323	16	3	on	on	ADP
ajis02-5323	16	4	the	the	DET
ajis02-5323	16	5	supply	supply	NOUN
ajis02-5323	16	6	chain	chain	NOUN
ajis02-5323	16	7	(	(	PUNCT
ajis02-5323	16	8	sc	sc	PROPN
ajis02-5323	16	9	)	)	PUNCT
ajis02-5323	16	10	were	be	AUX
ajis02-5323	16	11	growing	grow	VERB
ajis02-5323	16	12	proportionally	proportionally	ADV
ajis02-5323	16	13	with	with	ADP
ajis02-5323	16	14	other	other	ADJ
ajis02-5323	16	15	cyber	cyber	ADJ
ajis02-5323	16	16	incidents	incident	NOUN
ajis02-5323	16	17	but	but	CCONJ
ajis02-5323	16	18	compromised	compromise	VERB
ajis02-5323	16	19	a	a	DET
ajis02-5323	16	20	larger	large	ADJ
ajis02-5323	16	21	volume	volume	NOUN
ajis02-5323	16	22	of	of	ADP
ajis02-5323	16	23	confidential	confidential	ADJ
ajis02-5323	16	24	data	datum	NOUN
ajis02-5323	16	25	.	.	PUNCT
ajis02-5323	17	1	an	an	DET
ajis02-5323	17	2	organization	organization	NOUN
ajis02-5323	17	3	can	can	AUX
ajis02-5323	17	4	suffer	suffer	VERB
ajis02-5323	17	5	a	a	DET
ajis02-5323	17	6	cyber	cyber	NOUN
ajis02-5323	17	7	incident	incident	NOUN
ajis02-5323	17	8	through	through	ADP
ajis02-5323	17	9	a	a	DET
ajis02-5323	17	10	direct	direct	ADJ
ajis02-5323	17	11	attack	attack	NOUN
ajis02-5323	17	12	on	on	ADP
ajis02-5323	17	13	a	a	DET
ajis02-5323	17	14	supplier	supplier	NOUN
ajis02-5323	17	15	;	;	PUNCT
ajis02-5323	17	16	a	a	DET
ajis02-5323	17	17	supplier	supplier	NOUN
ajis02-5323	17	18	being	be	AUX
ajis02-5323	17	19	a	a	DET
ajis02-5323	17	20	conduit	conduit	NOUN
ajis02-5323	17	21	for	for	ADP
ajis02-5323	17	22	a	a	DET
ajis02-5323	17	23	cyberattack	cyberattack	NOUN
ajis02-5323	17	24	;	;	PUNCT
ajis02-5323	17	25	when	when	SCONJ
ajis02-5323	17	26	a	a	DET
ajis02-5323	17	27	supplier	supplier	NOUN
ajis02-5323	17	28	stores	store	VERB
ajis02-5323	17	29	another	another	DET
ajis02-5323	17	30	partner	partner	NOUN
ajis02-5323	17	31	’s	’s	PART
ajis02-5323	17	32	data	datum	NOUN
ajis02-5323	17	33	,	,	PUNCT
ajis02-5323	17	34	i.e.	i.e.	X
ajis02-5323	17	35	,	,	PUNCT
ajis02-5323	17	36	as	as	ADP
ajis02-5323	17	37	a	a	DET
ajis02-5323	17	38	partner	partner	NOUN
ajis02-5323	17	39	-	-	PUNCT
ajis02-5323	17	40	custodian	custodian	NOUN
ajis02-5323	17	41	;	;	PUNCT
ajis02-5323	17	42	and	and	CCONJ
ajis02-5323	17	43	when	when	SCONJ
ajis02-5323	17	44	a	a	DET
ajis02-5323	17	45	supplier	supplier	NOUN
ajis02-5323	17	46	attacks	attack	VERB
ajis02-5323	17	47	the	the	DET
ajis02-5323	17	48	focal	focal	ADJ
ajis02-5323	17	49	organization	organization	NOUN
ajis02-5323	17	50	using	use	VERB
ajis02-5323	17	51	privileged	privileged	ADJ
ajis02-5323	17	52	information	information	NOUN
ajis02-5323	17	53	(	(	PUNCT
ajis02-5323	17	54	deane	deane	PROPN
ajis02-5323	17	55	et	et	PROPN
ajis02-5323	17	56	al	al	PROPN
ajis02-5323	17	57	.	.	PROPN
ajis02-5323	17	58	2023	2023	NUM
ajis02-5323	17	59	)	)	PUNCT
ajis02-5323	17	60	.	.	PUNCT
ajis02-5323	18	1	cyber	cyber	PROPN
ajis02-5323	18	2	incidents	incident	NOUN
ajis02-5323	18	3	in	in	ADP
ajis02-5323	18	4	sc	sc	PROPN
ajis02-5323	18	5	are	be	AUX
ajis02-5323	18	6	not	not	PART
ajis02-5323	18	7	caused	cause	VERB
ajis02-5323	18	8	only	only	ADV
ajis02-5323	18	9	by	by	ADP
ajis02-5323	18	10	cyberattacks	cyberattack	NOUN
ajis02-5323	18	11	.	.	PUNCT
ajis02-5323	19	1	noteworthy	noteworthy	ADJ
ajis02-5323	19	2	are	be	AUX
ajis02-5323	19	3	also	also	ADV
ajis02-5323	19	4	nonintentional	nonintentional	ADJ
ajis02-5323	19	5	risks	risk	NOUN
ajis02-5323	19	6	committed	commit	VERB
ajis02-5323	19	7	by	by	ADP
ajis02-5323	19	8	suppliers	supplier	NOUN
ajis02-5323	19	9	’	’	PART
ajis02-5323	19	10	employees	employee	NOUN
ajis02-5323	19	11	or	or	CCONJ
ajis02-5323	19	12	faulty	faulty	ADJ
ajis02-5323	19	13	supplier	supplier	NOUN
ajis02-5323	19	14	hardware	hardware	NOUN
ajis02-5323	19	15	or	or	CCONJ
ajis02-5323	19	16	software	software	NOUN
ajis02-5323	19	17	that	that	PRON
ajis02-5323	19	18	can	can	AUX
ajis02-5323	19	19	have	have	VERB
ajis02-5323	19	20	a	a	DET
ajis02-5323	19	21	crucial	crucial	ADJ
ajis02-5323	19	22	effect	effect	NOUN
ajis02-5323	19	23	on	on	ADP
ajis02-5323	19	24	the	the	DET
ajis02-5323	19	25	focal	focal	ADJ
ajis02-5323	19	26	organization	organization	NOUN
ajis02-5323	19	27	’s	’s	PART
ajis02-5323	19	28	provision	provision	NOUN
ajis02-5323	19	29	of	of	ADP
ajis02-5323	19	30	services	service	NOUN
ajis02-5323	19	31	(	(	PUNCT
ajis02-5323	19	32	ghadge	ghadge	VERB
ajis02-5323	19	33	et	et	PROPN
ajis02-5323	19	34	al	al	PROPN
ajis02-5323	19	35	.	.	PROPN
ajis02-5323	19	36	,	,	PUNCT
ajis02-5323	19	37	2019	2019	NUM
ajis02-5323	19	38	;	;	PUNCT
ajis02-5323	19	39	urciuli	urciuli	PROPN
ajis02-5323	19	40	et	et	PROPN
ajis02-5323	19	41	al	al	PROPN
ajis02-5323	19	42	.	.	PROPN
ajis02-5323	19	43	,	,	PUNCT
ajis02-5323	19	44	2013	2013	NUM
ajis02-5323	19	45	;	;	PUNCT
ajis02-5323	19	46	2014	2014	NUM
ajis02-5323	19	47	)	)	PUNCT
ajis02-5323	19	48	.	.	PUNCT
ajis02-5323	20	1	a	a	DET
ajis02-5323	20	2	case	case	NOUN
ajis02-5323	20	3	in	in	ADP
ajis02-5323	20	4	point	point	NOUN
ajis02-5323	20	5	is	be	AUX
ajis02-5323	20	6	crowdstrike	crowdstrike	NOUN
ajis02-5323	20	7	’s	’s	PART
ajis02-5323	20	8	failure	failure	NOUN
ajis02-5323	20	9	,	,	PUNCT
ajis02-5323	20	10	which	which	PRON
ajis02-5323	20	11	affected	affect	VERB
ajis02-5323	20	12	8.5	8.5	NUM
ajis02-5323	20	13	million	million	NUM
ajis02-5323	20	14	microsoft	microsoft	PROPN
ajis02-5323	20	15	users	user	NOUN
ajis02-5323	20	16	and	and	CCONJ
ajis02-5323	20	17	caused	cause	VERB
ajis02-5323	20	18	a	a	DET
ajis02-5323	20	19	global	global	ADJ
ajis02-5323	20	20	outage	outage	NOUN
ajis02-5323	20	21	(	(	PUNCT
ajis02-5323	20	22	li	li	PROPN
ajis02-5323	20	23	,	,	PUNCT
ajis02-5323	20	24	2024	2024	NUM
ajis02-5323	20	25	)	)	PUNCT
ajis02-5323	20	26	.	.	PUNCT
ajis02-5323	21	1	this	this	DET
ajis02-5323	21	2	incident	incident	NOUN
ajis02-5323	21	3	highlights	highlight	VERB
ajis02-5323	21	4	the	the	DET
ajis02-5323	21	5	increasing	increase	VERB
ajis02-5323	21	6	complexity	complexity	NOUN
ajis02-5323	21	7	of	of	ADP
ajis02-5323	21	8	managing	manage	VERB
ajis02-5323	21	9	cyber	cyber	NOUN
ajis02-5323	21	10	risks	risk	NOUN
ajis02-5323	21	11	in	in	ADP
ajis02-5323	21	12	a	a	DET
ajis02-5323	21	13	sc	sc	NOUN
ajis02-5323	21	14	,	,	PUNCT
ajis02-5323	21	15	especially	especially	ADV
ajis02-5323	21	16	with	with	ADP
ajis02-5323	21	17	global	global	ADJ
ajis02-5323	21	18	technology	technology	NOUN
ajis02-5323	21	19	sourcing	sourcing	NOUN
ajis02-5323	21	20	,	,	PUNCT
ajis02-5323	21	21	system	system	NOUN
ajis02-5323	21	22	ownership	ownership	NOUN
ajis02-5323	21	23	,	,	PUNCT
ajis02-5323	21	24	diverse	diverse	ADJ
ajis02-5323	21	25	legal	legal	ADJ
ajis02-5323	21	26	jurisdictions	jurisdiction	NOUN
ajis02-5323	21	27	,	,	PUNCT
ajis02-5323	21	28	and	and	CCONJ
ajis02-5323	21	29	heavy	heavy	ADJ
ajis02-5323	21	30	reliance	reliance	NOUN
ajis02-5323	21	31	on	on	ADP
ajis02-5323	21	32	third	third	ADJ
ajis02-5323	21	33	parties	party	NOUN
ajis02-5323	21	34	for	for	ADP
ajis02-5323	21	35	vital	vital	ADJ
ajis02-5323	21	36	functions	function	NOUN
ajis02-5323	21	37	(	(	PUNCT
ajis02-5323	21	38	boyes	boyes	PROPN
ajis02-5323	21	39	,	,	PUNCT
ajis02-5323	21	40	2015	2015	NUM
ajis02-5323	21	41	)	)	PUNCT
ajis02-5323	21	42	.	.	PUNCT
ajis02-5323	22	1	these	these	DET
ajis02-5323	22	2	risks	risk	NOUN
ajis02-5323	22	3	underscore	underscore	VERB
ajis02-5323	22	4	the	the	DET
ajis02-5323	22	5	importance	importance	NOUN
ajis02-5323	22	6	of	of	ADP
ajis02-5323	22	7	the	the	DET
ajis02-5323	22	8	emerging	emerge	VERB
ajis02-5323	22	9	discipline	discipline	NOUN
ajis02-5323	22	10	known	know	VERB
ajis02-5323	22	11	as	as	ADP
ajis02-5323	22	12	cybersecurity	cybersecurity	NOUN
ajis02-5323	22	13	supply	supply	NOUN
ajis02-5323	22	14	chain	chain	NOUN
ajis02-5323	22	15	risk	risk	NOUN
ajis02-5323	22	16	management	management	NOUN
ajis02-5323	22	17	(	(	PUNCT
ajis02-5323	22	18	c	c	NOUN
ajis02-5323	22	19	-	-	PUNCT
ajis02-5323	22	20	scrm	scrm	NOUN
ajis02-5323	22	21	)	)	PUNCT
ajis02-5323	22	22	(	(	PUNCT
ajis02-5323	22	23	boyson	boyson	NOUN
ajis02-5323	22	24	,	,	PUNCT
ajis02-5323	22	25	2014	2014	NUM
ajis02-5323	22	26	;	;	PUNCT
ajis02-5323	22	27	khan	khan	PROPN
ajis02-5323	22	28	and	and	CCONJ
ajis02-5323	22	29	estay	estay	PROPN
ajis02-5323	22	30	,	,	PUNCT
ajis02-5323	22	31	2015	2015	NUM
ajis02-5323	22	32	)	)	PUNCT
ajis02-5323	22	33	.	.	PUNCT
ajis02-5323	23	1	recognizing	recognize	VERB
ajis02-5323	23	2	which	which	DET
ajis02-5323	23	3	supplier	supplier	NOUN
ajis02-5323	23	4	is	be	AUX
ajis02-5323	23	5	more	more	ADV
ajis02-5323	23	6	likely	likely	ADJ
ajis02-5323	23	7	to	to	PART
ajis02-5323	23	8	face	face	VERB
ajis02-5323	23	9	disruptions	disruption	NOUN
ajis02-5323	23	10	because	because	SCONJ
ajis02-5323	23	11	of	of	ADP
ajis02-5323	23	12	a	a	DET
ajis02-5323	23	13	cyber	cyber	NOUN
ajis02-5323	23	14	incident	incident	NOUN
ajis02-5323	23	15	is	be	AUX
ajis02-5323	23	16	critical	critical	ADJ
ajis02-5323	23	17	in	in	ADP
ajis02-5323	23	18	effectively	effectively	ADV
ajis02-5323	23	19	managing	manage	VERB
ajis02-5323	23	20	the	the	DET
ajis02-5323	23	21	impact	impact	NOUN
ajis02-5323	23	22	of	of	ADP
ajis02-5323	23	23	sc	sc	PROPN
ajis02-5323	23	24	disruptions	disruption	NOUN
ajis02-5323	23	25	(	(	PUNCT
ajis02-5323	23	26	boyson	boyson	NOUN
ajis02-5323	23	27	,	,	PUNCT
ajis02-5323	23	28	2014	2014	NUM
ajis02-5323	23	29	)	)	PUNCT
ajis02-5323	23	30	.	.	PUNCT
ajis02-5323	24	1	however	however	ADV
ajis02-5323	24	2	,	,	PUNCT
ajis02-5323	24	3	according	accord	VERB
ajis02-5323	24	4	to	to	ADP
ajis02-5323	24	5	the	the	DET
ajis02-5323	24	6	2022	2022	NUM
ajis02-5323	24	7	ponemon	ponemon	PROPN
ajis02-5323	24	8	institute	institute	PROPN
ajis02-5323	24	9	survey	survey	NOUN
ajis02-5323	24	10	of	of	ADP
ajis02-5323	24	11	over	over	ADP
ajis02-5323	24	12	1,100	1,100	NUM
ajis02-5323	24	13	security	security	NOUN
ajis02-5323	24	14	experts	expert	NOUN
ajis02-5323	24	15	,	,	PUNCT
ajis02-5323	24	16	approximately	approximately	ADV
ajis02-5323	24	17	two	two	NUM
ajis02-5323	24	18	-	-	PUNCT
ajis02-5323	24	19	thirds	third	NOUN
ajis02-5323	24	20	of	of	ADP
ajis02-5323	24	21	participants	participant	NOUN
ajis02-5323	24	22	are	be	AUX
ajis02-5323	24	23	uncertain	uncertain	ADJ
ajis02-5323	24	24	about	about	ADP
ajis02-5323	24	25	having	have	VERB
ajis02-5323	24	26	a	a	DET
ajis02-5323	24	27	comprehensive	comprehensive	ADJ
ajis02-5323	24	28	inventory	inventory	NOUN
ajis02-5323	24	29	of	of	ADP
ajis02-5323	24	30	suppliers	supplier	NOUN
ajis02-5323	24	31	with	with	ADP
ajis02-5323	24	32	which	which	PRON
ajis02-5323	24	33	they	they	PRON
ajis02-5323	24	34	share	share	VERB
ajis02-5323	24	35	information	information	NOUN
ajis02-5323	24	36	(	(	PUNCT
ajis02-5323	24	37	the	the	DET
ajis02-5323	24	38	ponemon	ponemon	PROPN
ajis02-5323	24	39	institute	institute	PROPN
ajis02-5323	24	40	,	,	PUNCT
ajis02-5323	24	41	2022	2022	NUM
ajis02-5323	24	42	)	)	PUNCT
ajis02-5323	24	43	.	.	PUNCT
ajis02-5323	25	1	only	only	ADV
ajis02-5323	25	2	about	about	ADV
ajis02-5323	25	3	one	one	NUM
ajis02-5323	25	4	-	-	PUNCT
ajis02-5323	25	5	third	third	NOUN
ajis02-5323	25	6	of	of	ADP
ajis02-5323	25	7	respondents	respondent	NOUN
ajis02-5323	25	8	stated	state	VERB
ajis02-5323	25	9	their	their	PRON
ajis02-5323	25	10	organizations	organization	NOUN
ajis02-5323	25	11	evaluate	evaluate	VERB
ajis02-5323	25	12	suppliers	supplier	NOUN
ajis02-5323	25	13	'	'	PART
ajis02-5323	25	14	security	security	NOUN
ajis02-5323	25	15	practices	practice	NOUN
ajis02-5323	25	16	before	before	ADP
ajis02-5323	25	17	establishing	establish	VERB
ajis02-5323	25	18	business	business	NOUN
ajis02-5323	25	19	relationships	relationship	NOUN
ajis02-5323	25	20	involving	involve	VERB
ajis02-5323	25	21	sensitive	sensitive	ADJ
ajis02-5323	25	22	or	or	CCONJ
ajis02-5323	25	23	confidential	confidential	ADJ
ajis02-5323	25	24	information	information	NOUN
ajis02-5323	25	25	sharing	sharing	NOUN
ajis02-5323	25	26	.	.	PUNCT
ajis02-5323	26	1	while	while	SCONJ
ajis02-5323	26	2	the	the	DET
ajis02-5323	26	3	dominant	dominant	ADJ
ajis02-5323	26	4	cyber	cyber	NOUN
ajis02-5323	26	5	security	security	NOUN
ajis02-5323	26	6	frameworks	framework	NOUN
ajis02-5323	26	7	and	and	CCONJ
ajis02-5323	26	8	standards	standard	NOUN
ajis02-5323	26	9	such	such	ADJ
ajis02-5323	26	10	as	as	ADP
ajis02-5323	26	11	nist	nist	NOUN
ajis02-5323	26	12	,	,	PUNCT
ajis02-5323	26	13	control	control	NOUN
ajis02-5323	26	14	objectives	objective	NOUN
ajis02-5323	26	15	for	for	ADP
ajis02-5323	26	16	information	information	NOUN
ajis02-5323	26	17	and	and	CCONJ
ajis02-5323	26	18	related	related	ADJ
ajis02-5323	26	19	technologies	technology	NOUN
ajis02-5323	26	20	(	(	PUNCT
ajis02-5323	26	21	cobit	cobit	NOUN
ajis02-5323	26	22	2019	2019	NUM
ajis02-5323	26	23	)	)	PUNCT
ajis02-5323	26	24	,	,	PUNCT
ajis02-5323	26	25	the	the	DET
ajis02-5323	26	26	international	international	ADJ
ajis02-5323	26	27	organization	organization	NOUN
ajis02-5323	26	28	for	for	ADP
ajis02-5323	26	29	standardization	standardization	NOUN
ajis02-5323	26	30	and	and	CCONJ
ajis02-5323	26	31	the	the	DET
ajis02-5323	26	32	international	international	ADJ
ajis02-5323	26	33	electrotechnical	electrotechnical	ADJ
ajis02-5323	26	34	commission	commission	NOUN
ajis02-5323	26	35	(	(	PUNCT
ajis02-5323	26	36	iso	iso	NOUN
ajis02-5323	26	37	)	)	PUNCT
ajis02-5323	26	38	,	,	PUNCT
ajis02-5323	26	39	and	and	CCONJ
ajis02-5323	26	40	banking	bank	VERB
ajis02-5323	26	41	prudential	prudential	ADJ
ajis02-5323	26	42	regulation	regulation	NOUN
ajis02-5323	26	43	address	address	NOUN
ajis02-5323	26	44	processes	process	NOUN
ajis02-5323	26	45	of	of	ADP
ajis02-5323	26	46	managing	manage	VERB
ajis02-5323	26	47	cyber	cyber	NOUN
ajis02-5323	26	48	risks	risk	NOUN
ajis02-5323	26	49	in	in	ADP
ajis02-5323	26	50	the	the	DET
ajis02-5323	26	51	sc	sc	PROPN
ajis02-5323	26	52	,	,	PUNCT
ajis02-5323	26	53	they	they	PRON
ajis02-5323	26	54	are	be	AUX
ajis02-5323	26	55	high	high	ADJ
ajis02-5323	26	56	-	-	PUNCT
ajis02-5323	26	57	level	level	NOUN
ajis02-5323	26	58	,	,	PUNCT
ajis02-5323	26	59	require	require	VERB
ajis02-5323	26	60	significant	significant	ADJ
ajis02-5323	26	61	expertise	expertise	NOUN
ajis02-5323	26	62	,	,	PUNCT
ajis02-5323	26	63	and	and	CCONJ
ajis02-5323	26	64	are	be	AUX
ajis02-5323	26	65	costly	costly	ADJ
ajis02-5323	26	66	(	(	PUNCT
ajis02-5323	26	67	for	for	ADP
ajis02-5323	26	68	their	their	PRON
ajis02-5323	26	69	overview	overview	NOUN
ajis02-5323	26	70	,	,	PUNCT
ajis02-5323	26	71	see	see	VERB
ajis02-5323	26	72	supplement	supplement	NOUN
ajis02-5323	26	73	a	a	PRON
ajis02-5323	26	74	)	)	PUNCT
ajis02-5323	26	75	.	.	PUNCT
ajis02-5323	27	1	complying	comply	VERB
ajis02-5323	27	2	with	with	ADP
ajis02-5323	27	3	standards	standard	NOUN
ajis02-5323	27	4	is	be	AUX
ajis02-5323	27	5	not	not	PART
ajis02-5323	27	6	fit	fit	ADJ
ajis02-5323	27	7	for	for	ADP
ajis02-5323	27	8	purpose	purpose	NOUN
ajis02-5323	27	9	for	for	ADP
ajis02-5323	27	10	small	small	ADJ
ajis02-5323	27	11	and	and	CCONJ
ajis02-5323	27	12	medium	medium	ADJ
ajis02-5323	27	13	-	-	PUNCT
ajis02-5323	27	14	sized	sized	ADJ
ajis02-5323	27	15	organizations	organization	NOUN
ajis02-5323	27	16	(	(	PUNCT
ajis02-5323	27	17	smes	sme	NOUN
ajis02-5323	27	18	)	)	PUNCT
ajis02-5323	27	19	that	that	PRON
ajis02-5323	27	20	do	do	AUX
ajis02-5323	27	21	not	not	PART
ajis02-5323	27	22	have	have	VERB
ajis02-5323	27	23	sufficient	sufficient	ADJ
ajis02-5323	27	24	resources	resource	NOUN
ajis02-5323	27	25	(	(	PUNCT
ajis02-5323	27	26	ghadge	ghadge	VERB
ajis02-5323	27	27	et	et	PROPN
ajis02-5323	27	28	al	al	PROPN
ajis02-5323	27	29	.	.	PROPN
ajis02-5323	27	30	,	,	PUNCT
ajis02-5323	27	31	2019	2019	NUM
ajis02-5323	27	32	)	)	PUNCT
ajis02-5323	27	33	and	and	CCONJ
ajis02-5323	27	34	for	for	ADP
ajis02-5323	27	35	whom	whom	PRON
ajis02-5323	27	36	is	be	AUX
ajis02-5323	27	37	also	also	ADV
ajis02-5323	27	38	being	be	AUX
ajis02-5323	27	39	assessed	assess	VERB
ajis02-5323	27	40	by	by	ADP
ajis02-5323	27	41	such	such	ADJ
ajis02-5323	27	42	standards	standard	NOUN
ajis02-5323	27	43	by	by	ADP
ajis02-5323	27	44	multiple	multiple	ADJ
ajis02-5323	27	45	customers	customer	NOUN
ajis02-5323	27	46	too	too	ADV
ajis02-5323	27	47	costly	costly	ADJ
ajis02-5323	27	48	.	.	PUNCT
ajis02-5323	28	1	it	it	PRON
ajis02-5323	28	2	is	be	AUX
ajis02-5323	28	3	also	also	ADV
ajis02-5323	28	4	unclear	unclear	ADJ
ajis02-5323	28	5	how	how	SCONJ
ajis02-5323	28	6	supplier	supplier	NOUN
ajis02-5323	28	7	cyber	cyber	NOUN
ajis02-5323	28	8	risk	risk	NOUN
ajis02-5323	28	9	assessment	assessment	NOUN
ajis02-5323	28	10	can	can	AUX
ajis02-5323	28	11	be	be	AUX
ajis02-5323	28	12	integrated	integrate	VERB
ajis02-5323	28	13	into	into	ADP
ajis02-5323	28	14	organizational	organizational	ADJ
ajis02-5323	28	15	-	-	PUNCT
ajis02-5323	28	16	level	level	NOUN
ajis02-5323	28	17	cyber	cyber	NOUN
ajis02-5323	28	18	risk	risk	NOUN
ajis02-5323	28	19	assessment	assessment	NOUN
ajis02-5323	28	20	,	,	PUNCT
ajis02-5323	28	21	as	as	SCONJ
ajis02-5323	28	22	guided	guide	VERB
ajis02-5323	28	23	by	by	ADP
ajis02-5323	28	24	iso	iso	PROPN
ajis02-5323	28	25	/	/	SYM
ajis02-5323	28	26	iec	iec	PROPN
ajis02-5323	28	27	27005	27005	NUM
ajis02-5323	28	28	and	and	CCONJ
ajis02-5323	28	29	nist	nist	NOUN
ajis02-5323	28	30	sp	sp	ADP
ajis02-5323	28	31	800	800	NUM
ajis02-5323	28	32	-	-	SYM
ajis02-5323	28	33	30	30	NUM
ajis02-5323	28	34	.	.	PUNCT
ajis02-5323	29	1	most	most	ADJ
ajis02-5323	29	2	prior	prior	ADJ
ajis02-5323	29	3	research	research	NOUN
ajis02-5323	29	4	addresses	address	NOUN
ajis02-5323	29	5	a	a	DET
ajis02-5323	29	6	diverse	diverse	ADJ
ajis02-5323	29	7	array	array	NOUN
ajis02-5323	29	8	of	of	ADP
ajis02-5323	29	9	topics	topic	NOUN
ajis02-5323	29	10	,	,	PUNCT
ajis02-5323	29	11	predominantly	predominantly	ADV
ajis02-5323	29	12	analyzing	analyze	VERB
ajis02-5323	29	13	technical	technical	ADJ
ajis02-5323	29	14	solutions	solution	NOUN
ajis02-5323	29	15	,	,	PUNCT
ajis02-5323	29	16	standards	standard	NOUN
ajis02-5323	29	17	and	and	CCONJ
ajis02-5323	29	18	protocols	protocol	NOUN
ajis02-5323	29	19	(	(	PUNCT
ajis02-5323	29	20	e.g.	e.g.	ADV
ajis02-5323	29	21	,	,	PUNCT
ajis02-5323	29	22	akinrolabu	akinrolabu	PROPN
ajis02-5323	29	23	et	et	PROPN
ajis02-5323	29	24	al	al	PROPN
ajis02-5323	29	25	.	.	PROPN
ajis02-5323	29	26	2019	2019	NUM
ajis02-5323	29	27	;	;	PUNCT
ajis02-5323	29	28	caldwell	caldwell	PROPN
ajis02-5323	29	29	2015	2015	NUM
ajis02-5323	29	30	;	;	PUNCT
ajis02-5323	29	31	hao	hao	PROPN
ajis02-5323	29	32	&	&	CCONJ
ajis02-5323	29	33	cai	cai	PROPN
ajis02-5323	29	34	2011	2011	NUM
ajis02-5323	29	35	)	)	PUNCT
ajis02-5323	29	36	,	,	PUNCT
ajis02-5323	29	37	supplier	supplier	NOUN
ajis02-5323	29	38	cyber	cyber	NOUN
ajis02-5323	29	39	risk	risk	NOUN
ajis02-5323	29	40	characteristics	characteristic	NOUN
ajis02-5323	29	41	,	,	PUNCT
ajis02-5323	29	42	or	or	CCONJ
ajis02-5323	29	43	the	the	DET
ajis02-5323	29	44	financial	financial	ADJ
ajis02-5323	29	45	impact	impact	NOUN
ajis02-5323	29	46	of	of	ADP
ajis02-5323	29	47	a	a	DET
ajis02-5323	29	48	cyber	cyber	NOUN
ajis02-5323	29	49	incident	incident	NOUN
ajis02-5323	29	50	in	in	ADP
ajis02-5323	29	51	a	a	DET
ajis02-5323	29	52	sc	sc	PROPN
ajis02-5323	29	53	(	(	PUNCT
ajis02-5323	29	54	benaroch	benaroch	NOUN
ajis02-5323	29	55	2021	2021	NUM
ajis02-5323	29	56	;	;	PUNCT
ajis02-5323	29	57	crossignani	crossignani	NOUN
ajis02-5323	29	58	et	et	PROPN
ajis02-5323	29	59	al	al	PROPN
ajis02-5323	29	60	.	.	PROPN
ajis02-5323	29	61	2023	2023	NUM
ajis02-5323	29	62	)	)	PUNCT
ajis02-5323	29	63	.	.	PUNCT
ajis02-5323	30	1	studies	study	NOUN
ajis02-5323	30	2	analyzing	analyze	VERB
ajis02-5323	30	3	organizational	organizational	ADJ
ajis02-5323	30	4	approaches	approach	NOUN
ajis02-5323	30	5	to	to	ADP
ajis02-5323	30	6	cscrm	cscrm	PROPN
ajis02-5323	30	7	are	be	AUX
ajis02-5323	30	8	scarce	scarce	ADJ
ajis02-5323	30	9	due	due	ADP
ajis02-5323	30	10	to	to	ADP
ajis02-5323	30	11	data	data	NOUN
ajis02-5323	30	12	sensitivity	sensitivity	NOUN
ajis02-5323	30	13	and	and	CCONJ
ajis02-5323	30	14	because	because	SCONJ
ajis02-5323	30	15	frequently	frequently	ADV
ajis02-5323	30	16	,	,	PUNCT
ajis02-5323	30	17	even	even	ADV
ajis02-5323	30	18	focal	focal	ADJ
ajis02-5323	30	19	organizations	organization	NOUN
ajis02-5323	30	20	do	do	AUX
ajis02-5323	30	21	not	not	PART
ajis02-5323	30	22	have	have	VERB
ajis02-5323	30	23	a	a	DET
ajis02-5323	30	24	good	good	ADJ
ajis02-5323	30	25	understanding	understanding	NOUN
ajis02-5323	30	26	of	of	ADP
ajis02-5323	30	27	cyber	cyber	ADJ
ajis02-5323	30	28	risks	risk	NOUN
ajis02-5323	30	29	beyond	beyond	ADP
ajis02-5323	30	30	their	their	PRON
ajis02-5323	30	31	direct	direct	ADJ
ajis02-5323	30	32	(	(	PUNCT
ajis02-5323	30	33	tier	tier	NOUN
ajis02-5323	30	34	1	1	NUM
ajis02-5323	30	35	)	)	PUNCT
ajis02-5323	30	36	suppliers	supplier	NOUN
ajis02-5323	30	37	(	(	PUNCT
ajis02-5323	30	38	colicchia	colicchia	VERB
ajis02-5323	30	39	et	et	PROPN
ajis02-5323	30	40	al	al	PROPN
ajis02-5323	30	41	.	.	PROPN
ajis02-5323	30	42	2019	2019	NUM
ajis02-5323	30	43	;	;	PUNCT
ajis02-5323	30	44	gani	gani	PROPN
ajis02-5323	30	45	et	et	PROPN
ajis02-5323	30	46	al	al	PROPN
ajis02-5323	30	47	.	.	PROPN
ajis02-5323	30	48	2023	2023	NUM
ajis02-5323	30	49	;	;	PUNCT
ajis02-5323	30	50	lewis	lewis	PROPN
ajis02-5323	30	51	et	et	PROPN
ajis02-5323	30	52	al	al	PROPN
ajis02-5323	30	53	.	.	PROPN
ajis02-5323	30	54	2014	2014	NUM
ajis02-5323	30	55	;	;	PUNCT
ajis02-5323	30	56	pandey	pandey	PROPN
ajis02-5323	30	57	et	et	PROPN
ajis02-5323	30	58	al	al	PROPN
ajis02-5323	30	59	.	.	PROPN
ajis02-5323	30	60	2019	2019	NUM
ajis02-5323	30	61	)	)	PUNCT
ajis02-5323	30	62	.	.	PUNCT
ajis02-5323	31	1	we	we	PRON
ajis02-5323	31	2	identified	identify	VERB
ajis02-5323	31	3	only	only	ADV
ajis02-5323	31	4	six	six	NUM
ajis02-5323	31	5	such	such	ADJ
ajis02-5323	31	6	australasian	australasian	ADJ
ajis02-5323	31	7	journal	journal	NOUN
ajis02-5323	31	8	of	of	ADP
ajis02-5323	31	9	information	information	NOUN
ajis02-5323	31	10	systems	system	NOUN
ajis02-5323	31	11	slapnicar	slapnicar	NOUN
ajis02-5323	31	12	,	,	PUNCT
ajis02-5323	31	13	vidmar	vidmar	NOUN
ajis02-5323	31	14	&	&	CCONJ
ajis02-5323	31	15	tsen	tsen	ADJ
ajis02-5323	31	16	2025	2025	NUM
ajis02-5323	31	17	,	,	PUNCT
ajis02-5323	31	18	vol	vol	NOUN
ajis02-5323	31	19	29	29	NUM
ajis02-5323	31	20	,	,	PUNCT
ajis02-5323	31	21	research	research	NOUN
ajis02-5323	31	22	article	article	NOUN
ajis02-5323	31	23	process	process	NOUN
ajis02-5323	31	24	theory	theory	NOUN
ajis02-5323	31	25	of	of	ADP
ajis02-5323	31	26	supplier	supplier	NOUN
ajis02-5323	31	27	cyber	cyber	NOUN
ajis02-5323	31	28	risk	risk	NOUN
ajis02-5323	31	29	assessment	assessment	NOUN
ajis02-5323	31	30	3	3	NUM
ajis02-5323	31	31	studies	study	NOUN
ajis02-5323	31	32	,	,	PUNCT
ajis02-5323	31	33	and	and	CCONJ
ajis02-5323	31	34	they	they	PRON
ajis02-5323	31	35	highlight	highlight	VERB
ajis02-5323	31	36	a	a	DET
ajis02-5323	31	37	significant	significant	ADJ
ajis02-5323	31	38	lack	lack	NOUN
ajis02-5323	31	39	of	of	ADP
ajis02-5323	31	40	proper	proper	ADJ
ajis02-5323	31	41	c	c	NOUN
ajis02-5323	31	42	-	-	PUNCT
ajis02-5323	31	43	scrm	scrm	NOUN
ajis02-5323	31	44	(	(	PUNCT
ajis02-5323	31	45	e.g.	e.g.	ADV
ajis02-5323	31	46	,	,	PUNCT
ajis02-5323	31	47	boyens	boyen	VERB
ajis02-5323	31	48	et	et	PROPN
ajis02-5323	31	49	al	al	PROPN
ajis02-5323	31	50	.	.	PROPN
ajis02-5323	31	51	2020	2020	NUM
ajis02-5323	31	52	;	;	PUNCT
ajis02-5323	31	53	colicchia	colicchia	VERB
ajis02-5323	31	54	et	et	ADP
ajis02-5323	31	55	al	al	PROPN
ajis02-5323	31	56	.	.	PROPN
ajis02-5323	31	57	2019	2019	NUM
ajis02-5323	31	58	;	;	PUNCT
ajis02-5323	31	59	gaudenzi	gaudenzi	PROPN
ajis02-5323	31	60	&	&	CCONJ
ajis02-5323	31	61	siciliano	siciliano	PROPN
ajis02-5323	31	62	2018	2018	NUM
ajis02-5323	31	63	;	;	PUNCT
ajis02-5323	31	64	tran	tran	PROPN
ajis02-5323	31	65	et	et	PROPN
ajis02-5323	31	66	al	al	PROPN
ajis02-5323	31	67	.	.	PROPN
ajis02-5323	31	68	2016	2016	NUM
ajis02-5323	31	69	)	)	PUNCT
ajis02-5323	31	70	.	.	PUNCT
ajis02-5323	32	1	up	up	ADP
ajis02-5323	32	2	to	to	ADP
ajis02-5323	32	3	this	this	DET
ajis02-5323	32	4	point	point	NOUN
ajis02-5323	32	5	,	,	PUNCT
ajis02-5323	32	6	existing	exist	VERB
ajis02-5323	32	7	research	research	NOUN
ajis02-5323	32	8	has	have	AUX
ajis02-5323	32	9	not	not	PART
ajis02-5323	32	10	focused	focus	VERB
ajis02-5323	32	11	on	on	ADP
ajis02-5323	32	12	the	the	DET
ajis02-5323	32	13	supplier	supplier	NOUN
ajis02-5323	32	14	cyber	cyber	NOUN
ajis02-5323	32	15	risk	risk	NOUN
ajis02-5323	32	16	assessment	assessment	NOUN
ajis02-5323	32	17	process	process	NOUN
ajis02-5323	32	18	,	,	PUNCT
ajis02-5323	32	19	nor	nor	CCONJ
ajis02-5323	32	20	has	have	AUX
ajis02-5323	32	21	it	it	PRON
ajis02-5323	32	22	examined	examine	VERB
ajis02-5323	32	23	how	how	SCONJ
ajis02-5323	32	24	contextual	contextual	ADJ
ajis02-5323	32	25	factors	factor	NOUN
ajis02-5323	32	26	influence	influence	VERB
ajis02-5323	32	27	it	it	PRON
ajis02-5323	32	28	.	.	PUNCT
ajis02-5323	33	1	it	it	PRON
ajis02-5323	33	2	is	be	AUX
ajis02-5323	33	3	not	not	PART
ajis02-5323	33	4	well	well	ADV
ajis02-5323	33	5	understood	understand	VERB
ajis02-5323	33	6	what	what	DET
ajis02-5323	33	7	process	process	NOUN
ajis02-5323	33	8	organizations	organization	NOUN
ajis02-5323	33	9	employ	employ	VERB
ajis02-5323	33	10	to	to	PART
ajis02-5323	33	11	assess	assess	VERB
ajis02-5323	33	12	a	a	DET
ajis02-5323	33	13	supplier	supplier	NOUN
ajis02-5323	33	14	cyber	cyber	NOUN
ajis02-5323	33	15	risk	risk	NOUN
ajis02-5323	33	16	,	,	PUNCT
ajis02-5323	33	17	how	how	SCONJ
ajis02-5323	33	18	contextual	contextual	ADJ
ajis02-5323	33	19	factors	factor	NOUN
ajis02-5323	33	20	impact	impact	VERB
ajis02-5323	33	21	this	this	DET
ajis02-5323	33	22	process	process	NOUN
ajis02-5323	33	23	and	and	CCONJ
ajis02-5323	33	24	how	how	SCONJ
ajis02-5323	33	25	effective	effective	ADJ
ajis02-5323	33	26	it	it	PRON
ajis02-5323	33	27	is	be	AUX
ajis02-5323	33	28	in	in	ADP
ajis02-5323	33	29	identifying	identify	VERB
ajis02-5323	33	30	a	a	DET
ajis02-5323	33	31	risky	risky	ADJ
ajis02-5323	33	32	supplier	supplier	NOUN
ajis02-5323	33	33	.	.	PUNCT
ajis02-5323	34	1	our	our	PRON
ajis02-5323	34	2	primary	primary	ADJ
ajis02-5323	34	3	goal	goal	NOUN
ajis02-5323	34	4	is	be	AUX
ajis02-5323	34	5	to	to	PART
ajis02-5323	34	6	develop	develop	VERB
ajis02-5323	34	7	a	a	DET
ajis02-5323	34	8	process	process	NOUN
ajis02-5323	34	9	theory	theory	NOUN
ajis02-5323	34	10	of	of	ADP
ajis02-5323	34	11	supplier	supplier	NOUN
ajis02-5323	34	12	cyber	cyber	NOUN
ajis02-5323	34	13	risk	risk	NOUN
ajis02-5323	34	14	assessment	assessment	NOUN
ajis02-5323	34	15	.	.	PUNCT
ajis02-5323	35	1	we	we	PRON
ajis02-5323	35	2	adopted	adopt	VERB
ajis02-5323	35	3	the	the	DET
ajis02-5323	35	4	straussian	straussian	ADJ
ajis02-5323	35	5	grounded	ground	VERB
ajis02-5323	35	6	theory	theory	NOUN
ajis02-5323	35	7	approach	approach	NOUN
ajis02-5323	35	8	(	(	PUNCT
ajis02-5323	35	9	corbin	corbin	PROPN
ajis02-5323	35	10	&	&	CCONJ
ajis02-5323	35	11	strauss	strauss	PROPN
ajis02-5323	35	12	1990	1990	NUM
ajis02-5323	35	13	)	)	PUNCT
ajis02-5323	35	14	,	,	PUNCT
ajis02-5323	35	15	broadly	broadly	ADV
ajis02-5323	35	16	based	base	VERB
ajis02-5323	35	17	on	on	ADP
ajis02-5323	35	18	two	two	NUM
ajis02-5323	35	19	process	process	NOUN
ajis02-5323	35	20	theories	theory	NOUN
ajis02-5323	35	21	–	–	PUNCT
ajis02-5323	35	22	life	life	NOUN
ajis02-5323	35	23	-	-	PUNCT
ajis02-5323	35	24	time	time	NOUN
ajis02-5323	35	25	and	and	CCONJ
ajis02-5323	35	26	teleological	teleological	ADJ
ajis02-5323	35	27	theory	theory	NOUN
ajis02-5323	35	28	.	.	PUNCT
ajis02-5323	36	1	the	the	DET
ajis02-5323	36	2	former	former	ADJ
ajis02-5323	36	3	is	be	AUX
ajis02-5323	36	4	concerned	concern	VERB
ajis02-5323	36	5	with	with	ADP
ajis02-5323	36	6	the	the	DET
ajis02-5323	36	7	sequential	sequential	ADJ
ajis02-5323	36	8	steps	step	NOUN
ajis02-5323	36	9	that	that	PRON
ajis02-5323	36	10	form	form	VERB
ajis02-5323	36	11	a	a	DET
ajis02-5323	36	12	process	process	NOUN
ajis02-5323	36	13	leading	lead	VERB
ajis02-5323	36	14	to	to	ADP
ajis02-5323	36	15	the	the	DET
ajis02-5323	36	16	attainment	attainment	NOUN
ajis02-5323	36	17	of	of	ADP
ajis02-5323	36	18	organizational	organizational	ADJ
ajis02-5323	36	19	outcomes	outcome	NOUN
ajis02-5323	36	20	(	(	PUNCT
ajis02-5323	36	21	mohr	mohr	PROPN
ajis02-5323	36	22	1982	1982	NUM
ajis02-5323	36	23	;	;	PUNCT
ajis02-5323	36	24	markus	markus	PROPN
ajis02-5323	36	25	&	&	CCONJ
ajis02-5323	36	26	robey	robey	NOUN
ajis02-5323	36	27	1988	1988	NUM
ajis02-5323	36	28	)	)	PUNCT
ajis02-5323	36	29	,	,	PUNCT
ajis02-5323	36	30	and	and	CCONJ
ajis02-5323	36	31	the	the	DET
ajis02-5323	36	32	latter	latter	ADJ
ajis02-5323	36	33	with	with	ADP
ajis02-5323	36	34	the	the	DET
ajis02-5323	36	35	goals	goal	NOUN
ajis02-5323	36	36	of	of	ADP
ajis02-5323	36	37	the	the	DET
ajis02-5323	36	38	process	process	NOUN
ajis02-5323	36	39	and	and	CCONJ
ajis02-5323	36	40	process	process	NOUN
ajis02-5323	36	41	adaptability	adaptability	NOUN
ajis02-5323	36	42	in	in	ADP
ajis02-5323	36	43	response	response	NOUN
ajis02-5323	36	44	to	to	ADP
ajis02-5323	36	45	resource	resource	NOUN
ajis02-5323	36	46	constraints	constraint	NOUN
ajis02-5323	36	47	and	and	CCONJ
ajis02-5323	36	48	environmental	environmental	ADJ
ajis02-5323	36	49	factors	factor	NOUN
ajis02-5323	36	50	(	(	PUNCT
ajis02-5323	36	51	van	van	PROPN
ajis02-5323	36	52	de	de	X
ajis02-5323	36	53	ven	ven	PROPN
ajis02-5323	36	54	&	&	CCONJ
ajis02-5323	36	55	poole	poole	PROPN
ajis02-5323	36	56	1995	1995	NUM
ajis02-5323	36	57	;	;	PUNCT
ajis02-5323	36	58	baskerville	baskerville	NOUN
ajis02-5323	36	59	2005	2005	NUM
ajis02-5323	36	60	)	)	PUNCT
ajis02-5323	36	61	.	.	PUNCT
ajis02-5323	37	1	our	our	PRON
ajis02-5323	37	2	methods	method	NOUN
ajis02-5323	37	3	of	of	ADP
ajis02-5323	37	4	investigation	investigation	NOUN
ajis02-5323	37	5	are	be	AUX
ajis02-5323	37	6	mixed	mixed	ADJ
ajis02-5323	37	7	.	.	PUNCT
ajis02-5323	38	1	to	to	PART
ajis02-5323	38	2	formulate	formulate	VERB
ajis02-5323	38	3	a	a	DET
ajis02-5323	38	4	process	process	NOUN
ajis02-5323	38	5	theory	theory	NOUN
ajis02-5323	38	6	of	of	ADP
ajis02-5323	38	7	cyber	cyber	ADJ
ajis02-5323	38	8	risk	risk	NOUN
ajis02-5323	38	9	assessment	assessment	NOUN
ajis02-5323	38	10	,	,	PUNCT
ajis02-5323	38	11	we	we	PRON
ajis02-5323	38	12	conducted	conduct	VERB
ajis02-5323	38	13	semi	semi	ADJ
ajis02-5323	38	14	-	-	ADJ
ajis02-5323	38	15	structured	structured	ADJ
ajis02-5323	38	16	interviews	interview	NOUN
ajis02-5323	38	17	with	with	ADP
ajis02-5323	38	18	33	33	NUM
ajis02-5323	38	19	security	security	NOUN
ajis02-5323	38	20	experts	expert	NOUN
ajis02-5323	38	21	in	in	ADP
ajis02-5323	38	22	charge	charge	NOUN
ajis02-5323	38	23	of	of	ADP
ajis02-5323	38	24	cscrm	cscrm	NOUN
ajis02-5323	38	25	in	in	ADP
ajis02-5323	38	26	various	various	ADJ
ajis02-5323	38	27	countries	country	NOUN
ajis02-5323	38	28	.	.	PUNCT
ajis02-5323	39	1	as	as	SCONJ
ajis02-5323	39	2	qualitative	qualitative	ADJ
ajis02-5323	39	3	findings	finding	NOUN
ajis02-5323	39	4	can	can	AUX
ajis02-5323	39	5	not	not	PART
ajis02-5323	39	6	answer	answer	VERB
ajis02-5323	39	7	whether	whether	SCONJ
ajis02-5323	39	8	the	the	DET
ajis02-5323	39	9	process	process	NOUN
ajis02-5323	39	10	is	be	AUX
ajis02-5323	39	11	effective	effective	ADJ
ajis02-5323	39	12	,	,	PUNCT
ajis02-5323	39	13	we	we	PRON
ajis02-5323	39	14	complemented	complement	VERB
ajis02-5323	39	15	the	the	DET
ajis02-5323	39	16	interview	interview	NOUN
ajis02-5323	39	17	findings	finding	NOUN
ajis02-5323	39	18	with	with	ADP
ajis02-5323	39	19	a	a	DET
ajis02-5323	39	20	survey	survey	NOUN
ajis02-5323	39	21	of	of	ADP
ajis02-5323	39	22	53	53	NUM
ajis02-5323	39	23	security	security	NOUN
ajis02-5323	39	24	experts	expert	NOUN
ajis02-5323	39	25	to	to	PART
ajis02-5323	39	26	establish	establish	VERB
ajis02-5323	39	27	whether	whether	SCONJ
ajis02-5323	39	28	the	the	DET
ajis02-5323	39	29	controls	control	NOUN
ajis02-5323	39	30	the	the	DET
ajis02-5323	39	31	process	process	NOUN
ajis02-5323	39	32	entails	entail	VERB
ajis02-5323	39	33	can	can	AUX
ajis02-5323	39	34	identify	identify	VERB
ajis02-5323	39	35	riskier	risky	ADJ
ajis02-5323	39	36	suppliers	supplier	NOUN
ajis02-5323	39	37	.	.	PUNCT
ajis02-5323	40	1	our	our	PRON
ajis02-5323	40	2	study	study	NOUN
ajis02-5323	40	3	makes	make	VERB
ajis02-5323	40	4	two	two	NUM
ajis02-5323	40	5	original	original	ADJ
ajis02-5323	40	6	contributions	contribution	NOUN
ajis02-5323	40	7	to	to	ADP
ajis02-5323	40	8	the	the	DET
ajis02-5323	40	9	c	c	PROPN
ajis02-5323	40	10	-	-	PUNCT
ajis02-5323	40	11	scrm	scrm	PROPN
ajis02-5323	40	12	literature	literature	NOUN
ajis02-5323	40	13	:	:	PUNCT
ajis02-5323	40	14	first	first	ADV
ajis02-5323	40	15	,	,	PUNCT
ajis02-5323	40	16	we	we	PRON
ajis02-5323	40	17	define	define	VERB
ajis02-5323	40	18	the	the	DET
ajis02-5323	40	19	process	process	NOUN
ajis02-5323	40	20	theory	theory	NOUN
ajis02-5323	40	21	of	of	ADP
ajis02-5323	40	22	supplier	supplier	NOUN
ajis02-5323	40	23	cyber	cyber	NOUN
ajis02-5323	40	24	risk	risk	NOUN
ajis02-5323	40	25	assessment	assessment	NOUN
ajis02-5323	40	26	,	,	PUNCT
ajis02-5323	40	27	which	which	PRON
ajis02-5323	40	28	explains	explain	VERB
ajis02-5323	40	29	how	how	SCONJ
ajis02-5323	40	30	organizations	organization	NOUN
ajis02-5323	40	31	assess	assess	VERB
ajis02-5323	40	32	supplier	supplier	NOUN
ajis02-5323	40	33	cyber	cyber	NOUN
ajis02-5323	40	34	risk	risk	NOUN
ajis02-5323	40	35	and	and	CCONJ
ajis02-5323	40	36	which	which	DET
ajis02-5323	40	37	contextual	contextual	ADJ
ajis02-5323	40	38	factors	factor	NOUN
ajis02-5323	40	39	affect	affect	VERB
ajis02-5323	40	40	the	the	DET
ajis02-5323	40	41	maturity	maturity	NOUN
ajis02-5323	40	42	of	of	ADP
ajis02-5323	40	43	cyber	cyber	ADJ
ajis02-5323	40	44	risk	risk	NOUN
ajis02-5323	40	45	assessment	assessment	NOUN
ajis02-5323	40	46	.	.	PUNCT
ajis02-5323	41	1	the	the	DET
ajis02-5323	41	2	interview	interview	NOUN
ajis02-5323	41	3	findings	finding	NOUN
ajis02-5323	41	4	provide	provide	VERB
ajis02-5323	41	5	in	in	ADP
ajis02-5323	41	6	-	-	PUNCT
ajis02-5323	41	7	depth	depth	NOUN
ajis02-5323	41	8	insights	insight	NOUN
ajis02-5323	41	9	into	into	ADP
ajis02-5323	41	10	how	how	SCONJ
ajis02-5323	41	11	these	these	DET
ajis02-5323	41	12	practices	practice	NOUN
ajis02-5323	41	13	are	be	AUX
ajis02-5323	41	14	carried	carry	VERB
ajis02-5323	41	15	out	out	ADP
ajis02-5323	41	16	in	in	ADP
ajis02-5323	41	17	organizations	organization	NOUN
ajis02-5323	41	18	,	,	PUNCT
ajis02-5323	41	19	and	and	CCONJ
ajis02-5323	41	20	the	the	DET
ajis02-5323	41	21	survey	survey	NOUN
ajis02-5323	41	22	findings	finding	NOUN
ajis02-5323	41	23	suggest	suggest	VERB
ajis02-5323	41	24	that	that	SCONJ
ajis02-5323	41	25	the	the	DET
ajis02-5323	41	26	assessment	assessment	NOUN
ajis02-5323	41	27	process	process	NOUN
ajis02-5323	41	28	can	can	AUX
ajis02-5323	41	29	effectively	effectively	ADV
ajis02-5323	41	30	identify	identify	VERB
ajis02-5323	41	31	riskier	risky	ADJ
ajis02-5323	41	32	suppliers	supplier	NOUN
ajis02-5323	41	33	,	,	PUNCT
ajis02-5323	41	34	especially	especially	ADV
ajis02-5323	41	35	by	by	ADP
ajis02-5323	41	36	identifying	identify	VERB
ajis02-5323	41	37	their	their	PRON
ajis02-5323	41	38	insufficient	insufficient	ADJ
ajis02-5323	41	39	technological	technological	ADJ
ajis02-5323	41	40	controls	control	NOUN
ajis02-5323	41	41	,	,	PUNCT
ajis02-5323	41	42	the	the	DET
ajis02-5323	41	43	lack	lack	NOUN
ajis02-5323	41	44	of	of	ADP
ajis02-5323	41	45	supplier	supplier	NOUN
ajis02-5323	41	46	management	management	NOUN
ajis02-5323	41	47	support	support	NOUN
ajis02-5323	41	48	to	to	PART
ajis02-5323	41	49	cyber	cyber	VERB
ajis02-5323	41	50	security	security	NOUN
ajis02-5323	41	51	risk	risk	NOUN
ajis02-5323	41	52	management	management	NOUN
ajis02-5323	41	53	,	,	PUNCT
ajis02-5323	41	54	the	the	DET
ajis02-5323	41	55	lack	lack	NOUN
ajis02-5323	41	56	of	of	ADP
ajis02-5323	41	57	supplier	supplier	NOUN
ajis02-5323	41	58	’s	’s	PART
ajis02-5323	41	59	transparency	transparency	NOUN
ajis02-5323	41	60	and	and	CCONJ
ajis02-5323	41	61	reputation	reputation	NOUN
ajis02-5323	41	62	,	,	PUNCT
ajis02-5323	41	63	and	and	CCONJ
ajis02-5323	41	64	by	by	ADP
ajis02-5323	41	65	considering	consider	VERB
ajis02-5323	41	66	threat	threat	NOUN
ajis02-5323	41	67	intelligence	intelligence	NOUN
ajis02-5323	41	68	’s	’s	PART
ajis02-5323	41	69	red	red	ADJ
ajis02-5323	41	70	flags	flag	NOUN
ajis02-5323	41	71	.	.	PUNCT
ajis02-5323	42	1	second	second	ADJ
ajis02-5323	42	2	,	,	PUNCT
ajis02-5323	42	3	the	the	DET
ajis02-5323	42	4	practical	practical	ADJ
ajis02-5323	42	5	implications	implication	NOUN
ajis02-5323	42	6	of	of	ADP
ajis02-5323	42	7	our	our	PRON
ajis02-5323	42	8	findings	finding	NOUN
ajis02-5323	42	9	offer	offer	VERB
ajis02-5323	42	10	actionable	actionable	ADJ
ajis02-5323	42	11	insights	insight	NOUN
ajis02-5323	42	12	for	for	ADP
ajis02-5323	42	13	organizations	organization	NOUN
ajis02-5323	42	14	seeking	seek	VERB
ajis02-5323	42	15	to	to	PART
ajis02-5323	42	16	enhance	enhance	VERB
ajis02-5323	42	17	their	their	PRON
ajis02-5323	42	18	cyber	cyber	ADJ
ajis02-5323	42	19	supply	supply	NOUN
ajis02-5323	42	20	chain	chain	NOUN
ajis02-5323	42	21	risk	risk	NOUN
ajis02-5323	42	22	management	management	NOUN
ajis02-5323	42	23	.	.	PUNCT
ajis02-5323	43	1	2	2	NUM
ajis02-5323	43	2	theoretical	theoretical	ADJ
ajis02-5323	43	3	background	background	NOUN
ajis02-5323	43	4	2.1	2.1	NUM
ajis02-5323	43	5	process	process	NOUN
ajis02-5323	43	6	theory	theory	NOUN
ajis02-5323	43	7	to	to	PART
ajis02-5323	43	8	develop	develop	VERB
ajis02-5323	43	9	a	a	DET
ajis02-5323	43	10	grounded	ground	VERB
ajis02-5323	43	11	theory	theory	NOUN
ajis02-5323	43	12	of	of	ADP
ajis02-5323	43	13	a	a	DET
ajis02-5323	43	14	supplier	supplier	NOUN
ajis02-5323	43	15	cyber	cyber	NOUN
ajis02-5323	43	16	risk	risk	NOUN
ajis02-5323	43	17	assessment	assessment	NOUN
ajis02-5323	43	18	process	process	NOUN
ajis02-5323	44	1	,	,	PUNCT
ajis02-5323	44	2	we	we	PRON
ajis02-5323	44	3	draw	draw	VERB
ajis02-5323	44	4	on	on	ADP
ajis02-5323	44	5	process	process	NOUN
ajis02-5323	44	6	theories	theory	NOUN
ajis02-5323	44	7	(	(	PUNCT
ajis02-5323	44	8	langley	langley	NOUN
ajis02-5323	44	9	1999	1999	NUM
ajis02-5323	44	10	)	)	PUNCT
ajis02-5323	44	11	,	,	PUNCT
ajis02-5323	44	12	which	which	PRON
ajis02-5323	44	13	are	be	AUX
ajis02-5323	44	14	at	at	ADP
ajis02-5323	44	15	the	the	DET
ajis02-5323	44	16	core	core	NOUN
ajis02-5323	44	17	of	of	ADP
ajis02-5323	44	18	theories	theory	NOUN
ajis02-5323	44	19	of	of	ADP
ajis02-5323	44	20	explanation	explanation	NOUN
ajis02-5323	44	21	(	(	PUNCT
ajis02-5323	44	22	gregor	gregor	PROPN
ajis02-5323	44	23	2006	2006	NUM
ajis02-5323	44	24	)	)	PUNCT
ajis02-5323	44	25	.	.	PUNCT
ajis02-5323	45	1	process	process	NOUN
ajis02-5323	45	2	theories	theory	NOUN
ajis02-5323	45	3	are	be	AUX
ajis02-5323	45	4	frameworks	framework	NOUN
ajis02-5323	45	5	that	that	PRON
ajis02-5323	45	6	explain	explain	VERB
ajis02-5323	45	7	how	how	SCONJ
ajis02-5323	45	8	organizational	organizational	ADJ
ajis02-5323	45	9	activities	activity	NOUN
ajis02-5323	45	10	unfold	unfold	VERB
ajis02-5323	45	11	over	over	ADP
ajis02-5323	45	12	time	time	NOUN
ajis02-5323	45	13	,	,	PUNCT
ajis02-5323	45	14	emphasizing	emphasize	VERB
ajis02-5323	45	15	the	the	DET
ajis02-5323	45	16	sequences	sequence	NOUN
ajis02-5323	45	17	of	of	ADP
ajis02-5323	45	18	actions	action	NOUN
ajis02-5323	45	19	and	and	CCONJ
ajis02-5323	45	20	interactions	interaction	NOUN
ajis02-5323	45	21	among	among	ADP
ajis02-5323	45	22	actors	actor	NOUN
ajis02-5323	45	23	.	.	PUNCT
ajis02-5323	46	1	for	for	ADP
ajis02-5323	46	2	our	our	PRON
ajis02-5323	46	3	research	research	NOUN
ajis02-5323	46	4	questions	question	NOUN
ajis02-5323	46	5	,	,	PUNCT
ajis02-5323	46	6	the	the	DET
ajis02-5323	46	7	combination	combination	NOUN
ajis02-5323	46	8	of	of	ADP
ajis02-5323	46	9	two	two	NUM
ajis02-5323	46	10	process	process	NOUN
ajis02-5323	46	11	theories	theory	NOUN
ajis02-5323	46	12	proved	prove	VERB
ajis02-5323	46	13	particularly	particularly	ADV
ajis02-5323	46	14	relevant	relevant	ADJ
ajis02-5323	46	15	:	:	PUNCT
ajis02-5323	46	16	a	a	DET
ajis02-5323	46	17	process	process	NOUN
ajis02-5323	46	18	theory	theory	NOUN
ajis02-5323	46	19	that	that	SCONJ
ajis02-5323	46	20	theorists	theorist	VERB
ajis02-5323	46	21	van	van	PROPN
ajis02-5323	46	22	de	de	X
ajis02-5323	46	23	ven	ven	PROPN
ajis02-5323	46	24	and	and	CCONJ
ajis02-5323	46	25	poole	poole	PROPN
ajis02-5323	46	26	(	(	PUNCT
ajis02-5323	46	27	1995	1995	NUM
ajis02-5323	46	28	)	)	PUNCT
ajis02-5323	46	29	call	call	VERB
ajis02-5323	46	30	life	life	NOUN
ajis02-5323	46	31	-	-	PUNCT
ajis02-5323	46	32	cycle	cycle	NOUN
ajis02-5323	46	33	process	process	NOUN
ajis02-5323	46	34	theory	theory	NOUN
ajis02-5323	46	35	and	and	CCONJ
ajis02-5323	46	36	teleological	teleological	ADJ
ajis02-5323	46	37	process	process	NOUN
ajis02-5323	46	38	theory	theory	NOUN
ajis02-5323	46	39	.	.	PUNCT
ajis02-5323	47	1	life	life	NOUN
ajis02-5323	47	2	-	-	PUNCT
ajis02-5323	47	3	cycle	cycle	NOUN
ajis02-5323	47	4	process	process	NOUN
ajis02-5323	47	5	theory	theory	NOUN
ajis02-5323	47	6	suggests	suggest	VERB
ajis02-5323	47	7	that	that	SCONJ
ajis02-5323	47	8	some	some	DET
ajis02-5323	47	9	organizational	organizational	ADJ
ajis02-5323	47	10	phenomena	phenomenon	NOUN
ajis02-5323	47	11	can	can	AUX
ajis02-5323	47	12	not	not	PART
ajis02-5323	47	13	be	be	AUX
ajis02-5323	47	14	explained	explain	VERB
ajis02-5323	47	15	by	by	ADP
ajis02-5323	47	16	a	a	DET
ajis02-5323	47	17	determinate	determinate	ADJ
ajis02-5323	47	18	cause	cause	NOUN
ajis02-5323	47	19	-	-	PUNCT
ajis02-5323	47	20	and	and	CCONJ
ajis02-5323	47	21	-	-	PUNCT
ajis02-5323	47	22	effect	effect	NOUN
ajis02-5323	47	23	relationship	relationship	NOUN
ajis02-5323	47	24	between	between	ADP
ajis02-5323	47	25	variables	variable	NOUN
ajis02-5323	47	26	but	but	CCONJ
ajis02-5323	47	27	as	as	ADP
ajis02-5323	47	28	the	the	DET
ajis02-5323	47	29	outcome	outcome	NOUN
ajis02-5323	47	30	of	of	ADP
ajis02-5323	47	31	a	a	DET
ajis02-5323	47	32	sequence	sequence	NOUN
ajis02-5323	47	33	of	of	ADP
ajis02-5323	47	34	necessary	necessary	ADJ
ajis02-5323	47	35	action	action	NOUN
ajis02-5323	47	36	steps	step	NOUN
ajis02-5323	47	37	(	(	PUNCT
ajis02-5323	47	38	mohr	mohr	PROPN
ajis02-5323	47	39	1982	1982	NUM
ajis02-5323	47	40	;	;	PUNCT
ajis02-5323	47	41	markus	markus	PROPN
ajis02-5323	47	42	&	&	CCONJ
ajis02-5323	47	43	robey	robey	NOUN
ajis02-5323	47	44	1988	1988	NUM
ajis02-5323	47	45	)	)	PUNCT
ajis02-5323	47	46	.	.	PUNCT
ajis02-5323	48	1	instead	instead	ADV
ajis02-5323	48	2	of	of	ADP
ajis02-5323	48	3	pinpointing	pinpoint	VERB
ajis02-5323	48	4	single	single	ADJ
ajis02-5323	48	5	predictors	predictor	NOUN
ajis02-5323	48	6	of	of	ADP
ajis02-5323	48	7	outcomes	outcome	NOUN
ajis02-5323	48	8	,	,	PUNCT
ajis02-5323	48	9	it	it	PRON
ajis02-5323	48	10	explores	explore	VERB
ajis02-5323	48	11	the	the	DET
ajis02-5323	48	12	progression	progression	NOUN
ajis02-5323	48	13	of	of	ADP
ajis02-5323	48	14	activities	activity	NOUN
ajis02-5323	48	15	over	over	ADP
ajis02-5323	48	16	time	time	NOUN
ajis02-5323	48	17	and	and	CCONJ
ajis02-5323	48	18	how	how	SCONJ
ajis02-5323	48	19	complex	complex	ADJ
ajis02-5323	48	20	interdependencies	interdependency	NOUN
ajis02-5323	48	21	shape	shape	VERB
ajis02-5323	48	22	the	the	DET
ajis02-5323	48	23	final	final	ADJ
ajis02-5323	48	24	results	result	NOUN
ajis02-5323	48	25	.	.	PUNCT
ajis02-5323	49	1	this	this	DET
ajis02-5323	49	2	perspective	perspective	NOUN
ajis02-5323	49	3	is	be	AUX
ajis02-5323	49	4	particularly	particularly	ADV
ajis02-5323	49	5	relevant	relevant	ADJ
ajis02-5323	49	6	in	in	ADP
ajis02-5323	49	7	fields	field	NOUN
ajis02-5323	49	8	like	like	ADP
ajis02-5323	49	9	information	information	NOUN
ajis02-5323	49	10	systems	system	NOUN
ajis02-5323	49	11	(	(	PUNCT
ajis02-5323	49	12	is	be	AUX
ajis02-5323	49	13	)	)	PUNCT
ajis02-5323	49	14	,	,	PUNCT
ajis02-5323	49	15	organizational	organizational	ADJ
ajis02-5323	49	16	behavior	behavior	NOUN
ajis02-5323	49	17	,	,	PUNCT
ajis02-5323	49	18	and	and	CCONJ
ajis02-5323	49	19	management	management	NOUN
ajis02-5323	49	20	.	.	PUNCT
ajis02-5323	50	1	cyber	cyber	PROPN
ajis02-5323	50	2	risk	risk	NOUN
ajis02-5323	50	3	management	management	NOUN
ajis02-5323	50	4	is	be	AUX
ajis02-5323	50	5	among	among	ADP
ajis02-5323	50	6	the	the	DET
ajis02-5323	50	7	phenomena	phenomenon	NOUN
ajis02-5323	50	8	that	that	PRON
ajis02-5323	50	9	can	can	AUX
ajis02-5323	50	10	not	not	PART
ajis02-5323	50	11	be	be	AUX
ajis02-5323	50	12	explained	explain	VERB
ajis02-5323	50	13	with	with	ADP
ajis02-5323	50	14	variance	variance	NOUN
ajis02-5323	50	15	australasian	australasian	ADJ
ajis02-5323	50	16	journal	journal	NOUN
ajis02-5323	50	17	of	of	ADP
ajis02-5323	50	18	information	information	NOUN
ajis02-5323	50	19	systems	system	NOUN
ajis02-5323	50	20	slapnicar	slapnicar	NOUN
ajis02-5323	50	21	,	,	PUNCT
ajis02-5323	50	22	vidmar	vidmar	NOUN
ajis02-5323	50	23	&	&	CCONJ
ajis02-5323	50	24	tsen	tsen	ADJ
ajis02-5323	50	25	2025	2025	NUM
ajis02-5323	50	26	,	,	PUNCT
ajis02-5323	50	27	vol	vol	NOUN
ajis02-5323	50	28	29	29	NUM
ajis02-5323	50	29	,	,	PUNCT
ajis02-5323	50	30	research	research	NOUN
ajis02-5323	50	31	article	article	NOUN
ajis02-5323	50	32	process	process	NOUN
ajis02-5323	50	33	theory	theory	NOUN
ajis02-5323	50	34	of	of	ADP
ajis02-5323	50	35	supplier	supplier	NOUN
ajis02-5323	50	36	cyber	cyber	NOUN
ajis02-5323	50	37	risk	risk	NOUN
ajis02-5323	50	38	assessment	assessment	NOUN
ajis02-5323	50	39	4	4	NUM
ajis02-5323	50	40	theories	theory	NOUN
ajis02-5323	50	41	–	–	PUNCT
ajis02-5323	50	42	that	that	PRON
ajis02-5323	50	43	is	be	AUX
ajis02-5323	50	44	,	,	PUNCT
ajis02-5323	50	45	“	"	PUNCT
ajis02-5323	50	46	more	more	ADJ
ajis02-5323	50	47	x	x	PRON
ajis02-5323	50	48	leads	lead	VERB
ajis02-5323	50	49	to	to	ADP
ajis02-5323	50	50	more	more	ADJ
ajis02-5323	50	51	y	y	NOUN
ajis02-5323	50	52	”	"	PUNCT
ajis02-5323	50	53	,	,	PUNCT
ajis02-5323	50	54	because	because	SCONJ
ajis02-5323	50	55	risks	risk	NOUN
ajis02-5323	50	56	are	be	AUX
ajis02-5323	50	57	highly	highly	ADV
ajis02-5323	50	58	unpredictable	unpredictable	ADJ
ajis02-5323	50	59	and	and	CCONJ
ajis02-5323	50	60	transient	transient	ADJ
ajis02-5323	50	61	.	.	PUNCT
ajis02-5323	51	1	rather	rather	ADV
ajis02-5323	51	2	,	,	PUNCT
ajis02-5323	51	3	the	the	DET
ajis02-5323	51	4	logic	logic	NOUN
ajis02-5323	51	5	in	in	ADP
ajis02-5323	51	6	management	management	NOUN
ajis02-5323	51	7	of	of	ADP
ajis02-5323	51	8	cyber	cyber	ADJ
ajis02-5323	51	9	risk	risk	NOUN
ajis02-5323	51	10	is	be	AUX
ajis02-5323	51	11	“	"	PUNCT
ajis02-5323	51	12	if	if	SCONJ
ajis02-5323	51	13	not	not	PART
ajis02-5323	51	14	x	x	NOUN
ajis02-5323	51	15	,	,	PUNCT
ajis02-5323	51	16	then	then	ADV
ajis02-5323	51	17	not	not	PART
ajis02-5323	51	18	y	y	NOUN
ajis02-5323	51	19	”	"	PUNCT
ajis02-5323	51	20	,	,	PUNCT
ajis02-5323	51	21	implying	imply	VERB
ajis02-5323	51	22	that	that	SCONJ
ajis02-5323	51	23	the	the	DET
ajis02-5323	51	24	outcomes	outcome	NOUN
ajis02-5323	51	25	depend	depend	VERB
ajis02-5323	51	26	upon	upon	SCONJ
ajis02-5323	51	27	a	a	DET
ajis02-5323	51	28	complete	complete	ADJ
ajis02-5323	51	29	chain	chain	NOUN
ajis02-5323	51	30	of	of	ADP
ajis02-5323	51	31	process	process	NOUN
ajis02-5323	51	32	activities	activity	NOUN
ajis02-5323	51	33	(	(	PUNCT
ajis02-5323	51	34	baskerville	baskerville	NOUN
ajis02-5323	51	35	2005	2005	NUM
ajis02-5323	51	36	)	)	PUNCT
ajis02-5323	51	37	.	.	PUNCT
ajis02-5323	52	1	the	the	DET
ajis02-5323	52	2	second	second	ADJ
ajis02-5323	52	3	theory	theory	NOUN
ajis02-5323	52	4	is	be	AUX
ajis02-5323	52	5	teleological	teleological	ADJ
ajis02-5323	52	6	process	process	NOUN
ajis02-5323	52	7	theory	theory	NOUN
ajis02-5323	52	8	(	(	PUNCT
ajis02-5323	52	9	van	van	PROPN
ajis02-5323	52	10	de	de	X
ajis02-5323	52	11	ven	ven	PROPN
ajis02-5323	52	12	&	&	CCONJ
ajis02-5323	52	13	poole	poole	PROPN
ajis02-5323	52	14	1995	1995	NUM
ajis02-5323	52	15	)	)	PUNCT
ajis02-5323	52	16	,	,	PUNCT
ajis02-5323	52	17	which	which	PRON
ajis02-5323	52	18	stresses	stress	VERB
ajis02-5323	52	19	that	that	SCONJ
ajis02-5323	52	20	processes	process	NOUN
ajis02-5323	52	21	are	be	AUX
ajis02-5323	52	22	designed	design	VERB
ajis02-5323	52	23	as	as	ADP
ajis02-5323	52	24	a	a	DET
ajis02-5323	52	25	trajectory	trajectory	NOUN
ajis02-5323	52	26	to	to	ADP
ajis02-5323	52	27	an	an	DET
ajis02-5323	52	28	organization	organization	NOUN
ajis02-5323	52	29	’s	’s	PART
ajis02-5323	52	30	intended	intend	VERB
ajis02-5323	52	31	goal	goal	NOUN
ajis02-5323	52	32	.	.	PUNCT
ajis02-5323	53	1	an	an	DET
ajis02-5323	53	2	organization	organization	NOUN
ajis02-5323	53	3	develops	develop	VERB
ajis02-5323	53	4	a	a	DET
ajis02-5323	53	5	repetitive	repetitive	ADJ
ajis02-5323	53	6	sequence	sequence	NOUN
ajis02-5323	53	7	of	of	ADP
ajis02-5323	53	8	goal	goal	NOUN
ajis02-5323	53	9	formulation	formulation	NOUN
ajis02-5323	53	10	,	,	PUNCT
ajis02-5323	53	11	implementation	implementation	NOUN
ajis02-5323	53	12	,	,	PUNCT
ajis02-5323	53	13	evaluation	evaluation	NOUN
ajis02-5323	53	14	and	and	CCONJ
ajis02-5323	53	15	modification	modification	NOUN
ajis02-5323	53	16	of	of	ADP
ajis02-5323	53	17	goals	goal	NOUN
ajis02-5323	53	18	based	base	VERB
ajis02-5323	53	19	on	on	ADP
ajis02-5323	53	20	what	what	PRON
ajis02-5323	53	21	it	it	PRON
ajis02-5323	53	22	has	have	AUX
ajis02-5323	53	23	learnt	learn	VERB
ajis02-5323	53	24	(	(	PUNCT
ajis02-5323	53	25	van	van	PROPN
ajis02-5323	53	26	de	de	X
ajis02-5323	53	27	ven	ven	PROPN
ajis02-5323	53	28	&	&	CCONJ
ajis02-5323	53	29	poole	poole	PROPN
ajis02-5323	53	30	1995	1995	NUM
ajis02-5323	53	31	,	,	PUNCT
ajis02-5323	53	32	p.	p.	NOUN
ajis02-5323	53	33	516	516	NUM
ajis02-5323	53	34	)	)	PUNCT
ajis02-5323	53	35	.	.	PUNCT
ajis02-5323	54	1	however	however	ADV
ajis02-5323	54	2	,	,	PUNCT
ajis02-5323	54	3	while	while	SCONJ
ajis02-5323	54	4	the	the	DET
ajis02-5323	54	5	theory	theory	NOUN
ajis02-5323	54	6	stresses	stress	VERB
ajis02-5323	54	7	the	the	DET
ajis02-5323	54	8	purpose	purpose	NOUN
ajis02-5323	54	9	,	,	PUNCT
ajis02-5323	54	10	it	it	PRON
ajis02-5323	54	11	also	also	ADV
ajis02-5323	54	12	recognizes	recognize	VERB
ajis02-5323	54	13	that	that	SCONJ
ajis02-5323	54	14	an	an	DET
ajis02-5323	54	15	organization	organization	NOUN
ajis02-5323	54	16	is	be	AUX
ajis02-5323	54	17	constrained	constrain	VERB
ajis02-5323	54	18	by	by	ADP
ajis02-5323	54	19	its	its	PRON
ajis02-5323	54	20	resources	resource	NOUN
ajis02-5323	54	21	and	and	CCONJ
ajis02-5323	54	22	environment	environment	NOUN
ajis02-5323	54	23	(	(	PUNCT
ajis02-5323	54	24	contextual	contextual	ADJ
ajis02-5323	54	25	factors	factor	NOUN
ajis02-5323	54	26	)	)	PUNCT
ajis02-5323	54	27	,	,	PUNCT
ajis02-5323	54	28	which	which	PRON
ajis02-5323	54	29	lead	lead	VERB
ajis02-5323	54	30	to	to	ADP
ajis02-5323	54	31	its	its	PRON
ajis02-5323	54	32	adaptability	adaptability	NOUN
ajis02-5323	54	33	(	(	PUNCT
ajis02-5323	54	34	bekmeierfeuerhahn	bekmeierfeuerhahn	NOUN
ajis02-5323	54	35	2009	2009	NUM
ajis02-5323	54	36	)	)	PUNCT
ajis02-5323	54	37	.	.	PUNCT
ajis02-5323	55	1	in	in	ADP
ajis02-5323	55	2	the	the	DET
ajis02-5323	55	3	context	context	NOUN
ajis02-5323	55	4	of	of	ADP
ajis02-5323	55	5	cyber	cyber	ADJ
ajis02-5323	55	6	risk	risk	NOUN
ajis02-5323	55	7	management	management	NOUN
ajis02-5323	55	8	,	,	PUNCT
ajis02-5323	55	9	for	for	ADP
ajis02-5323	55	10	instance	instance	NOUN
ajis02-5323	55	11	,	,	PUNCT
ajis02-5323	55	12	if	if	SCONJ
ajis02-5323	55	13	the	the	DET
ajis02-5323	55	14	highest	high	ADJ
ajis02-5323	55	15	quality	quality	NOUN
ajis02-5323	55	16	of	of	ADP
ajis02-5323	55	17	controls	control	NOUN
ajis02-5323	55	18	can	can	AUX
ajis02-5323	55	19	not	not	PART
ajis02-5323	55	20	be	be	AUX
ajis02-5323	55	21	achieved	achieve	VERB
ajis02-5323	55	22	,	,	PUNCT
ajis02-5323	55	23	it	it	PRON
ajis02-5323	55	24	is	be	AUX
ajis02-5323	55	25	desirable	desirable	ADJ
ajis02-5323	55	26	to	to	PART
ajis02-5323	55	27	have	have	VERB
ajis02-5323	55	28	even	even	ADV
ajis02-5323	55	29	poor	poor	ADJ
ajis02-5323	55	30	quality	quality	NOUN
ajis02-5323	55	31	controls	control	NOUN
ajis02-5323	55	32	in	in	ADP
ajis02-5323	55	33	place	place	NOUN
ajis02-5323	55	34	to	to	PART
ajis02-5323	55	35	prevent	prevent	VERB
ajis02-5323	55	36	some	some	DET
ajis02-5323	55	37	damage	damage	NOUN
ajis02-5323	55	38	(	(	PUNCT
ajis02-5323	55	39	baskerville	baskerville	NOUN
ajis02-5323	55	40	2005	2005	NUM
ajis02-5323	55	41	)	)	PUNCT
ajis02-5323	55	42	.	.	PUNCT
ajis02-5323	56	1	the	the	DET
ajis02-5323	56	2	development	development	NOUN
ajis02-5323	56	3	of	of	ADP
ajis02-5323	56	4	a	a	DET
ajis02-5323	56	5	cyber	cyber	NOUN
ajis02-5323	56	6	risk	risk	NOUN
ajis02-5323	56	7	management	management	NOUN
ajis02-5323	56	8	system	system	NOUN
ajis02-5323	56	9	is	be	AUX
ajis02-5323	56	10	cyclical	cyclical	ADJ
ajis02-5323	56	11	and	and	CCONJ
ajis02-5323	56	12	agile	agile	ADJ
ajis02-5323	56	13	.	.	PUNCT
ajis02-5323	57	1	in	in	ADP
ajis02-5323	57	2	explaining	explain	VERB
ajis02-5323	57	3	organizational	organizational	ADJ
ajis02-5323	57	4	phenomena	phenomenon	NOUN
ajis02-5323	57	5	,	,	PUNCT
ajis02-5323	57	6	these	these	DET
ajis02-5323	57	7	two	two	NUM
ajis02-5323	57	8	theories	theory	NOUN
ajis02-5323	57	9	have	have	AUX
ajis02-5323	57	10	been	be	AUX
ajis02-5323	57	11	combined	combine	VERB
ajis02-5323	57	12	:	:	PUNCT
ajis02-5323	57	13	corporate	corporate	ADJ
ajis02-5323	57	14	strategic	strategic	ADJ
ajis02-5323	57	15	planning	planning	NOUN
ajis02-5323	57	16	and	and	CCONJ
ajis02-5323	57	17	the	the	DET
ajis02-5323	57	18	process	process	NOUN
ajis02-5323	57	19	of	of	ADP
ajis02-5323	57	20	drug	drug	NOUN
ajis02-5323	57	21	registration	registration	NOUN
ajis02-5323	57	22	are	be	AUX
ajis02-5323	57	23	examples	example	NOUN
ajis02-5323	57	24	that	that	PRON
ajis02-5323	57	25	highlight	highlight	VERB
ajis02-5323	57	26	the	the	DET
ajis02-5323	57	27	importance	importance	NOUN
ajis02-5323	57	28	of	of	ADP
ajis02-5323	57	29	the	the	DET
ajis02-5323	57	30	goal	goal	NOUN
ajis02-5323	57	31	and	and	CCONJ
ajis02-5323	57	32	adaptability	adaptability	NOUN
ajis02-5323	57	33	and	and	CCONJ
ajis02-5323	57	34	of	of	ADP
ajis02-5323	57	35	following	follow	VERB
ajis02-5323	57	36	the	the	DET
ajis02-5323	57	37	sequential	sequential	ADJ
ajis02-5323	57	38	steps	step	NOUN
ajis02-5323	57	39	(	(	PUNCT
ajis02-5323	57	40	chakravarthy	chakravarthy	ADJ
ajis02-5323	57	41	&	&	CCONJ
ajis02-5323	57	42	lorange	lorange	PROPN
ajis02-5323	57	43	1991	1991	NUM
ajis02-5323	57	44	;	;	PUNCT
ajis02-5323	57	45	nutt	nutt	NOUN
ajis02-5323	57	46	2002	2002	NUM
ajis02-5323	57	47	)	)	PUNCT
ajis02-5323	57	48	.	.	PUNCT
ajis02-5323	58	1	2.2	2.2	NUM
ajis02-5323	58	2	supplier	supplier	NOUN
ajis02-5323	58	3	cyber	cyber	NOUN
ajis02-5323	58	4	risk	risk	NOUN
ajis02-5323	58	5	factors	factor	VERB
ajis02-5323	58	6	one	one	NUM
ajis02-5323	58	7	of	of	ADP
ajis02-5323	58	8	the	the	DET
ajis02-5323	58	9	major	major	ADJ
ajis02-5323	58	10	questions	question	NOUN
ajis02-5323	58	11	in	in	ADP
ajis02-5323	58	12	supplier	supplier	NOUN
ajis02-5323	58	13	risk	risk	NOUN
ajis02-5323	58	14	assessment	assessment	NOUN
ajis02-5323	58	15	is	be	AUX
ajis02-5323	58	16	which	which	DET
ajis02-5323	58	17	factors	factor	NOUN
ajis02-5323	58	18	predict	predict	VERB
ajis02-5323	58	19	the	the	DET
ajis02-5323	58	20	likelihood	likelihood	NOUN
ajis02-5323	58	21	and	and	CCONJ
ajis02-5323	58	22	the	the	DET
ajis02-5323	58	23	consequences	consequence	NOUN
ajis02-5323	58	24	(	(	PUNCT
ajis02-5323	58	25	impact	impact	NOUN
ajis02-5323	58	26	)	)	PUNCT
ajis02-5323	58	27	of	of	ADP
ajis02-5323	58	28	a	a	DET
ajis02-5323	58	29	cyber	cyber	NOUN
ajis02-5323	58	30	incident	incident	NOUN
ajis02-5323	58	31	related	relate	VERB
ajis02-5323	58	32	to	to	ADP
ajis02-5323	58	33	a	a	DET
ajis02-5323	58	34	supplier	supplier	NOUN
ajis02-5323	58	35	.	.	PUNCT
ajis02-5323	59	1	keskin	keskin	PROPN
ajis02-5323	59	2	et	et	PROPN
ajis02-5323	59	3	al	al	PROPN
ajis02-5323	59	4	.	.	PROPN
ajis02-5323	59	5	(	(	PUNCT
ajis02-5323	59	6	2021	2021	NUM
ajis02-5323	59	7	)	)	PUNCT
ajis02-5323	59	8	and	and	CCONJ
ajis02-5323	59	9	dean	dean	PROPN
ajis02-5323	59	10	et	et	PROPN
ajis02-5323	59	11	al	al	PROPN
ajis02-5323	59	12	.	.	PROPN
ajis02-5323	60	1	(	(	PUNCT
ajis02-5323	60	2	2023	2023	NUM
ajis02-5323	60	3	)	)	PUNCT
ajis02-5323	60	4	classify	classify	VERB
ajis02-5323	60	5	supplier	supplier	NOUN
ajis02-5323	60	6	cyber	cyber	NOUN
ajis02-5323	60	7	risk	risk	NOUN
ajis02-5323	60	8	factors	factor	NOUN
ajis02-5323	60	9	as	as	ADP
ajis02-5323	60	10	(	(	PUNCT
ajis02-5323	60	11	i	i	NOUN
ajis02-5323	60	12	)	)	PUNCT
ajis02-5323	60	13	supplier	supplier	NOUN
ajis02-5323	60	14	cyber	cyber	NOUN
ajis02-5323	60	15	risk	risk	NOUN
ajis02-5323	60	16	posture	posture	NOUN
ajis02-5323	60	17	characteristics	characteristic	NOUN
ajis02-5323	60	18	and	and	CCONJ
ajis02-5323	60	19	(	(	PUNCT
ajis02-5323	60	20	ii	ii	NOUN
ajis02-5323	60	21	)	)	PUNCT
ajis02-5323	60	22	the	the	DET
ajis02-5323	60	23	relationship	relationship	NOUN
ajis02-5323	60	24	between	between	ADP
ajis02-5323	60	25	the	the	DET
ajis02-5323	60	26	supplier	supplier	NOUN
ajis02-5323	60	27	and	and	CCONJ
ajis02-5323	60	28	the	the	DET
ajis02-5323	60	29	focal	focal	ADJ
ajis02-5323	60	30	organization	organization	NOUN
ajis02-5323	60	31	.	.	PUNCT
ajis02-5323	61	1	ad	ad	NOUN
ajis02-5323	61	2	i	i	NOUN
ajis02-5323	61	3	)	)	PUNCT
ajis02-5323	61	4	supplier	supplier	NOUN
ajis02-5323	61	5	cyber	cyber	NOUN
ajis02-5323	61	6	risk	risk	NOUN
ajis02-5323	61	7	posture	posture	NOUN
ajis02-5323	61	8	characteristics	characteristic	NOUN
ajis02-5323	61	9	that	that	PRON
ajis02-5323	61	10	define	define	VERB
ajis02-5323	61	11	its	its	PRON
ajis02-5323	61	12	security	security	NOUN
ajis02-5323	61	13	posture	posture	NOUN
ajis02-5323	61	14	are	be	AUX
ajis02-5323	61	15	technology	technology	NOUN
ajis02-5323	61	16	solutions	solution	NOUN
ajis02-5323	61	17	(	(	PUNCT
ajis02-5323	61	18	do	do	AUX
ajis02-5323	61	19	amaral	amaral	PROPN
ajis02-5323	61	20	&	&	CCONJ
ajis02-5323	61	21	gondim	gondim	PROPN
ajis02-5323	61	22	2021	2021	NUM
ajis02-5323	61	23	;	;	PUNCT
ajis02-5323	61	24	yeo	yeo	PROPN
ajis02-5323	61	25	et	et	PROPN
ajis02-5323	61	26	al	al	PROPN
ajis02-5323	61	27	.	.	PROPN
ajis02-5323	61	28	2014	2014	NUM
ajis02-5323	61	29	)	)	PUNCT
ajis02-5323	61	30	;	;	PUNCT
ajis02-5323	61	31	certifications	certification	NOUN
ajis02-5323	61	32	(	(	PUNCT
ajis02-5323	61	33	bartol	bartol	NOUN
ajis02-5323	61	34	2014	2014	NUM
ajis02-5323	61	35	;	;	PUNCT
ajis02-5323	61	36	sindhuja	sindhuja	PROPN
ajis02-5323	61	37	&	&	CCONJ
ajis02-5323	61	38	kunnathur	kunnathur	PROPN
ajis02-5323	61	39	2015	2015	NUM
ajis02-5323	61	40	;	;	PUNCT
ajis02-5323	61	41	wolden	wolden	VERB
ajis02-5323	61	42	et	et	PROPN
ajis02-5323	61	43	al	al	PROPN
ajis02-5323	61	44	.	.	PROPN
ajis02-5323	61	45	2015	2015	NUM
ajis02-5323	61	46	)	)	PUNCT
ajis02-5323	61	47	;	;	PUNCT
ajis02-5323	61	48	it	it	PRON
ajis02-5323	61	49	governance	governance	NOUN
ajis02-5323	61	50	,	,	PUNCT
ajis02-5323	61	51	e.g.	e.g.	ADV
ajis02-5323	61	52	,	,	PUNCT
ajis02-5323	61	53	the	the	DET
ajis02-5323	61	54	presence	presence	NOUN
ajis02-5323	61	55	of	of	ADP
ajis02-5323	61	56	ciso	ciso	PROPN
ajis02-5323	61	57	,	,	PUNCT
ajis02-5323	61	58	cio	cio	PROPN
ajis02-5323	61	59	and/or	and/or	CCONJ
ajis02-5323	61	60	ict	ict	PROPN
ajis02-5323	61	61	manager	manager	NOUN
ajis02-5323	61	62	roles	role	NOUN
ajis02-5323	61	63	and	and	CCONJ
ajis02-5323	61	64	policies	policy	NOUN
ajis02-5323	61	65	,	,	PUNCT
ajis02-5323	61	66	and	and	CCONJ
ajis02-5323	61	67	the	the	DET
ajis02-5323	61	68	alignment	alignment	NOUN
ajis02-5323	61	69	of	of	ADP
ajis02-5323	61	70	the	the	DET
ajis02-5323	61	71	sc	sc	PROPN
ajis02-5323	61	72	risk	risk	NOUN
ajis02-5323	61	73	management	management	NOUN
ajis02-5323	61	74	with	with	ADP
ajis02-5323	61	75	cyber	cyber	ADJ
ajis02-5323	61	76	risk	risk	NOUN
ajis02-5323	61	77	management	management	NOUN
ajis02-5323	61	78	(	(	PUNCT
ajis02-5323	61	79	liu	liu	PROPN
ajis02-5323	61	80	et	et	PROPN
ajis02-5323	61	81	al	al	PROPN
ajis02-5323	61	82	.	.	PROPN
ajis02-5323	61	83	2020	2020	NUM
ajis02-5323	61	84	;	;	PUNCT
ajis02-5323	61	85	vanajakumari	vanajakumari	PROPN
ajis02-5323	61	86	et	et	PROPN
ajis02-5323	61	87	al	al	PROPN
ajis02-5323	61	88	.	.	PROPN
ajis02-5323	61	89	2021	2021	NUM
ajis02-5323	61	90	)	)	PUNCT
ajis02-5323	61	91	;	;	PUNCT
ajis02-5323	61	92	industry	industry	NOUN
ajis02-5323	61	93	affiliation	affiliation	NOUN
ajis02-5323	61	94	(	(	PUNCT
ajis02-5323	61	95	akinrolabu	akinrolabu	PROPN
ajis02-5323	61	96	et	et	PROPN
ajis02-5323	61	97	al	al	PROPN
ajis02-5323	61	98	.	.	PROPN
ajis02-5323	61	99	2019	2019	NUM
ajis02-5323	61	100	;	;	PUNCT
ajis02-5323	61	101	hao	hao	PROPN
ajis02-5323	61	102	&	&	CCONJ
ajis02-5323	61	103	cai	cai	PROPN
ajis02-5323	61	104	2011	2011	NUM
ajis02-5323	61	105	;	;	PUNCT
ajis02-5323	61	106	keskin	keskin	PROPN
ajis02-5323	61	107	et	et	PROPN
ajis02-5323	61	108	al	al	PROPN
ajis02-5323	61	109	.	.	PROPN
ajis02-5323	61	110	2021	2021	NUM
ajis02-5323	61	111	)	)	PUNCT
ajis02-5323	61	112	,	,	PUNCT
ajis02-5323	61	113	and	and	CCONJ
ajis02-5323	61	114	an	an	DET
ajis02-5323	61	115	organization	organization	NOUN
ajis02-5323	61	116	’s	’s	PART
ajis02-5323	61	117	targeting	targeting	NOUN
ajis02-5323	61	118	factor	factor	NOUN
ajis02-5323	61	119	which	which	PRON
ajis02-5323	61	120	depends	depend	VERB
ajis02-5323	61	121	on	on	ADP
ajis02-5323	61	122	the	the	DET
ajis02-5323	61	123	type	type	NOUN
ajis02-5323	61	124	of	of	ADP
ajis02-5323	61	125	data	datum	NOUN
ajis02-5323	61	126	it	it	PRON
ajis02-5323	61	127	possesses	possess	VERB
ajis02-5323	61	128	(	(	PUNCT
ajis02-5323	61	129	e.g.	e.g.	ADV
ajis02-5323	61	130	,	,	PUNCT
ajis02-5323	61	131	technological	technological	ADJ
ajis02-5323	61	132	inventions	invention	NOUN
ajis02-5323	61	133	or	or	CCONJ
ajis02-5323	61	134	recipes	recipe	NOUN
ajis02-5323	61	135	)	)	PUNCT
ajis02-5323	61	136	.	.	PUNCT
ajis02-5323	62	1	supplier	supplier	NOUN
ajis02-5323	62	2	characteristics	characteristic	NOUN
ajis02-5323	62	3	also	also	ADV
ajis02-5323	62	4	comprise	comprise	VERB
ajis02-5323	62	5	a	a	DET
ajis02-5323	62	6	human	human	ADJ
ajis02-5323	62	7	factor	factor	NOUN
ajis02-5323	62	8	(	(	PUNCT
ajis02-5323	62	9	employee	employee	NOUN
ajis02-5323	62	10	negligence	negligence	NOUN
ajis02-5323	62	11	,	,	PUNCT
ajis02-5323	62	12	misinformation	misinformation	NOUN
ajis02-5323	62	13	from	from	ADP
ajis02-5323	62	14	leadership	leadership	NOUN
ajis02-5323	62	15	,	,	PUNCT
ajis02-5323	62	16	inadequate	inadequate	ADJ
ajis02-5323	62	17	training	training	NOUN
ajis02-5323	62	18	,	,	PUNCT
ajis02-5323	62	19	and	and	CCONJ
ajis02-5323	62	20	inappropriate	inappropriate	ADJ
ajis02-5323	62	21	access	access	NOUN
ajis02-5323	62	22	,	,	PUNCT
ajis02-5323	62	23	sharing	share	VERB
ajis02-5323	62	24	authentication	authentication	NOUN
ajis02-5323	62	25	credentials	credential	NOUN
ajis02-5323	62	26	)	)	PUNCT
ajis02-5323	62	27	(	(	PUNCT
ajis02-5323	62	28	adams	adams	PROPN
ajis02-5323	62	29	&	&	CCONJ
ajis02-5323	62	30	makramalla	makramalla	NOUN
ajis02-5323	62	31	2015	2015	NUM
ajis02-5323	62	32	;	;	PUNCT
ajis02-5323	62	33	boyson	boyson	NOUN
ajis02-5323	62	34	2014	2014	NUM
ajis02-5323	62	35	;	;	PUNCT
ajis02-5323	62	36	boyens	boyen	NOUN
ajis02-5323	62	37	2015	2015	NUM
ajis02-5323	62	38	;	;	PUNCT
ajis02-5323	62	39	collichia	collichia	NOUN
ajis02-5323	62	40	et	et	PROPN
ajis02-5323	62	41	al	al	PROPN
ajis02-5323	62	42	.	.	PROPN
ajis02-5323	62	43	2019	2019	NUM
ajis02-5323	62	44	;	;	PUNCT
ajis02-5323	62	45	kweon	kweon	PROPN
ajis02-5323	62	46	et	et	PROPN
ajis02-5323	62	47	al	al	PROPN
ajis02-5323	62	48	.	.	PROPN
ajis02-5323	62	49	2021	2021	NUM
ajis02-5323	62	50	;	;	PUNCT
ajis02-5323	62	51	tender	tender	NOUN
ajis02-5323	62	52	,	,	PUNCT
ajis02-5323	62	53	2015	2015	NUM
ajis02-5323	62	54	)	)	PUNCT
ajis02-5323	62	55	.	.	PUNCT
ajis02-5323	63	1	angst	angst	PROPN
ajis02-5323	63	2	et	et	PROPN
ajis02-5323	63	3	al	al	PROPN
ajis02-5323	63	4	.	.	PROPN
ajis02-5323	64	1	(	(	PUNCT
ajis02-5323	64	2	2017	2017	NUM
ajis02-5323	64	3	)	)	PUNCT
ajis02-5323	64	4	,	,	PUNCT
ajis02-5323	64	5	giunipero	giunipero	NOUN
ajis02-5323	64	6	and	and	CCONJ
ajis02-5323	64	7	eltantawy	eltantawy	PROPN
ajis02-5323	64	8	(	(	PUNCT
ajis02-5323	64	9	2004	2004	NUM
ajis02-5323	64	10	)	)	PUNCT
ajis02-5323	64	11	,	,	PUNCT
ajis02-5323	64	12	and	and	CCONJ
ajis02-5323	64	13	lewis	lewis	PROPN
ajis02-5323	64	14	et	et	PROPN
ajis02-5323	64	15	al	al	PROPN
ajis02-5323	64	16	.	.	PROPN
ajis02-5323	65	1	(	(	PUNCT
ajis02-5323	65	2	2014	2014	NUM
ajis02-5323	65	3	)	)	PUNCT
ajis02-5323	65	4	allude	allude	NOUN
ajis02-5323	65	5	to	to	ADP
ajis02-5323	65	6	organization	organization	NOUN
ajis02-5323	65	7	size	size	NOUN
ajis02-5323	65	8	and	and	CCONJ
ajis02-5323	65	9	financial	financial	ADJ
ajis02-5323	65	10	resources	resource	NOUN
ajis02-5323	65	11	,	,	PUNCT
ajis02-5323	65	12	pointing	point	VERB
ajis02-5323	65	13	out	out	ADP
ajis02-5323	65	14	increased	increase	VERB
ajis02-5323	65	15	attacks	attack	NOUN
ajis02-5323	65	16	targeting	target	VERB
ajis02-5323	65	17	smes	sme	NOUN
ajis02-5323	65	18	,	,	PUNCT
ajis02-5323	65	19	often	often	ADV
ajis02-5323	65	20	considered	consider	VERB
ajis02-5323	65	21	the	the	DET
ajis02-5323	65	22	weakest	weak	ADJ
ajis02-5323	65	23	links	link	NOUN
ajis02-5323	65	24	in	in	ADP
ajis02-5323	65	25	information	information	NOUN
ajis02-5323	65	26	security	security	NOUN
ajis02-5323	65	27	management	management	NOUN
ajis02-5323	65	28	.	.	PUNCT
ajis02-5323	66	1	other	other	ADJ
ajis02-5323	66	2	important	important	ADJ
ajis02-5323	66	3	factors	factor	NOUN
ajis02-5323	66	4	are	be	AUX
ajis02-5323	66	5	geographical	geographical	ADJ
ajis02-5323	66	6	location	location	NOUN
ajis02-5323	66	7	(	(	PUNCT
ajis02-5323	66	8	iovan	iovan	NOUN
ajis02-5323	66	9	and	and	CCONJ
ajis02-5323	66	10	iovan	iovan	NOUN
ajis02-5323	66	11	2016	2016	NUM
ajis02-5323	66	12	)	)	PUNCT
ajis02-5323	66	13	,	,	PUNCT
ajis02-5323	66	14	foreign	foreign	ADJ
ajis02-5323	66	15	ownership	ownership	NOUN
ajis02-5323	66	16	(	(	PUNCT
ajis02-5323	66	17	topping	top	VERB
ajis02-5323	66	18	et	et	PROPN
ajis02-5323	66	19	al	al	PROPN
ajis02-5323	66	20	.	.	PROPN
ajis02-5323	66	21	2021	2021	NUM
ajis02-5323	66	22	)	)	PUNCT
ajis02-5323	66	23	and	and	CCONJ
ajis02-5323	66	24	the	the	DET
ajis02-5323	66	25	complexity	complexity	NOUN
ajis02-5323	66	26	of	of	ADP
ajis02-5323	66	27	a	a	DET
ajis02-5323	66	28	supplier	supplier	NOUN
ajis02-5323	66	29	’s	’s	PART
ajis02-5323	66	30	sc	sc	PROPN
ajis02-5323	66	31	(	(	PUNCT
ajis02-5323	66	32	linton	linton	PROPN
ajis02-5323	66	33	et	et	PROPN
ajis02-5323	66	34	al	al	PROPN
ajis02-5323	66	35	.	.	PROPN
ajis02-5323	66	36	2014	2014	NUM
ajis02-5323	66	37	)	)	PUNCT
ajis02-5323	66	38	.	.	PUNCT
ajis02-5323	67	1	ad	ad	PROPN
ajis02-5323	67	2	ii	ii	PROPN
ajis02-5323	67	3	)	)	PUNCT
ajis02-5323	67	4	among	among	ADP
ajis02-5323	67	5	factors	factor	NOUN
ajis02-5323	67	6	related	relate	VERB
ajis02-5323	67	7	to	to	ADP
ajis02-5323	67	8	the	the	DET
ajis02-5323	67	9	relationship	relationship	NOUN
ajis02-5323	67	10	between	between	ADP
ajis02-5323	67	11	the	the	DET
ajis02-5323	67	12	supplier	supplier	NOUN
ajis02-5323	67	13	and	and	CCONJ
ajis02-5323	67	14	the	the	DET
ajis02-5323	67	15	focal	focal	ADJ
ajis02-5323	67	16	organization	organization	NOUN
ajis02-5323	67	17	,	,	PUNCT
ajis02-5323	67	18	keskin	keskin	PROPN
ajis02-5323	67	19	et	et	PROPN
ajis02-5323	67	20	al	al	PROPN
ajis02-5323	67	21	.	.	PROPN
ajis02-5323	68	1	(	(	PUNCT
ajis02-5323	68	2	2021	2021	NUM
ajis02-5323	68	3	)	)	PUNCT
ajis02-5323	68	4	suggested	suggest	VERB
ajis02-5323	68	5	the	the	DET
ajis02-5323	68	6	nature	nature	NOUN
ajis02-5323	68	7	of	of	ADP
ajis02-5323	68	8	the	the	DET
ajis02-5323	68	9	it	it	NOUN
ajis02-5323	68	10	integration	integration	NOUN
ajis02-5323	68	11	in	in	ADP
ajis02-5323	68	12	the	the	DET
ajis02-5323	68	13	connectivity	connectivity	NOUN
ajis02-5323	68	14	between	between	ADP
ajis02-5323	68	15	the	the	DET
ajis02-5323	68	16	two	two	NUM
ajis02-5323	68	17	firms	firm	NOUN
ajis02-5323	68	18	.	.	PUNCT
ajis02-5323	69	1	the	the	DET
ajis02-5323	69	2	risk	risk	NOUN
ajis02-5323	69	3	is	be	AUX
ajis02-5323	69	4	significantly	significantly	ADV
ajis02-5323	69	5	greater	great	ADJ
ajis02-5323	69	6	if	if	SCONJ
ajis02-5323	69	7	a	a	DET
ajis02-5323	69	8	supplier	supplier	NOUN
ajis02-5323	69	9	is	be	AUX
ajis02-5323	69	10	an	an	DET
ajis02-5323	69	11	ict	ict	NOUN
ajis02-5323	69	12	provider	provider	NOUN
ajis02-5323	69	13	or	or	CCONJ
ajis02-5323	69	14	its	its	PRON
ajis02-5323	69	15	business	business	NOUN
ajis02-5323	69	16	is	be	AUX
ajis02-5323	69	17	itbased	itbase	VERB
ajis02-5323	69	18	,	,	PUNCT
ajis02-5323	69	19	with	with	ADP
ajis02-5323	69	20	most	most	ADJ
ajis02-5323	69	21	activities	activity	NOUN
ajis02-5323	69	22	conducted	conduct	VERB
ajis02-5323	69	23	online	online	ADJ
ajis02-5323	69	24	(	(	PUNCT
ajis02-5323	69	25	benthall	benthall	NOUN
ajis02-5323	69	26	2017	2017	NUM
ajis02-5323	69	27	)	)	PUNCT
ajis02-5323	69	28	.	.	PUNCT
ajis02-5323	70	1	the	the	DET
ajis02-5323	70	2	second	second	ADJ
ajis02-5323	70	3	factor	factor	NOUN
ajis02-5323	70	4	by	by	ADP
ajis02-5323	70	5	keskin	keskin	PROPN
ajis02-5323	70	6	et	et	PROPN
ajis02-5323	70	7	al	al	PROPN
ajis02-5323	70	8	.	.	PROPN
ajis02-5323	70	9	(	(	PUNCT
ajis02-5323	70	10	2021	2021	NUM
ajis02-5323	70	11	)	)	PUNCT
ajis02-5323	70	12	is	be	AUX
ajis02-5323	70	13	the	the	DET
ajis02-5323	70	14	type	type	NOUN
ajis02-5323	70	15	and	and	CCONJ
ajis02-5323	70	16	magnitude	magnitude	NOUN
ajis02-5323	70	17	of	of	ADP
ajis02-5323	70	18	information	information	NOUN
ajis02-5323	70	19	sharing	sharing	NOUN
ajis02-5323	70	20	,	,	PUNCT
ajis02-5323	70	21	which	which	PRON
ajis02-5323	70	22	has	have	AUX
ajis02-5323	70	23	been	be	AUX
ajis02-5323	70	24	found	find	VERB
ajis02-5323	70	25	critical	critical	ADJ
ajis02-5323	70	26	for	for	SCONJ
ajis02-5323	70	27	sc	sc	PROPN
ajis02-5323	70	28	partners	partner	NOUN
ajis02-5323	70	29	'	'	PART
ajis02-5323	70	30	preparedness	preparedness	NOUN
ajis02-5323	70	31	to	to	PART
ajis02-5323	70	32	invest	invest	VERB
ajis02-5323	70	33	in	in	ADP
ajis02-5323	70	34	network	network	NOUN
ajis02-5323	70	35	security	security	NOUN
ajis02-5323	70	36	(	(	PUNCT
ajis02-5323	70	37	bandyopadhyay	bandyopadhyay	NOUN
ajis02-5323	70	38	et	et	PROPN
ajis02-5323	70	39	al	al	PROPN
ajis02-5323	70	40	.	.	PROPN
ajis02-5323	70	41	2010	2010	NUM
ajis02-5323	70	42	)	)	PUNCT
ajis02-5323	70	43	.	.	PUNCT
ajis02-5323	71	1	in	in	ADP
ajis02-5323	71	2	addition	addition	NOUN
ajis02-5323	71	3	,	,	PUNCT
ajis02-5323	71	4	highly	highly	ADV
ajis02-5323	71	5	specific	specific	ADJ
ajis02-5323	71	6	services	service	NOUN
ajis02-5323	71	7	/	/	SYM
ajis02-5323	71	8	products	product	NOUN
ajis02-5323	71	9	increase	increase	VERB
ajis02-5323	71	10	the	the	DET
ajis02-5323	71	11	criticality	criticality	NOUN
ajis02-5323	71	12	of	of	ADP
ajis02-5323	71	13	the	the	DET
ajis02-5323	71	14	supplier	supplier	NOUN
ajis02-5323	71	15	to	to	ADP
ajis02-5323	71	16	the	the	DET
ajis02-5323	71	17	focal	focal	ADJ
ajis02-5323	71	18	organization	organization	NOUN
ajis02-5323	71	19	(	(	PUNCT
ajis02-5323	71	20	bode	bode	VERB
ajis02-5323	71	21	&	&	CCONJ
ajis02-5323	71	22	wagner	wagner	PROPN
ajis02-5323	71	23	2015	2015	NUM
ajis02-5323	71	24	;	;	PUNCT
ajis02-5323	71	25	crosignani	crosignani	PROPN
ajis02-5323	71	26	et	et	PROPN
ajis02-5323	71	27	al	al	PROPN
ajis02-5323	71	28	.	.	PROPN
ajis02-5323	71	29	2023	2023	NUM
ajis02-5323	71	30	)	)	PUNCT
ajis02-5323	71	31	.	.	PUNCT
ajis02-5323	72	1	australasian	australasian	ADJ
ajis02-5323	72	2	journal	journal	NOUN
ajis02-5323	72	3	of	of	ADP
ajis02-5323	72	4	information	information	NOUN
ajis02-5323	72	5	systems	system	NOUN
ajis02-5323	72	6	slapnicar	slapnicar	NOUN
ajis02-5323	72	7	,	,	PUNCT
ajis02-5323	72	8	vidmar	vidmar	NOUN
ajis02-5323	72	9	&	&	CCONJ
ajis02-5323	72	10	tsen	tsen	ADJ
ajis02-5323	72	11	2025	2025	NUM
ajis02-5323	72	12	,	,	PUNCT
ajis02-5323	72	13	vol	vol	NOUN
ajis02-5323	72	14	29	29	NUM
ajis02-5323	72	15	,	,	PUNCT
ajis02-5323	72	16	research	research	NOUN
ajis02-5323	72	17	article	article	NOUN
ajis02-5323	72	18	process	process	NOUN
ajis02-5323	72	19	theory	theory	NOUN
ajis02-5323	72	20	of	of	ADP
ajis02-5323	72	21	supplier	supplier	NOUN
ajis02-5323	72	22	cyber	cyber	NOUN
ajis02-5323	72	23	risk	risk	NOUN
ajis02-5323	72	24	assessment	assessment	NOUN
ajis02-5323	72	25	5	5	NUM
ajis02-5323	72	26	while	while	SCONJ
ajis02-5323	72	27	this	this	DET
ajis02-5323	72	28	research	research	NOUN
ajis02-5323	72	29	is	be	AUX
ajis02-5323	72	30	highly	highly	ADV
ajis02-5323	72	31	instructive	instructive	ADJ
ajis02-5323	72	32	,	,	PUNCT
ajis02-5323	72	33	much	much	ADJ
ajis02-5323	72	34	of	of	ADP
ajis02-5323	72	35	it	it	PRON
ajis02-5323	72	36	is	be	AUX
ajis02-5323	72	37	normative	normative	ADJ
ajis02-5323	72	38	(	(	PUNCT
ajis02-5323	72	39	boyson	boyson	NOUN
ajis02-5323	72	40	2014	2014	NUM
ajis02-5323	72	41	;	;	PUNCT
ajis02-5323	72	42	davis	davis	PROPN
ajis02-5323	72	43	2015	2015	NUM
ajis02-5323	72	44	;	;	PUNCT
ajis02-5323	72	45	lewis	lewis	PROPN
ajis02-5323	72	46	et	et	PROPN
ajis02-5323	72	47	al	al	PROPN
ajis02-5323	72	48	.	.	PROPN
ajis02-5323	72	49	2014	2014	NUM
ajis02-5323	72	50	)	)	PUNCT
ajis02-5323	72	51	,	,	PUNCT
ajis02-5323	72	52	focuses	focus	VERB
ajis02-5323	72	53	on	on	ADP
ajis02-5323	72	54	technical	technical	ADJ
ajis02-5323	72	55	solutions	solution	NOUN
ajis02-5323	72	56	,	,	PUNCT
ajis02-5323	72	57	or	or	CCONJ
ajis02-5323	72	58	examines	examine	VERB
ajis02-5323	72	59	a	a	DET
ajis02-5323	72	60	single	single	ADJ
ajis02-5323	72	61	supplier	supplier	NOUN
ajis02-5323	72	62	risk	risk	NOUN
ajis02-5323	72	63	factor	factor	NOUN
ajis02-5323	72	64	.	.	PUNCT
ajis02-5323	73	1	none	none	NOUN
ajis02-5323	73	2	of	of	ADP
ajis02-5323	73	3	these	these	DET
ajis02-5323	73	4	studies	study	NOUN
ajis02-5323	73	5	have	have	AUX
ajis02-5323	73	6	analyzed	analyze	VERB
ajis02-5323	73	7	how	how	SCONJ
ajis02-5323	73	8	these	these	DET
ajis02-5323	73	9	factors	factor	NOUN
ajis02-5323	73	10	are	be	AUX
ajis02-5323	73	11	collectively	collectively	ADV
ajis02-5323	73	12	assessed	assess	VERB
ajis02-5323	73	13	in	in	ADP
ajis02-5323	73	14	the	the	DET
ajis02-5323	73	15	supplier	supplier	NOUN
ajis02-5323	73	16	cyber	cyber	NOUN
ajis02-5323	73	17	risk	risk	NOUN
ajis02-5323	73	18	assessment	assessment	NOUN
ajis02-5323	73	19	process	process	NOUN
ajis02-5323	73	20	or	or	CCONJ
ajis02-5323	73	21	identified	identify	VERB
ajis02-5323	73	22	which	which	DET
ajis02-5323	73	23	factors	factor	NOUN
ajis02-5323	73	24	are	be	AUX
ajis02-5323	73	25	most	most	ADV
ajis02-5323	73	26	critical	critical	ADJ
ajis02-5323	73	27	for	for	ADP
ajis02-5323	73	28	identifying	identify	VERB
ajis02-5323	73	29	risky	risky	ADJ
ajis02-5323	73	30	suppliers	supplier	NOUN
ajis02-5323	73	31	.	.	PUNCT
ajis02-5323	74	1	2.3	2.3	NUM
ajis02-5323	74	2	organizational	organizational	ADJ
ajis02-5323	74	3	approaches	approach	NOUN
ajis02-5323	74	4	to	to	PART
ajis02-5323	74	5	supplier	supplier	VERB
ajis02-5323	74	6	cyber	cyber	NOUN
ajis02-5323	74	7	risk	risk	NOUN
ajis02-5323	74	8	assessment	assessment	NOUN
ajis02-5323	74	9	in	in	ADP
ajis02-5323	74	10	our	our	PRON
ajis02-5323	74	11	literature	literature	NOUN
ajis02-5323	74	12	review	review	NOUN
ajis02-5323	74	13	,	,	PUNCT
ajis02-5323	74	14	we	we	PRON
ajis02-5323	74	15	identified	identify	VERB
ajis02-5323	74	16	only	only	ADV
ajis02-5323	74	17	six	six	NUM
ajis02-5323	74	18	qualitative	qualitative	ADJ
ajis02-5323	74	19	studies	study	NOUN
ajis02-5323	74	20	that	that	PRON
ajis02-5323	74	21	investigated	investigate	VERB
ajis02-5323	74	22	the	the	DET
ajis02-5323	74	23	organizational	organizational	ADJ
ajis02-5323	74	24	practices	practice	NOUN
ajis02-5323	74	25	of	of	ADP
ajis02-5323	74	26	c	c	NOUN
ajis02-5323	74	27	-	-	PUNCT
ajis02-5323	74	28	scrm	scrm	NOUN
ajis02-5323	74	29	.	.	PUNCT
ajis02-5323	75	1	we	we	PRON
ajis02-5323	75	2	review	review	VERB
ajis02-5323	75	3	them	they	PRON
ajis02-5323	75	4	in	in	ADP
ajis02-5323	75	5	this	this	DET
ajis02-5323	75	6	section	section	NOUN
ajis02-5323	75	7	.	.	PUNCT
ajis02-5323	76	1	boyson	boyson	NOUN
ajis02-5323	76	2	(	(	PUNCT
ajis02-5323	76	3	2014	2014	NUM
ajis02-5323	76	4	)	)	PUNCT
ajis02-5323	76	5	studied	study	VERB
ajis02-5323	76	6	two	two	NUM
ajis02-5323	76	7	organizations	organization	NOUN
ajis02-5323	76	8	and	and	CCONJ
ajis02-5323	76	9	found	find	VERB
ajis02-5323	76	10	that	that	SCONJ
ajis02-5323	76	11	they	they	PRON
ajis02-5323	76	12	assessed	assess	VERB
ajis02-5323	76	13	suppliers	supplier	NOUN
ajis02-5323	76	14	and	and	CCONJ
ajis02-5323	76	15	formalized	formalize	VERB
ajis02-5323	76	16	risk	risk	NOUN
ajis02-5323	76	17	agreements	agreement	NOUN
ajis02-5323	76	18	but	but	CCONJ
ajis02-5323	76	19	lacked	lack	VERB
ajis02-5323	76	20	centralized	centralized	ADJ
ajis02-5323	76	21	governance	governance	NOUN
ajis02-5323	76	22	and	and	CCONJ
ajis02-5323	76	23	integrated	integrate	VERB
ajis02-5323	76	24	communication	communication	NOUN
ajis02-5323	76	25	across	across	ADP
ajis02-5323	76	26	functions	function	NOUN
ajis02-5323	76	27	.	.	PUNCT
ajis02-5323	77	1	tran	tran	PROPN
ajis02-5323	77	2	et	et	PROPN
ajis02-5323	77	3	al	al	PROPN
ajis02-5323	77	4	.	.	PROPN
ajis02-5323	78	1	(	(	PUNCT
ajis02-5323	78	2	2016	2016	NUM
ajis02-5323	78	3	)	)	PUNCT
ajis02-5323	78	4	studied	study	VERB
ajis02-5323	78	5	supplier	supplier	NOUN
ajis02-5323	78	6	post	post	ADJ
ajis02-5323	78	7	-	-	ADJ
ajis02-5323	78	8	onboarding	onboarding	ADJ
ajis02-5323	78	9	monitoring	monitoring	NOUN
ajis02-5323	78	10	and	and	CCONJ
ajis02-5323	78	11	noted	note	VERB
ajis02-5323	78	12	that	that	SCONJ
ajis02-5323	78	13	organizations	organization	NOUN
ajis02-5323	78	14	rely	rely	VERB
ajis02-5323	78	15	on	on	ADP
ajis02-5323	78	16	personal	personal	ADJ
ajis02-5323	78	17	relationships	relationship	NOUN
ajis02-5323	78	18	rather	rather	ADV
ajis02-5323	78	19	than	than	ADP
ajis02-5323	78	20	formal	formal	ADJ
ajis02-5323	78	21	monitoring	monitoring	NOUN
ajis02-5323	78	22	.	.	PUNCT
ajis02-5323	79	1	gaudenzi	gaudenzi	PROPN
ajis02-5323	79	2	and	and	CCONJ
ajis02-5323	79	3	siciliano	siciliano	X
ajis02-5323	79	4	(	(	PUNCT
ajis02-5323	79	5	2018	2018	NUM
ajis02-5323	79	6	)	)	PUNCT
ajis02-5323	79	7	observed	observe	VERB
ajis02-5323	79	8	minimal	minimal	ADJ
ajis02-5323	79	9	cyber	cyber	ADJ
ajis02-5323	79	10	risk	risk	NOUN
ajis02-5323	79	11	management	management	NOUN
ajis02-5323	79	12	of	of	ADP
ajis02-5323	79	13	suppliers	supplier	NOUN
ajis02-5323	79	14	,	,	PUNCT
ajis02-5323	79	15	focusing	focus	VERB
ajis02-5323	79	16	more	more	ADV
ajis02-5323	79	17	on	on	ADP
ajis02-5323	79	18	protecting	protect	VERB
ajis02-5323	79	19	clients	client	NOUN
ajis02-5323	79	20	'	'	PART
ajis02-5323	79	21	information	information	NOUN
ajis02-5323	79	22	.	.	PUNCT
ajis02-5323	80	1	they	they	PRON
ajis02-5323	80	2	did	do	AUX
ajis02-5323	80	3	not	not	PART
ajis02-5323	80	4	observe	observe	VERB
ajis02-5323	80	5	practices	practice	NOUN
ajis02-5323	80	6	of	of	ADP
ajis02-5323	80	7	stipulating	stipulate	VERB
ajis02-5323	80	8	security	security	NOUN
ajis02-5323	80	9	requirements	requirement	NOUN
ajis02-5323	80	10	in	in	ADP
ajis02-5323	80	11	the	the	DET
ajis02-5323	80	12	contractual	contractual	ADJ
ajis02-5323	80	13	agreements	agreement	NOUN
ajis02-5323	80	14	with	with	ADP
ajis02-5323	80	15	key	key	ADJ
ajis02-5323	80	16	suppliers	supplier	NOUN
ajis02-5323	80	17	,	,	PUNCT
ajis02-5323	80	18	considering	consider	VERB
ajis02-5323	80	19	disaster	disaster	NOUN
ajis02-5323	80	20	recovery	recovery	NOUN
ajis02-5323	80	21	and	and	CCONJ
ajis02-5323	80	22	business	business	NOUN
ajis02-5323	80	23	continuity	continuity	NOUN
ajis02-5323	80	24	plans	plan	NOUN
ajis02-5323	80	25	,	,	PUNCT
ajis02-5323	80	26	or	or	CCONJ
ajis02-5323	80	27	backing	back	VERB
ajis02-5323	80	28	up	up	ADP
ajis02-5323	80	29	sensitive	sensitive	ADJ
ajis02-5323	80	30	data	datum	NOUN
ajis02-5323	80	31	.	.	PUNCT
ajis02-5323	81	1	however	however	ADV
ajis02-5323	81	2	,	,	PUNCT
ajis02-5323	81	3	they	they	PRON
ajis02-5323	81	4	noted	note	VERB
ajis02-5323	81	5	higher	high	ADJ
ajis02-5323	81	6	investments	investment	NOUN
ajis02-5323	81	7	in	in	ADP
ajis02-5323	81	8	cscrm	cscrm	PROPN
ajis02-5323	81	9	and	and	CCONJ
ajis02-5323	81	10	better	well	ADJ
ajis02-5323	81	11	risk	risk	NOUN
ajis02-5323	81	12	management	management	NOUN
ajis02-5323	81	13	in	in	ADP
ajis02-5323	81	14	finance	finance	NOUN
ajis02-5323	81	15	and	and	CCONJ
ajis02-5323	81	16	high	high	ADJ
ajis02-5323	81	17	-	-	PUNCT
ajis02-5323	81	18	tech	tech	NOUN
ajis02-5323	81	19	sectors	sector	NOUN
ajis02-5323	81	20	.	.	PUNCT
ajis02-5323	82	1	miscommunication	miscommunication	NOUN
ajis02-5323	82	2	and	and	CCONJ
ajis02-5323	82	3	misaligned	misaligned	ADJ
ajis02-5323	82	4	awareness	awareness	NOUN
ajis02-5323	82	5	between	between	ADP
ajis02-5323	82	6	it	it	PRON
ajis02-5323	82	7	and	and	CCONJ
ajis02-5323	82	8	supply	supply	NOUN
ajis02-5323	82	9	chain	chain	NOUN
ajis02-5323	82	10	managers	manager	NOUN
ajis02-5323	82	11	were	be	AUX
ajis02-5323	82	12	also	also	ADV
ajis02-5323	82	13	identified	identify	VERB
ajis02-5323	82	14	(	(	PUNCT
ajis02-5323	82	15	siciliano	siciliano	X
ajis02-5323	82	16	&	&	CCONJ
ajis02-5323	82	17	gaudenzi	gaudenzi	PROPN
ajis02-5323	82	18	2018	2018	NUM
ajis02-5323	82	19	)	)	PUNCT
ajis02-5323	82	20	.	.	PUNCT
ajis02-5323	83	1	colicchia	colicchia	VERB
ajis02-5323	83	2	et	et	PROPN
ajis02-5323	83	3	al	al	PROPN
ajis02-5323	83	4	.	.	PUNCT
ajis02-5323	84	1	(	(	PUNCT
ajis02-5323	84	2	2019	2019	NUM
ajis02-5323	84	3	)	)	PUNCT
ajis02-5323	84	4	found	find	VERB
ajis02-5323	84	5	that	that	SCONJ
ajis02-5323	84	6	while	while	SCONJ
ajis02-5323	84	7	organizations	organization	NOUN
ajis02-5323	84	8	required	require	VERB
ajis02-5323	84	9	partners	partner	NOUN
ajis02-5323	84	10	to	to	PART
ajis02-5323	84	11	comply	comply	VERB
ajis02-5323	84	12	with	with	ADP
ajis02-5323	84	13	security	security	NOUN
ajis02-5323	84	14	and	and	CCONJ
ajis02-5323	84	15	privacy	privacy	NOUN
ajis02-5323	84	16	policies	policy	NOUN
ajis02-5323	84	17	,	,	PUNCT
ajis02-5323	84	18	c	c	X
ajis02-5323	84	19	-	-	PUNCT
ajis02-5323	84	20	scrm	scrm	NOUN
ajis02-5323	84	21	initiatives	initiative	NOUN
ajis02-5323	84	22	were	be	AUX
ajis02-5323	84	23	mainly	mainly	ADV
ajis02-5323	84	24	reactive	reactive	ADJ
ajis02-5323	84	25	,	,	PUNCT
ajis02-5323	84	26	focusing	focus	VERB
ajis02-5323	84	27	on	on	ADP
ajis02-5323	84	28	response	response	NOUN
ajis02-5323	84	29	and	and	CCONJ
ajis02-5323	84	30	recovery	recovery	NOUN
ajis02-5323	84	31	rather	rather	ADV
ajis02-5323	84	32	than	than	ADP
ajis02-5323	84	33	proactive	proactive	ADJ
ajis02-5323	84	34	adaptation	adaptation	NOUN
ajis02-5323	84	35	.	.	PUNCT
ajis02-5323	85	1	requirements	requirement	NOUN
ajis02-5323	85	2	related	relate	VERB
ajis02-5323	85	3	to	to	ADP
ajis02-5323	85	4	data	datum	NOUN
ajis02-5323	85	5	management	management	NOUN
ajis02-5323	85	6	,	,	PUNCT
ajis02-5323	85	7	it	it	PRON
ajis02-5323	85	8	security	security	NOUN
ajis02-5323	85	9	tools	tool	NOUN
ajis02-5323	85	10	,	,	PUNCT
ajis02-5323	85	11	and	and	CCONJ
ajis02-5323	85	12	operational	operational	ADJ
ajis02-5323	85	13	resilience	resilience	NOUN
ajis02-5323	85	14	were	be	AUX
ajis02-5323	85	15	enforced	enforce	VERB
ajis02-5323	85	16	,	,	PUNCT
ajis02-5323	85	17	but	but	CCONJ
ajis02-5323	85	18	efforts	effort	NOUN
ajis02-5323	85	19	rarely	rarely	ADV
ajis02-5323	85	20	extended	extend	VERB
ajis02-5323	85	21	beyond	beyond	ADP
ajis02-5323	85	22	tier	tier	NOUN
ajis02-5323	85	23	1	1	NUM
ajis02-5323	85	24	partners	partner	NOUN
ajis02-5323	85	25	or	or	CCONJ
ajis02-5323	85	26	included	include	VERB
ajis02-5323	85	27	audits	audits	NOUN
ajis02-5323	85	28	.	.	PUNCT
ajis02-5323	86	1	business	business	NOUN
ajis02-5323	86	2	continuity	continuity	NOUN
ajis02-5323	86	3	and	and	CCONJ
ajis02-5323	86	4	disaster	disaster	NOUN
ajis02-5323	86	5	recovery	recovery	NOUN
ajis02-5323	86	6	plans	plan	NOUN
ajis02-5323	86	7	were	be	AUX
ajis02-5323	86	8	adopted	adopt	VERB
ajis02-5323	86	9	reactively	reactively	ADV
ajis02-5323	86	10	.	.	PUNCT
ajis02-5323	87	1	boyens	boyen	NOUN
ajis02-5323	87	2	et	et	PROPN
ajis02-5323	87	3	al	al	PROPN
ajis02-5323	87	4	.	.	PROPN
ajis02-5323	88	1	(	(	PUNCT
ajis02-5323	88	2	2020	2020	NUM
ajis02-5323	88	3	)	)	PUNCT
ajis02-5323	88	4	reported	report	VERB
ajis02-5323	88	5	that	that	SCONJ
ajis02-5323	88	6	organizations	organization	NOUN
ajis02-5323	88	7	periodically	periodically	ADV
ajis02-5323	88	8	surveyed	survey	VERB
ajis02-5323	88	9	suppliers	supplier	NOUN
ajis02-5323	88	10	to	to	PART
ajis02-5323	88	11	understand	understand	VERB
ajis02-5323	88	12	their	their	PRON
ajis02-5323	88	13	security	security	NOUN
ajis02-5323	88	14	posture	posture	NOUN
ajis02-5323	88	15	using	use	VERB
ajis02-5323	88	16	tribal	tribal	ADJ
ajis02-5323	88	17	knowledge	knowledge	NOUN
ajis02-5323	88	18	,	,	PUNCT
ajis02-5323	88	19	self	self	NOUN
ajis02-5323	88	20	-	-	PUNCT
ajis02-5323	88	21	assessment	assessment	NOUN
ajis02-5323	88	22	questionnaires	questionnaire	NOUN
ajis02-5323	88	23	,	,	PUNCT
ajis02-5323	88	24	early	early	ADJ
ajis02-5323	88	25	risk	risk	NOUN
ajis02-5323	88	26	assessments	assessment	NOUN
ajis02-5323	88	27	,	,	PUNCT
ajis02-5323	88	28	government	government	NOUN
ajis02-5323	88	29	watch	watch	NOUN
ajis02-5323	88	30	lists	list	NOUN
ajis02-5323	88	31	,	,	PUNCT
ajis02-5323	88	32	supplier	supplier	NOUN
ajis02-5323	88	33	criticality	criticality	NOUN
ajis02-5323	88	34	scores	score	NOUN
ajis02-5323	88	35	,	,	PUNCT
ajis02-5323	88	36	and	and	CCONJ
ajis02-5323	88	37	nist	nist	NOUN
ajis02-5323	88	38	csf	csf	ADJ
ajis02-5323	88	39	assessments	assessment	NOUN
ajis02-5323	88	40	.	.	PUNCT
ajis02-5323	89	1	suppliers	supplier	NOUN
ajis02-5323	89	2	were	be	AUX
ajis02-5323	89	3	found	find	VERB
ajis02-5323	89	4	to	to	PART
ajis02-5323	89	5	implement	implement	VERB
ajis02-5323	89	6	technical	technical	ADJ
ajis02-5323	89	7	controls	control	NOUN
ajis02-5323	89	8	inconsistently	inconsistently	ADV
ajis02-5323	89	9	,	,	PUNCT
ajis02-5323	89	10	which	which	DET
ajis02-5323	89	11	focal	focal	ADJ
ajis02-5323	89	12	organizations	organization	NOUN
ajis02-5323	89	13	compensated	compensate	VERB
ajis02-5323	89	14	for	for	ADP
ajis02-5323	89	15	by	by	ADP
ajis02-5323	89	16	training	training	NOUN
ajis02-5323	89	17	of	of	ADP
ajis02-5323	89	18	supplier	supplier	NOUN
ajis02-5323	89	19	personnel	personnel	NOUN
ajis02-5323	89	20	and	and	CCONJ
ajis02-5323	89	21	requirements	requirement	NOUN
ajis02-5323	89	22	of	of	ADP
ajis02-5323	89	23	implementing	implement	VERB
ajis02-5323	89	24	controls	control	NOUN
ajis02-5323	89	25	in	in	ADP
ajis02-5323	89	26	the	the	DET
ajis02-5323	89	27	future	future	NOUN
ajis02-5323	89	28	.	.	PUNCT
ajis02-5323	90	1	they	they	PRON
ajis02-5323	90	2	rarely	rarely	ADV
ajis02-5323	90	3	monitored	monitor	VERB
ajis02-5323	90	4	suppliers	supplier	NOUN
ajis02-5323	90	5	after	after	ADP
ajis02-5323	90	6	onboarding	onboarde	VERB
ajis02-5323	90	7	.	.	PUNCT
ajis02-5323	91	1	prior	prior	ADJ
ajis02-5323	91	2	findings	finding	NOUN
ajis02-5323	91	3	suggest	suggest	VERB
ajis02-5323	91	4	that	that	SCONJ
ajis02-5323	91	5	organizations	organization	NOUN
ajis02-5323	91	6	employ	employ	VERB
ajis02-5323	91	7	deficient	deficient	ADJ
ajis02-5323	91	8	and	and	CCONJ
ajis02-5323	91	9	unsystematic	unsystematic	ADJ
ajis02-5323	91	10	processes	process	NOUN
ajis02-5323	91	11	.	.	PUNCT
ajis02-5323	92	1	while	while	SCONJ
ajis02-5323	92	2	organizations	organization	NOUN
ajis02-5323	92	3	may	may	AUX
ajis02-5323	92	4	understand	understand	VERB
ajis02-5323	92	5	how	how	SCONJ
ajis02-5323	92	6	their	their	PRON
ajis02-5323	92	7	direct	direct	ADJ
ajis02-5323	92	8	suppliers	supplier	NOUN
ajis02-5323	92	9	or	or	CCONJ
ajis02-5323	92	10	customers	customer	NOUN
ajis02-5323	92	11	interact	interact	VERB
ajis02-5323	92	12	with	with	ADP
ajis02-5323	92	13	their	their	PRON
ajis02-5323	92	14	information	information	NOUN
ajis02-5323	92	15	systems	system	NOUN
ajis02-5323	92	16	and	and	CCONJ
ajis02-5323	92	17	manage	manage	VERB
ajis02-5323	92	18	their	their	PRON
ajis02-5323	92	19	data	datum	NOUN
ajis02-5323	92	20	,	,	PUNCT
ajis02-5323	92	21	they	they	PRON
ajis02-5323	92	22	frequently	frequently	ADV
ajis02-5323	92	23	lack	lack	VERB
ajis02-5323	92	24	visibility	visibility	NOUN
ajis02-5323	92	25	into	into	ADP
ajis02-5323	92	26	how	how	SCONJ
ajis02-5323	92	27	these	these	DET
ajis02-5323	92	28	immediate	immediate	ADJ
ajis02-5323	92	29	partners	partner	NOUN
ajis02-5323	92	30	source	source	NOUN
ajis02-5323	92	31	,	,	PUNCT
ajis02-5323	92	32	transmit	transmit	VERB
ajis02-5323	92	33	,	,	PUNCT
ajis02-5323	92	34	and	and	CCONJ
ajis02-5323	92	35	exchange	exchange	NOUN
ajis02-5323	92	36	data	datum	NOUN
ajis02-5323	92	37	,	,	PUNCT
ajis02-5323	92	38	services	service	NOUN
ajis02-5323	92	39	,	,	PUNCT
ajis02-5323	92	40	and	and	CCONJ
ajis02-5323	92	41	components	component	NOUN
ajis02-5323	92	42	with	with	ADP
ajis02-5323	92	43	other	other	ADJ
ajis02-5323	92	44	companies	company	NOUN
ajis02-5323	92	45	upstream	upstream	VERB
ajis02-5323	92	46	and	and	CCONJ
ajis02-5323	92	47	downstream	downstream	ADJ
ajis02-5323	92	48	in	in	ADP
ajis02-5323	92	49	the	the	DET
ajis02-5323	92	50	sc	sc	PROPN
ajis02-5323	92	51	.	.	PUNCT
ajis02-5323	93	1	while	while	SCONJ
ajis02-5323	93	2	the	the	DET
ajis02-5323	93	3	reviewed	review	VERB
ajis02-5323	93	4	studies	study	NOUN
ajis02-5323	93	5	are	be	AUX
ajis02-5323	93	6	informative	informative	ADJ
ajis02-5323	93	7	,	,	PUNCT
ajis02-5323	93	8	none	none	NOUN
ajis02-5323	93	9	specifically	specifically	ADV
ajis02-5323	93	10	focused	focus	VERB
ajis02-5323	93	11	on	on	ADP
ajis02-5323	93	12	the	the	DET
ajis02-5323	93	13	process	process	NOUN
ajis02-5323	93	14	of	of	ADP
ajis02-5323	93	15	supplier	supplier	NOUN
ajis02-5323	93	16	risk	risk	NOUN
ajis02-5323	93	17	assessment	assessment	NOUN
ajis02-5323	93	18	and	and	CCONJ
ajis02-5323	93	19	monitoring	monitoring	NOUN
ajis02-5323	93	20	nor	nor	CCONJ
ajis02-5323	93	21	analyzed	analyze	VERB
ajis02-5323	93	22	the	the	DET
ajis02-5323	93	23	contextual	contextual	ADJ
ajis02-5323	93	24	factors	factor	NOUN
ajis02-5323	93	25	affecting	affect	VERB
ajis02-5323	93	26	its	its	PRON
ajis02-5323	93	27	maturity	maturity	NOUN
ajis02-5323	93	28	.	.	PUNCT
ajis02-5323	94	1	additionally	additionally	ADV
ajis02-5323	94	2	,	,	PUNCT
ajis02-5323	94	3	these	these	DET
ajis02-5323	94	4	studies	study	NOUN
ajis02-5323	94	5	investigated	investigate	VERB
ajis02-5323	94	6	a	a	DET
ajis02-5323	94	7	rather	rather	ADV
ajis02-5323	94	8	small	small	ADJ
ajis02-5323	94	9	number	number	NOUN
ajis02-5323	94	10	of	of	ADP
ajis02-5323	94	11	organizations	organization	NOUN
ajis02-5323	94	12	,	,	PUNCT
ajis02-5323	94	13	ranging	range	VERB
ajis02-5323	94	14	from	from	ADP
ajis02-5323	94	15	two	two	NUM
ajis02-5323	94	16	to	to	ADP
ajis02-5323	94	17	eleven	eleven	NUM
ajis02-5323	94	18	,	,	PUNCT
ajis02-5323	94	19	which	which	PRON
ajis02-5323	94	20	calls	call	VERB
ajis02-5323	94	21	for	for	ADP
ajis02-5323	94	22	additional	additional	ADJ
ajis02-5323	94	23	data	datum	NOUN
ajis02-5323	94	24	to	to	PART
ajis02-5323	94	25	provide	provide	VERB
ajis02-5323	94	26	solid	solid	ADJ
ajis02-5323	94	27	evidence	evidence	NOUN
ajis02-5323	94	28	about	about	ADP
ajis02-5323	94	29	the	the	DET
ajis02-5323	94	30	state	state	NOUN
ajis02-5323	94	31	of	of	ADP
ajis02-5323	94	32	play	play	NOUN
ajis02-5323	94	33	in	in	ADP
ajis02-5323	94	34	c	c	PROPN
ajis02-5323	94	35	-	-	PUNCT
ajis02-5323	94	36	scrm	scrm	NOUN
ajis02-5323	94	37	.	.	PUNCT
ajis02-5323	95	1	this	this	PRON
ajis02-5323	95	2	sets	set	VERB
ajis02-5323	95	3	the	the	DET
ajis02-5323	95	4	stage	stage	NOUN
ajis02-5323	95	5	for	for	ADP
ajis02-5323	95	6	the	the	DET
ajis02-5323	95	7	investigation	investigation	NOUN
ajis02-5323	95	8	that	that	PRON
ajis02-5323	95	9	is	be	AUX
ajis02-5323	95	10	undertaken	undertake	VERB
ajis02-5323	95	11	by	by	ADP
ajis02-5323	95	12	the	the	DET
ajis02-5323	95	13	present	present	ADJ
ajis02-5323	95	14	study	study	NOUN
ajis02-5323	95	15	.	.	PUNCT
ajis02-5323	96	1	3	3	NUM
ajis02-5323	96	2	methods	method	NOUN
ajis02-5323	96	3	and	and	CCONJ
ajis02-5323	96	4	data	datum	NOUN
ajis02-5323	96	5	given	give	VERB
ajis02-5323	96	6	the	the	DET
ajis02-5323	96	7	exploratory	exploratory	ADJ
ajis02-5323	96	8	stage	stage	NOUN
ajis02-5323	96	9	of	of	ADP
ajis02-5323	96	10	this	this	DET
ajis02-5323	96	11	research	research	NOUN
ajis02-5323	96	12	area	area	NOUN
ajis02-5323	96	13	,	,	PUNCT
ajis02-5323	96	14	we	we	PRON
ajis02-5323	96	15	relied	rely	VERB
ajis02-5323	96	16	on	on	ADP
ajis02-5323	96	17	the	the	DET
ajis02-5323	96	18	concurrent	concurrent	ADJ
ajis02-5323	96	19	embedded	embed	VERB
ajis02-5323	96	20	mixed	mixed	ADJ
ajis02-5323	96	21	method	method	NOUN
ajis02-5323	96	22	design	design	NOUN
ajis02-5323	96	23	(	(	PUNCT
ajis02-5323	96	24	creswell	creswell	PROPN
ajis02-5323	96	25	2009	2009	NUM
ajis02-5323	96	26	)	)	PUNCT
ajis02-5323	96	27	.	.	PUNCT
ajis02-5323	97	1	our	our	PRON
ajis02-5323	97	2	primary	primary	ADJ
ajis02-5323	97	3	method	method	NOUN
ajis02-5323	97	4	was	be	AUX
ajis02-5323	97	5	qualitative	qualitative	VERB
ajis02-5323	97	6	–	–	PUNCT
ajis02-5323	97	7	semi	semi	ADJ
ajis02-5323	97	8	-	-	ADJ
ajis02-5323	97	9	structured	structured	ADJ
ajis02-5323	97	10	australasian	australasian	ADJ
ajis02-5323	97	11	journal	journal	NOUN
ajis02-5323	97	12	of	of	ADP
ajis02-5323	97	13	information	information	NOUN
ajis02-5323	97	14	systems	system	NOUN
ajis02-5323	97	15	slapnicar	slapnicar	NOUN
ajis02-5323	97	16	,	,	PUNCT
ajis02-5323	97	17	vidmar	vidmar	NOUN
ajis02-5323	97	18	&	&	CCONJ
ajis02-5323	97	19	tsen	tsen	ADJ
ajis02-5323	97	20	2025	2025	NUM
ajis02-5323	97	21	,	,	PUNCT
ajis02-5323	97	22	vol	vol	NOUN
ajis02-5323	97	23	29	29	NUM
ajis02-5323	97	24	,	,	PUNCT
ajis02-5323	97	25	research	research	NOUN
ajis02-5323	97	26	article	article	NOUN
ajis02-5323	97	27	process	process	NOUN
ajis02-5323	97	28	theory	theory	NOUN
ajis02-5323	97	29	of	of	ADP
ajis02-5323	97	30	supplier	supplier	NOUN
ajis02-5323	97	31	cyber	cyber	NOUN
ajis02-5323	97	32	risk	risk	NOUN
ajis02-5323	97	33	assessment	assessment	NOUN
ajis02-5323	97	34	6	6	NUM
ajis02-5323	97	35	interviews	interview	NOUN
ajis02-5323	97	36	which	which	PRON
ajis02-5323	97	37	explores	explore	VERB
ajis02-5323	97	38	the	the	DET
ajis02-5323	97	39	processes	process	NOUN
ajis02-5323	97	40	experienced	experience	VERB
ajis02-5323	97	41	by	by	ADP
ajis02-5323	97	42	individuals	individual	NOUN
ajis02-5323	97	43	in	in	ADP
ajis02-5323	97	44	charge	charge	NOUN
ajis02-5323	97	45	of	of	ADP
ajis02-5323	97	46	supplier	supplier	NOUN
ajis02-5323	97	47	cyber	cyber	NOUN
ajis02-5323	97	48	risk	risk	NOUN
ajis02-5323	97	49	assessment	assessment	NOUN
ajis02-5323	97	50	.	.	PUNCT
ajis02-5323	98	1	it	it	PRON
ajis02-5323	98	2	allowed	allow	VERB
ajis02-5323	98	3	us	we	PRON
ajis02-5323	98	4	to	to	PART
ajis02-5323	98	5	gain	gain	VERB
ajis02-5323	98	6	an	an	DET
ajis02-5323	98	7	in	in	ADP
ajis02-5323	98	8	-	-	PUNCT
ajis02-5323	98	9	depth	depth	NOUN
ajis02-5323	98	10	and	and	CCONJ
ajis02-5323	98	11	holistic	holistic	ADJ
ajis02-5323	98	12	understanding	understanding	NOUN
ajis02-5323	98	13	of	of	ADP
ajis02-5323	98	14	the	the	DET
ajis02-5323	98	15	research	research	NOUN
ajis02-5323	98	16	questions	question	NOUN
ajis02-5323	98	17	and	and	CCONJ
ajis02-5323	98	18	conceptualize	conceptualize	VERB
ajis02-5323	98	19	organizations	organization	NOUN
ajis02-5323	98	20	'	'	PART
ajis02-5323	98	21	processes	process	NOUN
ajis02-5323	98	22	to	to	PART
ajis02-5323	98	23	assess	assess	VERB
ajis02-5323	98	24	a	a	DET
ajis02-5323	98	25	supplier	supplier	NOUN
ajis02-5323	98	26	's	's	PART
ajis02-5323	98	27	cyber	cyber	ADJ
ajis02-5323	98	28	risk	risk	NOUN
ajis02-5323	98	29	.	.	PUNCT
ajis02-5323	99	1	the	the	DET
ajis02-5323	99	2	secondary	secondary	ADJ
ajis02-5323	99	3	method	method	NOUN
ajis02-5323	99	4	–	–	PUNCT
ajis02-5323	99	5	a	a	DET
ajis02-5323	99	6	quantitative	quantitative	ADJ
ajis02-5323	99	7	analysis	analysis	NOUN
ajis02-5323	99	8	provided	provide	VERB
ajis02-5323	99	9	support	support	NOUN
ajis02-5323	99	10	to	to	ADP
ajis02-5323	99	11	the	the	DET
ajis02-5323	99	12	primary	primary	ADJ
ajis02-5323	99	13	method	method	NOUN
ajis02-5323	99	14	and	and	CCONJ
ajis02-5323	99	15	enabled	enable	VERB
ajis02-5323	99	16	a	a	DET
ajis02-5323	99	17	statistical	statistical	ADJ
ajis02-5323	99	18	analysis	analysis	NOUN
ajis02-5323	99	19	of	of	ADP
ajis02-5323	99	20	the	the	DET
ajis02-5323	99	21	question	question	NOUN
ajis02-5323	99	22	of	of	ADP
ajis02-5323	99	23	how	how	SCONJ
ajis02-5323	99	24	effective	effective	ADJ
ajis02-5323	99	25	the	the	DET
ajis02-5323	99	26	process	process	NOUN
ajis02-5323	99	27	of	of	ADP
ajis02-5323	99	28	supplier	supplier	NOUN
ajis02-5323	99	29	cyber	cyber	NOUN
ajis02-5323	99	30	risk	risk	NOUN
ajis02-5323	99	31	assessment	assessment	NOUN
ajis02-5323	99	32	is	be	AUX
ajis02-5323	99	33	in	in	ADP
ajis02-5323	99	34	the	the	DET
ajis02-5323	99	35	identification	identification	NOUN
ajis02-5323	99	36	of	of	ADP
ajis02-5323	99	37	risky	risky	ADJ
ajis02-5323	99	38	suppliers	supplier	NOUN
ajis02-5323	99	39	.	.	PUNCT
ajis02-5323	100	1	concurrent	concurrent	ADJ
ajis02-5323	100	2	design	design	NOUN
ajis02-5323	100	3	relates	relate	VERB
ajis02-5323	100	4	to	to	ADP
ajis02-5323	100	5	the	the	DET
ajis02-5323	100	6	simultaneous	simultaneous	ADJ
ajis02-5323	100	7	data	data	NOUN
ajis02-5323	100	8	collection	collection	NOUN
ajis02-5323	100	9	with	with	ADP
ajis02-5323	100	10	interviews	interview	NOUN
ajis02-5323	100	11	and	and	CCONJ
ajis02-5323	100	12	a	a	DET
ajis02-5323	100	13	survey	survey	NOUN
ajis02-5323	100	14	.	.	PUNCT
ajis02-5323	101	1	the	the	DET
ajis02-5323	101	2	reason	reason	NOUN
ajis02-5323	101	3	for	for	ADP
ajis02-5323	101	4	the	the	DET
ajis02-5323	101	5	concurrent	concurrent	ADJ
ajis02-5323	101	6	data	data	NOUN
ajis02-5323	101	7	collection	collection	NOUN
ajis02-5323	101	8	is	be	AUX
ajis02-5323	101	9	the	the	DET
ajis02-5323	101	10	significant	significant	ADJ
ajis02-5323	101	11	challenge	challenge	NOUN
ajis02-5323	101	12	of	of	ADP
ajis02-5323	101	13	recruiting	recruit	VERB
ajis02-5323	101	14	interviewees	interviewee	NOUN
ajis02-5323	101	15	in	in	ADP
ajis02-5323	101	16	relevant	relevant	ADJ
ajis02-5323	101	17	positions	position	NOUN
ajis02-5323	101	18	willing	willing	ADJ
ajis02-5323	101	19	to	to	PART
ajis02-5323	101	20	discuss	discuss	VERB
ajis02-5323	101	21	such	such	DET
ajis02-5323	101	22	a	a	DET
ajis02-5323	101	23	sensitive	sensitive	ADJ
ajis02-5323	101	24	topic	topic	NOUN
ajis02-5323	101	25	.	.	PUNCT
ajis02-5323	102	1	this	this	DET
ajis02-5323	102	2	process	process	NOUN
ajis02-5323	102	3	requires	require	VERB
ajis02-5323	102	4	considerable	considerable	ADJ
ajis02-5323	102	5	time	time	NOUN
ajis02-5323	102	6	and	and	CCONJ
ajis02-5323	102	7	effort	effort	NOUN
ajis02-5323	102	8	.	.	PUNCT
ajis02-5323	103	1	the	the	DET
ajis02-5323	103	2	data	data	NOUN
ajis02-5323	103	3	collection	collection	NOUN
ajis02-5323	103	4	for	for	ADP
ajis02-5323	103	5	the	the	DET
ajis02-5323	103	6	interviews	interview	NOUN
ajis02-5323	103	7	lasted	last	VERB
ajis02-5323	103	8	over	over	ADP
ajis02-5323	103	9	a	a	DET
ajis02-5323	103	10	year	year	NOUN
ajis02-5323	103	11	,	,	PUNCT
ajis02-5323	103	12	from	from	ADP
ajis02-5323	103	13	march	march	PROPN
ajis02-5323	103	14	2023	2023	NUM
ajis02-5323	103	15	to	to	ADP
ajis02-5323	103	16	june	june	PROPN
ajis02-5323	103	17	2024	2024	NUM
ajis02-5323	103	18	.	.	PUNCT
ajis02-5323	104	1	a	a	DET
ajis02-5323	104	2	survey	survey	NOUN
ajis02-5323	104	3	was	be	AUX
ajis02-5323	104	4	carried	carry	VERB
ajis02-5323	104	5	out	out	ADP
ajis02-5323	104	6	simultaneously	simultaneously	ADV
ajis02-5323	104	7	to	to	PART
ajis02-5323	104	8	ensure	ensure	VERB
ajis02-5323	104	9	that	that	SCONJ
ajis02-5323	104	10	the	the	DET
ajis02-5323	104	11	data	datum	NOUN
ajis02-5323	104	12	related	relate	VERB
ajis02-5323	104	13	to	to	ADP
ajis02-5323	104	14	the	the	DET
ajis02-5323	104	15	same	same	ADJ
ajis02-5323	104	16	time	time	NOUN
ajis02-5323	104	17	period	period	NOUN
ajis02-5323	104	18	and	and	CCONJ
ajis02-5323	104	19	did	do	AUX
ajis02-5323	104	20	not	not	PART
ajis02-5323	104	21	become	become	VERB
ajis02-5323	104	22	outdated	outdated	ADJ
ajis02-5323	104	23	in	in	ADP
ajis02-5323	104	24	this	this	DET
ajis02-5323	104	25	fast	fast	ADV
ajis02-5323	104	26	-	-	PUNCT
ajis02-5323	104	27	developing	develop	VERB
ajis02-5323	104	28	discipline	discipline	NOUN
ajis02-5323	104	29	.	.	PUNCT
ajis02-5323	105	1	we	we	PRON
ajis02-5323	105	2	embed	embe	VERB
ajis02-5323	105	3	the	the	DET
ajis02-5323	105	4	findings	finding	NOUN
ajis02-5323	105	5	of	of	ADP
ajis02-5323	105	6	quantitative	quantitative	ADJ
ajis02-5323	105	7	research	research	NOUN
ajis02-5323	105	8	within	within	ADP
ajis02-5323	105	9	the	the	DET
ajis02-5323	105	10	findings	finding	NOUN
ajis02-5323	105	11	of	of	ADP
ajis02-5323	105	12	qualitative	qualitative	ADJ
ajis02-5323	105	13	research	research	NOUN
ajis02-5323	105	14	(	(	PUNCT
ajis02-5323	105	15	creswell	creswell	PROPN
ajis02-5323	105	16	2009	2009	NUM
ajis02-5323	105	17	)	)	PUNCT
ajis02-5323	105	18	.	.	PUNCT
ajis02-5323	106	1	3.1	3.1	NUM
ajis02-5323	106	2	qualitative	qualitative	NOUN
ajis02-5323	106	3	method	method	NOUN
ajis02-5323	106	4	3.1.1	3.1.1	NUM
ajis02-5323	106	5	sample	sample	NOUN
ajis02-5323	106	6	we	we	PRON
ajis02-5323	106	7	conducted	conduct	VERB
ajis02-5323	106	8	interviews	interview	NOUN
ajis02-5323	106	9	with	with	ADP
ajis02-5323	106	10	33	33	NUM
ajis02-5323	106	11	cybersecurity	cybersecurity	NOUN
ajis02-5323	106	12	experts	expert	NOUN
ajis02-5323	106	13	,	,	PUNCT
ajis02-5323	106	14	encompassing	encompass	VERB
ajis02-5323	106	15	cybersecurity	cybersecurity	NOUN
ajis02-5323	106	16	professionals	professional	NOUN
ajis02-5323	106	17	,	,	PUNCT
ajis02-5323	106	18	chief	chief	ADJ
ajis02-5323	106	19	information	information	NOUN
ajis02-5323	106	20	officers	officer	NOUN
ajis02-5323	106	21	(	(	PUNCT
ajis02-5323	106	22	cios	cio	NOUN
ajis02-5323	106	23	)	)	PUNCT
ajis02-5323	106	24	,	,	PUNCT
ajis02-5323	106	25	chief	chief	ADJ
ajis02-5323	106	26	information	information	NOUN
ajis02-5323	106	27	security	security	NOUN
ajis02-5323	106	28	officers	officer	NOUN
ajis02-5323	106	29	(	(	PUNCT
ajis02-5323	106	30	cisos	cisos	NOUN
ajis02-5323	106	31	)	)	PUNCT
ajis02-5323	106	32	,	,	PUNCT
ajis02-5323	106	33	it	it	PRON
ajis02-5323	106	34	managers	manager	NOUN
ajis02-5323	106	35	,	,	PUNCT
ajis02-5323	106	36	vendor	vendor	NOUN
ajis02-5323	106	37	managers	manager	NOUN
ajis02-5323	106	38	,	,	PUNCT
ajis02-5323	106	39	and	and	CCONJ
ajis02-5323	106	40	consultants	consultant	NOUN
ajis02-5323	106	41	from	from	ADP
ajis02-5323	106	42	various	various	ADJ
ajis02-5323	106	43	organizations	organization	NOUN
ajis02-5323	106	44	,	,	PUNCT
ajis02-5323	106	45	industries	industry	NOUN
ajis02-5323	106	46	and	and	CCONJ
ajis02-5323	106	47	countries	country	NOUN
ajis02-5323	106	48	(	(	PUNCT
ajis02-5323	106	49	table	table	NOUN
ajis02-5323	106	50	1	1	NUM
ajis02-5323	106	51	)	)	PUNCT
ajis02-5323	106	52	.	.	PUNCT
ajis02-5323	107	1	we	we	PRON
ajis02-5323	107	2	recruited	recruit	VERB
ajis02-5323	107	3	them	they	PRON
ajis02-5323	107	4	via	via	ADP
ajis02-5323	107	5	our	our	PRON
ajis02-5323	107	6	professional	professional	ADJ
ajis02-5323	107	7	network	network	NOUN
ajis02-5323	107	8	:	:	PUNCT
ajis02-5323	107	9	isaca	isaca	PROPN
ajis02-5323	107	10	brisbane	brisbane	PROPN
ajis02-5323	107	11	chapter	chapter	NOUN
ajis02-5323	107	12	and	and	CCONJ
ajis02-5323	107	13	isaca	isaca	PROPN
ajis02-5323	107	14	slovenia	slovenia	PROPN
ajis02-5323	107	15	chapter	chapter	PROPN
ajis02-5323	107	16	,	,	PUNCT
ajis02-5323	107	17	women	woman	NOUN
ajis02-5323	107	18	in	in	ADP
ajis02-5323	107	19	cyber	cyber	ADJ
ajis02-5323	107	20	security	security	NOUN
ajis02-5323	107	21	(	(	PUNCT
ajis02-5323	107	22	australia	australia	PROPN
ajis02-5323	107	23	)	)	PUNCT
ajis02-5323	107	24	,	,	PUNCT
ajis02-5323	107	25	and	and	CCONJ
ajis02-5323	107	26	auscert	auscert	NOUN
ajis02-5323	107	27	(	(	PUNCT
ajis02-5323	107	28	australia	australia	PROPN
ajis02-5323	107	29	)	)	PUNCT
ajis02-5323	107	30	.	.	PUNCT
ajis02-5323	108	1	among	among	ADP
ajis02-5323	108	2	our	our	PRON
ajis02-5323	108	3	33	33	NUM
ajis02-5323	108	4	interviewees	interviewee	NOUN
ajis02-5323	108	5	,	,	PUNCT
ajis02-5323	108	6	23	23	NUM
ajis02-5323	108	7	come	come	VERB
ajis02-5323	108	8	from	from	ADP
ajis02-5323	108	9	18	18	NUM
ajis02-5323	108	10	for	for	ADP
ajis02-5323	108	11	-	-	PUNCT
ajis02-5323	108	12	profit	profit	NOUN
ajis02-5323	108	13	and	and	CCONJ
ajis02-5323	108	14	government	government	NOUN
ajis02-5323	108	15	organizations	organization	NOUN
ajis02-5323	108	16	,	,	PUNCT
ajis02-5323	108	17	and	and	CCONJ
ajis02-5323	108	18	10	10	NUM
ajis02-5323	108	19	are	be	AUX
ajis02-5323	108	20	consultants	consultant	NOUN
ajis02-5323	108	21	providing	provide	VERB
ajis02-5323	108	22	supplier	supplier	NOUN
ajis02-5323	108	23	risk	risk	NOUN
ajis02-5323	108	24	assessments	assessment	NOUN
ajis02-5323	108	25	to	to	ADP
ajis02-5323	108	26	various	various	ADJ
ajis02-5323	108	27	clients	client	NOUN
ajis02-5323	108	28	.	.	PUNCT
ajis02-5323	109	1	each	each	DET
ajis02-5323	109	2	interview	interview	NOUN
ajis02-5323	109	3	lasted	last	VERB
ajis02-5323	109	4	from	from	ADP
ajis02-5323	109	5	45	45	NUM
ajis02-5323	109	6	minutes	minute	NOUN
ajis02-5323	109	7	to	to	ADP
ajis02-5323	109	8	one	one	NUM
ajis02-5323	109	9	hour	hour	NOUN
ajis02-5323	109	10	.	.	PUNCT
ajis02-5323	110	1	interviews	interview	NOUN
ajis02-5323	110	2	were	be	AUX
ajis02-5323	110	3	audio	audio	NOUN
ajis02-5323	110	4	-	-	PUNCT
ajis02-5323	110	5	recorded	record	VERB
ajis02-5323	110	6	and	and	CCONJ
ajis02-5323	110	7	subsequently	subsequently	ADV
ajis02-5323	110	8	transcribed	transcribe	VERB
ajis02-5323	110	9	using	use	VERB
ajis02-5323	110	10	the	the	DET
ajis02-5323	110	11	zoom	zoom	NOUN
ajis02-5323	110	12	platform	platform	NOUN
ajis02-5323	110	13	.	.	PUNCT
ajis02-5323	111	1	in	in	ADP
ajis02-5323	111	2	cases	case	NOUN
ajis02-5323	111	3	where	where	SCONJ
ajis02-5323	111	4	consent	consent	NOUN
ajis02-5323	111	5	for	for	ADP
ajis02-5323	111	6	recording	recording	NOUN
ajis02-5323	111	7	was	be	AUX
ajis02-5323	111	8	not	not	PART
ajis02-5323	111	9	given	give	VERB
ajis02-5323	111	10	,	,	PUNCT
ajis02-5323	111	11	detailed	detailed	ADJ
ajis02-5323	111	12	notes	note	NOUN
ajis02-5323	111	13	were	be	AUX
ajis02-5323	111	14	taken	take	VERB
ajis02-5323	111	15	.	.	PUNCT
ajis02-5323	112	1	the	the	DET
ajis02-5323	112	2	study	study	NOUN
ajis02-5323	112	3	has	have	AUX
ajis02-5323	112	4	obtained	obtain	VERB
ajis02-5323	112	5	ethical	ethical	ADJ
ajis02-5323	112	6	clearance	clearance	NOUN
ajis02-5323	112	7	from	from	ADP
ajis02-5323	112	8	the	the	DET
ajis02-5323	112	9	authors	author	NOUN
ajis02-5323	112	10	’	’	PART
ajis02-5323	112	11	university	university	NOUN
ajis02-5323	112	12	.	.	PUNCT
ajis02-5323	113	1	all	all	DET
ajis02-5323	113	2	recorded	record	VERB
ajis02-5323	113	3	videos	video	NOUN
ajis02-5323	113	4	were	be	AUX
ajis02-5323	113	5	deleted	delete	VERB
ajis02-5323	113	6	after	after	ADP
ajis02-5323	113	7	transcription	transcription	NOUN
ajis02-5323	113	8	and	and	CCONJ
ajis02-5323	113	9	coding	code	VERB
ajis02-5323	113	10	to	to	PART
ajis02-5323	113	11	safeguard	safeguard	VERB
ajis02-5323	113	12	the	the	DET
ajis02-5323	113	13	identity	identity	NOUN
ajis02-5323	113	14	of	of	ADP
ajis02-5323	113	15	participants	participant	NOUN
ajis02-5323	113	16	and	and	CCONJ
ajis02-5323	113	17	the	the	DET
ajis02-5323	113	18	confidentiality	confidentiality	NOUN
ajis02-5323	113	19	of	of	ADP
ajis02-5323	113	20	the	the	DET
ajis02-5323	113	21	information	information	NOUN
ajis02-5323	113	22	.	.	PUNCT
ajis02-5323	114	1	the	the	DET
ajis02-5323	114	2	interview	interview	NOUN
ajis02-5323	114	3	data	datum	NOUN
ajis02-5323	114	4	yielded	yield	VERB
ajis02-5323	114	5	invaluable	invaluable	ADJ
ajis02-5323	114	6	insights	insight	NOUN
ajis02-5323	114	7	into	into	ADP
ajis02-5323	114	8	the	the	DET
ajis02-5323	114	9	multifaceted	multifaceted	ADJ
ajis02-5323	114	10	realm	realm	NOUN
ajis02-5323	114	11	of	of	ADP
ajis02-5323	114	12	cyber	cyber	ADJ
ajis02-5323	114	13	security	security	NOUN
ajis02-5323	114	14	risk	risk	NOUN
ajis02-5323	114	15	assessment	assessment	NOUN
ajis02-5323	114	16	during	during	ADP
ajis02-5323	114	17	the	the	DET
ajis02-5323	114	18	supplier	supplier	NOUN
ajis02-5323	114	19	selection	selection	NOUN
ajis02-5323	114	20	process	process	NOUN
ajis02-5323	114	21	and	and	CCONJ
ajis02-5323	114	22	after	after	ADP
ajis02-5323	114	23	onboarding	onboarde	VERB
ajis02-5323	114	24	.	.	PUNCT
ajis02-5323	115	1	participant	participant	ADJ
ajis02-5323	115	2	#	#	NOUN
ajis02-5323	115	3	role	role	NOUN
ajis02-5323	115	4	experience	experience	NOUN
ajis02-5323	115	5	in	in	ADP
ajis02-5323	115	6	security	security	NOUN
ajis02-5323	115	7	(	(	PUNCT
ajis02-5323	115	8	years	year	NOUN
ajis02-5323	115	9	)	)	PUNCT
ajis02-5323	115	10	organization	organization	NOUN
ajis02-5323	115	11	size	size	NOUN
ajis02-5323	115	12	(	(	PUNCT
ajis02-5323	115	13	employees	employee	NOUN
ajis02-5323	115	14	)	)	PUNCT
ajis02-5323	115	15	industry	industry	NOUN
ajis02-5323	115	16	country	country	NOUN
ajis02-5323	115	17	p1	p1	NOUN
ajis02-5323	115	18	principal	principal	ADJ
ajis02-5323	115	19	analyst	analyst	NOUN
ajis02-5323	115	20	25	25	NUM
ajis02-5323	115	21	15	15	NUM
ajis02-5323	115	22	consulting	consult	VERB
ajis02-5323	115	23	australia	australia	PROPN
ajis02-5323	115	24	p2	p2	VERB
ajis02-5323	115	25	it	it	PRON
ajis02-5323	115	26	consultant	consultant	NOUN
ajis02-5323	115	27	5	5	NUM
ajis02-5323	115	28	less	less	ADJ
ajis02-5323	115	29	than	than	ADP
ajis02-5323	115	30	10	10	NUM
ajis02-5323	115	31	consulting	consult	VERB
ajis02-5323	115	32	slovenia	slovenia	PROPN
ajis02-5323	115	33	p3	p3	PROPN
ajis02-5323	115	34	ciso	ciso	PROPN
ajis02-5323	115	35	25	25	NUM
ajis02-5323	115	36	300	300	NUM
ajis02-5323	115	37	employment	employment	NOUN
ajis02-5323	115	38	&	&	CCONJ
ajis02-5323	115	39	training	training	PROPN
ajis02-5323	115	40	australia	australia	PROPN
ajis02-5323	115	41	p4	p4	ADJ
ajis02-5323	115	42	executive	executive	ADJ
ajis02-5323	115	43	vice	vice	NOUN
ajis02-5323	115	44	president	president	NOUN
ajis02-5323	115	45	>	>	PROPN
ajis02-5323	115	46	30	30	NUM
ajis02-5323	115	47	400	400	NUM
ajis02-5323	115	48	cloud	cloud	NOUN
ajis02-5323	115	49	security	security	NOUN
ajis02-5323	115	50	singapore	singapore	PROPN
ajis02-5323	115	51	p5	p5	PROPN
ajis02-5323	115	52	ciso	ciso	PROPN
ajis02-5323	115	53	25	25	NUM
ajis02-5323	115	54	over	over	ADP
ajis02-5323	115	55	7,000	7,000	NUM
ajis02-5323	115	56	transportation	transportation	NOUN
ajis02-5323	115	57	(	(	PUNCT
ajis02-5323	115	58	critical	critical	ADJ
ajis02-5323	115	59	infrastructure	infrastructure	NOUN
ajis02-5323	115	60	)	)	PUNCT
ajis02-5323	115	61	australia	australia	PROPN
ajis02-5323	115	62	p6	p6	ADJ
ajis02-5323	115	63	discipline	discipline	NOUN
ajis02-5323	115	64	head	head	NOUN
ajis02-5323	115	65	of	of	ADP
ajis02-5323	115	66	business	business	NOUN
ajis02-5323	115	67	resilience	resilience	NOUN
ajis02-5323	115	68	15	15	NUM
ajis02-5323	115	69	over	over	ADP
ajis02-5323	115	70	7,000	7,000	NUM
ajis02-5323	115	71	transportation	transportation	NOUN
ajis02-5323	115	72	(	(	PUNCT
ajis02-5323	115	73	critical	critical	ADJ
ajis02-5323	115	74	infrastructure	infrastructure	NOUN
ajis02-5323	115	75	)	)	PUNCT
ajis02-5323	115	76	australia	australia	PROPN
ajis02-5323	115	77	p7	p7	VERB
ajis02-5323	115	78	security	security	NOUN
ajis02-5323	115	79	sales	sale	NOUN
ajis02-5323	115	80	specialist	specialist	NOUN
ajis02-5323	115	81	4	4	NUM
ajis02-5323	115	82	over	over	ADP
ajis02-5323	115	83	1,000	1,000	NUM
ajis02-5323	115	84	consulting	consulting	NOUN
ajis02-5323	115	85	australia	australia	PROPN
ajis02-5323	115	86	australasian	australasian	ADJ
ajis02-5323	115	87	journal	journal	NOUN
ajis02-5323	115	88	of	of	ADP
ajis02-5323	115	89	information	information	NOUN
ajis02-5323	115	90	systems	system	NOUN
ajis02-5323	115	91	slapnicar	slapnicar	NOUN
ajis02-5323	115	92	,	,	PUNCT
ajis02-5323	115	93	vidmar	vidmar	NOUN
ajis02-5323	115	94	&	&	CCONJ
ajis02-5323	115	95	tsen	tsen	ADJ
ajis02-5323	115	96	2025	2025	NUM
ajis02-5323	115	97	,	,	PUNCT
ajis02-5323	115	98	vol	vol	NOUN
ajis02-5323	115	99	29	29	NUM
ajis02-5323	115	100	,	,	PUNCT
ajis02-5323	115	101	research	research	NOUN
ajis02-5323	115	102	article	article	NOUN
ajis02-5323	115	103	process	process	NOUN
ajis02-5323	115	104	theory	theory	NOUN
ajis02-5323	115	105	of	of	ADP
ajis02-5323	115	106	supplier	supplier	NOUN
ajis02-5323	115	107	cyber	cyber	NOUN
ajis02-5323	115	108	risk	risk	NOUN
ajis02-5323	115	109	assessment	assessment	NOUN
ajis02-5323	115	110	7	7	NUM
ajis02-5323	115	111	p8	p8	PROPN
ajis02-5323	115	112	cyber	cyber	NOUN
ajis02-5323	115	113	security	security	NOUN
ajis02-5323	115	114	consultant	consultant	NOUN
ajis02-5323	115	115	in	in	ADP
ajis02-5323	115	116	governance	governance	NOUN
ajis02-5323	115	117	,	,	PUNCT
ajis02-5323	115	118	risk	risk	NOUN
ajis02-5323	115	119	and	and	CCONJ
ajis02-5323	115	120	compliance	compliance	NOUN
ajis02-5323	115	121	2	2	NUM
ajis02-5323	115	122	over	over	ADP
ajis02-5323	115	123	1,000	1,000	NUM
ajis02-5323	115	124	consulting	consulting	NOUN
ajis02-5323	115	125	australia	australia	PROPN
ajis02-5323	115	126	p9	p9	PROPN
ajis02-5323	115	127	cyber	cyber	PROPN
ajis02-5323	115	128	security	security	NOUN
ajis02-5323	115	129	consultant	consultant	NOUN
ajis02-5323	115	130	and	and	CCONJ
ajis02-5323	115	131	founder	founder	NOUN
ajis02-5323	115	132	18	18	NUM
ajis02-5323	115	133	self	self	NOUN
ajis02-5323	115	134	-	-	PUNCT
ajis02-5323	115	135	employed	employ	VERB
ajis02-5323	115	136	consulting	consulting	NOUN
ajis02-5323	115	137	australia	australia	PROPN
ajis02-5323	115	138	p10	p10	NOUN
ajis02-5323	115	139	chief	chief	ADJ
ajis02-5323	115	140	technology	technology	NOUN
ajis02-5323	115	141	officer	officer	NOUN
ajis02-5323	115	142	>	>	NOUN
ajis02-5323	115	143	20	20	NUM
ajis02-5323	115	144	50	50	NUM
ajis02-5323	115	145	software	software	NOUN
ajis02-5323	115	146	development	development	NOUN
ajis02-5323	115	147	new	new	PROPN
ajis02-5323	115	148	zealand	zealand	PROPN
ajis02-5323	115	149	p11	p11	NOUN
ajis02-5323	115	150	security	security	NOUN
ajis02-5323	115	151	analysts	analyst	NOUN
ajis02-5323	115	152	,	,	PUNCT
ajis02-5323	115	153	specialist	specialist	NOUN
ajis02-5323	115	154	in	in	ADP
ajis02-5323	115	155	3rd	3rd	PROPN
ajis02-5323	115	156	party	party	NOUN
ajis02-5323	115	157	cs	cs	PROPN
ajis02-5323	115	158	risk	risk	NOUN
ajis02-5323	115	159	2	2	NUM
ajis02-5323	115	160	over	over	ADP
ajis02-5323	115	161	2,500	2,500	NUM
ajis02-5323	115	162	consulting	consult	VERB
ajis02-5323	115	163	australia	australia	PROPN
ajis02-5323	115	164	p12	p12	ADJ
ajis02-5323	115	165	security	security	NOUN
ajis02-5323	115	166	director	director	NOUN
ajis02-5323	115	167	9	9	NUM
ajis02-5323	115	168	over	over	ADP
ajis02-5323	115	169	1,300	1,300	NUM
ajis02-5323	115	170	banking	banking	NOUN
ajis02-5323	115	171	slovenia	slovenia	PROPN
ajis02-5323	115	172	p13	p13	PROPN
ajis02-5323	115	173	chief	chief	NOUN
ajis02-5323	115	174	it	it	PRON
ajis02-5323	115	175	internal	internal	ADJ
ajis02-5323	115	176	auditor	auditor	NOUN
ajis02-5323	115	177	8	8	NUM
ajis02-5323	115	178	over	over	ADP
ajis02-5323	115	179	1,300	1,300	NUM
ajis02-5323	115	180	banking	banking	NOUN
ajis02-5323	115	181	germany	germany	PROPN
ajis02-5323	115	182	p14	p14	VERB
ajis02-5323	115	183	cyber	cyber	NOUN
ajis02-5323	115	184	security	security	NOUN
ajis02-5323	115	185	architect	architect	NOUN
ajis02-5323	115	186	7	7	NUM
ajis02-5323	115	187	over	over	ADP
ajis02-5323	115	188	7,000	7,000	NUM
ajis02-5323	115	189	tertiary	tertiary	ADJ
ajis02-5323	115	190	education	education	NOUN
ajis02-5323	115	191	australia	australia	PROPN
ajis02-5323	115	192	p15	p15	NOUN
ajis02-5323	115	193	consultant	consultant	NOUN
ajis02-5323	115	194	,	,	PUNCT
ajis02-5323	115	195	developer	developer	NOUN
ajis02-5323	115	196	7	7	NUM
ajis02-5323	115	197	less	less	ADJ
ajis02-5323	115	198	than	than	ADP
ajis02-5323	115	199	10	10	NUM
ajis02-5323	115	200	consulting	consult	VERB
ajis02-5323	115	201	australia	australia	PROPN
ajis02-5323	115	202	p16	p16	PROPN
ajis02-5323	115	203	cio	cio	PROPN
ajis02-5323	115	204	7	7	NUM
ajis02-5323	115	205	over	over	ADP
ajis02-5323	115	206	200	200	NUM
ajis02-5323	115	207	banking	banking	NOUN
ajis02-5323	115	208	slovenia	slovenia	PROPN
ajis02-5323	115	209	p17	p17	PROPN
ajis02-5323	115	210	cyber	cyber	PROPN
ajis02-5323	115	211	security	security	NOUN
ajis02-5323	115	212	consultant	consultant	NOUN
ajis02-5323	115	213	and	and	CCONJ
ajis02-5323	115	214	founder	founder	NOUN
ajis02-5323	115	215	20	20	NUM
ajis02-5323	115	216	self	self	NOUN
ajis02-5323	115	217	-	-	PUNCT
ajis02-5323	115	218	employed	employ	VERB
ajis02-5323	115	219	+	+	NUM
ajis02-5323	115	220	subcontractors	subcontractor	NOUN
ajis02-5323	115	221	cyber	cyber	ADJ
ajis02-5323	115	222	security	security	NOUN
ajis02-5323	115	223	and	and	CCONJ
ajis02-5323	115	224	assurance	assurance	NOUN
ajis02-5323	115	225	company	company	PROPN
ajis02-5323	115	226	slovenia	slovenia	PROPN
ajis02-5323	115	227	p18	p18	PROPN
ajis02-5323	115	228	cyber	cyber	PROPN
ajis02-5323	115	229	security	security	NOUN
ajis02-5323	115	230	consultant	consultant	NOUN
ajis02-5323	115	231	15	15	NUM
ajis02-5323	115	232	over	over	ADP
ajis02-5323	115	233	200	200	NUM
ajis02-5323	115	234	vendor	vendor	NOUN
ajis02-5323	115	235	assessment	assessment	NOUN
ajis02-5323	115	236	australia	australia	PROPN
ajis02-5323	115	237	p19	p19	PROPN
ajis02-5323	115	238	ciso	ciso	PROPN
ajis02-5323	115	239	8	8	NUM
ajis02-5323	115	240	over	over	ADP
ajis02-5323	115	241	1,000	1,000	NUM
ajis02-5323	115	242	insurance	insurance	NOUN
ajis02-5323	115	243	slovenia	slovenia	PROPN
ajis02-5323	115	244	p20	p20	NOUN
ajis02-5323	115	245	ciso	ciso	PROPN
ajis02-5323	115	246	of	of	ADP
ajis02-5323	115	247	a	a	DET
ajis02-5323	115	248	subsidiary	subsidiary	NOUN
ajis02-5323	115	249	19	19	NUM
ajis02-5323	115	250	over	over	ADP
ajis02-5323	115	251	3,000	3,000	NUM
ajis02-5323	115	252	banking	banking	NOUN
ajis02-5323	115	253	austria	austria	PROPN
ajis02-5323	115	254	p21	p21	PROPN
ajis02-5323	115	255	cyber	cyber	NOUN
ajis02-5323	115	256	security	security	NOUN
ajis02-5323	115	257	manager	manager	NOUN
ajis02-5323	115	258	20	20	NUM
ajis02-5323	115	259	over	over	ADP
ajis02-5323	115	260	2,000	2,000	NUM
ajis02-5323	115	261	municipality	municipality	NOUN
ajis02-5323	115	262	australia	australia	NOUN
ajis02-5323	115	263	p22	p22	NOUN
ajis02-5323	115	264	ciso	ciso	PROPN
ajis02-5323	115	265	20	20	NUM
ajis02-5323	115	266	over	over	ADP
ajis02-5323	115	267	5,000	5,000	NUM
ajis02-5323	115	268	insurance	insurance	NOUN
ajis02-5323	115	269	central	central	PROPN
ajis02-5323	115	270	europe	europe	PROPN
ajis02-5323	115	271	p23	p23	PROPN
ajis02-5323	115	272	analyst	analyst	NOUN
ajis02-5323	115	273	of	of	ADP
ajis02-5323	115	274	operational	operational	ADJ
ajis02-5323	115	275	risk	risk	NOUN
ajis02-5323	115	276	6	6	NUM
ajis02-5323	115	277	over	over	ADP
ajis02-5323	115	278	5,000	5,000	NUM
ajis02-5323	115	279	insurance	insurance	NOUN
ajis02-5323	115	280	central	central	PROPN
ajis02-5323	115	281	europe	europe	PROPN
ajis02-5323	115	282	p24	p24	NOUN
ajis02-5323	115	283	manager	manager	NOUN
ajis02-5323	115	284	in	in	ADP
ajis02-5323	115	285	support	support	NOUN
ajis02-5323	115	286	of	of	ADP
ajis02-5323	115	287	it	it	PRON
ajis02-5323	115	288	systems	system	NOUN
ajis02-5323	115	289	14	14	NUM
ajis02-5323	115	290	over	over	ADP
ajis02-5323	115	291	5,000	5,000	NUM
ajis02-5323	115	292	insurance	insurance	NOUN
ajis02-5323	115	293	central	central	PROPN
ajis02-5323	115	294	europe	europe	PROPN
ajis02-5323	115	295	p25	p25	PROPN
ajis02-5323	115	296	chief	chief	NOUN
ajis02-5323	115	297	it	it	PRON
ajis02-5323	115	298	officer	officer	NOUN
ajis02-5323	115	299	25	25	NUM
ajis02-5323	115	300	over	over	ADP
ajis02-5323	115	301	7,000	7,000	NUM
ajis02-5323	115	302	university	university	NOUN
ajis02-5323	115	303	hospital	hospital	NOUN
ajis02-5323	115	304	central	central	PROPN
ajis02-5323	115	305	europe	europe	PROPN
ajis02-5323	115	306	p26	p26	PROPN
ajis02-5323	115	307	ciso	ciso	PROPN
ajis02-5323	115	308	20	20	NUM
ajis02-5323	115	309	over	over	ADP
ajis02-5323	115	310	3,000	3,000	NUM
ajis02-5323	115	311	energy	energy	NOUN
ajis02-5323	115	312	trading	trading	NOUN
ajis02-5323	115	313	central	central	PROPN
ajis02-5323	115	314	europe	europe	PROPN
ajis02-5323	115	315	p27	p27	PROPN
ajis02-5323	115	316	lawyer	lawyer	NOUN
ajis02-5323	115	317	5	5	NUM
ajis02-5323	115	318	over	over	ADP
ajis02-5323	115	319	3,000	3,000	NUM
ajis02-5323	115	320	energy	energy	NOUN
ajis02-5323	115	321	trading	trading	NOUN
ajis02-5323	115	322	central	central	PROPN
ajis02-5323	115	323	europe	europe	PROPN
ajis02-5323	115	324	p28	p28	NOUN
ajis02-5323	115	325	ciso	ciso	PROPN
ajis02-5323	115	326	23	23	NUM
ajis02-5323	115	327	over	over	ADP
ajis02-5323	115	328	700	700	NUM
ajis02-5323	115	329	banking	banking	NOUN
ajis02-5323	115	330	slovenia	slovenia	PROPN
ajis02-5323	115	331	p29	p29	PROPN
ajis02-5323	115	332	chief	chief	PROPN
ajis02-5323	115	333	technology	technology	NOUN
ajis02-5323	115	334	auditor	auditor	NOUN
ajis02-5323	115	335	20	20	NUM
ajis02-5323	115	336	over	over	ADP
ajis02-5323	115	337	13,000	13,000	NUM
ajis02-5323	115	338	insurance	insurance	NOUN
ajis02-5323	115	339	australia	australia	PROPN
ajis02-5323	115	340	p30	p30	NOUN
ajis02-5323	115	341	vendor	vendor	NOUN
ajis02-5323	115	342	risk	risk	NOUN
ajis02-5323	115	343	manager	manager	NOUN
ajis02-5323	115	344	14	14	NUM
ajis02-5323	115	345	over	over	ADP
ajis02-5323	115	346	3,000	3,000	NUM
ajis02-5323	115	347	tertiary	tertiary	ADJ
ajis02-5323	115	348	education	education	NOUN
ajis02-5323	115	349	australia	australia	PROPN
ajis02-5323	115	350	p31	p31	PROPN
ajis02-5323	115	351	cyber	cyber	PROPN
ajis02-5323	115	352	security	security	NOUN
ajis02-5323	115	353	consultant	consultant	NOUN
ajis02-5323	115	354	31	31	NUM
ajis02-5323	115	355	self	self	NOUN
ajis02-5323	115	356	-	-	PUNCT
ajis02-5323	115	357	employed	employ	VERB
ajis02-5323	115	358	+	+	CCONJ
ajis02-5323	115	359	sub	sub	NOUN
ajis02-5323	115	360	-	-	NOUN
ajis02-5323	115	361	contractors	contractor	NOUN
ajis02-5323	115	362	cyber	cyber	ADJ
ajis02-5323	115	363	security	security	NOUN
ajis02-5323	115	364	and	and	CCONJ
ajis02-5323	115	365	assurance	assurance	NOUN
ajis02-5323	115	366	consulting	consult	VERB
ajis02-5323	115	367	australia	australia	PROPN
ajis02-5323	115	368	p32	p32	ADJ
ajis02-5323	115	369	head	head	NOUN
ajis02-5323	115	370	of	of	ADP
ajis02-5323	115	371	it	it	PRON
ajis02-5323	115	372	architecture	architecture	NOUN
ajis02-5323	115	373	and	and	CCONJ
ajis02-5323	115	374	cyber	cyber	NOUN
ajis02-5323	115	375	security	security	NOUN
ajis02-5323	115	376	15	15	NUM
ajis02-5323	115	377	approx	approx	NOUN
ajis02-5323	115	378	.	.	PUNCT
ajis02-5323	116	1	60	60	NUM
ajis02-5323	116	2	primary	primary	ADJ
ajis02-5323	116	3	and	and	CCONJ
ajis02-5323	116	4	secondary	secondary	ADJ
ajis02-5323	116	5	education	education	NOUN
ajis02-5323	116	6	servicing	servicing	NOUN
ajis02-5323	116	7	over	over	ADP
ajis02-5323	116	8	700	700	NUM
ajis02-5323	116	9	schools	school	NOUN
ajis02-5323	116	10	australia	australia	PROPN
ajis02-5323	116	11	p33	p33	PROPN
ajis02-5323	116	12	information	information	NOUN
ajis02-5323	116	13	security	security	NOUN
ajis02-5323	116	14	manager	manager	NOUN
ajis02-5323	116	15	15	15	NUM
ajis02-5323	116	16	about	about	ADV
ajis02-5323	116	17	500	500	NUM
ajis02-5323	116	18	financial	financial	ADJ
ajis02-5323	116	19	,	,	PUNCT
ajis02-5323	116	20	legal	legal	ADJ
ajis02-5323	116	21	and	and	CCONJ
ajis02-5323	116	22	it	it	PRON
ajis02-5323	116	23	consulting	consult	VERB
ajis02-5323	116	24	australia	australia	PROPN
ajis02-5323	116	25	australasian	australasian	ADJ
ajis02-5323	116	26	journal	journal	NOUN
ajis02-5323	116	27	of	of	ADP
ajis02-5323	116	28	information	information	NOUN
ajis02-5323	116	29	systems	system	NOUN
ajis02-5323	116	30	slapnicar	slapnicar	NOUN
ajis02-5323	116	31	,	,	PUNCT
ajis02-5323	116	32	vidmar	vidmar	NOUN
ajis02-5323	116	33	&	&	CCONJ
ajis02-5323	116	34	tsen	tsen	ADJ
ajis02-5323	116	35	2025	2025	NUM
ajis02-5323	116	36	,	,	PUNCT
ajis02-5323	116	37	vol	vol	NOUN
ajis02-5323	116	38	29	29	NUM
ajis02-5323	116	39	,	,	PUNCT
ajis02-5323	116	40	research	research	NOUN
ajis02-5323	116	41	article	article	NOUN
ajis02-5323	116	42	process	process	NOUN
ajis02-5323	116	43	theory	theory	NOUN
ajis02-5323	116	44	of	of	ADP
ajis02-5323	116	45	supplier	supplier	NOUN
ajis02-5323	116	46	cyber	cyber	NOUN
ajis02-5323	116	47	risk	risk	NOUN
ajis02-5323	116	48	assessment	assessment	NOUN
ajis02-5323	116	49	8	8	NUM
ajis02-5323	116	50	n=33	n=33	NOUN
ajis02-5323	116	51	consultants	consultant	NOUN
ajis02-5323	116	52	=	=	NOUN
ajis02-5323	116	53	10	10	NUM
ajis02-5323	116	54	experts	expert	NOUN
ajis02-5323	116	55	/	/	SYM
ajis02-5323	116	56	managers	manager	NOUN
ajis02-5323	116	57	in	in	ADP
ajis02-5323	116	58	organisations	organisation	NOUN
ajis02-5323	116	59	=	=	PUNCT
ajis02-5323	116	60	23	23	NUM
ajis02-5323	116	61	organizations=	organizations=	NUM
ajis02-5323	116	62	18	18	NUM
ajis02-5323	116	63	table	table	NOUN
ajis02-5323	116	64	1	1	NUM
ajis02-5323	116	65	:	:	PUNCT
ajis02-5323	116	66	list	list	NOUN
ajis02-5323	116	67	of	of	ADP
ajis02-5323	116	68	interview	interview	NOUN
ajis02-5323	116	69	participants	participant	NOUN
ajis02-5323	116	70	3.1.2	3.1.2	NUM
ajis02-5323	116	71	data	datum	NOUN
ajis02-5323	116	72	analysis	analysis	NOUN
ajis02-5323	116	73	the	the	DET
ajis02-5323	116	74	aim	aim	NOUN
ajis02-5323	116	75	to	to	PART
ajis02-5323	116	76	develop	develop	VERB
ajis02-5323	116	77	a	a	DET
ajis02-5323	116	78	process	process	NOUN
ajis02-5323	116	79	theory	theory	NOUN
ajis02-5323	116	80	of	of	ADP
ajis02-5323	116	81	cyber	cyber	ADJ
ajis02-5323	116	82	risk	risk	NOUN
ajis02-5323	116	83	assessment	assessment	NOUN
ajis02-5323	116	84	warranted	warrant	VERB
ajis02-5323	116	85	the	the	DET
ajis02-5323	116	86	employment	employment	NOUN
ajis02-5323	116	87	of	of	ADP
ajis02-5323	116	88	the	the	DET
ajis02-5323	116	89	straussian	straussian	ADJ
ajis02-5323	116	90	variant	variant	NOUN
ajis02-5323	116	91	of	of	ADP
ajis02-5323	116	92	grounded	ground	VERB
ajis02-5323	116	93	theory	theory	NOUN
ajis02-5323	116	94	(	(	PUNCT
ajis02-5323	116	95	corbin	corbin	PROPN
ajis02-5323	116	96	&	&	CCONJ
ajis02-5323	116	97	strauss	strauss	PROPN
ajis02-5323	116	98	1990	1990	NUM
ajis02-5323	116	99	;	;	PUNCT
ajis02-5323	116	100	glaser	glaser	PROPN
ajis02-5323	116	101	&	&	CCONJ
ajis02-5323	116	102	strauss	strauss	PROPN
ajis02-5323	116	103	2017	2017	NUM
ajis02-5323	116	104	)	)	PUNCT
ajis02-5323	116	105	,	,	PUNCT
ajis02-5323	116	106	which	which	PRON
ajis02-5323	116	107	focuses	focus	VERB
ajis02-5323	116	108	on	on	ADP
ajis02-5323	116	109	the	the	DET
ajis02-5323	116	110	interplay	interplay	NOUN
ajis02-5323	116	111	between	between	ADP
ajis02-5323	116	112	data	datum	NOUN
ajis02-5323	116	113	and	and	CCONJ
ajis02-5323	116	114	process	process	NOUN
ajis02-5323	116	115	theory	theory	NOUN
ajis02-5323	116	116	,	,	PUNCT
ajis02-5323	116	117	with	with	ADP
ajis02-5323	116	118	a	a	DET
ajis02-5323	116	119	more	more	ADV
ajis02-5323	116	120	structured	structured	ADJ
ajis02-5323	116	121	coding	code	VERB
ajis02-5323	116	122	process	process	NOUN
ajis02-5323	116	123	.	.	PUNCT
ajis02-5323	117	1	the	the	DET
ajis02-5323	117	2	key	key	ADJ
ajis02-5323	117	3	features	feature	NOUN
ajis02-5323	117	4	of	of	ADP
ajis02-5323	117	5	this	this	DET
ajis02-5323	117	6	approach	approach	NOUN
ajis02-5323	117	7	are	be	AUX
ajis02-5323	117	8	the	the	DET
ajis02-5323	117	9	detailed	detailed	ADJ
ajis02-5323	117	10	procedure	procedure	NOUN
ajis02-5323	117	11	and	and	CCONJ
ajis02-5323	117	12	three	three	NUM
ajis02-5323	117	13	steps	step	NOUN
ajis02-5323	117	14	of	of	ADP
ajis02-5323	117	15	coding	code	VERB
ajis02-5323	117	16	(	(	PUNCT
ajis02-5323	117	17	open	open	ADJ
ajis02-5323	117	18	,	,	PUNCT
ajis02-5323	117	19	axial	axial	ADJ
ajis02-5323	117	20	,	,	PUNCT
ajis02-5323	117	21	and	and	CCONJ
ajis02-5323	117	22	selective	selective	ADJ
ajis02-5323	117	23	)	)	PUNCT
ajis02-5323	117	24	,	,	PUNCT
ajis02-5323	117	25	as	as	ADV
ajis02-5323	117	26	well	well	ADV
ajis02-5323	117	27	as	as	ADP
ajis02-5323	117	28	the	the	DET
ajis02-5323	117	29	emphasis	emphasis	NOUN
ajis02-5323	117	30	on	on	ADP
ajis02-5323	117	31	context	context	NOUN
ajis02-5323	117	32	and	and	CCONJ
ajis02-5323	117	33	integration	integration	NOUN
ajis02-5323	117	34	with	with	ADP
ajis02-5323	117	35	the	the	DET
ajis02-5323	117	36	existing	exist	VERB
ajis02-5323	117	37	literature	literature	NOUN
ajis02-5323	117	38	.	.	PUNCT
ajis02-5323	118	1	adopting	adopt	VERB
ajis02-5323	118	2	the	the	DET
ajis02-5323	118	3	approach	approach	NOUN
ajis02-5323	118	4	of	of	ADP
ajis02-5323	118	5	corbin	corbin	PROPN
ajis02-5323	118	6	and	and	CCONJ
ajis02-5323	118	7	strauss	strauss	PROPN
ajis02-5323	118	8	(	(	PUNCT
ajis02-5323	118	9	1990	1990	NUM
ajis02-5323	118	10	)	)	PUNCT
ajis02-5323	118	11	,	,	PUNCT
ajis02-5323	118	12	the	the	DET
ajis02-5323	118	13	interview	interview	NOUN
ajis02-5323	118	14	data	datum	NOUN
ajis02-5323	118	15	was	be	AUX
ajis02-5323	118	16	initially	initially	ADV
ajis02-5323	118	17	analyzed	analyze	VERB
ajis02-5323	118	18	using	use	VERB
ajis02-5323	118	19	open	open	ADJ
ajis02-5323	118	20	coding	coding	NOUN
ajis02-5323	118	21	.	.	PUNCT
ajis02-5323	119	1	in	in	ADP
ajis02-5323	119	2	addition	addition	NOUN
ajis02-5323	119	3	to	to	ADP
ajis02-5323	119	4	the	the	DET
ajis02-5323	119	5	codes	code	NOUN
ajis02-5323	119	6	emerging	emerge	VERB
ajis02-5323	119	7	from	from	ADP
ajis02-5323	119	8	the	the	DET
ajis02-5323	119	9	data	datum	NOUN
ajis02-5323	119	10	,	,	PUNCT
ajis02-5323	119	11	we	we	PRON
ajis02-5323	119	12	sought	seek	VERB
ajis02-5323	119	13	to	to	PART
ajis02-5323	119	14	relate	relate	VERB
ajis02-5323	119	15	to	to	ADP
ajis02-5323	119	16	concepts	concept	NOUN
ajis02-5323	119	17	from	from	ADP
ajis02-5323	119	18	the	the	DET
ajis02-5323	119	19	theoretical	theoretical	ADJ
ajis02-5323	119	20	background	background	NOUN
ajis02-5323	119	21	to	to	PART
ajis02-5323	119	22	guide	guide	VERB
ajis02-5323	119	23	the	the	DET
ajis02-5323	119	24	coding	code	VERB
ajis02-5323	119	25	process	process	NOUN
ajis02-5323	119	26	.	.	PUNCT
ajis02-5323	120	1	these	these	DET
ajis02-5323	120	2	concepts	concept	NOUN
ajis02-5323	120	3	included	include	VERB
ajis02-5323	120	4	supplier	supplier	NOUN
ajis02-5323	120	5	risk	risk	NOUN
ajis02-5323	120	6	factors	factor	NOUN
ajis02-5323	120	7	from	from	ADP
ajis02-5323	120	8	prior	prior	ADJ
ajis02-5323	120	9	c	c	PROPN
ajis02-5323	120	10	-	-	PUNCT
ajis02-5323	120	11	scrm	scrm	NOUN
ajis02-5323	120	12	research	research	NOUN
ajis02-5323	120	13	,	,	PUNCT
ajis02-5323	120	14	and	and	CCONJ
ajis02-5323	120	15	concepts	concept	NOUN
ajis02-5323	120	16	from	from	ADP
ajis02-5323	120	17	the	the	DET
ajis02-5323	120	18	leading	lead	VERB
ajis02-5323	120	19	international	international	ADJ
ajis02-5323	120	20	cybersecurity	cybersecurity	NOUN
ajis02-5323	120	21	frameworks	framework	NOUN
ajis02-5323	120	22	(	(	PUNCT
ajis02-5323	120	23	supplement	supplement	VERB
ajis02-5323	120	24	a	a	PRON
ajis02-5323	120	25	)	)	PUNCT
ajis02-5323	120	26	.	.	PUNCT
ajis02-5323	121	1	data	datum	NOUN
ajis02-5323	121	2	was	be	AUX
ajis02-5323	121	3	uploaded	upload	VERB
ajis02-5323	121	4	to	to	ADP
ajis02-5323	121	5	nvivo	nvivo	ADJ
ajis02-5323	121	6	.	.	PUNCT
ajis02-5323	122	1	two	two	NUM
ajis02-5323	122	2	authors	author	NOUN
ajis02-5323	122	3	coded	code	VERB
ajis02-5323	122	4	the	the	DET
ajis02-5323	122	5	interviews	interview	NOUN
ajis02-5323	122	6	.	.	PUNCT
ajis02-5323	123	1	the	the	DET
ajis02-5323	123	2	first	first	ADJ
ajis02-5323	123	3	author	author	NOUN
ajis02-5323	123	4	conducted	conduct	VERB
ajis02-5323	123	5	all	all	DET
ajis02-5323	123	6	the	the	DET
ajis02-5323	123	7	interviews	interview	NOUN
ajis02-5323	123	8	and	and	CCONJ
ajis02-5323	123	9	coded	code	VERB
ajis02-5323	123	10	them	they	PRON
ajis02-5323	123	11	using	use	VERB
ajis02-5323	123	12	the	the	DET
ajis02-5323	123	13	open	open	ADJ
ajis02-5323	123	14	coding	code	VERB
ajis02-5323	123	15	method	method	NOUN
ajis02-5323	123	16	,	,	PUNCT
ajis02-5323	123	17	while	while	SCONJ
ajis02-5323	123	18	the	the	DET
ajis02-5323	123	19	second	second	ADJ
ajis02-5323	123	20	author	author	NOUN
ajis02-5323	123	21	played	play	VERB
ajis02-5323	123	22	a	a	DET
ajis02-5323	123	23	supporting	support	VERB
ajis02-5323	123	24	role	role	NOUN
ajis02-5323	123	25	in	in	ADP
ajis02-5323	123	26	open	open	ADJ
ajis02-5323	123	27	coding	coding	NOUN
ajis02-5323	123	28	and	and	CCONJ
ajis02-5323	123	29	was	be	AUX
ajis02-5323	123	30	intensively	intensively	ADV
ajis02-5323	123	31	engaged	engage	VERB
ajis02-5323	123	32	in	in	ADP
ajis02-5323	123	33	axial	axial	ADJ
ajis02-5323	123	34	coding	coding	NOUN
ajis02-5323	123	35	,	,	PUNCT
ajis02-5323	123	36	in	in	ADP
ajis02-5323	123	37	which	which	PRON
ajis02-5323	123	38	we	we	PRON
ajis02-5323	123	39	qualitatively	qualitatively	ADV
ajis02-5323	123	40	and	and	CCONJ
ajis02-5323	123	41	substantively	substantively	ADV
ajis02-5323	123	42	compared	compare	VERB
ajis02-5323	123	43	the	the	DET
ajis02-5323	123	44	emerging	emerge	VERB
ajis02-5323	123	45	codes	code	NOUN
ajis02-5323	123	46	,	,	PUNCT
ajis02-5323	123	47	discussed	discuss	VERB
ajis02-5323	123	48	and	and	CCONJ
ajis02-5323	123	49	elaborated	elaborate	VERB
ajis02-5323	123	50	them	they	PRON
ajis02-5323	123	51	,	,	PUNCT
ajis02-5323	123	52	and	and	CCONJ
ajis02-5323	123	53	organized	organize	VERB
ajis02-5323	123	54	related	related	ADJ
ajis02-5323	123	55	codes	code	NOUN
ajis02-5323	123	56	into	into	ADP
ajis02-5323	123	57	second	second	ADJ
ajis02-5323	123	58	order	order	NOUN
ajis02-5323	123	59	codes	code	NOUN
ajis02-5323	123	60	and	and	CCONJ
ajis02-5323	123	61	aggregate	aggregate	ADJ
ajis02-5323	123	62	dimensions	dimension	NOUN
ajis02-5323	123	63	based	base	VERB
ajis02-5323	123	64	on	on	ADP
ajis02-5323	123	65	similarities	similarity	NOUN
ajis02-5323	123	66	,	,	PUNCT
ajis02-5323	123	67	differences	difference	NOUN
ajis02-5323	123	68	,	,	PUNCT
ajis02-5323	123	69	and	and	CCONJ
ajis02-5323	123	70	relationships	relationship	NOUN
ajis02-5323	123	71	between	between	ADP
ajis02-5323	123	72	the	the	DET
ajis02-5323	123	73	codes	code	NOUN
ajis02-5323	123	74	(	(	PUNCT
ajis02-5323	123	75	gioia	gioia	PROPN
ajis02-5323	123	76	et	et	PROPN
ajis02-5323	123	77	al	al	PROPN
ajis02-5323	123	78	.	.	PROPN
ajis02-5323	123	79	,	,	PUNCT
ajis02-5323	123	80	2013	2013	NUM
ajis02-5323	123	81	)	)	PUNCT
ajis02-5323	123	82	.	.	PUNCT
ajis02-5323	124	1	this	this	DET
ajis02-5323	124	2	method	method	NOUN
ajis02-5323	124	3	enabled	enable	VERB
ajis02-5323	124	4	us	we	PRON
ajis02-5323	124	5	to	to	PART
ajis02-5323	124	6	systematically	systematically	ADV
ajis02-5323	124	7	analyze	analyze	VERB
ajis02-5323	124	8	qualitative	qualitative	ADJ
ajis02-5323	124	9	data	datum	NOUN
ajis02-5323	124	10	and	and	CCONJ
ajis02-5323	124	11	identify	identify	VERB
ajis02-5323	124	12	key	key	ADJ
ajis02-5323	124	13	elements	element	NOUN
ajis02-5323	124	14	of	of	ADP
ajis02-5323	124	15	the	the	DET
ajis02-5323	124	16	process	process	NOUN
ajis02-5323	124	17	.	.	PUNCT
ajis02-5323	125	1	finally	finally	ADV
ajis02-5323	125	2	,	,	PUNCT
ajis02-5323	125	3	we	we	PRON
ajis02-5323	125	4	employed	employ	VERB
ajis02-5323	125	5	a	a	DET
ajis02-5323	125	6	selective	selective	ADJ
ajis02-5323	125	7	coding	code	VERB
ajis02-5323	125	8	process	process	NOUN
ajis02-5323	125	9	in	in	ADP
ajis02-5323	125	10	which	which	PRON
ajis02-5323	125	11	we	we	PRON
ajis02-5323	125	12	unified	unify	VERB
ajis02-5323	125	13	all	all	DET
ajis02-5323	125	14	dimensions	dimension	NOUN
ajis02-5323	125	15	and	and	CCONJ
ajis02-5323	125	16	categories	category	NOUN
ajis02-5323	125	17	in	in	ADP
ajis02-5323	125	18	the	the	DET
ajis02-5323	125	19	process	process	NOUN
ajis02-5323	125	20	of	of	ADP
ajis02-5323	125	21	supplier	supplier	NOUN
ajis02-5323	125	22	cyber	cyber	NOUN
ajis02-5323	125	23	risk	risk	NOUN
ajis02-5323	125	24	assessment	assessment	NOUN
ajis02-5323	125	25	with	with	ADP
ajis02-5323	125	26	the	the	DET
ajis02-5323	125	27	sequence	sequence	NOUN
ajis02-5323	125	28	of	of	ADP
ajis02-5323	125	29	its	its	PRON
ajis02-5323	125	30	elements	element	NOUN
ajis02-5323	125	31	and	and	CCONJ
ajis02-5323	125	32	the	the	DET
ajis02-5323	125	33	contextual	contextual	ADJ
ajis02-5323	125	34	factors	factor	NOUN
ajis02-5323	125	35	impacting	impact	VERB
ajis02-5323	125	36	the	the	DET
ajis02-5323	125	37	process	process	NOUN
ajis02-5323	125	38	(	(	PUNCT
ajis02-5323	125	39	corbin	corbin	PROPN
ajis02-5323	125	40	&	&	CCONJ
ajis02-5323	125	41	strauss	strauss	PROPN
ajis02-5323	125	42	1990	1990	NUM
ajis02-5323	125	43	;	;	PUNCT
ajis02-5323	125	44	mohr	mohr	PROPN
ajis02-5323	125	45	1982	1982	NUM
ajis02-5323	125	46	;	;	PUNCT
ajis02-5323	125	47	markus	markus	PROPN
ajis02-5323	125	48	&	&	CCONJ
ajis02-5323	125	49	robey	robey	PROPN
ajis02-5323	125	50	1988	1988	NUM
ajis02-5323	125	51	;	;	PUNCT
ajis02-5323	125	52	baskerville	baskerville	NOUN
ajis02-5323	125	53	2005	2005	NUM
ajis02-5323	125	54	)	)	PUNCT
ajis02-5323	125	55	,	,	PUNCT
ajis02-5323	125	56	presented	present	VERB
ajis02-5323	125	57	in	in	ADP
ajis02-5323	125	58	figure	figure	NOUN
ajis02-5323	125	59	1	1	NUM
ajis02-5323	125	60	.	.	PUNCT
ajis02-5323	126	1	we	we	PRON
ajis02-5323	126	2	did	do	AUX
ajis02-5323	126	3	not	not	PART
ajis02-5323	126	4	explicitly	explicitly	ADV
ajis02-5323	126	5	code	code	VERB
ajis02-5323	126	6	against	against	ADP
ajis02-5323	126	7	process	process	NOUN
ajis02-5323	126	8	theory	theory	NOUN
ajis02-5323	126	9	.	.	PUNCT
ajis02-5323	127	1	however	however	ADV
ajis02-5323	127	2	,	,	PUNCT
ajis02-5323	127	3	it	it	PRON
ajis02-5323	127	4	broadly	broadly	ADV
ajis02-5323	127	5	guided	guide	VERB
ajis02-5323	127	6	the	the	DET
ajis02-5323	127	7	search	search	NOUN
ajis02-5323	127	8	for	for	ADP
ajis02-5323	127	9	the	the	DET
ajis02-5323	127	10	process	process	NOUN
ajis02-5323	127	11	’s	’s	PART
ajis02-5323	127	12	sequential	sequential	ADJ
ajis02-5323	127	13	steps	step	NOUN
ajis02-5323	127	14	,	,	PUNCT
ajis02-5323	127	15	contextual	contextual	ADJ
ajis02-5323	127	16	factors	factor	NOUN
ajis02-5323	127	17	and	and	CCONJ
ajis02-5323	127	18	the	the	DET
ajis02-5323	127	19	identification	identification	NOUN
ajis02-5323	127	20	of	of	ADP
ajis02-5323	127	21	the	the	DET
ajis02-5323	127	22	risk	risk	NOUN
ajis02-5323	127	23	-	-	PUNCT
ajis02-5323	127	24	based	base	VERB
ajis02-5323	127	25	principle	principle	NOUN
ajis02-5323	127	26	as	as	ADP
ajis02-5323	127	27	the	the	DET
ajis02-5323	127	28	form	form	NOUN
ajis02-5323	127	29	of	of	ADP
ajis02-5323	127	30	adaptability	adaptability	NOUN
ajis02-5323	127	31	to	to	ADP
ajis02-5323	127	32	constrained	constrain	VERB
ajis02-5323	127	33	resources	resource	NOUN
ajis02-5323	127	34	.	.	PUNCT
ajis02-5323	128	1	we	we	PRON
ajis02-5323	128	2	constructed	construct	VERB
ajis02-5323	128	3	a	a	DET
ajis02-5323	128	4	data	data	NOUN
ajis02-5323	128	5	structure	structure	NOUN
ajis02-5323	128	6	of	of	ADP
ajis02-5323	128	7	126	126	NUM
ajis02-5323	128	8	first	first	ADJ
ajis02-5323	128	9	-	-	PUNCT
ajis02-5323	128	10	order	order	NOUN
ajis02-5323	128	11	codes	code	NOUN
ajis02-5323	128	12	that	that	PRON
ajis02-5323	128	13	are	be	AUX
ajis02-5323	128	14	grouped	group	VERB
ajis02-5323	128	15	into	into	ADP
ajis02-5323	128	16	38	38	NUM
ajis02-5323	128	17	second	second	ADJ
ajis02-5323	128	18	-	-	PUNCT
ajis02-5323	128	19	order	order	NOUN
ajis02-5323	128	20	concepts	concept	NOUN
ajis02-5323	128	21	,	,	PUNCT
ajis02-5323	128	22	which	which	PRON
ajis02-5323	128	23	are	be	AUX
ajis02-5323	128	24	further	far	ADV
ajis02-5323	128	25	grouped	group	VERB
ajis02-5323	128	26	into	into	ADP
ajis02-5323	128	27	24	24	NUM
ajis02-5323	128	28	aggregated	aggregate	VERB
ajis02-5323	128	29	dimensions	dimension	NOUN
ajis02-5323	128	30	on	on	ADP
ajis02-5323	128	31	four	four	NUM
ajis02-5323	128	32	levels	level	NOUN
ajis02-5323	128	33	to	to	PART
ajis02-5323	128	34	conceptualize	conceptualize	VERB
ajis02-5323	128	35	the	the	DET
ajis02-5323	128	36	process	process	NOUN
ajis02-5323	128	37	of	of	ADP
ajis02-5323	128	38	supplier	supplier	NOUN
ajis02-5323	128	39	cyber	cyber	NOUN
ajis02-5323	128	40	risk	risk	NOUN
ajis02-5323	128	41	assessment	assessment	NOUN
ajis02-5323	128	42	.	.	PUNCT
ajis02-5323	129	1	table	table	NOUN
ajis02-5323	129	2	2	2	NUM
ajis02-5323	129	3	presents	present	VERB
ajis02-5323	129	4	the	the	DET
ajis02-5323	129	5	structure	structure	NOUN
ajis02-5323	129	6	of	of	ADP
ajis02-5323	129	7	the	the	DET
ajis02-5323	129	8	data	datum	NOUN
ajis02-5323	129	9	(	(	PUNCT
ajis02-5323	129	10	for	for	ADP
ajis02-5323	129	11	the	the	DET
ajis02-5323	129	12	sake	sake	NOUN
ajis02-5323	129	13	of	of	ADP
ajis02-5323	129	14	brevity	brevity	NOUN
ajis02-5323	129	15	,	,	PUNCT
ajis02-5323	129	16	we	we	PRON
ajis02-5323	129	17	present	present	VERB
ajis02-5323	129	18	only	only	ADV
ajis02-5323	129	19	examples	example	NOUN
ajis02-5323	129	20	of	of	ADP
ajis02-5323	129	21	first	first	ADJ
ajis02-5323	129	22	order	order	NOUN
ajis02-5323	129	23	codes	code	NOUN
ajis02-5323	129	24	)	)	PUNCT
ajis02-5323	129	25	.	.	PUNCT
ajis02-5323	130	1	when	when	SCONJ
ajis02-5323	130	2	constructing	construct	VERB
ajis02-5323	130	3	the	the	DET
ajis02-5323	130	4	process	process	NOUN
ajis02-5323	130	5	,	,	PUNCT
ajis02-5323	130	6	we	we	PRON
ajis02-5323	130	7	elevated	elevate	VERB
ajis02-5323	130	8	some	some	DET
ajis02-5323	130	9	second	second	ADJ
ajis02-5323	130	10	order	order	NOUN
ajis02-5323	130	11	codes	code	NOUN
ajis02-5323	130	12	to	to	ADP
ajis02-5323	130	13	higher	high	ADJ
ajis02-5323	130	14	dimensions	dimension	NOUN
ajis02-5323	130	15	based	base	VERB
ajis02-5323	130	16	on	on	ADP
ajis02-5323	130	17	the	the	DET
ajis02-5323	130	18	position	position	NOUN
ajis02-5323	130	19	they	they	PRON
ajis02-5323	130	20	present	present	VERB
ajis02-5323	130	21	in	in	ADP
ajis02-5323	130	22	the	the	DET
ajis02-5323	130	23	process	process	NOUN
ajis02-5323	130	24	.	.	PUNCT
ajis02-5323	131	1	level	level	NOUN
ajis02-5323	131	2	1	1	NUM
ajis02-5323	131	3	dimensions	dimension	NOUN
ajis02-5323	131	4	level	level	NOUN
ajis02-5323	131	5	2	2	NUM
ajis02-5323	131	6	dimensions	dimension	NOUN
ajis02-5323	131	7	level	level	NOUN
ajis02-5323	131	8	3	3	NUM
ajis02-5323	131	9	dimensions	dimension	NOUN
ajis02-5323	131	10	level	level	NOUN
ajis02-5323	131	11	4	4	NUM
ajis02-5323	131	12	dimensions	dimension	NOUN
ajis02-5323	131	13	second	second	ADJ
ajis02-5323	131	14	order	order	NOUN
ajis02-5323	131	15	codes	code	VERB
ajis02-5323	131	16	first	first	ADJ
ajis02-5323	131	17	order	order	NOUN
ajis02-5323	131	18	codes	code	NOUN
ajis02-5323	131	19	selection	selection	NOUN
ajis02-5323	131	20	process	process	NOUN
ajis02-5323	131	21	risk	risk	NOUN
ajis02-5323	131	22	identification	identification	NOUN
ajis02-5323	131	23	identification	identification	NOUN
ajis02-5323	131	24	of	of	ADP
ajis02-5323	131	25	suppliers	supplier	NOUN
ajis02-5323	131	26	shadow	shadow	VERB
ajis02-5323	131	27	it	it	PRON
ajis02-5323	131	28	open	open	ADJ
ajis02-5323	131	29	-	-	PUNCT
ajis02-5323	131	30	source	source	NOUN
ajis02-5323	131	31	platforms	platform	NOUN
ajis02-5323	131	32	lack	lack	NOUN
ajis02-5323	131	33	of	of	ADP
ajis02-5323	131	34	central	central	ADJ
ajis02-5323	131	35	procurement	procurement	NOUN
ajis02-5323	131	36	thresholds	threshold	NOUN
ajis02-5323	131	37	for	for	ADP
ajis02-5323	131	38	onboarding	onboarde	VERB
ajis02-5323	131	39	a	a	DET
ajis02-5323	131	40	supplier	supplier	NOUN
ajis02-5323	131	41	risk	risk	NOUN
ajis02-5323	131	42	analysis	analysis	NOUN
ajis02-5323	131	43	criticality	criticality	NOUN
ajis02-5323	131	44	of	of	ADP
ajis02-5323	131	45	a	a	DET
ajis02-5323	131	46	supplier	supplier	NOUN
ajis02-5323	131	47	criticality	criticality	NOUN
ajis02-5323	131	48	to	to	ADP
ajis02-5323	131	49	focal	focal	ADJ
ajis02-5323	131	50	organization	organization	NOUN
ajis02-5323	131	51	'	'	PART
ajis02-5323	131	52	s	s	NOUN
ajis02-5323	131	53	process	process	NOUN
ajis02-5323	131	54	concentration	concentration	NOUN
ajis02-5323	131	55	risk	risk	NOUN
ajis02-5323	131	56	number	number	NOUN
ajis02-5323	131	57	of	of	ADP
ajis02-5323	131	58	suppliers	supplier	NOUN
ajis02-5323	131	59	of	of	ADP
ajis02-5323	131	60	the	the	DET
ajis02-5323	131	61	same	same	ADJ
ajis02-5323	131	62	service	service	NOUN
ajis02-5323	131	63	specificity	specificity	NOUN
ajis02-5323	131	64	of	of	ADP
ajis02-5323	131	65	services	service	NOUN
ajis02-5323	131	66	/	/	SYM
ajis02-5323	131	67	products	product	NOUN
ajis02-5323	131	68	provision	provision	NOUN
ajis02-5323	131	69	of	of	ADP
ajis02-5323	131	70	critical	critical	ADJ
ajis02-5323	131	71	services	service	NOUN
ajis02-5323	131	72	australasian	australasian	ADJ
ajis02-5323	131	73	journal	journal	NOUN
ajis02-5323	131	74	of	of	ADP
ajis02-5323	131	75	information	information	NOUN
ajis02-5323	131	76	systems	system	NOUN
ajis02-5323	131	77	slapnicar	slapnicar	NOUN
ajis02-5323	131	78	,	,	PUNCT
ajis02-5323	131	79	vidmar	vidmar	NOUN
ajis02-5323	131	80	&	&	CCONJ
ajis02-5323	131	81	tsen	tsen	ADJ
ajis02-5323	131	82	2025	2025	NUM
ajis02-5323	131	83	,	,	PUNCT
ajis02-5323	131	84	vol	vol	NOUN
ajis02-5323	131	85	29	29	NUM
ajis02-5323	131	86	,	,	PUNCT
ajis02-5323	131	87	research	research	NOUN
ajis02-5323	131	88	article	article	NOUN
ajis02-5323	131	89	process	process	NOUN
ajis02-5323	131	90	theory	theory	NOUN
ajis02-5323	131	91	of	of	ADP
ajis02-5323	131	92	supplier	supplier	NOUN
ajis02-5323	131	93	cyber	cyber	NOUN
ajis02-5323	131	94	risk	risk	NOUN
ajis02-5323	131	95	assessment	assessment	NOUN
ajis02-5323	131	96	9	9	NUM
ajis02-5323	131	97	annual	annual	ADJ
ajis02-5323	131	98	spending	spending	NOUN
ajis02-5323	131	99	for	for	ADP
ajis02-5323	131	100	a	a	DET
ajis02-5323	131	101	supplier	supplier	NOUN
ajis02-5323	131	102	percentage	percentage	NOUN
ajis02-5323	131	103	of	of	ADP
ajis02-5323	131	104	revenues	revenue	NOUN
ajis02-5323	131	105	spent	spend	VERB
ajis02-5323	131	106	data	datum	NOUN
ajis02-5323	131	107	sensitivity	sensitivity	NOUN
ajis02-5323	131	108	the	the	DET
ajis02-5323	131	109	supplier	supplier	NOUN
ajis02-5323	131	110	hosts	host	NOUN
ajis02-5323	131	111	type	type	NOUN
ajis02-5323	131	112	of	of	ADP
ajis02-5323	131	113	information	information	NOUN
ajis02-5323	131	114	(	(	PUNCT
ajis02-5323	131	115	such	such	ADJ
ajis02-5323	131	116	as	as	ADP
ajis02-5323	131	117	personal	personal	ADJ
ajis02-5323	131	118	vs	vs	ADP
ajis02-5323	131	119	non	non	ADJ
ajis02-5323	131	120	-	-	ADJ
ajis02-5323	131	121	personal	personal	ADJ
ajis02-5323	131	122	)	)	PUNCT
ajis02-5323	131	123	personal	personal	ADJ
ajis02-5323	131	124	,	,	PUNCT
ajis02-5323	131	125	sensitive	sensitive	ADJ
ajis02-5323	131	126	,	,	PUNCT
ajis02-5323	131	127	nonpersonal	nonpersonal	ADJ
ajis02-5323	131	128	jurisdiction	jurisdiction	NOUN
ajis02-5323	131	129	in	in	ADP
ajis02-5323	131	130	which	which	PRON
ajis02-5323	131	131	data	datum	NOUN
ajis02-5323	131	132	is	be	AUX
ajis02-5323	131	133	stored	store	VERB
ajis02-5323	131	134	foreign	foreign	ADJ
ajis02-5323	131	135	or	or	CCONJ
ajis02-5323	131	136	domestic	domestic	ADJ
ajis02-5323	131	137	jurisdiction	jurisdiction	NOUN
ajis02-5323	131	138	it	it	PRON
ajis02-5323	131	139	integration	integration	VERB
ajis02-5323	131	140	nature	nature	NOUN
ajis02-5323	131	141	of	of	ADP
ajis02-5323	131	142	services	service	NOUN
ajis02-5323	131	143	/	/	SYM
ajis02-5323	131	144	products	product	NOUN
ajis02-5323	131	145	or	or	CCONJ
ajis02-5323	131	146	technology	technology	NOUN
ajis02-5323	131	147	provided	provide	VERB
ajis02-5323	131	148	software	software	NOUN
ajis02-5323	131	149	-	-	PUNCT
ajis02-5323	131	150	as	as	ADP
ajis02-5323	131	151	-	-	PUNCT
ajis02-5323	131	152	a	a	DET
ajis02-5323	131	153	-	-	PUNCT
ajis02-5323	131	154	service	service	NOUN
ajis02-5323	131	155	supplier	supplier	NOUN
ajis02-5323	131	156	cyber	cyber	NOUN
ajis02-5323	131	157	risk	risk	NOUN
ajis02-5323	131	158	assessment	assessment	NOUN
ajis02-5323	131	159	risk	risk	NOUN
ajis02-5323	131	160	assessment	assessment	NOUN
ajis02-5323	131	161	methods	method	NOUN
ajis02-5323	131	162	general	general	ADJ
ajis02-5323	131	163	due	due	ADJ
ajis02-5323	131	164	diligence	diligence	NOUN
ajis02-5323	131	165	legal	legal	ADJ
ajis02-5323	131	166	,	,	PUNCT
ajis02-5323	131	167	financial	financial	ADJ
ajis02-5323	131	168	,	,	PUNCT
ajis02-5323	131	169	operational	operational	ADJ
ajis02-5323	131	170	due	due	ADJ
ajis02-5323	131	171	diligence	diligence	NOUN
ajis02-5323	131	172	cyber	cyber	NOUN
ajis02-5323	131	173	security	security	NOUN
ajis02-5323	131	174	due	due	ADJ
ajis02-5323	131	175	diligence	diligence	NOUN
ajis02-5323	131	176	scanning	scanning	NOUN
ajis02-5323	131	177	of	of	ADP
ajis02-5323	131	178	outwardlooking	outwardlooke	VERB
ajis02-5323	131	179	technology	technology	NOUN
ajis02-5323	131	180	questionnaires	questionnaire	NOUN
ajis02-5323	131	181	self	self	NOUN
ajis02-5323	131	182	-	-	PUNCT
ajis02-5323	131	183	made	make	VERB
ajis02-5323	131	184	incorporating	incorporate	VERB
ajis02-5323	131	185	financial	financial	ADJ
ajis02-5323	131	186	regulation	regulation	NOUN
ajis02-5323	131	187	templates	template	NOUN
ajis02-5323	131	188	by	by	ADP
ajis02-5323	131	189	the	the	DET
ajis02-5323	131	190	government	government	NOUN
ajis02-5323	131	191	/	/	SYM
ajis02-5323	131	192	sector	sector	NOUN
ajis02-5323	131	193	log	log	NOUN
ajis02-5323	131	194	reviews	review	NOUN
ajis02-5323	131	195	supplier	supplier	NOUN
ajis02-5323	131	196	cyber	cyber	NOUN
ajis02-5323	131	197	risk	risk	NOUN
ajis02-5323	131	198	posture	posture	NOUN
ajis02-5323	131	199	characteristic	characteristic	ADJ
ajis02-5323	131	200	s	s	PART
ajis02-5323	131	201	technology	technology	NOUN
ajis02-5323	131	202	data	datum	NOUN
ajis02-5323	131	203	protection	protection	NOUN
ajis02-5323	131	204	(	(	PUNCT
ajis02-5323	131	205	data	data	NOUN
ajis02-5323	131	206	storage	storage	NOUN
ajis02-5323	131	207	management	management	NOUN
ajis02-5323	131	208	,	,	PUNCT
ajis02-5323	131	209	encryption	encryption	NOUN
ajis02-5323	131	210	,	,	PUNCT
ajis02-5323	131	211	cryptography	cryptography	NOUN
ajis02-5323	131	212	frameworks	framework	NOUN
ajis02-5323	131	213	)	)	PUNCT
ajis02-5323	131	214	processes	process	VERB
ajis02-5323	131	215	presence	presence	NOUN
ajis02-5323	131	216	of	of	ADP
ajis02-5323	131	217	the	the	DET
ajis02-5323	131	218	information	information	NOUN
ajis02-5323	131	219	security	security	NOUN
ajis02-5323	131	220	role	role	NOUN
ajis02-5323	131	221	people	people	NOUN
ajis02-5323	131	222	employee	employee	NOUN
ajis02-5323	131	223	security	security	NOUN
ajis02-5323	131	224	awareness	awareness	NOUN
ajis02-5323	131	225	program	program	NOUN
ajis02-5323	131	226	regulation	regulation	NOUN
ajis02-5323	131	227	and	and	CCONJ
ajis02-5323	131	228	industry	industry	NOUN
ajis02-5323	131	229	standards	standard	NOUN
ajis02-5323	131	230	data	data	VERB
ajis02-5323	131	231	protection	protection	NOUN
ajis02-5323	131	232	laws	law	NOUN
ajis02-5323	131	233	and	and	CCONJ
ajis02-5323	131	234	regulations	regulation	NOUN
ajis02-5323	131	235	past	past	ADP
ajis02-5323	131	236	incidents	incident	NOUN
ajis02-5323	131	237	occurrence	occurrence	NOUN
ajis02-5323	131	238	of	of	ADP
ajis02-5323	131	239	a	a	DET
ajis02-5323	131	240	past	past	ADJ
ajis02-5323	131	241	incident	incident	NOUN
ajis02-5323	131	242	complexity	complexity	NOUN
ajis02-5323	131	243	of	of	ADP
ajis02-5323	131	244	supplier	supplier	NOUN
ajis02-5323	131	245	's	's	PART
ajis02-5323	131	246	supply	supply	NOUN
ajis02-5323	131	247	chain	chain	NOUN
ajis02-5323	131	248	multi	multi	ADJ
ajis02-5323	131	249	-	-	ADJ
ajis02-5323	131	250	layered	layered	ADJ
ajis02-5323	131	251	and	and	CCONJ
ajis02-5323	131	252	complex	complex	ADJ
ajis02-5323	131	253	supply	supply	NOUN
ajis02-5323	131	254	chain	chain	NOUN
ajis02-5323	131	255	foreign	foreign	ADJ
ajis02-5323	131	256	operations/	operations/	NUM
ajis02-5323	131	257	ownership	ownership	NOUN
ajis02-5323	131	258	/	/	SYM
ajis02-5323	131	259	location	location	NOUN
ajis02-5323	131	260	foreign	foreign	ADJ
ajis02-5323	131	261	operations	operation	NOUN
ajis02-5323	131	262	targeting	target	VERB
ajis02-5323	131	263	factor	factor	NOUN
ajis02-5323	131	264	government	government	NOUN
ajis02-5323	131	265	supply	supply	NOUN
ajis02-5323	131	266	chain	chain	NOUN
ajis02-5323	131	267	business	business	NOUN
ajis02-5323	131	268	characteristics	characteristics	PROPN
ajis02-5323	131	269	financial	financial	ADJ
ajis02-5323	131	270	health	health	NOUN
ajis02-5323	131	271	reputation	reputation	NOUN
ajis02-5323	131	272	customer	customer	NOUN
ajis02-5323	131	273	's	's	PART
ajis02-5323	131	274	references	reference	NOUN
ajis02-5323	131	275	assurance	assurance	NOUN
ajis02-5323	131	276	requirement	requirement	NOUN
ajis02-5323	131	277	of	of	ADP
ajis02-5323	131	278	reports	report	NOUN
ajis02-5323	131	279	and	and	CCONJ
ajis02-5323	131	280	certifications	certification	NOUN
ajis02-5323	131	281	pen	pen	PROPN
ajis02-5323	131	282	test	test	NOUN
ajis02-5323	131	283	reports	report	VERB
ajis02-5323	131	284	no	no	DET
ajis02-5323	131	285	validation	validation	NOUN
ajis02-5323	131	286	of	of	ADP
ajis02-5323	131	287	information	information	NOUN
ajis02-5323	131	288	trust	trust	NOUN
ajis02-5323	131	289	in	in	ADP
ajis02-5323	131	290	suppliers	supplier	NOUN
ajis02-5323	131	291	'	'	PART
ajis02-5323	131	292	security	security	NOUN
ajis02-5323	131	293	employees	employee	NOUN
ajis02-5323	131	294	evaluation	evaluation	NOUN
ajis02-5323	131	295	determining	determine	VERB
ajis02-5323	131	296	supplier	supplier	NOUN
ajis02-5323	131	297	risk	risk	NOUN
ajis02-5323	131	298	level	level	NOUN
ajis02-5323	131	299	acceptance	acceptance	NOUN
ajis02-5323	131	300	of	of	ADP
ajis02-5323	131	301	a	a	DET
ajis02-5323	131	302	supplier	supplier	NOUN
ajis02-5323	131	303	scoring	scoring	NOUN
ajis02-5323	131	304	(	(	PUNCT
ajis02-5323	131	305	expert	expert	NOUN
ajis02-5323	131	306	judgment	judgment	NOUN
ajis02-5323	131	307	,	,	PUNCT
ajis02-5323	131	308	formulaic	formulaic	ADJ
ajis02-5323	131	309	determination	determination	NOUN
ajis02-5323	131	310	)	)	PUNCT
ajis02-5323	131	311	score	score	NOUN
ajis02-5323	131	312	:	:	PUNCT
ajis02-5323	131	313	low	low	ADJ
ajis02-5323	131	314	risk	risk	NOUN
ajis02-5323	131	315	provisional	provisional	ADJ
ajis02-5323	131	316	acceptance	acceptance	NOUN
ajis02-5323	131	317	scoring	scoring	NOUN
ajis02-5323	131	318	(	(	PUNCT
ajis02-5323	131	319	expert	expert	NOUN
ajis02-5323	131	320	judgment	judgment	NOUN
ajis02-5323	131	321	,	,	PUNCT
ajis02-5323	131	322	formulaic	formulaic	ADJ
ajis02-5323	131	323	determination	determination	NOUN
ajis02-5323	131	324	)	)	PUNCT
ajis02-5323	131	325	score	score	NOUN
ajis02-5323	131	326	:	:	PUNCT
ajis02-5323	131	327	high	high	ADJ
ajis02-5323	131	328	to	to	ADP
ajis02-5323	131	329	medium	medium	ADJ
ajis02-5323	131	330	risk	risk	NOUN
ajis02-5323	131	331	rejection	rejection	NOUN
ajis02-5323	131	332	of	of	ADP
ajis02-5323	131	333	a	a	DET
ajis02-5323	131	334	supplier	supplier	NOUN
ajis02-5323	131	335	scoring	scoring	NOUN
ajis02-5323	131	336	(	(	PUNCT
ajis02-5323	131	337	expert	expert	NOUN
ajis02-5323	131	338	judgment	judgment	NOUN
ajis02-5323	131	339	,	,	PUNCT
ajis02-5323	131	340	formulaic	formulaic	ADJ
ajis02-5323	131	341	determination	determination	NOUN
ajis02-5323	131	342	)	)	PUNCT
ajis02-5323	131	343	score	score	NOUN
ajis02-5323	131	344	:	:	PUNCT
ajis02-5323	131	345	high	high	ADJ
ajis02-5323	131	346	risk	risk	NOUN
ajis02-5323	131	347	level	level	NOUN
ajis02-5323	131	348	1	1	NUM
ajis02-5323	131	349	dimensions	dimension	NOUN
ajis02-5323	131	350	level	level	NOUN
ajis02-5323	131	351	2	2	NUM
ajis02-5323	131	352	dimensions	dimension	NOUN
ajis02-5323	131	353	level	level	NOUN
ajis02-5323	131	354	3	3	NUM
ajis02-5323	131	355	dimensions	dimension	NOUN
ajis02-5323	131	356	level	level	NOUN
ajis02-5323	131	357	4	4	NUM
ajis02-5323	131	358	dimensions	dimension	NOUN
ajis02-5323	131	359	second	second	ADJ
ajis02-5323	131	360	order	order	NOUN
ajis02-5323	131	361	codes	code	VERB
ajis02-5323	131	362	first	first	ADJ
ajis02-5323	131	363	order	order	NOUN
ajis02-5323	131	364	codes	code	NOUN
ajis02-5323	131	365	monitoring	monitor	VERB
ajis02-5323	131	366	after	after	ADP
ajis02-5323	131	367	onboarding	onboarde	VERB
ajis02-5323	131	368	risk	risk	NOUN
ajis02-5323	131	369	mitigation	mitigation	NOUN
ajis02-5323	131	370	uplifting	uplift	VERB
ajis02-5323	131	371	a	a	DET
ajis02-5323	131	372	supplier	supplier	NOUN
ajis02-5323	131	373	's	's	PART
ajis02-5323	131	374	security	security	NOUN
ajis02-5323	131	375	posture	posture	NOUN
ajis02-5323	131	376	collaboration	collaboration	NOUN
ajis02-5323	131	377	with	with	ADP
ajis02-5323	131	378	a	a	DET
ajis02-5323	131	379	supplier	supplier	NOUN
ajis02-5323	131	380	to	to	PART
ajis02-5323	131	381	improve	improve	VERB
ajis02-5323	131	382	their	their	PRON
ajis02-5323	131	383	cyber	cyber	ADJ
ajis02-5323	131	384	posture	posture	NOUN
ajis02-5323	131	385	discussions	discussion	NOUN
ajis02-5323	131	386	of	of	ADP
ajis02-5323	131	387	necessary	necessary	ADJ
ajis02-5323	131	388	upgrades	upgrade	NOUN
ajis02-5323	131	389	master	master	NOUN
ajis02-5323	131	390	agreements	agreement	NOUN
ajis02-5323	131	391	with	with	ADP
ajis02-5323	131	392	timelines	timeline	NOUN
ajis02-5323	131	393	investments	investment	NOUN
ajis02-5323	131	394	in	in	ADP
ajis02-5323	131	395	security	security	NOUN
ajis02-5323	131	396	training	training	NOUN
ajis02-5323	131	397	of	of	ADP
ajis02-5323	131	398	supplier	supplier	NOUN
ajis02-5323	131	399	personnel	personnel	NOUN
ajis02-5323	131	400	cost	cost	NOUN
ajis02-5323	131	401	-	-	PUNCT
ajis02-5323	131	402	benefit	benefit	NOUN
ajis02-5323	131	403	principle	principle	ADJ
ajis02-5323	131	404	australasian	australasian	ADJ
ajis02-5323	131	405	journal	journal	NOUN
ajis02-5323	131	406	of	of	ADP
ajis02-5323	131	407	information	information	NOUN
ajis02-5323	131	408	systems	system	NOUN
ajis02-5323	131	409	slapnicar	slapnicar	NOUN
ajis02-5323	131	410	,	,	PUNCT
ajis02-5323	131	411	vidmar	vidmar	NOUN
ajis02-5323	131	412	&	&	CCONJ
ajis02-5323	131	413	tsen	tsen	ADJ
ajis02-5323	131	414	2025	2025	NUM
ajis02-5323	131	415	,	,	PUNCT
ajis02-5323	131	416	vol	vol	NOUN
ajis02-5323	131	417	29	29	NUM
ajis02-5323	131	418	,	,	PUNCT
ajis02-5323	131	419	research	research	NOUN
ajis02-5323	131	420	article	article	NOUN
ajis02-5323	131	421	process	process	NOUN
ajis02-5323	131	422	theory	theory	NOUN
ajis02-5323	131	423	of	of	ADP
ajis02-5323	131	424	supplier	supplier	NOUN
ajis02-5323	131	425	cyber	cyber	NOUN
ajis02-5323	131	426	risk	risk	NOUN
ajis02-5323	131	427	assessment	assessment	NOUN
ajis02-5323	131	428	10	10	NUM
ajis02-5323	131	429	monitoring	monitor	VERB
ajis02-5323	131	430	monitoring	monitor	VERB
ajis02-5323	131	431	methods	method	NOUN
ajis02-5323	131	432	compliance	compliance	NOUN
ajis02-5323	131	433	with	with	ADP
ajis02-5323	131	434	contractual	contractual	ADJ
ajis02-5323	131	435	requirements	requirement	NOUN
ajis02-5323	131	436	compliance	compliance	NOUN
ajis02-5323	131	437	with	with	ADP
ajis02-5323	131	438	contractual	contractual	ADJ
ajis02-5323	131	439	requirements	requirement	NOUN
ajis02-5323	131	440	checked	check	VERB
ajis02-5323	131	441	regularly	regularly	ADV
ajis02-5323	131	442	face	face	NOUN
ajis02-5323	131	443	-	-	PUNCT
ajis02-5323	131	444	to	to	ADP
ajis02-5323	131	445	-	-	PUNCT
ajis02-5323	131	446	face	face	NOUN
ajis02-5323	131	447	meetings	meeting	NOUN
ajis02-5323	131	448	with	with	ADP
ajis02-5323	131	449	a	a	DET
ajis02-5323	131	450	supplier	supplier	NOUN
ajis02-5323	131	451	on	on	ADP
ajis02-5323	131	452	-	-	PUNCT
ajis02-5323	131	453	site	site	NOUN
ajis02-5323	131	454	visits	visit	NOUN
ajis02-5323	131	455	obligation	obligation	NOUN
ajis02-5323	131	456	to	to	PART
ajis02-5323	131	457	report	report	VERB
ajis02-5323	131	458	incidents	incident	NOUN
ajis02-5323	131	459	and	and	CCONJ
ajis02-5323	131	460	changes	change	VERB
ajis02-5323	131	461	performance	performance	NOUN
ajis02-5323	131	462	reviews	review	NOUN
ajis02-5323	131	463	requirement	requirement	NOUN
ajis02-5323	131	464	of	of	ADP
ajis02-5323	131	465	reports	report	NOUN
ajis02-5323	131	466	penetration	penetration	NOUN
ajis02-5323	131	467	tests	test	VERB
ajis02-5323	131	468	continuous	continuous	ADJ
ajis02-5323	131	469	monitoring	monitoring	NOUN
ajis02-5323	131	470	with	with	ADP
ajis02-5323	131	471	intrusive	intrusive	ADJ
ajis02-5323	131	472	methods	method	NOUN
ajis02-5323	131	473	vulnerability	vulnerability	NOUN
ajis02-5323	131	474	scanning	scan	VERB
ajis02-5323	131	475	shared	share	VERB
ajis02-5323	131	476	monitoring	monitoring	NOUN
ajis02-5323	131	477	by	by	ADP
ajis02-5323	131	478	a	a	DET
ajis02-5323	131	479	consortium	consortium	NOUN
ajis02-5323	131	480	of	of	ADP
ajis02-5323	131	481	organizations	organization	NOUN
ajis02-5323	131	482	shared	share	VERB
ajis02-5323	131	483	on	on	ADP
ajis02-5323	131	484	-	-	PUNCT
ajis02-5323	131	485	site	site	NOUN
ajis02-5323	131	486	audit	audit	NOUN
ajis02-5323	131	487	of	of	ADP
ajis02-5323	131	488	the	the	DET
ajis02-5323	131	489	three	three	NUM
ajis02-5323	131	490	largest	large	ADJ
ajis02-5323	131	491	cloud	cloud	NOUN
ajis02-5323	131	492	providers	provider	NOUN
ajis02-5323	131	493	monitoring	monitor	VERB
ajis02-5323	131	494	after	after	ADP
ajis02-5323	131	495	termination	termination	NOUN
ajis02-5323	131	496	of	of	ADP
ajis02-5323	131	497	the	the	DET
ajis02-5323	131	498	contract	contract	NOUN
ajis02-5323	131	499	checking	check	VERB
ajis02-5323	131	500	for	for	ADP
ajis02-5323	131	501	data	datum	NOUN
ajis02-5323	131	502	being	be	AUX
ajis02-5323	131	503	deleted	delete	VERB
ajis02-5323	131	504	frequency	frequency	NOUN
ajis02-5323	131	505	of	of	ADP
ajis02-5323	131	506	monitoring	monitoring	NOUN
ajis02-5323	131	507	depends	depend	VERB
ajis02-5323	131	508	on	on	ADP
ajis02-5323	131	509	criticality	criticality	NOUN
ajis02-5323	131	510	contextual	contextual	ADJ
ajis02-5323	131	511	factors	factor	NOUN
ajis02-5323	131	512	  	  	SPACE
ajis02-5323	131	513	regulation	regulation	NOUN
ajis02-5323	131	514	/	/	SYM
ajis02-5323	131	515	industry	industry	NOUN
ajis02-5323	131	516	critical	critical	ADJ
ajis02-5323	131	517	infrastructure	infrastructure	NOUN
ajis02-5323	131	518	industry	industry	NOUN
ajis02-5323	131	519	size	size	VERB
ajis02-5323	131	520	large	large	ADJ
ajis02-5323	131	521	organizations	organization	NOUN
ajis02-5323	131	522	vs	vs	ADP
ajis02-5323	131	523	smes	sme	NOUN
ajis02-5323	131	524	it	it	PRON
ajis02-5323	131	525	governance	governance	VERB
ajis02-5323	131	526	top	top	ADJ
ajis02-5323	131	527	leadership	leadership	NOUN
ajis02-5323	131	528	support	support	NOUN
ajis02-5323	131	529	efficiency	efficiency	NOUN
ajis02-5323	131	530	(	(	PUNCT
ajis02-5323	131	531	costs	cost	NOUN
ajis02-5323	131	532	vs	vs	ADP
ajis02-5323	131	533	resources	resource	NOUN
ajis02-5323	131	534	)	)	PUNCT
ajis02-5323	131	535	costs	cost	NOUN
ajis02-5323	131	536	note	note	VERB
ajis02-5323	131	537	:	:	PUNCT
ajis02-5323	131	538	next	next	ADV
ajis02-5323	131	539	to	to	ADP
ajis02-5323	131	540	the	the	DET
ajis02-5323	131	541	first	first	ADJ
ajis02-5323	131	542	-	-	PUNCT
ajis02-5323	131	543	order	order	NOUN
ajis02-5323	131	544	codes	code	NOUN
ajis02-5323	131	545	emerging	emerge	VERB
ajis02-5323	131	546	from	from	ADP
ajis02-5323	131	547	the	the	DET
ajis02-5323	131	548	interviews	interview	NOUN
ajis02-5323	131	549	,	,	PUNCT
ajis02-5323	131	550	we	we	PRON
ajis02-5323	131	551	also	also	ADV
ajis02-5323	131	552	related	relate	VERB
ajis02-5323	131	553	to	to	ADP
ajis02-5323	131	554	the	the	DET
ajis02-5323	131	555	concepts	concept	NOUN
ajis02-5323	131	556	from	from	ADP
ajis02-5323	131	557	the	the	DET
ajis02-5323	131	558	theoretical	theoretical	ADJ
ajis02-5323	131	559	background	background	NOUN
ajis02-5323	131	560	(	(	PUNCT
ajis02-5323	131	561	supplier	supplier	NOUN
ajis02-5323	131	562	risk	risk	NOUN
ajis02-5323	131	563	factors	factor	NOUN
ajis02-5323	131	564	from	from	ADP
ajis02-5323	131	565	prior	prior	ADJ
ajis02-5323	131	566	c	c	PROPN
ajis02-5323	131	567	-	-	PUNCT
ajis02-5323	131	568	scrm	scrm	NOUN
ajis02-5323	131	569	research	research	NOUN
ajis02-5323	131	570	,	,	PUNCT
ajis02-5323	131	571	and	and	CCONJ
ajis02-5323	131	572	concepts	concept	NOUN
ajis02-5323	131	573	from	from	ADP
ajis02-5323	131	574	the	the	DET
ajis02-5323	131	575	leading	lead	VERB
ajis02-5323	131	576	international	international	ADJ
ajis02-5323	131	577	cybersecurity	cybersecurity	NOUN
ajis02-5323	131	578	frameworks	framework	NOUN
ajis02-5323	131	579	)	)	PUNCT
ajis02-5323	131	580	.	.	PUNCT
ajis02-5323	132	1	the	the	DET
ajis02-5323	132	2	examples	example	NOUN
ajis02-5323	132	3	of	of	ADP
ajis02-5323	132	4	codes	code	NOUN
ajis02-5323	132	5	from	from	ADP
ajis02-5323	132	6	the	the	DET
ajis02-5323	132	7	c	c	PROPN
ajis02-5323	132	8	-	-	PUNCT
ajis02-5323	132	9	scrm	scrm	PROPN
ajis02-5323	132	10	literature	literature	NOUN
ajis02-5323	132	11	are	be	AUX
ajis02-5323	132	12	the	the	DET
ajis02-5323	132	13	second	second	ADJ
ajis02-5323	132	14	order	order	NOUN
ajis02-5323	132	15	codes	code	NOUN
ajis02-5323	132	16	related	relate	VERB
ajis02-5323	132	17	to	to	ADP
ajis02-5323	132	18	criticality	criticality	NOUN
ajis02-5323	132	19	of	of	ADP
ajis02-5323	132	20	a	a	DET
ajis02-5323	132	21	supplier	supplier	NOUN
ajis02-5323	132	22	(	(	PUNCT
ajis02-5323	132	23	e.g.	e.g.	ADJ
ajis02-5323	132	24	,	,	PUNCT
ajis02-5323	132	25	specificity	specificity	NOUN
ajis02-5323	132	26	of	of	ADP
ajis02-5323	132	27	products	product	NOUN
ajis02-5323	132	28	/	/	SYM
ajis02-5323	132	29	services	service	NOUN
ajis02-5323	132	30	,	,	PUNCT
ajis02-5323	132	31	annual	annual	ADJ
ajis02-5323	132	32	spending	spending	NOUN
ajis02-5323	132	33	for	for	ADP
ajis02-5323	132	34	the	the	DET
ajis02-5323	132	35	supplier	supplier	NOUN
ajis02-5323	132	36	)	)	PUNCT
ajis02-5323	132	37	and	and	CCONJ
ajis02-5323	132	38	codes	code	NOUN
ajis02-5323	132	39	related	relate	VERB
ajis02-5323	132	40	to	to	ADP
ajis02-5323	132	41	supplier	supplier	NOUN
ajis02-5323	132	42	cyber	cyber	NOUN
ajis02-5323	132	43	security	security	NOUN
ajis02-5323	132	44	posture	posture	NOUN
ajis02-5323	132	45	(	(	PUNCT
ajis02-5323	132	46	e.g.	e.g.	ADJ
ajis02-5323	132	47	,	,	PUNCT
ajis02-5323	132	48	technology	technology	NOUN
ajis02-5323	132	49	,	,	PUNCT
ajis02-5323	132	50	people	people	NOUN
ajis02-5323	132	51	,	,	PUNCT
ajis02-5323	132	52	processes	process	NOUN
ajis02-5323	132	53	,	,	PUNCT
ajis02-5323	132	54	targeting	targeting	NOUN
ajis02-5323	132	55	factor	factor	NOUN
ajis02-5323	132	56	)	)	PUNCT
ajis02-5323	132	57	.	.	PUNCT
ajis02-5323	133	1	the	the	DET
ajis02-5323	133	2	codes	code	NOUN
ajis02-5323	133	3	related	relate	VERB
ajis02-5323	133	4	to	to	ADP
ajis02-5323	133	5	leading	lead	VERB
ajis02-5323	133	6	international	international	ADJ
ajis02-5323	133	7	cybersecurity	cybersecurity	NOUN
ajis02-5323	133	8	frameworks	framework	NOUN
ajis02-5323	133	9	are	be	AUX
ajis02-5323	133	10	level	level	NOUN
ajis02-5323	133	11	2	2	NUM
ajis02-5323	133	12	dimensions	dimension	NOUN
ajis02-5323	133	13	(	(	PUNCT
ajis02-5323	133	14	risk	risk	NOUN
ajis02-5323	133	15	identification	identification	NOUN
ajis02-5323	133	16	,	,	PUNCT
ajis02-5323	133	17	analysis	analysis	NOUN
ajis02-5323	133	18	,	,	PUNCT
ajis02-5323	133	19	evaluation	evaluation	NOUN
ajis02-5323	133	20	,	,	PUNCT
ajis02-5323	133	21	mitigation	mitigation	NOUN
ajis02-5323	133	22	,	,	PUNCT
ajis02-5323	133	23	monitoring	monitoring	NOUN
ajis02-5323	133	24	)	)	PUNCT
ajis02-5323	133	25	.	.	PUNCT
ajis02-5323	134	1	table	table	NOUN
ajis02-5323	134	2	2	2	NUM
ajis02-5323	134	3	:	:	PUNCT
ajis02-5323	134	4	data	datum	NOUN
ajis02-5323	134	5	structure	structure	NOUN
ajis02-5323	134	6	3.2	3.2	NUM
ajis02-5323	134	7	quantitative	quantitative	ADJ
ajis02-5323	134	8	method	method	NOUN
ajis02-5323	134	9	3.2.1	3.2.1	NUM
ajis02-5323	134	10	sample	sample	NOUN
ajis02-5323	134	11	as	as	ADP
ajis02-5323	134	12	our	our	PRON
ajis02-5323	134	13	secondary	secondary	ADJ
ajis02-5323	134	14	method	method	NOUN
ajis02-5323	134	15	,	,	PUNCT
ajis02-5323	134	16	we	we	PRON
ajis02-5323	134	17	conducted	conduct	VERB
ajis02-5323	134	18	a	a	DET
ajis02-5323	134	19	survey	survey	NOUN
ajis02-5323	134	20	(	(	PUNCT
ajis02-5323	134	21	the	the	DET
ajis02-5323	134	22	questionnaire	questionnaire	NOUN
ajis02-5323	134	23	is	be	AUX
ajis02-5323	134	24	provided	provide	VERB
ajis02-5323	134	25	in	in	ADP
ajis02-5323	134	26	supplement	supplement	NOUN
ajis02-5323	134	27	b	b	NOUN
ajis02-5323	134	28	)	)	PUNCT
ajis02-5323	134	29	.	.	PUNCT
ajis02-5323	135	1	we	we	PRON
ajis02-5323	135	2	recruited	recruit	VERB
ajis02-5323	135	3	respondents	respondent	NOUN
ajis02-5323	135	4	with	with	ADP
ajis02-5323	135	5	the	the	DET
ajis02-5323	135	6	assistance	assistance	NOUN
ajis02-5323	135	7	of	of	ADP
ajis02-5323	135	8	isaca	isaca	PROPN
ajis02-5323	135	9	slovenia	slovenia	PROPN
ajis02-5323	135	10	and	and	CCONJ
ajis02-5323	135	11	isaca	isaca	PROPN
ajis02-5323	135	12	brisbane	brisbane	PROPN
ajis02-5323	135	13	chapter	chapter	PROPN
ajis02-5323	135	14	australia	australia	PROPN
ajis02-5323	135	15	,	,	PUNCT
ajis02-5323	135	16	who	who	PRON
ajis02-5323	135	17	posted	post	VERB
ajis02-5323	135	18	invitations	invitation	NOUN
ajis02-5323	135	19	to	to	PART
ajis02-5323	135	20	participate	participate	VERB
ajis02-5323	135	21	in	in	ADP
ajis02-5323	135	22	our	our	PRON
ajis02-5323	135	23	research	research	NOUN
ajis02-5323	135	24	to	to	ADP
ajis02-5323	135	25	their	their	PRON
ajis02-5323	135	26	members	member	NOUN
ajis02-5323	135	27	.	.	PUNCT
ajis02-5323	136	1	moreover	moreover	ADV
ajis02-5323	136	2	,	,	PUNCT
ajis02-5323	136	3	we	we	PRON
ajis02-5323	136	4	promoted	promote	VERB
ajis02-5323	136	5	the	the	DET
ajis02-5323	136	6	survey	survey	NOUN
ajis02-5323	136	7	to	to	ADP
ajis02-5323	136	8	the	the	DET
ajis02-5323	136	9	participants	participant	NOUN
ajis02-5323	136	10	of	of	ADP
ajis02-5323	136	11	the	the	DET
ajis02-5323	136	12	auscert	auscert	PROPN
ajis02-5323	136	13	conference	conference	NOUN
ajis02-5323	136	14	on	on	ADP
ajis02-5323	136	15	gold	gold	NOUN
ajis02-5323	136	16	coast	coast	NOUN
ajis02-5323	136	17	,	,	PUNCT
ajis02-5323	136	18	australia	australia	PROPN
ajis02-5323	136	19	,	,	PUNCT
ajis02-5323	136	20	in	in	ADP
ajis02-5323	136	21	may	may	PROPN
ajis02-5323	136	22	2023	2023	NUM
ajis02-5323	136	23	.	.	PUNCT
ajis02-5323	137	1	we	we	PRON
ajis02-5323	137	2	also	also	ADV
ajis02-5323	137	3	invited	invite	VERB
ajis02-5323	137	4	individuals	individual	NOUN
ajis02-5323	137	5	through	through	ADP
ajis02-5323	137	6	our	our	PRON
ajis02-5323	137	7	professional	professional	ADJ
ajis02-5323	137	8	networks	network	NOUN
ajis02-5323	137	9	.	.	PUNCT
ajis02-5323	138	1	we	we	PRON
ajis02-5323	138	2	ended	end	VERB
ajis02-5323	138	3	up	up	ADP
ajis02-5323	138	4	with	with	ADP
ajis02-5323	138	5	71	71	NUM
ajis02-5323	138	6	completed	complete	VERB
ajis02-5323	138	7	questionnaires	questionnaire	NOUN
ajis02-5323	138	8	but	but	CCONJ
ajis02-5323	138	9	excluded	exclude	VERB
ajis02-5323	138	10	18	18	NUM
ajis02-5323	138	11	because	because	SCONJ
ajis02-5323	138	12	it	it	PRON
ajis02-5323	138	13	was	be	AUX
ajis02-5323	138	14	uncertain	uncertain	ADJ
ajis02-5323	138	15	if	if	SCONJ
ajis02-5323	138	16	they	they	PRON
ajis02-5323	138	17	were	be	AUX
ajis02-5323	138	18	involved	involve	VERB
ajis02-5323	138	19	in	in	ADP
ajis02-5323	138	20	supplier	supplier	NOUN
ajis02-5323	138	21	cyber	cyber	NOUN
ajis02-5323	138	22	risk	risk	NOUN
ajis02-5323	138	23	management	management	NOUN
ajis02-5323	138	24	(	(	PUNCT
ajis02-5323	138	25	4	4	NUM
ajis02-5323	138	26	were	be	AUX
ajis02-5323	138	27	academics	academic	NOUN
ajis02-5323	138	28	and	and	CCONJ
ajis02-5323	138	29	14	14	NUM
ajis02-5323	138	30	were	be	AUX
ajis02-5323	138	31	managers	manager	NOUN
ajis02-5323	138	32	without	without	ADP
ajis02-5323	138	33	specifying	specify	VERB
ajis02-5323	138	34	the	the	DET
ajis02-5323	138	35	area	area	NOUN
ajis02-5323	138	36	)	)	PUNCT
ajis02-5323	138	37	,	,	PUNCT
ajis02-5323	138	38	resulting	result	VERB
ajis02-5323	138	39	in	in	ADP
ajis02-5323	138	40	53	53	NUM
ajis02-5323	138	41	completed	complete	VERB
ajis02-5323	138	42	questionnaires	questionnaire	NOUN
ajis02-5323	138	43	.	.	PUNCT
ajis02-5323	139	1	we	we	PRON
ajis02-5323	139	2	collected	collect	VERB
ajis02-5323	139	3	responses	response	NOUN
ajis02-5323	139	4	from	from	ADP
ajis02-5323	139	5	may	may	PROPN
ajis02-5323	139	6	2023	2023	NUM
ajis02-5323	139	7	till	till	SCONJ
ajis02-5323	139	8	october	october	PROPN
ajis02-5323	139	9	2023	2023	NUM
ajis02-5323	139	10	via	via	ADP
ajis02-5323	139	11	qualtrics	qualtric	NOUN
ajis02-5323	139	12	.	.	PUNCT
ajis02-5323	140	1	the	the	DET
ajis02-5323	140	2	respondents	respondent	NOUN
ajis02-5323	140	3	have	have	VERB
ajis02-5323	140	4	,	,	PUNCT
ajis02-5323	140	5	on	on	ADP
ajis02-5323	140	6	average	average	ADJ
ajis02-5323	140	7	,	,	PUNCT
ajis02-5323	140	8	23	23	NUM
ajis02-5323	140	9	years	year	NOUN
ajis02-5323	140	10	of	of	ADP
ajis02-5323	140	11	experience	experience	NOUN
ajis02-5323	140	12	and	and	CCONJ
ajis02-5323	140	13	11	11	NUM
ajis02-5323	140	14	in	in	ADP
ajis02-5323	140	15	cyber	cyber	ADJ
ajis02-5323	140	16	security	security	NOUN
ajis02-5323	140	17	;	;	PUNCT
ajis02-5323	140	18	their	their	PRON
ajis02-5323	140	19	median	median	ADJ
ajis02-5323	140	20	age	age	NOUN
ajis02-5323	140	21	is	be	AUX
ajis02-5323	140	22	in	in	ADP
ajis02-5323	140	23	the	the	DET
ajis02-5323	140	24	35	35	NUM
ajis02-5323	140	25	-	-	SYM
ajis02-5323	140	26	44	44	NUM
ajis02-5323	140	27	years	year	NOUN
ajis02-5323	140	28	category	category	NOUN
ajis02-5323	140	29	,	,	PUNCT
ajis02-5323	140	30	and	and	CCONJ
ajis02-5323	140	31	the	the	DET
ajis02-5323	140	32	average	average	ADJ
ajis02-5323	140	33	sales	sale	NOUN
ajis02-5323	140	34	revenues	revenue	NOUN
ajis02-5323	140	35	are	be	AUX
ajis02-5323	140	36	in	in	ADP
ajis02-5323	140	37	the	the	DET
ajis02-5323	140	38	2	2	NUM
ajis02-5323	140	39	-	-	SYM
ajis02-5323	140	40	10	10	NUM
ajis02-5323	140	41	million	million	NUM
ajis02-5323	140	42	eur	eur	ADJ
ajis02-5323	140	43	category	category	NOUN
ajis02-5323	140	44	.	.	PUNCT
ajis02-5323	141	1	they	they	PRON
ajis02-5323	141	2	come	come	VERB
ajis02-5323	141	3	from	from	ADP
ajis02-5323	141	4	various	various	ADJ
ajis02-5323	141	5	countries	country	NOUN
ajis02-5323	141	6	(	(	PUNCT
ajis02-5323	141	7	australia	australia	PROPN
ajis02-5323	141	8	,	,	PUNCT
ajis02-5323	141	9	china	china	PROPN
ajis02-5323	141	10	,	,	PUNCT
ajis02-5323	141	11	and	and	CCONJ
ajis02-5323	141	12	europe	europe	PROPN
ajis02-5323	141	13	)	)	PUNCT
ajis02-5323	141	14	and	and	CCONJ
ajis02-5323	141	15	industries	industry	NOUN
ajis02-5323	141	16	.	.	PUNCT
ajis02-5323	142	1	the	the	DET
ajis02-5323	142	2	most	most	ADV
ajis02-5323	142	3	frequent	frequent	ADJ
ajis02-5323	142	4	industries	industry	NOUN
ajis02-5323	142	5	are	be	AUX
ajis02-5323	142	6	finance	finance	NOUN
ajis02-5323	142	7	and	and	CCONJ
ajis02-5323	142	8	insurance	insurance	NOUN
ajis02-5323	142	9	(	(	PUNCT
ajis02-5323	142	10	10	10	NUM
ajis02-5323	142	11	respondents	respondent	NOUN
ajis02-5323	142	12	)	)	PUNCT
ajis02-5323	142	13	and	and	CCONJ
ajis02-5323	142	14	it	it	PRON
ajis02-5323	142	15	and	and	CCONJ
ajis02-5323	142	16	other	other	ADJ
ajis02-5323	142	17	information	information	NOUN
ajis02-5323	142	18	services	service	NOUN
ajis02-5323	142	19	(	(	PUNCT
ajis02-5323	142	20	7	7	NUM
ajis02-5323	142	21	)	)	PUNCT
ajis02-5323	142	22	.	.	PUNCT
ajis02-5323	143	1	australasian	australasian	ADJ
ajis02-5323	143	2	journal	journal	NOUN
ajis02-5323	143	3	of	of	ADP
ajis02-5323	143	4	information	information	NOUN
ajis02-5323	143	5	systems	system	NOUN
ajis02-5323	143	6	slapnicar	slapnicar	NOUN
ajis02-5323	143	7	,	,	PUNCT
ajis02-5323	143	8	vidmar	vidmar	NOUN
ajis02-5323	143	9	&	&	CCONJ
ajis02-5323	143	10	tsen	tsen	ADJ
ajis02-5323	143	11	2025	2025	NUM
ajis02-5323	143	12	,	,	PUNCT
ajis02-5323	143	13	vol	vol	NOUN
ajis02-5323	143	14	29	29	NUM
ajis02-5323	143	15	,	,	PUNCT
ajis02-5323	143	16	research	research	NOUN
ajis02-5323	143	17	article	article	NOUN
ajis02-5323	143	18	process	process	NOUN
ajis02-5323	143	19	theory	theory	NOUN
ajis02-5323	143	20	of	of	ADP
ajis02-5323	143	21	supplier	supplier	NOUN
ajis02-5323	143	22	cyber	cyber	NOUN
ajis02-5323	143	23	risk	risk	NOUN
ajis02-5323	143	24	assessment	assessment	NOUN
ajis02-5323	143	25	11	11	NUM
ajis02-5323	143	26	3.2.2	3.2.2	NUM
ajis02-5323	143	27	data	datum	NOUN
ajis02-5323	143	28	analysis	analysis	NOUN
ajis02-5323	143	29	the	the	DET
ajis02-5323	143	30	survey	survey	NOUN
ajis02-5323	143	31	data	datum	NOUN
ajis02-5323	143	32	was	be	AUX
ajis02-5323	143	33	complementary	complementary	ADJ
ajis02-5323	143	34	to	to	ADP
ajis02-5323	143	35	our	our	PRON
ajis02-5323	143	36	interview	interview	NOUN
ajis02-5323	143	37	data	datum	NOUN
ajis02-5323	143	38	as	as	SCONJ
ajis02-5323	143	39	the	the	DET
ajis02-5323	143	40	qualitative	qualitative	ADJ
ajis02-5323	143	41	data	datum	NOUN
ajis02-5323	143	42	does	do	AUX
ajis02-5323	143	43	not	not	PART
ajis02-5323	143	44	allow	allow	VERB
ajis02-5323	143	45	us	we	PRON
ajis02-5323	143	46	to	to	PART
ajis02-5323	143	47	analyze	analyze	VERB
ajis02-5323	143	48	whether	whether	SCONJ
ajis02-5323	143	49	the	the	DET
ajis02-5323	143	50	process	process	NOUN
ajis02-5323	143	51	of	of	ADP
ajis02-5323	143	52	supplier	supplier	NOUN
ajis02-5323	143	53	cyber	cyber	NOUN
ajis02-5323	143	54	risk	risk	NOUN
ajis02-5323	143	55	assessment	assessment	NOUN
ajis02-5323	143	56	is	be	AUX
ajis02-5323	143	57	effective	effective	ADJ
ajis02-5323	143	58	,	,	PUNCT
ajis02-5323	143	59	that	that	ADV
ajis02-5323	143	60	is	is	ADV
ajis02-5323	143	61	,	,	PUNCT
ajis02-5323	143	62	whether	whether	SCONJ
ajis02-5323	143	63	it	it	PRON
ajis02-5323	143	64	identifies	identify	VERB
ajis02-5323	143	65	risky	risky	ADJ
ajis02-5323	143	66	suppliers	supplier	NOUN
ajis02-5323	143	67	.	.	PUNCT
ajis02-5323	144	1	the	the	DET
ajis02-5323	144	2	small	small	ADJ
ajis02-5323	144	3	number	number	NOUN
ajis02-5323	144	4	of	of	ADP
ajis02-5323	144	5	respondents	respondent	NOUN
ajis02-5323	144	6	allowed	allow	VERB
ajis02-5323	144	7	us	we	PRON
ajis02-5323	144	8	to	to	PART
ajis02-5323	144	9	perform	perform	VERB
ajis02-5323	144	10	only	only	ADV
ajis02-5323	144	11	descriptive	descriptive	ADJ
ajis02-5323	144	12	analyses	analysis	NOUN
ajis02-5323	144	13	of	of	ADP
ajis02-5323	144	14	association	association	NOUN
ajis02-5323	144	15	,	,	PUNCT
ajis02-5323	144	16	such	such	ADJ
ajis02-5323	144	17	as	as	ADP
ajis02-5323	144	18	analysis	analysis	NOUN
ajis02-5323	144	19	of	of	ADP
ajis02-5323	144	20	variance	variance	NOUN
ajis02-5323	144	21	and	and	CCONJ
ajis02-5323	144	22	2	2	NOUN
ajis02-5323	144	23	tests	test	NOUN
ajis02-5323	144	24	.	.	PUNCT
ajis02-5323	145	1	we	we	PRON
ajis02-5323	145	2	analysed	analyse	VERB
ajis02-5323	145	3	this	this	DET
ajis02-5323	145	4	question	question	NOUN
ajis02-5323	145	5	by	by	ADP
ajis02-5323	145	6	comparing	compare	VERB
ajis02-5323	145	7	the	the	DET
ajis02-5323	145	8	mean	mean	ADJ
ajis02-5323	145	9	differences	difference	NOUN
ajis02-5323	145	10	in	in	ADP
ajis02-5323	145	11	scores	score	NOUN
ajis02-5323	145	12	on	on	ADP
ajis02-5323	145	13	controls	control	NOUN
ajis02-5323	145	14	between	between	ADP
ajis02-5323	145	15	suppliers	supplier	NOUN
ajis02-5323	145	16	that	that	PRON
ajis02-5323	145	17	suffered	suffer	VERB
ajis02-5323	145	18	an	an	DET
ajis02-5323	145	19	incident	incident	NOUN
ajis02-5323	145	20	vs	vs	ADP
ajis02-5323	145	21	those	those	PRON
ajis02-5323	145	22	who	who	PRON
ajis02-5323	145	23	did	do	VERB
ajis02-5323	145	24	not	not	PART
ajis02-5323	145	25	.	.	PUNCT
ajis02-5323	146	1	furthermore	furthermore	ADV
ajis02-5323	146	2	,	,	PUNCT
ajis02-5323	146	3	we	we	PRON
ajis02-5323	146	4	also	also	ADV
ajis02-5323	146	5	evaluated	evaluate	VERB
ajis02-5323	146	6	the	the	DET
ajis02-5323	146	7	support	support	NOUN
ajis02-5323	146	8	of	of	ADP
ajis02-5323	146	9	our	our	PRON
ajis02-5323	146	10	qualitative	qualitative	ADJ
ajis02-5323	146	11	findings	finding	NOUN
ajis02-5323	146	12	(	(	PUNCT
ajis02-5323	146	13	with	with	ADP
ajis02-5323	146	14	anova	anova	PROPN
ajis02-5323	146	15	and	and	CCONJ
ajis02-5323	146	16	correlations	correlation	NOUN
ajis02-5323	146	17	)	)	PUNCT
ajis02-5323	146	18	.	.	PUNCT
ajis02-5323	147	1	4	4	NUM
ajis02-5323	147	2	process	process	NOUN
ajis02-5323	147	3	theory	theory	NOUN
ajis02-5323	147	4	of	of	ADP
ajis02-5323	147	5	supplier	supplier	NOUN
ajis02-5323	147	6	cyber	cyber	NOUN
ajis02-5323	147	7	risk	risk	NOUN
ajis02-5323	147	8	assessment	assessment	NOUN
ajis02-5323	147	9	based	base	VERB
ajis02-5323	147	10	on	on	ADP
ajis02-5323	147	11	our	our	PRON
ajis02-5323	147	12	findings	finding	NOUN
ajis02-5323	147	13	,	,	PUNCT
ajis02-5323	147	14	we	we	PRON
ajis02-5323	147	15	developed	develop	VERB
ajis02-5323	147	16	a	a	DET
ajis02-5323	147	17	process	process	NOUN
ajis02-5323	147	18	theory	theory	NOUN
ajis02-5323	147	19	of	of	ADP
ajis02-5323	147	20	supplier	supplier	NOUN
ajis02-5323	147	21	cyber	cyber	NOUN
ajis02-5323	147	22	risk	risk	NOUN
ajis02-5323	147	23	assessment	assessment	NOUN
ajis02-5323	147	24	presented	present	VERB
ajis02-5323	147	25	in	in	ADP
ajis02-5323	147	26	figure	figure	NOUN
ajis02-5323	147	27	1	1	NUM
ajis02-5323	147	28	.	.	PUNCT
ajis02-5323	148	1	the	the	DET
ajis02-5323	148	2	theory	theory	NOUN
ajis02-5323	148	3	explains	explain	VERB
ajis02-5323	148	4	:	:	PUNCT
ajis02-5323	149	1	1	1	X
ajis02-5323	149	2	.	.	X
ajis02-5323	149	3	how	how	SCONJ
ajis02-5323	149	4	organizations	organization	NOUN
ajis02-5323	149	5	assess	assess	VERB
ajis02-5323	149	6	a	a	DET
ajis02-5323	149	7	supplier	supplier	NOUN
ajis02-5323	149	8	cyber	cyber	NOUN
ajis02-5323	149	9	risk	risk	NOUN
ajis02-5323	149	10	,	,	PUNCT
ajis02-5323	149	11	which	which	PRON
ajis02-5323	149	12	supplier	supplier	NOUN
ajis02-5323	149	13	cyber	cyber	NOUN
ajis02-5323	149	14	risk	risk	NOUN
ajis02-5323	149	15	posture	posture	NOUN
ajis02-5323	149	16	characteristics	characteristic	NOUN
ajis02-5323	149	17	are	be	AUX
ajis02-5323	149	18	being	be	AUX
ajis02-5323	149	19	assessed	assess	VERB
ajis02-5323	149	20	and	and	CCONJ
ajis02-5323	149	21	how	how	SCONJ
ajis02-5323	149	22	they	they	PRON
ajis02-5323	149	23	are	be	AUX
ajis02-5323	149	24	synthesized	synthesize	VERB
ajis02-5323	149	25	in	in	ADP
ajis02-5323	149	26	an	an	DET
ajis02-5323	149	27	overall	overall	ADJ
ajis02-5323	149	28	assessment	assessment	NOUN
ajis02-5323	149	29	of	of	ADP
ajis02-5323	149	30	a	a	DET
ajis02-5323	149	31	supplier	supplier	NOUN
ajis02-5323	149	32	cyber	cyber	NOUN
ajis02-5323	149	33	risk	risk	NOUN
ajis02-5323	149	34	level	level	NOUN
ajis02-5323	149	35	,	,	PUNCT
ajis02-5323	149	36	2	2	NUM
ajis02-5323	149	37	.	.	NOUN
ajis02-5323	149	38	which	which	PRON
ajis02-5323	149	39	contextual	contextual	ADJ
ajis02-5323	149	40	factors	factor	NOUN
ajis02-5323	149	41	affect	affect	VERB
ajis02-5323	149	42	the	the	DET
ajis02-5323	149	43	maturity	maturity	NOUN
ajis02-5323	149	44	of	of	ADP
ajis02-5323	149	45	cyber	cyber	ADJ
ajis02-5323	149	46	risk	risk	NOUN
ajis02-5323	149	47	assessment	assessment	NOUN
ajis02-5323	149	48	and	and	CCONJ
ajis02-5323	149	49	monitoring	monitoring	NOUN
ajis02-5323	149	50	,	,	PUNCT
ajis02-5323	149	51	and	and	CCONJ
ajis02-5323	150	1	3	3	X
ajis02-5323	150	2	.	.	X
ajis02-5323	150	3	whether	whether	SCONJ
ajis02-5323	150	4	the	the	DET
ajis02-5323	150	5	process	process	NOUN
ajis02-5323	150	6	is	be	AUX
ajis02-5323	150	7	effective	effective	ADJ
ajis02-5323	150	8	–	–	PUNCT
ajis02-5323	150	9	does	do	AUX
ajis02-5323	150	10	it	it	PRON
ajis02-5323	150	11	identify	identify	VERB
ajis02-5323	150	12	risky	risky	ADJ
ajis02-5323	150	13	suppliers	supplier	NOUN
ajis02-5323	150	14	?	?	PUNCT
ajis02-5323	151	1	figure	figure	NOUN
ajis02-5323	151	2	1	1	NUM
ajis02-5323	151	3	:	:	PUNCT
ajis02-5323	151	4	process	process	NOUN
ajis02-5323	151	5	theory	theory	NOUN
ajis02-5323	151	6	of	of	ADP
ajis02-5323	151	7	supplier	supplier	NOUN
ajis02-5323	151	8	cyber	cyber	NOUN
ajis02-5323	151	9	risk	risk	NOUN
ajis02-5323	151	10	assessment	assessment	NOUN
ajis02-5323	151	11	and	and	CCONJ
ajis02-5323	151	12	monitoring	monitoring	NOUN
ajis02-5323	151	13	.	.	PUNCT
ajis02-5323	152	1	high	high	ADJ
ajis02-5323	152	2	lo	lo	PROPN
ajis02-5323	152	3	w	w	PROPN
ajis02-5323	152	4	medium	medium	NOUN
ajis02-5323	152	5	supplier	supplier	NOUN
ajis02-5323	152	6	risk	risk	NOUN
ajis02-5323	152	7	level	level	NOUN
ajis02-5323	152	8	criticality	criticality	NOUN
ajis02-5323	152	9	of	of	ADP
ajis02-5323	152	10	supplier	supplier	NOUN
ajis02-5323	152	11	criticality	criticality	NOUN
ajis02-5323	152	12	to	to	PART
ajis02-5323	152	13	focal	focal	ADJ
ajis02-5323	152	14	organization‘s	organization‘s	NOUN
ajis02-5323	152	15	processes	process	VERB
ajis02-5323	152	16	data	datum	NOUN
ajis02-5323	152	17	sensitivity	sensitivity	NOUN
ajis02-5323	152	18	the	the	DET
ajis02-5323	152	19	supplier	supplier	NOUN
ajis02-5323	152	20	hosts	host	NOUN
ajis02-5323	152	21	it	it	PRON
ajis02-5323	152	22	integration	integration	NOUN
ajis02-5323	152	23	risk	risk	NOUN
ajis02-5323	152	24	assessment	assessment	NOUN
ajis02-5323	152	25	methods	method	NOUN
ajis02-5323	152	26	supplier‘s	supplier‘s	X
ajis02-5323	153	1	cyber	cyber	NOUN
ajis02-5323	153	2	risk	risk	NOUN
ajis02-5323	153	3	posture	posture	NOUN
ajis02-5323	153	4	characteristics	characteristic	NOUN
ajis02-5323	153	5	assurance	assurance	NOUN
ajis02-5323	153	6	supplier	supplier	NOUN
ajis02-5323	153	7	cyber	cyber	NOUN
ajis02-5323	153	8	risk	risk	NOUN
ajis02-5323	153	9	assessment	assessment	NOUN
ajis02-5323	153	10	select	select	ADJ
ajis02-5323	153	11	but	but	CCONJ
ajis02-5323	153	12	mitigate	mitigate	VERB
ajis02-5323	153	13	risk	risk	NOUN
ajis02-5323	153	14	select	select	VERB
ajis02-5323	153	15	a	a	DET
ajis02-5323	153	16	supplier	supplier	NOUN
ajis02-5323	153	17	avoid	avoid	VERB
ajis02-5323	153	18	a	a	DET
ajis02-5323	153	19	supplier	supplier	NOUN
ajis02-5323	153	20	uplift	uplift	NOUN
ajis02-5323	153	21	supplier‘s	supplier‘	NOUN
ajis02-5323	153	22	security	security	NOUN
ajis02-5323	153	23	posture	posture	NOUN
ajis02-5323	153	24	monitoring	monitoring	NOUN
ajis02-5323	153	25	methods	method	NOUN
ajis02-5323	153	26	and	and	CCONJ
ajis02-5323	153	27	frequency	frequency	NOUN
ajis02-5323	153	28	after	after	ADP
ajis02-5323	153	29	onboarding	onboarde	VERB
ajis02-5323	153	30	selection	selection	NOUN
ajis02-5323	153	31	process	process	NOUN
ajis02-5323	153	32	c	c	NOUN
ajis02-5323	153	33	o	o	NOUN
ajis02-5323	153	34	n	n	X
ajis02-5323	153	35	te	te	INTJ
ajis02-5323	153	36	xt	xt	PUNCT
ajis02-5323	153	37	u	u	PROPN
ajis02-5323	153	38	al	al	PROPN
ajis02-5323	153	39	f	f	PROPN
ajis02-5323	153	40	ac	ac	VERB
ajis02-5323	153	41	to	to	PART
ajis02-5323	153	42	rs	rs	VERB
ajis02-5323	153	43	:	:	PUNCT
ajis02-5323	153	44	re	re	VERB
ajis02-5323	153	45	g	g	X
ajis02-5323	153	46	u	u	X
ajis02-5323	153	47	la	la	X
ajis02-5323	153	48	ti	ti	X
ajis02-5323	153	49	o	o	NOUN
ajis02-5323	153	50	n	n	PROPN
ajis02-5323	153	51	,	,	PUNCT
ajis02-5323	153	52	s	s	VERB
ajis02-5323	153	53	iz	iz	NOUN
ajis02-5323	153	54	e	e	NOUN
ajis02-5323	153	55	,	,	PUNCT
ajis02-5323	153	56	i	i	PRON
ajis02-5323	153	57	t	t	VERB
ajis02-5323	153	58	g	g	X
ajis02-5323	153	59	o	o	NOUN
ajis02-5323	153	60	v	v	INTJ
ajis02-5323	153	61	er	er	INTJ
ajis02-5323	153	62	n	n	ADV
ajis02-5323	153	63	an	an	DET
ajis02-5323	153	64	ce	ce	PROPN
ajis02-5323	153	65	,	,	PUNCT
ajis02-5323	153	66	c	c	PROPN
ajis02-5323	154	1	o	o	PROPN
ajis02-5323	154	2	st	st	PROPN
ajis02-5323	155	1	-b	-b	PUNCT
ajis02-5323	155	2	en	en	ADP
ajis02-5323	155	3	ef	ef	NOUN
ajis02-5323	155	4	it	it	PRON
ajis02-5323	155	5	risk	risk	VERB
ajis02-5323	155	6	analysis	analysis	NOUN
ajis02-5323	155	7	risk	risk	NOUN
ajis02-5323	155	8	mitigation	mitigation	NOUN
ajis02-5323	155	9	monitoring	monitoring	NOUN
ajis02-5323	155	10	risk	risk	NOUN
ajis02-5323	155	11	identification	identification	NOUN
ajis02-5323	155	12	identify	identify	VERB
ajis02-5323	155	13	suppliers	supplier	NOUN
ajis02-5323	155	14	for	for	ADP
ajis02-5323	155	15	cyber	cyber	ADJ
ajis02-5323	155	16	risk	risk	NOUN
ajis02-5323	155	17	assessment	assessment	NOUN
ajis02-5323	155	18	evaluation	evaluation	NOUN
ajis02-5323	155	19	likelihood	likelihood	NOUN
ajis02-5323	155	20	impact	impact	NOUN
ajis02-5323	155	21	supplier	supplier	NOUN
ajis02-5323	155	22	cyber	cyber	NOUN
ajis02-5323	155	23	risk	risk	NOUN
ajis02-5323	155	24	posture	posture	NOUN
ajis02-5323	155	25	technology	technology	NOUN
ajis02-5323	155	26	processes	process	VERB
ajis02-5323	155	27	people	people	NOUN
ajis02-5323	155	28	regulation	regulation	NOUN
ajis02-5323	155	29	and	and	CCONJ
ajis02-5323	155	30	industry	industry	NOUN
ajis02-5323	155	31	standards	standard	NOUN
ajis02-5323	155	32	past	past	ADP
ajis02-5323	155	33	incidents	incident	NOUN
ajis02-5323	155	34	complexity	complexity	NOUN
ajis02-5323	155	35	of	of	ADP
ajis02-5323	155	36	supplier	supplier	NOUN
ajis02-5323	155	37	's	's	PART
ajis02-5323	155	38	supply	supply	NOUN
ajis02-5323	155	39	chain	chain	NOUN
ajis02-5323	155	40	foreign	foreign	ADJ
ajis02-5323	155	41	operations/	operations/	NUM
ajis02-5323	155	42	ownership	ownership	NOUN
ajis02-5323	155	43	business	business	NOUN
ajis02-5323	155	44	characteristics	characteristic	NOUN
ajis02-5323	155	45	targeting	target	VERB
ajis02-5323	155	46	factor	factor	NOUN
ajis02-5323	155	47	reputation	reputation	NOUN
ajis02-5323	155	48	australasian	australasian	ADJ
ajis02-5323	155	49	journal	journal	NOUN
ajis02-5323	155	50	of	of	ADP
ajis02-5323	155	51	information	information	NOUN
ajis02-5323	155	52	systems	system	NOUN
ajis02-5323	155	53	slapnicar	slapnicar	NOUN
ajis02-5323	155	54	,	,	PUNCT
ajis02-5323	155	55	vidmar	vidmar	NOUN
ajis02-5323	155	56	&	&	CCONJ
ajis02-5323	155	57	tsen	tsen	ADJ
ajis02-5323	155	58	2025	2025	NUM
ajis02-5323	155	59	,	,	PUNCT
ajis02-5323	155	60	vol	vol	NOUN
ajis02-5323	155	61	29	29	NUM
ajis02-5323	155	62	,	,	PUNCT
ajis02-5323	155	63	research	research	NOUN
ajis02-5323	155	64	article	article	NOUN
ajis02-5323	155	65	process	process	NOUN
ajis02-5323	155	66	theory	theory	NOUN
ajis02-5323	155	67	of	of	ADP
ajis02-5323	155	68	supplier	supplier	NOUN
ajis02-5323	155	69	cyber	cyber	NOUN
ajis02-5323	155	70	risk	risk	NOUN
ajis02-5323	155	71	assessment	assessment	NOUN
ajis02-5323	155	72	12	12	NUM
ajis02-5323	155	73	we	we	PRON
ajis02-5323	155	74	analyzed	analyze	VERB
ajis02-5323	155	75	the	the	DET
ajis02-5323	155	76	first	first	ADJ
ajis02-5323	155	77	two	two	NUM
ajis02-5323	155	78	questions	question	NOUN
ajis02-5323	155	79	using	use	VERB
ajis02-5323	155	80	interview	interview	NOUN
ajis02-5323	155	81	data	datum	NOUN
ajis02-5323	155	82	(	(	PUNCT
ajis02-5323	155	83	sections	section	NOUN
ajis02-5323	155	84	4.1.-4.3	4.1.-4.3	NUM
ajis02-5323	155	85	.	.	PUNCT
ajis02-5323	155	86	)	)	PUNCT
ajis02-5323	156	1	and	and	CCONJ
ajis02-5323	156	2	the	the	DET
ajis02-5323	156	3	last	last	ADJ
ajis02-5323	156	4	question	question	NOUN
ajis02-5323	156	5	using	use	VERB
ajis02-5323	156	6	survey	survey	NOUN
ajis02-5323	156	7	data	datum	NOUN
ajis02-5323	156	8	(	(	PUNCT
ajis02-5323	156	9	section	section	NOUN
ajis02-5323	156	10	4.4	4.4	NUM
ajis02-5323	156	11	.	.	PUNCT
ajis02-5323	156	12	)	)	PUNCT
ajis02-5323	156	13	.	.	PUNCT
ajis02-5323	157	1	the	the	DET
ajis02-5323	157	2	process	process	NOUN
ajis02-5323	157	3	of	of	ADP
ajis02-5323	157	4	supplier	supplier	NOUN
ajis02-5323	157	5	cyber	cyber	NOUN
ajis02-5323	157	6	risk	risk	NOUN
ajis02-5323	157	7	assessment	assessment	NOUN
ajis02-5323	157	8	consists	consist	VERB
ajis02-5323	157	9	of	of	ADP
ajis02-5323	157	10	two	two	NUM
ajis02-5323	157	11	broad	broad	ADJ
ajis02-5323	157	12	phases	phase	NOUN
ajis02-5323	157	13	:	:	PUNCT
ajis02-5323	157	14	cyber	cyber	ADJ
ajis02-5323	157	15	risk	risk	NOUN
ajis02-5323	157	16	assessment	assessment	NOUN
ajis02-5323	157	17	(	(	PUNCT
ajis02-5323	157	18	i	i	NOUN
ajis02-5323	157	19	)	)	PUNCT
ajis02-5323	157	20	in	in	ADP
ajis02-5323	157	21	the	the	DET
ajis02-5323	157	22	selection	selection	NOUN
ajis02-5323	157	23	process	process	NOUN
ajis02-5323	157	24	and	and	CCONJ
ajis02-5323	157	25	(	(	PUNCT
ajis02-5323	157	26	ii	ii	NOUN
ajis02-5323	157	27	)	)	PUNCT
ajis02-5323	157	28	after	after	ADP
ajis02-5323	157	29	the	the	DET
ajis02-5323	157	30	onboarding	onboarding	NOUN
ajis02-5323	157	31	of	of	ADP
ajis02-5323	157	32	a	a	DET
ajis02-5323	157	33	supplier	supplier	NOUN
ajis02-5323	157	34	.	.	PUNCT
ajis02-5323	158	1	ad	ad	NOUN
ajis02-5323	158	2	i	i	NOUN
ajis02-5323	158	3	)	)	PUNCT
ajis02-5323	158	4	supplier	supplier	NOUN
ajis02-5323	158	5	cyber	cyber	NOUN
ajis02-5323	158	6	risk	risk	NOUN
ajis02-5323	158	7	assessment	assessment	NOUN
ajis02-5323	158	8	in	in	ADP
ajis02-5323	158	9	the	the	DET
ajis02-5323	158	10	selection	selection	NOUN
ajis02-5323	158	11	process	process	NOUN
ajis02-5323	158	12	starts	start	VERB
ajis02-5323	158	13	with	with	ADP
ajis02-5323	158	14	comprehensively	comprehensively	ADV
ajis02-5323	158	15	identifying	identify	VERB
ajis02-5323	158	16	suppliers	supplier	NOUN
ajis02-5323	158	17	,	,	PUNCT
ajis02-5323	158	18	followed	follow	VERB
ajis02-5323	158	19	by	by	ADP
ajis02-5323	158	20	establishing	establish	VERB
ajis02-5323	158	21	a	a	DET
ajis02-5323	158	22	supplier	supplier	NOUN
ajis02-5323	158	23	’s	’s	PART
ajis02-5323	158	24	criticality	criticality	NOUN
ajis02-5323	158	25	,	,	PUNCT
ajis02-5323	158	26	which	which	PRON
ajis02-5323	158	27	then	then	ADV
ajis02-5323	158	28	determines	determine	VERB
ajis02-5323	158	29	the	the	DET
ajis02-5323	158	30	scope	scope	NOUN
ajis02-5323	158	31	and	and	CCONJ
ajis02-5323	158	32	the	the	DET
ajis02-5323	158	33	depth	depth	NOUN
ajis02-5323	158	34	of	of	ADP
ajis02-5323	158	35	supplier	supplier	NOUN
ajis02-5323	158	36	risk	risk	NOUN
ajis02-5323	158	37	assessment	assessment	NOUN
ajis02-5323	158	38	.	.	PUNCT
ajis02-5323	159	1	the	the	DET
ajis02-5323	159	2	scope	scope	NOUN
ajis02-5323	159	3	is	be	AUX
ajis02-5323	159	4	related	relate	VERB
ajis02-5323	159	5	to	to	ADP
ajis02-5323	159	6	the	the	DET
ajis02-5323	159	7	number	number	NOUN
ajis02-5323	159	8	of	of	ADP
ajis02-5323	159	9	assessment	assessment	NOUN
ajis02-5323	159	10	methods	method	NOUN
ajis02-5323	159	11	and	and	CCONJ
ajis02-5323	159	12	the	the	DET
ajis02-5323	159	13	number	number	NOUN
ajis02-5323	159	14	of	of	ADP
ajis02-5323	159	15	assessed	assessed	ADJ
ajis02-5323	159	16	suppliers	supplier	NOUN
ajis02-5323	159	17	'	'	PART
ajis02-5323	159	18	risk	risk	NOUN
ajis02-5323	159	19	posture	posture	NOUN
ajis02-5323	159	20	characteristics	characteristic	NOUN
ajis02-5323	159	21	.	.	PUNCT
ajis02-5323	160	1	the	the	DET
ajis02-5323	160	2	depth	depth	NOUN
ajis02-5323	160	3	is	be	AUX
ajis02-5323	160	4	related	relate	VERB
ajis02-5323	160	5	to	to	ADP
ajis02-5323	160	6	the	the	DET
ajis02-5323	160	7	assurance	assurance	NOUN
ajis02-5323	160	8	of	of	ADP
ajis02-5323	160	9	information	information	NOUN
ajis02-5323	160	10	.	.	PUNCT
ajis02-5323	161	1	this	this	PRON
ajis02-5323	161	2	is	be	AUX
ajis02-5323	161	3	then	then	ADV
ajis02-5323	161	4	followed	follow	VERB
ajis02-5323	161	5	by	by	ADP
ajis02-5323	161	6	determining	determine	VERB
ajis02-5323	161	7	the	the	DET
ajis02-5323	161	8	supplier	supplier	NOUN
ajis02-5323	161	9	risk	risk	NOUN
ajis02-5323	161	10	level	level	NOUN
ajis02-5323	161	11	that	that	PRON
ajis02-5323	161	12	leads	lead	VERB
ajis02-5323	161	13	to	to	ADP
ajis02-5323	161	14	the	the	DET
ajis02-5323	161	15	decision	decision	NOUN
ajis02-5323	161	16	of	of	ADP
ajis02-5323	161	17	whether	whether	SCONJ
ajis02-5323	161	18	a	a	DET
ajis02-5323	161	19	supplier	supplier	NOUN
ajis02-5323	161	20	will	will	AUX
ajis02-5323	161	21	be	be	AUX
ajis02-5323	161	22	onboarded	onboarde	VERB
ajis02-5323	161	23	.	.	PUNCT
ajis02-5323	162	1	ad	ad	PROPN
ajis02-5323	162	2	ii	ii	PROPN
ajis02-5323	162	3	)	)	PUNCT
ajis02-5323	162	4	cyber	cyber	NOUN
ajis02-5323	162	5	risk	risk	NOUN
ajis02-5323	162	6	assessment	assessment	NOUN
ajis02-5323	162	7	after	after	ADP
ajis02-5323	162	8	onboarding	onboarde	VERB
ajis02-5323	162	9	comprises	comprise	NOUN
ajis02-5323	162	10	uplifting	uplift	VERB
ajis02-5323	162	11	a	a	DET
ajis02-5323	162	12	supplier	supplier	NOUN
ajis02-5323	162	13	’s	’s	PART
ajis02-5323	162	14	risk	risk	NOUN
ajis02-5323	162	15	posture	posture	NOUN
ajis02-5323	162	16	if	if	SCONJ
ajis02-5323	162	17	a	a	DET
ajis02-5323	162	18	medium	medium	ADJ
ajis02-5323	162	19	risk	risk	NOUN
ajis02-5323	162	20	supplier	supplier	NOUN
ajis02-5323	162	21	was	be	AUX
ajis02-5323	162	22	onboarded	onboarde	VERB
ajis02-5323	162	23	and	and	CCONJ
ajis02-5323	162	24	risk	risk	NOUN
ajis02-5323	162	25	monitoring	monitoring	NOUN
ajis02-5323	162	26	methods	method	NOUN
ajis02-5323	162	27	after	after	ADP
ajis02-5323	162	28	onboarding	onboarde	VERB
ajis02-5323	162	29	.	.	PUNCT
ajis02-5323	163	1	we	we	PRON
ajis02-5323	163	2	then	then	ADV
ajis02-5323	163	3	consider	consider	VERB
ajis02-5323	163	4	how	how	SCONJ
ajis02-5323	163	5	this	this	DET
ajis02-5323	163	6	process	process	NOUN
ajis02-5323	163	7	fits	fit	VERB
ajis02-5323	163	8	to	to	ADP
ajis02-5323	163	9	a	a	DET
ajis02-5323	163	10	general	general	ADJ
ajis02-5323	163	11	cyber	cyber	NOUN
ajis02-5323	163	12	risk	risk	NOUN
ajis02-5323	163	13	assessment	assessment	NOUN
ajis02-5323	163	14	guided	guide	VERB
ajis02-5323	163	15	by	by	ADP
ajis02-5323	163	16	iso	iso	PROPN
ajis02-5323	163	17	27005	27005	NUM
ajis02-5323	163	18	and	and	CCONJ
ajis02-5323	163	19	nist	nist	NOUN
ajis02-5323	163	20	sp	sp	ADP
ajis02-5323	163	21	800	800	NUM
ajis02-5323	163	22	-	-	SYM
ajis02-5323	163	23	30	30	NUM
ajis02-5323	163	24	and	and	CCONJ
ajis02-5323	163	25	their	their	PRON
ajis02-5323	163	26	phases	phase	NOUN
ajis02-5323	163	27	of	of	ADP
ajis02-5323	163	28	risk	risk	NOUN
ajis02-5323	163	29	identification	identification	NOUN
ajis02-5323	163	30	,	,	PUNCT
ajis02-5323	163	31	risk	risk	NOUN
ajis02-5323	163	32	analysis	analysis	NOUN
ajis02-5323	163	33	,	,	PUNCT
ajis02-5323	163	34	evaluation	evaluation	NOUN
ajis02-5323	163	35	,	,	PUNCT
ajis02-5323	163	36	risk	risk	NOUN
ajis02-5323	163	37	mitigation	mitigation	NOUN
ajis02-5323	163	38	,	,	PUNCT
ajis02-5323	163	39	and	and	CCONJ
ajis02-5323	163	40	monitoring	monitoring	NOUN
ajis02-5323	163	41	of	of	ADP
ajis02-5323	163	42	cyber	cyber	ADJ
ajis02-5323	163	43	risks	risk	NOUN
ajis02-5323	163	44	.	.	PUNCT
ajis02-5323	164	1	in	in	ADP
ajis02-5323	164	2	the	the	DET
ajis02-5323	164	3	following	follow	VERB
ajis02-5323	164	4	sections	section	NOUN
ajis02-5323	164	5	,	,	PUNCT
ajis02-5323	164	6	we	we	PRON
ajis02-5323	164	7	describe	describe	VERB
ajis02-5323	164	8	these	these	DET
ajis02-5323	164	9	phases	phase	NOUN
ajis02-5323	164	10	in	in	ADP
ajis02-5323	164	11	detail	detail	NOUN
ajis02-5323	164	12	.	.	PUNCT
ajis02-5323	165	1	4.1	4.1	NUM
ajis02-5323	165	2	cyber	cyber	NOUN
ajis02-5323	165	3	risk	risk	NOUN
ajis02-5323	165	4	assessment	assessment	NOUN
ajis02-5323	165	5	in	in	ADP
ajis02-5323	165	6	the	the	DET
ajis02-5323	165	7	selection	selection	NOUN
ajis02-5323	165	8	process	process	NOUN
ajis02-5323	165	9	4.1.1	4.1.1	NUM
ajis02-5323	165	10	identification	identification	NOUN
ajis02-5323	165	11	of	of	ADP
ajis02-5323	165	12	suppliers	supplier	NOUN
ajis02-5323	165	13	one	one	NUM
ajis02-5323	165	14	of	of	ADP
ajis02-5323	165	15	the	the	DET
ajis02-5323	165	16	most	most	ADV
ajis02-5323	165	17	challenging	challenging	ADJ
ajis02-5323	165	18	steps	step	NOUN
ajis02-5323	165	19	in	in	ADP
ajis02-5323	165	20	the	the	DET
ajis02-5323	165	21	process	process	NOUN
ajis02-5323	165	22	of	of	ADP
ajis02-5323	165	23	supplier	supplier	NOUN
ajis02-5323	165	24	cyber	cyber	NOUN
ajis02-5323	165	25	risk	risk	NOUN
ajis02-5323	165	26	assessment	assessment	NOUN
ajis02-5323	165	27	is	be	AUX
ajis02-5323	165	28	a	a	DET
ajis02-5323	165	29	comprehensive	comprehensive	ADJ
ajis02-5323	165	30	identification	identification	NOUN
ajis02-5323	165	31	of	of	ADP
ajis02-5323	165	32	suppliers	supplier	NOUN
ajis02-5323	165	33	.	.	PUNCT
ajis02-5323	166	1	one	one	NUM
ajis02-5323	166	2	challenge	challenge	NOUN
ajis02-5323	166	3	is	be	AUX
ajis02-5323	166	4	the	the	DET
ajis02-5323	166	5	presence	presence	NOUN
ajis02-5323	166	6	of	of	ADP
ajis02-5323	166	7	shadow	shadow	NOUN
ajis02-5323	166	8	it	it	PRON
ajis02-5323	166	9	,	,	PUNCT
ajis02-5323	166	10	which	which	PRON
ajis02-5323	166	11	in	in	ADP
ajis02-5323	166	12	the	the	DET
ajis02-5323	166	13	past	past	NOUN
ajis02-5323	166	14	has	have	AUX
ajis02-5323	166	15	involved	involve	VERB
ajis02-5323	166	16	employees	employee	NOUN
ajis02-5323	166	17	installing	instal	VERB
ajis02-5323	166	18	applications	application	NOUN
ajis02-5323	166	19	without	without	ADP
ajis02-5323	166	20	the	the	DET
ajis02-5323	166	21	awareness	awareness	NOUN
ajis02-5323	166	22	of	of	ADP
ajis02-5323	166	23	the	the	DET
ajis02-5323	166	24	central	central	ADJ
ajis02-5323	166	25	procurement	procurement	NOUN
ajis02-5323	166	26	or	or	CCONJ
ajis02-5323	166	27	the	the	DET
ajis02-5323	166	28	it	it	PROPN
ajis02-5323	166	29	department	department	NOUN
ajis02-5323	166	30	.	.	PUNCT
ajis02-5323	167	1	now	now	ADV
ajis02-5323	167	2	,	,	PUNCT
ajis02-5323	167	3	shadow	shadow	VERB
ajis02-5323	167	4	it	it	PRON
ajis02-5323	167	5	has	have	AUX
ajis02-5323	167	6	moved	move	VERB
ajis02-5323	167	7	to	to	ADP
ajis02-5323	167	8	cloud	cloud	NOUN
ajis02-5323	167	9	computing	computing	NOUN
ajis02-5323	167	10	,	,	PUNCT
ajis02-5323	167	11	where	where	SCONJ
ajis02-5323	167	12	employees	employee	NOUN
ajis02-5323	167	13	take	take	VERB
ajis02-5323	167	14	data	datum	NOUN
ajis02-5323	167	15	out	out	ADP
ajis02-5323	167	16	of	of	ADP
ajis02-5323	167	17	corporate	corporate	ADJ
ajis02-5323	167	18	applications	application	NOUN
ajis02-5323	167	19	and	and	CCONJ
ajis02-5323	167	20	upload	upload	VERB
ajis02-5323	167	21	it	it	PRON
ajis02-5323	167	22	onto	onto	ADP
ajis02-5323	167	23	free	free	ADJ
ajis02-5323	167	24	websites	website	NOUN
ajis02-5323	167	25	,	,	PUNCT
ajis02-5323	167	26	like	like	ADP
ajis02-5323	167	27	generative	generative	NOUN
ajis02-5323	167	28	ai	ai	PROPN
ajis02-5323	167	29	applications	application	NOUN
ajis02-5323	167	30	or	or	CCONJ
ajis02-5323	167	31	cloud	cloud	NOUN
ajis02-5323	167	32	computing	computing	NOUN
ajis02-5323	167	33	services	service	NOUN
ajis02-5323	167	34	.	.	PUNCT
ajis02-5323	168	1	“	"	PUNCT
ajis02-5323	168	2	i	i	PRON
ajis02-5323	168	3	'm	be	AUX
ajis02-5323	168	4	aware	aware	ADJ
ajis02-5323	168	5	of	of	ADP
ajis02-5323	168	6	one	one	NUM
ajis02-5323	168	7	organisation	organisation	NOUN
ajis02-5323	168	8	putting	put	VERB
ajis02-5323	168	9	the	the	DET
ajis02-5323	168	10	data	datum	NOUN
ajis02-5323	168	11	of	of	ADP
ajis02-5323	168	12	2	2	NUM
ajis02-5323	168	13	million	million	NUM
ajis02-5323	168	14	australians	australian	NOUN
ajis02-5323	168	15	into	into	ADP
ajis02-5323	168	16	some	some	DET
ajis02-5323	168	17	cheap	cheap	ADJ
ajis02-5323	168	18	cloud	cloud	NOUN
ajis02-5323	168	19	service	service	NOUN
ajis02-5323	168	20	,	,	PUNCT
ajis02-5323	168	21	where	where	SCONJ
ajis02-5323	168	22	some	some	DET
ajis02-5323	168	23	executive	executive	NOUN
ajis02-5323	168	24	used	use	VERB
ajis02-5323	168	25	a	a	DET
ajis02-5323	168	26	credit	credit	NOUN
ajis02-5323	168	27	card	card	NOUN
ajis02-5323	168	28	doing	do	VERB
ajis02-5323	168	29	some	some	DET
ajis02-5323	168	30	data	datum	NOUN
ajis02-5323	168	31	analytics	analytic	NOUN
ajis02-5323	168	32	for	for	ADP
ajis02-5323	168	33	$	$	SYM
ajis02-5323	168	34	50	50	NUM
ajis02-5323	168	35	a	a	DET
ajis02-5323	168	36	month	month	NOUN
ajis02-5323	168	37	”	"	PUNCT
ajis02-5323	168	38	(	(	PUNCT
ajis02-5323	168	39	p31	p31	PROPN
ajis02-5323	168	40	)	)	PUNCT
ajis02-5323	168	41	.	.	PUNCT
ajis02-5323	169	1	mature	mature	ADJ
ajis02-5323	169	2	organizations	organization	NOUN
ajis02-5323	169	3	address	address	VERB
ajis02-5323	169	4	this	this	DET
ajis02-5323	169	5	challenge	challenge	NOUN
ajis02-5323	169	6	by	by	ADP
ajis02-5323	169	7	communicating	communicate	VERB
ajis02-5323	169	8	the	the	DET
ajis02-5323	169	9	risk	risk	NOUN
ajis02-5323	169	10	of	of	ADP
ajis02-5323	169	11	exposing	expose	VERB
ajis02-5323	169	12	data	datum	NOUN
ajis02-5323	169	13	to	to	ADP
ajis02-5323	169	14	their	their	PRON
ajis02-5323	169	15	employees	employee	NOUN
ajis02-5323	169	16	or	or	CCONJ
ajis02-5323	169	17	by	by	ADP
ajis02-5323	169	18	blocking	block	VERB
ajis02-5323	169	19	such	such	ADJ
ajis02-5323	169	20	actions	action	NOUN
ajis02-5323	169	21	technically	technically	ADV
ajis02-5323	169	22	.	.	PUNCT
ajis02-5323	170	1	the	the	DET
ajis02-5323	170	2	lack	lack	NOUN
ajis02-5323	170	3	of	of	ADP
ajis02-5323	170	4	central	central	ADJ
ajis02-5323	170	5	procurement	procurement	NOUN
ajis02-5323	170	6	is	be	AUX
ajis02-5323	170	7	another	another	DET
ajis02-5323	170	8	problem	problem	NOUN
ajis02-5323	170	9	in	in	ADP
ajis02-5323	170	10	the	the	DET
ajis02-5323	170	11	identification	identification	NOUN
ajis02-5323	170	12	of	of	ADP
ajis02-5323	170	13	suppliers	supplier	NOUN
ajis02-5323	170	14	.	.	PUNCT
ajis02-5323	171	1	some	some	DET
ajis02-5323	171	2	organizations	organization	NOUN
ajis02-5323	171	3	have	have	VERB
ajis02-5323	171	4	policies	policy	NOUN
ajis02-5323	171	5	in	in	ADP
ajis02-5323	171	6	which	which	PRON
ajis02-5323	171	7	only	only	ADV
ajis02-5323	171	8	suppliers	supplier	NOUN
ajis02-5323	171	9	above	above	ADP
ajis02-5323	171	10	certain	certain	ADJ
ajis02-5323	171	11	thresholds	threshold	NOUN
ajis02-5323	171	12	are	be	AUX
ajis02-5323	171	13	subject	subject	ADJ
ajis02-5323	171	14	to	to	ADP
ajis02-5323	171	15	due	due	ADJ
ajis02-5323	171	16	diligence	diligence	NOUN
ajis02-5323	171	17	,	,	PUNCT
ajis02-5323	171	18	while	while	SCONJ
ajis02-5323	171	19	those	those	PRON
ajis02-5323	171	20	below	below	ADV
ajis02-5323	171	21	may	may	AUX
ajis02-5323	171	22	be	be	AUX
ajis02-5323	171	23	onboarded	onboarde	VERB
ajis02-5323	171	24	by	by	ADP
ajis02-5323	171	25	business	business	NOUN
ajis02-5323	171	26	units	unit	NOUN
ajis02-5323	171	27	.	.	PUNCT
ajis02-5323	172	1	risk	risk	NOUN
ajis02-5323	172	2	assessors	assessor	NOUN
ajis02-5323	172	3	could	could	AUX
ajis02-5323	172	4	find	find	VERB
ajis02-5323	172	5	out	out	ADP
ajis02-5323	172	6	about	about	ADP
ajis02-5323	172	7	all	all	DET
ajis02-5323	172	8	suppliers	supplier	NOUN
ajis02-5323	172	9	by	by	ADP
ajis02-5323	172	10	obtaining	obtain	VERB
ajis02-5323	172	11	information	information	NOUN
ajis02-5323	172	12	about	about	ADP
ajis02-5323	172	13	credit	credit	NOUN
ajis02-5323	172	14	card	card	NOUN
ajis02-5323	172	15	payments	payment	NOUN
ajis02-5323	172	16	from	from	ADP
ajis02-5323	172	17	the	the	DET
ajis02-5323	172	18	accounting	accounting	NOUN
ajis02-5323	172	19	department	department	NOUN
ajis02-5323	172	20	.	.	PUNCT
ajis02-5323	173	1	a	a	DET
ajis02-5323	173	2	third	third	ADJ
ajis02-5323	173	3	problem	problem	NOUN
ajis02-5323	173	4	is	be	AUX
ajis02-5323	173	5	open	open	ADJ
ajis02-5323	173	6	-	-	PUNCT
ajis02-5323	173	7	source	source	NOUN
ajis02-5323	173	8	software	software	NOUN
ajis02-5323	173	9	components	component	NOUN
ajis02-5323	173	10	,	,	PUNCT
ajis02-5323	173	11	which	which	PRON
ajis02-5323	173	12	are	be	AUX
ajis02-5323	173	13	not	not	PART
ajis02-5323	173	14	even	even	ADV
ajis02-5323	173	15	billed	bill	VERB
ajis02-5323	173	16	.	.	PUNCT
ajis02-5323	174	1	“	"	PUNCT
ajis02-5323	174	2	one	one	NUM
ajis02-5323	174	3	of	of	ADP
ajis02-5323	174	4	the	the	DET
ajis02-5323	174	5	root	root	NOUN
ajis02-5323	174	6	causes	cause	VERB
ajis02-5323	174	7	developers	developer	NOUN
ajis02-5323	174	8	are	be	AUX
ajis02-5323	174	9	downloading	download	VERB
ajis02-5323	174	10	components	component	NOUN
ajis02-5323	174	11	from	from	ADP
ajis02-5323	174	12	other	other	ADJ
ajis02-5323	174	13	frameworks	framework	NOUN
ajis02-5323	174	14	to	to	PART
ajis02-5323	174	15	add	add	VERB
ajis02-5323	174	16	to	to	ADP
ajis02-5323	174	17	their	their	PRON
ajis02-5323	174	18	software	software	NOUN
ajis02-5323	174	19	is	be	AUX
ajis02-5323	174	20	culture	culture	NOUN
ajis02-5323	174	21	.	.	PUNCT
ajis02-5323	175	1	i	i	PRON
ajis02-5323	175	2	mean	mean	VERB
ajis02-5323	175	3	,	,	PUNCT
ajis02-5323	175	4	most	most	ADJ
ajis02-5323	175	5	developers	developer	NOUN
ajis02-5323	175	6	feel	feel	VERB
ajis02-5323	175	7	like	like	SCONJ
ajis02-5323	175	8	they	they	PRON
ajis02-5323	175	9	're	be	AUX
ajis02-5323	175	10	under	under	ADP
ajis02-5323	175	11	massive	massive	ADJ
ajis02-5323	175	12	delivery	delivery	NOUN
ajis02-5323	175	13	time	time	NOUN
ajis02-5323	175	14	pressures2	pressures2	NOUN
ajis02-5323	175	15	.	.	PUNCT
ajis02-5323	176	1	so	so	ADV
ajis02-5323	176	2	,	,	PUNCT
ajis02-5323	176	3	it	it	PRON
ajis02-5323	176	4	's	be	AUX
ajis02-5323	176	5	better	well	ADJ
ajis02-5323	176	6	to	to	PART
ajis02-5323	176	7	borrow	borrow	VERB
ajis02-5323	176	8	another	another	DET
ajis02-5323	176	9	component	component	NOUN
ajis02-5323	176	10	from	from	ADP
ajis02-5323	176	11	somewhere	somewhere	ADV
ajis02-5323	176	12	else	else	ADV
ajis02-5323	176	13	”	"	PUNCT
ajis02-5323	176	14	(	(	PUNCT
ajis02-5323	176	15	p31	p31	PROPN
ajis02-5323	176	16	)	)	PUNCT
ajis02-5323	176	17	.	.	PUNCT
ajis02-5323	177	1	requiring	require	VERB
ajis02-5323	177	2	a	a	DET
ajis02-5323	177	3	software	software	NOUN
ajis02-5323	177	4	bill	bill	NOUN
ajis02-5323	177	5	of	of	ADP
ajis02-5323	177	6	materials	material	NOUN
ajis02-5323	177	7	,	,	PUNCT
ajis02-5323	177	8	as	as	SCONJ
ajis02-5323	177	9	mandated	mandate	VERB
ajis02-5323	177	10	by	by	ADP
ajis02-5323	177	11	the	the	DET
ajis02-5323	177	12	us	us	PROPN
ajis02-5323	177	13	federal	federal	ADJ
ajis02-5323	177	14	government	government	NOUN
ajis02-5323	177	15	for	for	ADP
ajis02-5323	177	16	software	software	NOUN
ajis02-5323	177	17	provided	provide	VERB
ajis02-5323	177	18	to	to	ADP
ajis02-5323	177	19	the	the	DET
ajis02-5323	177	20	federal	federal	ADJ
ajis02-5323	177	21	government	government	NOUN
ajis02-5323	177	22	(	(	PUNCT
ajis02-5323	177	23	biden	biden	PROPN
ajis02-5323	177	24	’s	’s	PART
ajis02-5323	177	25	executive	executive	ADJ
ajis02-5323	177	26	order	order	NOUN
ajis02-5323	177	27	on	on	ADP
ajis02-5323	177	28	improving	improve	VERB
ajis02-5323	177	29	the	the	DET
ajis02-5323	177	30	nation	nation	NOUN
ajis02-5323	177	31	’s	’s	PART
ajis02-5323	177	32	cybersecurity	cybersecurity	NOUN
ajis02-5323	177	33	,	,	PUNCT
ajis02-5323	177	34	eo	eo	PROPN
ajis02-5323	177	35	14028	14028	NUM
ajis02-5323	177	36	,	,	PUNCT
ajis02-5323	177	37	2021	2021	NUM
ajis02-5323	177	38	)	)	PUNCT
ajis02-5323	177	39	,	,	PUNCT
ajis02-5323	177	40	would	would	AUX
ajis02-5323	177	41	contribute	contribute	VERB
ajis02-5323	177	42	to	to	ADP
ajis02-5323	177	43	the	the	DET
ajis02-5323	177	44	identification	identification	NOUN
ajis02-5323	177	45	of	of	ADP
ajis02-5323	177	46	all	all	DET
ajis02-5323	177	47	software	software	NOUN
ajis02-5323	177	48	components	component	NOUN
ajis02-5323	177	49	.	.	PUNCT
ajis02-5323	178	1	however	however	ADV
ajis02-5323	178	2	,	,	PUNCT
ajis02-5323	178	3	we	we	PRON
ajis02-5323	178	4	have	have	AUX
ajis02-5323	178	5	not	not	PART
ajis02-5323	178	6	observed	observe	VERB
ajis02-5323	178	7	this	this	DET
ajis02-5323	178	8	practice	practice	NOUN
ajis02-5323	178	9	in	in	ADP
ajis02-5323	178	10	the	the	DET
ajis02-5323	178	11	organizations	organization	NOUN
ajis02-5323	178	12	we	we	PRON
ajis02-5323	178	13	analyzed	analyze	VERB
ajis02-5323	178	14	.	.	PUNCT
ajis02-5323	179	1	2	2	NUM
ajis02-5323	179	2	more	more	ADJ
ajis02-5323	179	3	about	about	ADP
ajis02-5323	179	4	the	the	DET
ajis02-5323	179	5	impact	impact	NOUN
ajis02-5323	179	6	of	of	ADP
ajis02-5323	179	7	time	time	NOUN
ajis02-5323	179	8	pressure	pressure	NOUN
ajis02-5323	179	9	on	on	ADP
ajis02-5323	179	10	cybersecurity	cybersecurity	NOUN
ajis02-5323	179	11	behaviours	behaviour	NOUN
ajis02-5323	179	12	in	in	ADP
ajis02-5323	179	13	chowdhury	chowdhury	PROPN
ajis02-5323	179	14	et	et	PROPN
ajis02-5323	179	15	al	al	PROPN
ajis02-5323	179	16	.	.	PROPN
ajis02-5323	180	1	(	(	PUNCT
ajis02-5323	180	2	2019	2019	NUM
ajis02-5323	180	3	)	)	PUNCT
ajis02-5323	180	4	.	.	PUNCT
ajis02-5323	181	1	australasian	australasian	ADJ
ajis02-5323	181	2	journal	journal	NOUN
ajis02-5323	181	3	of	of	ADP
ajis02-5323	181	4	information	information	NOUN
ajis02-5323	181	5	systems	system	NOUN
ajis02-5323	181	6	slapnicar	slapnicar	NOUN
ajis02-5323	181	7	,	,	PUNCT
ajis02-5323	181	8	vidmar	vidmar	NOUN
ajis02-5323	181	9	&	&	CCONJ
ajis02-5323	181	10	tsen	tsen	ADJ
ajis02-5323	181	11	2025	2025	NUM
ajis02-5323	181	12	,	,	PUNCT
ajis02-5323	181	13	vol	vol	NOUN
ajis02-5323	181	14	29	29	NUM
ajis02-5323	181	15	,	,	PUNCT
ajis02-5323	181	16	research	research	NOUN
ajis02-5323	181	17	article	article	NOUN
ajis02-5323	181	18	process	process	NOUN
ajis02-5323	181	19	theory	theory	NOUN
ajis02-5323	181	20	of	of	ADP
ajis02-5323	181	21	supplier	supplier	NOUN
ajis02-5323	181	22	cyber	cyber	NOUN
ajis02-5323	181	23	risk	risk	NOUN
ajis02-5323	181	24	assessment	assessment	NOUN
ajis02-5323	181	25	13	13	NUM
ajis02-5323	181	26	4.1.2	4.1.2	NUM
ajis02-5323	181	27	criticality	criticality	NOUN
ajis02-5323	181	28	once	once	SCONJ
ajis02-5323	181	29	suppliers	supplier	NOUN
ajis02-5323	181	30	are	be	AUX
ajis02-5323	181	31	identified	identify	VERB
ajis02-5323	181	32	,	,	PUNCT
ajis02-5323	181	33	organizations	organization	NOUN
ajis02-5323	181	34	assess	assess	VERB
ajis02-5323	181	35	their	their	PRON
ajis02-5323	181	36	criticality	criticality	NOUN
ajis02-5323	181	37	by	by	ADP
ajis02-5323	181	38	considering	consider	VERB
ajis02-5323	181	39	the	the	DET
ajis02-5323	181	40	following	follow	VERB
ajis02-5323	181	41	three	three	NUM
ajis02-5323	181	42	factors	factor	NOUN
ajis02-5323	181	43	:	:	PUNCT
ajis02-5323	181	44	(	(	PUNCT
ajis02-5323	181	45	i	i	NOUN
ajis02-5323	181	46	)	)	PUNCT
ajis02-5323	181	47	the	the	DET
ajis02-5323	181	48	criticality	criticality	NOUN
ajis02-5323	181	49	of	of	ADP
ajis02-5323	181	50	a	a	DET
ajis02-5323	181	51	supplier	supplier	NOUN
ajis02-5323	181	52	to	to	ADP
ajis02-5323	181	53	the	the	DET
ajis02-5323	181	54	focal	focal	ADJ
ajis02-5323	181	55	organization	organization	NOUN
ajis02-5323	181	56	’s	’s	PART
ajis02-5323	181	57	business	business	NOUN
ajis02-5323	181	58	processes	process	NOUN
ajis02-5323	181	59	,	,	PUNCT
ajis02-5323	181	60	defined	define	VERB
ajis02-5323	181	61	by	by	ADP
ajis02-5323	181	62	the	the	DET
ajis02-5323	181	63	concentration	concentration	NOUN
ajis02-5323	181	64	risk	risk	NOUN
ajis02-5323	181	65	(	(	PUNCT
ajis02-5323	181	66	number	number	NOUN
ajis02-5323	181	67	of	of	ADP
ajis02-5323	181	68	suppliers	supplier	NOUN
ajis02-5323	181	69	of	of	ADP
ajis02-5323	181	70	the	the	DET
ajis02-5323	181	71	same	same	ADJ
ajis02-5323	181	72	service	service	NOUN
ajis02-5323	181	73	that	that	PRON
ajis02-5323	181	74	an	an	DET
ajis02-5323	181	75	organization	organization	NOUN
ajis02-5323	181	76	relies	rely	VERB
ajis02-5323	181	77	on	on	ADP
ajis02-5323	181	78	)	)	PUNCT
ajis02-5323	181	79	,	,	PUNCT
ajis02-5323	181	80	specificity	specificity	NOUN
ajis02-5323	181	81	of	of	ADP
ajis02-5323	181	82	services	service	NOUN
ajis02-5323	181	83	/	/	SYM
ajis02-5323	181	84	products	product	NOUN
ajis02-5323	181	85	,	,	PUNCT
ajis02-5323	181	86	and	and	CCONJ
ajis02-5323	181	87	annual	annual	ADJ
ajis02-5323	181	88	spending	spending	NOUN
ajis02-5323	181	89	for	for	ADP
ajis02-5323	181	90	a	a	DET
ajis02-5323	181	91	certain	certain	ADJ
ajis02-5323	181	92	supplier	supplier	NOUN
ajis02-5323	181	93	;	;	PUNCT
ajis02-5323	181	94	(	(	PUNCT
ajis02-5323	181	95	ii	ii	X
ajis02-5323	181	96	)	)	PUNCT
ajis02-5323	181	97	the	the	DET
ajis02-5323	181	98	data	datum	NOUN
ajis02-5323	181	99	sensitivity	sensitivity	NOUN
ajis02-5323	181	100	the	the	DET
ajis02-5323	181	101	supplier	supplier	NOUN
ajis02-5323	181	102	hosts	host	NOUN
ajis02-5323	181	103	or	or	CCONJ
ajis02-5323	181	104	has	have	VERB
ajis02-5323	181	105	access	access	NOUN
ajis02-5323	181	106	to	to	ADP
ajis02-5323	181	107	(	(	PUNCT
ajis02-5323	181	108	type	type	NOUN
ajis02-5323	181	109	of	of	ADP
ajis02-5323	181	110	data	datum	NOUN
ajis02-5323	181	111	,	,	PUNCT
ajis02-5323	181	112	management	management	NOUN
ajis02-5323	181	113	of	of	ADP
ajis02-5323	181	114	data	datum	NOUN
ajis02-5323	181	115	in	in	ADP
ajis02-5323	181	116	its	its	PRON
ajis02-5323	181	117	entire	entire	ADJ
ajis02-5323	181	118	life	life	NOUN
ajis02-5323	181	119	-	-	PUNCT
ajis02-5323	181	120	cycle	cycle	NOUN
ajis02-5323	181	121	,	,	PUNCT
ajis02-5323	181	122	jurisdiction	jurisdiction	NOUN
ajis02-5323	181	123	in	in	ADP
ajis02-5323	181	124	which	which	PRON
ajis02-5323	181	125	the	the	DET
ajis02-5323	181	126	data	data	NOUN
ajis02-5323	181	127	is	be	AUX
ajis02-5323	181	128	stored	store	VERB
ajis02-5323	181	129	)	)	PUNCT
ajis02-5323	181	130	;	;	PUNCT
ajis02-5323	181	131	and	and	CCONJ
ajis02-5323	181	132	(	(	PUNCT
ajis02-5323	181	133	iii	iii	X
ajis02-5323	181	134	)	)	PUNCT
ajis02-5323	181	135	it	it	PRON
ajis02-5323	181	136	integration	integration	NOUN
ajis02-5323	181	137	,	,	PUNCT
ajis02-5323	181	138	which	which	PRON
ajis02-5323	181	139	is	be	AUX
ajis02-5323	181	140	associated	associate	VERB
ajis02-5323	181	141	with	with	ADP
ajis02-5323	181	142	the	the	DET
ajis02-5323	181	143	nature	nature	NOUN
ajis02-5323	181	144	of	of	ADP
ajis02-5323	181	145	services	service	NOUN
ajis02-5323	181	146	,	,	PUNCT
ajis02-5323	181	147	product	product	NOUN
ajis02-5323	181	148	and/or	and/or	CCONJ
ajis02-5323	181	149	technology	technology	NOUN
ajis02-5323	181	150	provided	provide	VERB
ajis02-5323	181	151	by	by	ADP
ajis02-5323	181	152	a	a	DET
ajis02-5323	181	153	supplier	supplier	NOUN
ajis02-5323	181	154	,	,	PUNCT
ajis02-5323	181	155	such	such	ADJ
ajis02-5323	181	156	as	as	ADP
ajis02-5323	181	157	software	software	NOUN
ajis02-5323	181	158	-	-	PUNCT
ajis02-5323	181	159	as	as	ADP
ajis02-5323	181	160	-	-	PUNCT
ajis02-5323	181	161	a	a	DET
ajis02-5323	181	162	-	-	PUNCT
ajis02-5323	181	163	service	service	NOUN
ajis02-5323	181	164	(	(	PUNCT
ajis02-5323	181	165	saas	saas	NOUN
ajis02-5323	181	166	)	)	PUNCT
ajis02-5323	181	167	,	,	PUNCT
ajis02-5323	181	168	infrastructure	infrastructure	NOUN
ajis02-5323	181	169	-	-	PUNCT
ajis02-5323	181	170	as	as	ADP
ajis02-5323	181	171	-	-	PUNCT
ajis02-5323	181	172	a	a	DET
ajis02-5323	181	173	-	-	PUNCT
ajis02-5323	181	174	service	service	NOUN
ajis02-5323	181	175	(	(	PUNCT
ajis02-5323	181	176	iaas	iaas	PROPN
ajis02-5323	181	177	)	)	PUNCT
ajis02-5323	181	178	,	,	PUNCT
ajis02-5323	181	179	or	or	CCONJ
ajis02-5323	181	180	platformas	platformas	PROPN
ajis02-5323	181	181	-	-	PUNCT
ajis02-5323	181	182	a	a	DET
ajis02-5323	181	183	-	-	PUNCT
ajis02-5323	181	184	service	service	NOUN
ajis02-5323	181	185	(	(	PUNCT
ajis02-5323	181	186	paas	paas	NOUN
ajis02-5323	181	187	)	)	PUNCT
ajis02-5323	181	188	.	.	PUNCT
ajis02-5323	182	1	in	in	ADP
ajis02-5323	182	2	the	the	DET
ajis02-5323	182	3	eu	eu	PROPN
ajis02-5323	182	4	banking	banking	NOUN
ajis02-5323	182	5	sector	sector	NOUN
ajis02-5323	182	6	,	,	PUNCT
ajis02-5323	182	7	prudential	prudential	ADJ
ajis02-5323	182	8	regulation	regulation	NOUN
ajis02-5323	182	9	(	(	PUNCT
ajis02-5323	182	10	the	the	DET
ajis02-5323	182	11	european	european	PROPN
ajis02-5323	182	12	banking	banking	PROPN
ajis02-5323	182	13	authority	authority	NOUN
ajis02-5323	182	14	)	)	PUNCT
ajis02-5323	182	15	mandates	mandate	VERB
ajis02-5323	182	16	a	a	DET
ajis02-5323	182	17	clear	clear	ADJ
ajis02-5323	182	18	distinction	distinction	NOUN
ajis02-5323	182	19	between	between	ADP
ajis02-5323	182	20	regular	regular	ADJ
ajis02-5323	182	21	and	and	CCONJ
ajis02-5323	182	22	critically	critically	ADV
ajis02-5323	182	23	important	important	ADJ
ajis02-5323	182	24	suppliers	supplier	NOUN
ajis02-5323	182	25	,	,	PUNCT
ajis02-5323	182	26	with	with	ADP
ajis02-5323	182	27	an	an	DET
ajis02-5323	182	28	assessment	assessment	NOUN
ajis02-5323	182	29	process	process	NOUN
ajis02-5323	182	30	that	that	PRON
ajis02-5323	182	31	matches	match	VERB
ajis02-5323	182	32	the	the	DET
ajis02-5323	182	33	level	level	NOUN
ajis02-5323	182	34	of	of	ADP
ajis02-5323	182	35	criticality	criticality	NOUN
ajis02-5323	182	36	.	.	PUNCT
ajis02-5323	183	1	consequently	consequently	ADV
ajis02-5323	183	2	,	,	PUNCT
ajis02-5323	183	3	banks	bank	NOUN
ajis02-5323	183	4	follow	follow	VERB
ajis02-5323	183	5	the	the	DET
ajis02-5323	183	6	most	most	ADV
ajis02-5323	183	7	rigorous	rigorous	ADJ
ajis02-5323	183	8	processes	process	NOUN
ajis02-5323	183	9	of	of	ADP
ajis02-5323	183	10	supplier	supplier	NOUN
ajis02-5323	183	11	criticality	criticality	NOUN
ajis02-5323	183	12	classification	classification	NOUN
ajis02-5323	183	13	,	,	PUNCT
ajis02-5323	183	14	formally	formally	ADV
ajis02-5323	183	15	linking	link	VERB
ajis02-5323	183	16	it	it	PRON
ajis02-5323	183	17	to	to	ADP
ajis02-5323	183	18	business	business	NOUN
ajis02-5323	183	19	impact	impact	NOUN
ajis02-5323	183	20	analysis	analysis	NOUN
ajis02-5323	183	21	.	.	PUNCT
ajis02-5323	184	1	organisations	organisation	NOUN
ajis02-5323	184	2	generally	generally	ADV
ajis02-5323	184	3	rate	rate	VERB
ajis02-5323	184	4	suppliers	supplier	NOUN
ajis02-5323	184	5	using	use	VERB
ajis02-5323	184	6	qualitative	qualitative	ADJ
ajis02-5323	184	7	scores	score	NOUN
ajis02-5323	184	8	for	for	ADP
ajis02-5323	184	9	criticality	criticality	NOUN
ajis02-5323	184	10	,	,	PUNCT
ajis02-5323	184	11	such	such	ADJ
ajis02-5323	184	12	as	as	ADP
ajis02-5323	184	13	critical	critical	ADJ
ajis02-5323	184	14	,	,	PUNCT
ajis02-5323	184	15	high	high	ADJ
ajis02-5323	184	16	,	,	PUNCT
ajis02-5323	184	17	medium	medium	ADJ
ajis02-5323	184	18	,	,	PUNCT
ajis02-5323	184	19	and	and	CCONJ
ajis02-5323	184	20	low	low	ADJ
ajis02-5323	184	21	.	.	PUNCT
ajis02-5323	185	1	however	however	ADV
ajis02-5323	185	2	,	,	PUNCT
ajis02-5323	185	3	not	not	PART
ajis02-5323	185	4	all	all	DET
ajis02-5323	185	5	organizations	organization	NOUN
ajis02-5323	185	6	have	have	VERB
ajis02-5323	185	7	a	a	DET
ajis02-5323	185	8	defined	define	VERB
ajis02-5323	185	9	process	process	NOUN
ajis02-5323	185	10	and	and	CCONJ
ajis02-5323	185	11	key	key	ADJ
ajis02-5323	185	12	risk	risk	NOUN
ajis02-5323	185	13	indicators	indicator	NOUN
ajis02-5323	185	14	in	in	ADP
ajis02-5323	185	15	place	place	NOUN
ajis02-5323	185	16	and	and	CCONJ
ajis02-5323	185	17	determine	determine	VERB
ajis02-5323	185	18	supplier	supplier	NOUN
ajis02-5323	185	19	criticality	criticality	NOUN
ajis02-5323	185	20	by	by	ADP
ajis02-5323	185	21	a	a	DET
ajis02-5323	185	22	rule	rule	NOUN
ajis02-5323	185	23	of	of	ADP
ajis02-5323	185	24	thumb	thumb	NOUN
ajis02-5323	185	25	.	.	PUNCT
ajis02-5323	186	1	organizations	organization	NOUN
ajis02-5323	186	2	tend	tend	VERB
ajis02-5323	186	3	not	not	PART
ajis02-5323	186	4	to	to	PART
ajis02-5323	186	5	spend	spend	VERB
ajis02-5323	186	6	resources	resource	NOUN
ajis02-5323	186	7	on	on	ADP
ajis02-5323	186	8	suppliers	supplier	NOUN
ajis02-5323	186	9	of	of	ADP
ajis02-5323	186	10	low	low	ADJ
ajis02-5323	186	11	criticality	criticality	NOUN
ajis02-5323	186	12	;	;	PUNCT
ajis02-5323	186	13	our	our	PRON
ajis02-5323	186	14	interviewees	interviewee	NOUN
ajis02-5323	186	15	suggest	suggest	VERB
ajis02-5323	186	16	that	that	SCONJ
ajis02-5323	186	17	in	in	ADP
ajis02-5323	186	18	some	some	DET
ajis02-5323	186	19	organizations	organization	NOUN
ajis02-5323	186	20	,	,	PUNCT
ajis02-5323	186	21	they	they	PRON
ajis02-5323	186	22	are	be	AUX
ajis02-5323	186	23	entirely	entirely	ADV
ajis02-5323	186	24	left	leave	VERB
ajis02-5323	186	25	out	out	ADP
ajis02-5323	186	26	of	of	ADP
ajis02-5323	186	27	cyber	cyber	ADJ
ajis02-5323	186	28	risk	risk	NOUN
ajis02-5323	186	29	assessment	assessment	NOUN
ajis02-5323	186	30	.	.	PUNCT
ajis02-5323	187	1	the	the	DET
ajis02-5323	187	2	size	size	NOUN
ajis02-5323	187	3	of	of	ADP
ajis02-5323	187	4	a	a	DET
ajis02-5323	187	5	prospective	prospective	ADJ
ajis02-5323	187	6	supplier	supplier	NOUN
ajis02-5323	187	7	is	be	AUX
ajis02-5323	187	8	also	also	ADV
ajis02-5323	187	9	considered	consider	VERB
ajis02-5323	187	10	−	−	PROPN
ajis02-5323	187	11	if	if	SCONJ
ajis02-5323	187	12	it	it	PRON
ajis02-5323	187	13	is	be	AUX
ajis02-5323	187	14	small	small	ADJ
ajis02-5323	187	15	and	and	CCONJ
ajis02-5323	187	16	does	do	AUX
ajis02-5323	187	17	not	not	PART
ajis02-5323	187	18	have	have	VERB
ajis02-5323	187	19	many	many	ADJ
ajis02-5323	187	20	resources	resource	NOUN
ajis02-5323	187	21	and	and	CCONJ
ajis02-5323	187	22	dedicated	dedicated	ADJ
ajis02-5323	187	23	security	security	NOUN
ajis02-5323	187	24	staff	staff	NOUN
ajis02-5323	187	25	,	,	PUNCT
ajis02-5323	187	26	it	it	PRON
ajis02-5323	187	27	wo	will	AUX
ajis02-5323	187	28	n’t	not	PART
ajis02-5323	187	29	be	be	AUX
ajis02-5323	187	30	able	able	ADJ
ajis02-5323	187	31	to	to	PART
ajis02-5323	187	32	complete	complete	VERB
ajis02-5323	187	33	an	an	DET
ajis02-5323	187	34	in	in	ADP
ajis02-5323	187	35	-	-	PUNCT
ajis02-5323	187	36	depth	depth	NOUN
ajis02-5323	187	37	risk	risk	NOUN
ajis02-5323	187	38	assessment	assessment	NOUN
ajis02-5323	187	39	process	process	NOUN
ajis02-5323	187	40	.	.	PUNCT
ajis02-5323	188	1	4.1.3	4.1.3	NUM
ajis02-5323	188	2	risk	risk	NOUN
ajis02-5323	188	3	assessment	assessment	NOUN
ajis02-5323	188	4	methods	method	NOUN
ajis02-5323	188	5	our	our	PRON
ajis02-5323	188	6	findings	finding	NOUN
ajis02-5323	188	7	suggest	suggest	VERB
ajis02-5323	188	8	that	that	SCONJ
ajis02-5323	188	9	organizations	organization	NOUN
ajis02-5323	188	10	primarily	primarily	ADV
ajis02-5323	188	11	assess	assess	VERB
ajis02-5323	188	12	suppliers	supplier	NOUN
ajis02-5323	188	13	via	via	ADP
ajis02-5323	188	14	three	three	NUM
ajis02-5323	188	15	methods	method	NOUN
ajis02-5323	188	16	undertaken	undertake	VERB
ajis02-5323	188	17	in	in	ADP
ajis02-5323	188	18	different	different	ADJ
ajis02-5323	188	19	sequences	sequence	NOUN
ajis02-5323	188	20	by	by	ADP
ajis02-5323	188	21	different	different	ADJ
ajis02-5323	188	22	organizations	organization	NOUN
ajis02-5323	188	23	.	.	PUNCT
ajis02-5323	189	1	not	not	PART
ajis02-5323	189	2	all	all	DET
ajis02-5323	189	3	organizations	organization	NOUN
ajis02-5323	189	4	rely	rely	VERB
ajis02-5323	189	5	on	on	ADP
ajis02-5323	189	6	all	all	DET
ajis02-5323	189	7	methods	method	NOUN
ajis02-5323	189	8	and	and	CCONJ
ajis02-5323	189	9	the	the	DET
ajis02-5323	189	10	extent	extent	NOUN
ajis02-5323	189	11	to	to	PART
ajis02-5323	189	12	which	which	PRON
ajis02-5323	189	13	each	each	DET
ajis02-5323	189	14	method	method	NOUN
ajis02-5323	189	15	is	be	AUX
ajis02-5323	189	16	applied	apply	VERB
ajis02-5323	189	17	varies	varie	NOUN
ajis02-5323	189	18	based	base	VERB
ajis02-5323	189	19	on	on	ADP
ajis02-5323	189	20	the	the	DET
ajis02-5323	189	21	supplier	supplier	NOUN
ajis02-5323	189	22	’s	’s	PART
ajis02-5323	189	23	criticality	criticality	NOUN
ajis02-5323	189	24	.	.	PUNCT
ajis02-5323	190	1	general	general	ADJ
ajis02-5323	190	2	due	due	ADJ
ajis02-5323	190	3	diligence	diligence	NOUN
ajis02-5323	190	4	checks	check	VERB
ajis02-5323	190	5	a	a	DET
ajis02-5323	190	6	supplier	supplier	NOUN
ajis02-5323	190	7	’s	’s	PART
ajis02-5323	190	8	financial	financial	ADJ
ajis02-5323	190	9	,	,	PUNCT
ajis02-5323	190	10	operational	operational	ADJ
ajis02-5323	190	11	and	and	CCONJ
ajis02-5323	190	12	strategic	strategic	ADJ
ajis02-5323	190	13	risks	risk	NOUN
ajis02-5323	190	14	,	,	PUNCT
ajis02-5323	190	15	such	such	ADJ
ajis02-5323	190	16	as	as	ADP
ajis02-5323	190	17	legal	legal	ADJ
ajis02-5323	190	18	,	,	PUNCT
ajis02-5323	190	19	geopolitical	geopolitical	ADJ
ajis02-5323	190	20	,	,	PUNCT
ajis02-5323	190	21	environmental	environmental	ADJ
ajis02-5323	190	22	,	,	PUNCT
ajis02-5323	190	23	social	social	ADJ
ajis02-5323	190	24	,	,	PUNCT
ajis02-5323	190	25	and	and	CCONJ
ajis02-5323	190	26	governance	governance	NOUN
ajis02-5323	190	27	risks	risk	NOUN
ajis02-5323	190	28	,	,	PUNCT
ajis02-5323	190	29	the	the	DET
ajis02-5323	190	30	quality	quality	NOUN
ajis02-5323	190	31	of	of	ADP
ajis02-5323	190	32	service	service	NOUN
ajis02-5323	190	33	,	,	PUNCT
ajis02-5323	190	34	and	and	CCONJ
ajis02-5323	190	35	the	the	DET
ajis02-5323	190	36	supply	supply	NOUN
ajis02-5323	190	37	chain	chain	NOUN
ajis02-5323	190	38	complexity	complexity	NOUN
ajis02-5323	190	39	.	.	PUNCT
ajis02-5323	191	1	this	this	DET
ajis02-5323	191	2	information	information	NOUN
ajis02-5323	191	3	is	be	AUX
ajis02-5323	191	4	sought	seek	VERB
ajis02-5323	191	5	from	from	ADP
ajis02-5323	191	6	a	a	DET
ajis02-5323	191	7	supplier	supplier	NOUN
ajis02-5323	191	8	or	or	CCONJ
ajis02-5323	191	9	is	be	AUX
ajis02-5323	191	10	based	base	VERB
ajis02-5323	191	11	on	on	ADP
ajis02-5323	191	12	its	its	PRON
ajis02-5323	191	13	annual	annual	ADJ
ajis02-5323	191	14	reports	report	NOUN
ajis02-5323	191	15	and	and	CCONJ
ajis02-5323	191	16	public	public	ADJ
ajis02-5323	191	17	information	information	NOUN
ajis02-5323	191	18	.	.	PUNCT
ajis02-5323	192	1	it	it	PRON
ajis02-5323	192	2	is	be	AUX
ajis02-5323	192	3	carried	carry	VERB
ajis02-5323	192	4	out	out	ADP
ajis02-5323	192	5	by	by	ADP
ajis02-5323	192	6	various	various	ADJ
ajis02-5323	192	7	organizational	organizational	ADJ
ajis02-5323	192	8	units	unit	NOUN
ajis02-5323	192	9	(	(	PUNCT
ajis02-5323	192	10	e.g.	e.g.	ADV
ajis02-5323	192	11	,	,	PUNCT
ajis02-5323	192	12	strategic	strategic	ADJ
ajis02-5323	192	13	procurement	procurement	NOUN
ajis02-5323	192	14	,	,	PUNCT
ajis02-5323	192	15	risk	risk	NOUN
ajis02-5323	192	16	management	management	NOUN
ajis02-5323	192	17	,	,	PUNCT
ajis02-5323	192	18	legal	legal	ADJ
ajis02-5323	192	19	or	or	CCONJ
ajis02-5323	192	20	compliance	compliance	NOUN
ajis02-5323	192	21	department	department	NOUN
ajis02-5323	192	22	)	)	PUNCT
ajis02-5323	192	23	.	.	PUNCT
ajis02-5323	193	1	"	"	PUNCT
ajis02-5323	193	2	if	if	SCONJ
ajis02-5323	193	3	an	an	DET
ajis02-5323	193	4	organization	organization	NOUN
ajis02-5323	193	5	is	be	AUX
ajis02-5323	193	6	financially	financially	ADV
ajis02-5323	193	7	non	non	ADJ
ajis02-5323	193	8	-	-	ADJ
ajis02-5323	193	9	viable	viable	ADJ
ajis02-5323	193	10	,	,	PUNCT
ajis02-5323	193	11	or	or	CCONJ
ajis02-5323	193	12	non	non	ADJ
ajis02-5323	193	13	-	-	ADJ
ajis02-5323	193	14	viable	viable	ADJ
ajis02-5323	193	15	in	in	ADP
ajis02-5323	193	16	any	any	DET
ajis02-5323	193	17	other	other	ADJ
ajis02-5323	193	18	respect	respect	NOUN
ajis02-5323	193	19	,	,	PUNCT
ajis02-5323	193	20	it	it	PRON
ajis02-5323	193	21	does	do	AUX
ajis02-5323	193	22	not	not	PART
ajis02-5323	193	23	even	even	ADV
ajis02-5323	193	24	get	get	VERB
ajis02-5323	193	25	to	to	PART
ajis02-5323	193	26	be	be	AUX
ajis02-5323	193	27	assessed	assess	VERB
ajis02-5323	193	28	for	for	ADP
ajis02-5323	193	29	cyber	cyber	ADJ
ajis02-5323	193	30	risks	risk	NOUN
ajis02-5323	193	31	but	but	CCONJ
ajis02-5323	193	32	is	be	AUX
ajis02-5323	193	33	rejected	reject	VERB
ajis02-5323	193	34	immediately	immediately	ADV
ajis02-5323	193	35	”	"	PUNCT
ajis02-5323	193	36	(	(	PUNCT
ajis02-5323	193	37	p26	p26	NOUN
ajis02-5323	193	38	)	)	PUNCT
ajis02-5323	193	39	.	.	PUNCT
ajis02-5323	194	1	internal	internal	ADJ
ajis02-5323	194	2	auditors	auditor	NOUN
ajis02-5323	194	3	might	might	AUX
ajis02-5323	194	4	also	also	ADV
ajis02-5323	194	5	be	be	AUX
ajis02-5323	194	6	involved	involve	VERB
ajis02-5323	194	7	at	at	ADP
ajis02-5323	194	8	this	this	DET
ajis02-5323	194	9	stage	stage	NOUN
ajis02-5323	194	10	;	;	PUNCT
ajis02-5323	194	11	however	however	ADV
ajis02-5323	194	12	,	,	PUNCT
ajis02-5323	194	13	mostly	mostly	ADV
ajis02-5323	194	14	to	to	PART
ajis02-5323	194	15	ensure	ensure	VERB
ajis02-5323	194	16	that	that	SCONJ
ajis02-5323	194	17	in	in	ADP
ajis02-5323	194	18	the	the	DET
ajis02-5323	194	19	focal	focal	ADJ
ajis02-5323	194	20	organisation	organisation	NOUN
ajis02-5323	194	21	“	"	PUNCT
ajis02-5323	194	22	all	all	DET
ajis02-5323	194	23	the	the	DET
ajis02-5323	194	24	right	right	ADJ
ajis02-5323	194	25	risk	risk	NOUN
ajis02-5323	194	26	people	people	NOUN
ajis02-5323	194	27	or	or	CCONJ
ajis02-5323	194	28	legal	legal	ADJ
ajis02-5323	194	29	and	and	CCONJ
ajis02-5323	194	30	compliance	compliance	NOUN
ajis02-5323	194	31	people	people	NOUN
ajis02-5323	194	32	have	have	AUX
ajis02-5323	194	33	been	be	AUX
ajis02-5323	194	34	involved	involve	VERB
ajis02-5323	194	35	and	and	CCONJ
ajis02-5323	194	36	done	do	VERB
ajis02-5323	194	37	their	their	PRON
ajis02-5323	194	38	sign	sign	NOUN
ajis02-5323	194	39	-	-	PUNCT
ajis02-5323	194	40	offs	off	NOUN
ajis02-5323	194	41	…	…	PUNCT
ajis02-5323	194	42	we	we	PRON
ajis02-5323	194	43	review	review	VERB
ajis02-5323	194	44	risk	risk	NOUN
ajis02-5323	194	45	artefacts	artefact	NOUN
ajis02-5323	194	46	before	before	SCONJ
ajis02-5323	194	47	they	they	PRON
ajis02-5323	194	48	sign	sign	VERB
ajis02-5323	194	49	the	the	DET
ajis02-5323	194	50	contract	contract	NOUN
ajis02-5323	194	51	.	.	PUNCT
ajis02-5323	195	1	from	from	ADP
ajis02-5323	195	2	our	our	PRON
ajis02-5323	195	3	point	point	NOUN
ajis02-5323	195	4	of	of	ADP
ajis02-5323	195	5	view	view	NOUN
ajis02-5323	195	6	,	,	PUNCT
ajis02-5323	195	7	it	it	PRON
ajis02-5323	195	8	does	do	AUX
ajis02-5323	195	9	n't	not	PART
ajis02-5323	195	10	make	make	VERB
ajis02-5323	195	11	sense	sense	NOUN
ajis02-5323	195	12	to	to	PART
ajis02-5323	195	13	review	review	VERB
ajis02-5323	195	14	things	thing	NOUN
ajis02-5323	195	15	after	after	SCONJ
ajis02-5323	195	16	the	the	DET
ajis02-5323	195	17	arrangement	arrangement	NOUN
ajis02-5323	195	18	has	have	AUX
ajis02-5323	195	19	been	be	AUX
ajis02-5323	195	20	done	do	VERB
ajis02-5323	195	21	because	because	SCONJ
ajis02-5323	195	22	then	then	ADV
ajis02-5323	195	23	you	you	PRON
ajis02-5323	195	24	ca	can	AUX
ajis02-5323	195	25	n't	not	PART
ajis02-5323	195	26	change	change	VERB
ajis02-5323	195	27	the	the	DET
ajis02-5323	195	28	contract	contract	NOUN
ajis02-5323	195	29	.	.	PUNCT
ajis02-5323	195	30	”	"	PUNCT
ajis02-5323	196	1	(	(	PUNCT
ajis02-5323	196	2	p29	p29	NOUN
ajis02-5323	196	3	)	)	PUNCT
ajis02-5323	196	4	.	.	PUNCT
ajis02-5323	197	1	a	a	DET
ajis02-5323	197	2	second	second	ADJ
ajis02-5323	197	3	method	method	NOUN
ajis02-5323	197	4	is	be	AUX
ajis02-5323	197	5	cyber	cyber	ADJ
ajis02-5323	197	6	security	security	NOUN
ajis02-5323	197	7	due	due	ADJ
ajis02-5323	197	8	diligence	diligence	NOUN
ajis02-5323	197	9	based	base	VERB
ajis02-5323	197	10	on	on	ADP
ajis02-5323	197	11	public	public	ADJ
ajis02-5323	197	12	information	information	NOUN
ajis02-5323	197	13	about	about	ADP
ajis02-5323	197	14	cyber	cyber	ADJ
ajis02-5323	197	15	risks	risk	NOUN
ajis02-5323	197	16	.	.	PUNCT
ajis02-5323	198	1	organizations	organization	NOUN
ajis02-5323	198	2	double	double	ADJ
ajis02-5323	198	3	-	-	PUNCT
ajis02-5323	198	4	check	check	NOUN
ajis02-5323	198	5	in	in	ADP
ajis02-5323	198	6	the	the	DET
ajis02-5323	198	7	registers	register	NOUN
ajis02-5323	198	8	whether	whether	SCONJ
ajis02-5323	198	9	suppliers	supplier	NOUN
ajis02-5323	198	10	have	have	VERB
ajis02-5323	198	11	security	security	NOUN
ajis02-5323	198	12	certifications	certification	NOUN
ajis02-5323	198	13	.	.	PUNCT
ajis02-5323	199	1	they	they	PRON
ajis02-5323	199	2	rely	rely	VERB
ajis02-5323	199	3	on	on	ADP
ajis02-5323	199	4	threat	threat	NOUN
ajis02-5323	199	5	intelligence	intelligence	NOUN
ajis02-5323	199	6	,	,	PUNCT
ajis02-5323	199	7	providing	provide	VERB
ajis02-5323	199	8	information	information	NOUN
ajis02-5323	199	9	about	about	ADP
ajis02-5323	199	10	past	past	ADJ
ajis02-5323	199	11	incidents	incident	NOUN
ajis02-5323	199	12	and	and	CCONJ
ajis02-5323	199	13	the	the	DET
ajis02-5323	199	14	activity	activity	NOUN
ajis02-5323	199	15	on	on	ADP
ajis02-5323	199	16	the	the	DET
ajis02-5323	199	17	dark	dark	ADJ
ajis02-5323	199	18	web	web	NOUN
ajis02-5323	199	19	related	relate	VERB
ajis02-5323	199	20	to	to	ADP
ajis02-5323	199	21	a	a	DET
ajis02-5323	199	22	prospective	prospective	ADJ
ajis02-5323	199	23	supplier	supplier	NOUN
ajis02-5323	199	24	,	,	PUNCT
ajis02-5323	199	25	and	and	CCONJ
ajis02-5323	199	26	scan	scan	VERB
ajis02-5323	199	27	the	the	DET
ajis02-5323	199	28	supplier	supplier	NOUN
ajis02-5323	199	29	’s	’s	PART
ajis02-5323	199	30	outward	outward	ADV
ajis02-5323	199	31	-	-	PUNCT
ajis02-5323	199	32	looking	look	VERB
ajis02-5323	199	33	technology	technology	NOUN
ajis02-5323	199	34	.	.	PUNCT
ajis02-5323	200	1	some	some	DET
ajis02-5323	200	2	interviewed	interview	VERB
ajis02-5323	200	3	organizations	organization	NOUN
ajis02-5323	200	4	(	(	PUNCT
ajis02-5323	200	5	belonging	belong	VERB
ajis02-5323	200	6	to	to	ADP
ajis02-5323	200	7	critical	critical	ADJ
ajis02-5323	200	8	infrastructure	infrastructure	NOUN
ajis02-5323	200	9	)	)	PUNCT
ajis02-5323	200	10	have	have	VERB
ajis02-5323	200	11	the	the	DET
ajis02-5323	200	12	capability	capability	NOUN
ajis02-5323	200	13	of	of	ADP
ajis02-5323	200	14	a	a	DET
ajis02-5323	200	15	cloud	cloud	NOUN
ajis02-5323	200	16	access	access	NOUN
ajis02-5323	200	17	security	security	NOUN
ajis02-5323	200	18	broker	broker	NOUN
ajis02-5323	200	19	(	(	PUNCT
ajis02-5323	200	20	casb	casb	NOUN
ajis02-5323	200	21	)	)	PUNCT
ajis02-5323	200	22	or	or	CCONJ
ajis02-5323	200	23	rely	rely	VERB
ajis02-5323	200	24	on	on	ADP
ajis02-5323	200	25	a	a	DET
ajis02-5323	200	26	thirdparty	thirdparty	NOUN
ajis02-5323	200	27	provider	provider	NOUN
ajis02-5323	200	28	:	:	PUNCT
ajis02-5323	200	29	“	"	PUNCT
ajis02-5323	200	30	we	we	PRON
ajis02-5323	200	31	use	use	VERB
ajis02-5323	200	32	public	public	ADJ
ajis02-5323	200	33	information	information	NOUN
ajis02-5323	200	34	prior	prior	ADV
ajis02-5323	200	35	to	to	ADP
ajis02-5323	200	36	onboarding	onboarding	NOUN
ajis02-5323	200	37	and	and	CCONJ
ajis02-5323	200	38	after	after	ADP
ajis02-5323	200	39	onboarding	onboarde	VERB
ajis02-5323	200	40	.	.	PUNCT
ajis02-5323	201	1	the	the	DET
ajis02-5323	201	2	simplest	simple	ADJ
ajis02-5323	201	3	procedure	procedure	NOUN
ajis02-5323	201	4	for	for	ADP
ajis02-5323	201	5	that	that	PRON
ajis02-5323	201	6	is	be	AUX
ajis02-5323	201	7	qualys	qualys	NOUN
ajis02-5323	201	8	scanning	scanning	NOUN
ajis02-5323	201	9	of	of	ADP
ajis02-5323	201	10	their	their	PRON
ajis02-5323	201	11	vulnerabilities	vulnerability	NOUN
ajis02-5323	201	12	based	base	VERB
ajis02-5323	201	13	on	on	ADP
ajis02-5323	201	14	public	public	ADJ
ajis02-5323	201	15	australasian	australasian	ADJ
ajis02-5323	201	16	journal	journal	NOUN
ajis02-5323	201	17	of	of	ADP
ajis02-5323	201	18	information	information	NOUN
ajis02-5323	201	19	systems	system	NOUN
ajis02-5323	201	20	slapnicar	slapnicar	NOUN
ajis02-5323	201	21	,	,	PUNCT
ajis02-5323	201	22	vidmar	vidmar	NOUN
ajis02-5323	201	23	&	&	CCONJ
ajis02-5323	201	24	tsen	tsen	ADJ
ajis02-5323	201	25	2025	2025	NUM
ajis02-5323	201	26	,	,	PUNCT
ajis02-5323	201	27	vol	vol	NOUN
ajis02-5323	201	28	29	29	NUM
ajis02-5323	201	29	,	,	PUNCT
ajis02-5323	201	30	research	research	NOUN
ajis02-5323	201	31	article	article	NOUN
ajis02-5323	201	32	process	process	NOUN
ajis02-5323	201	33	theory	theory	NOUN
ajis02-5323	201	34	of	of	ADP
ajis02-5323	201	35	supplier	supplier	NOUN
ajis02-5323	201	36	cyber	cyber	NOUN
ajis02-5323	201	37	risk	risk	NOUN
ajis02-5323	201	38	assessment	assessment	NOUN
ajis02-5323	201	39	14	14	NUM
ajis02-5323	201	40	information	information	NOUN
ajis02-5323	201	41	.	.	PUNCT
ajis02-5323	202	1	we	we	PRON
ajis02-5323	202	2	analyze	analyze	VERB
ajis02-5323	202	3	a	a	DET
ajis02-5323	202	4	partner	partner	NOUN
ajis02-5323	202	5	's	's	PART
ajis02-5323	202	6	cyber	cyber	ADJ
ajis02-5323	202	7	posture	posture	NOUN
ajis02-5323	202	8	viruses	virus	NOUN
ajis02-5323	202	9	,	,	PUNCT
ajis02-5323	202	10	vulnerabilities	vulnerability	NOUN
ajis02-5323	202	11	,	,	PUNCT
ajis02-5323	202	12	protocols	protocol	NOUN
ajis02-5323	202	13	that	that	PRON
ajis02-5323	202	14	are	be	AUX
ajis02-5323	202	15	public	public	ADJ
ajis02-5323	202	16	,	,	PUNCT
ajis02-5323	202	17	everything	everything	PRON
ajis02-5323	202	18	that	that	PRON
ajis02-5323	202	19	is	be	AUX
ajis02-5323	202	20	possible	possible	ADJ
ajis02-5323	202	21	to	to	PART
ajis02-5323	202	22	get	get	VERB
ajis02-5323	202	23	publicly	publicly	ADV
ajis02-5323	202	24	about	about	ADP
ajis02-5323	202	25	the	the	DET
ajis02-5323	202	26	partner	partner	NOUN
ajis02-5323	202	27	”	"	PUNCT
ajis02-5323	202	28	(	(	PUNCT
ajis02-5323	202	29	p20	p20	NOUN
ajis02-5323	202	30	)	)	PUNCT
ajis02-5323	202	31	.	.	PUNCT
ajis02-5323	203	1	the	the	DET
ajis02-5323	203	2	third	third	ADJ
ajis02-5323	203	3	method	method	NOUN
ajis02-5323	203	4	is	be	AUX
ajis02-5323	203	5	to	to	PART
ajis02-5323	203	6	collect	collect	VERB
ajis02-5323	203	7	information	information	NOUN
ajis02-5323	203	8	via	via	ADP
ajis02-5323	203	9	questionnaires	questionnaire	NOUN
ajis02-5323	203	10	,	,	PUNCT
ajis02-5323	203	11	which	which	PRON
ajis02-5323	203	12	cover	cover	VERB
ajis02-5323	203	13	a	a	DET
ajis02-5323	203	14	wide	wide	ADJ
ajis02-5323	203	15	range	range	NOUN
ajis02-5323	203	16	of	of	ADP
ajis02-5323	203	17	questions	question	NOUN
ajis02-5323	203	18	(	(	PUNCT
ajis02-5323	203	19	from	from	ADP
ajis02-5323	203	20	roughly	roughly	ADV
ajis02-5323	203	21	8	8	NUM
ajis02-5323	203	22	to	to	ADP
ajis02-5323	203	23	150	150	NUM
ajis02-5323	203	24	)	)	PUNCT
ajis02-5323	203	25	about	about	ADP
ajis02-5323	203	26	supplier	supplier	NOUN
ajis02-5323	203	27	characteristics	characteristic	NOUN
ajis02-5323	203	28	.	.	PUNCT
ajis02-5323	204	1	questionnaires	questionnaire	NOUN
ajis02-5323	204	2	are	be	AUX
ajis02-5323	204	3	subdivided	subdivide	VERB
ajis02-5323	204	4	into	into	ADP
ajis02-5323	204	5	the	the	DET
ajis02-5323	204	6	assessment	assessment	NOUN
ajis02-5323	204	7	of	of	ADP
ajis02-5323	204	8	the	the	DET
ajis02-5323	204	9	common	common	ADJ
ajis02-5323	204	10	core	core	NOUN
ajis02-5323	204	11	of	of	ADP
ajis02-5323	204	12	controls	control	NOUN
ajis02-5323	204	13	,	,	PUNCT
ajis02-5323	204	14	relevant	relevant	ADJ
ajis02-5323	204	15	for	for	ADP
ajis02-5323	204	16	all	all	DET
ajis02-5323	204	17	suppliers	supplier	NOUN
ajis02-5323	204	18	,	,	PUNCT
ajis02-5323	204	19	and	and	CCONJ
ajis02-5323	204	20	supplements	supplement	NOUN
ajis02-5323	204	21	that	that	PRON
ajis02-5323	204	22	depend	depend	VERB
ajis02-5323	204	23	on	on	ADP
ajis02-5323	204	24	the	the	DET
ajis02-5323	204	25	service	service	NOUN
ajis02-5323	204	26	provided	provide	VERB
ajis02-5323	204	27	or	or	CCONJ
ajis02-5323	204	28	supplier	supplier	NOUN
ajis02-5323	204	29	criticality	criticality	NOUN
ajis02-5323	204	30	.	.	PUNCT
ajis02-5323	205	1	“	"	PUNCT
ajis02-5323	205	2	for	for	ADP
ajis02-5323	205	3	software	software	NOUN
ajis02-5323	205	4	companies	company	NOUN
ajis02-5323	205	5	,	,	PUNCT
ajis02-5323	205	6	our	our	PRON
ajis02-5323	205	7	questionnaire	questionnaire	NOUN
ajis02-5323	205	8	comprises	comprise	VERB
ajis02-5323	205	9	119	119	NUM
ajis02-5323	205	10	questions	question	NOUN
ajis02-5323	205	11	,	,	PUNCT
ajis02-5323	205	12	for	for	ADP
ajis02-5323	205	13	others	other	NOUN
ajis02-5323	205	14	only	only	ADV
ajis02-5323	205	15	8	8	NUM
ajis02-5323	205	16	.	.	PUNCT
ajis02-5323	205	17	”	"	PUNCT
ajis02-5323	206	1	(	(	PUNCT
ajis02-5323	206	2	p11	p11	NOUN
ajis02-5323	206	3	)	)	PUNCT
ajis02-5323	206	4	.	.	PUNCT
ajis02-5323	207	1	they	they	PRON
ajis02-5323	207	2	are	be	AUX
ajis02-5323	207	3	either	either	DET
ajis02-5323	207	4	self	self	NOUN
ajis02-5323	207	5	-	-	PUNCT
ajis02-5323	207	6	made	make	VERB
ajis02-5323	207	7	,	,	PUNCT
ajis02-5323	207	8	based	base	VERB
ajis02-5323	207	9	on	on	ADP
ajis02-5323	207	10	guidelines	guideline	NOUN
ajis02-5323	207	11	,	,	PUNCT
ajis02-5323	207	12	open	open	ADJ
ajis02-5323	207	13	-	-	PUNCT
ajis02-5323	207	14	source	source	NOUN
ajis02-5323	207	15	standards	standard	NOUN
ajis02-5323	207	16	,	,	PUNCT
ajis02-5323	207	17	and	and	CCONJ
ajis02-5323	207	18	regulation	regulation	NOUN
ajis02-5323	207	19	,	,	PUNCT
ajis02-5323	207	20	imposed	impose	VERB
ajis02-5323	207	21	by	by	ADP
ajis02-5323	207	22	a	a	DET
ajis02-5323	207	23	parent	parent	NOUN
ajis02-5323	207	24	company	company	NOUN
ajis02-5323	207	25	;	;	PUNCT
ajis02-5323	207	26	or	or	CCONJ
ajis02-5323	207	27	provided	provide	VERB
ajis02-5323	207	28	,	,	PUNCT
ajis02-5323	207	29	for	for	ADP
ajis02-5323	207	30	example	example	NOUN
ajis02-5323	207	31	,	,	PUNCT
ajis02-5323	207	32	by	by	ADP
ajis02-5323	207	33	a	a	DET
ajis02-5323	207	34	government	government	NOUN
ajis02-5323	207	35	(	(	PUNCT
ajis02-5323	207	36	e.g.	e.g.	ADV
ajis02-5323	207	37	,	,	PUNCT
ajis02-5323	207	38	australian	australian	ADJ
ajis02-5323	207	39	signals	signal	NOUN
ajis02-5323	207	40	directorate	directorate	VERB
ajis02-5323	207	41	)	)	PUNCT
ajis02-5323	207	42	.	.	PUNCT
ajis02-5323	208	1	while	while	SCONJ
ajis02-5323	208	2	there	there	PRON
ajis02-5323	208	3	might	might	AUX
ajis02-5323	208	4	be	be	AUX
ajis02-5323	208	5	a	a	DET
ajis02-5323	208	6	considerable	considerable	ADJ
ajis02-5323	208	7	variation	variation	NOUN
ajis02-5323	208	8	in	in	ADP
ajis02-5323	208	9	suppliers	supplier	NOUN
ajis02-5323	208	10	’	'	PUNCT
ajis02-5323	208	11	maturity	maturity	NOUN
ajis02-5323	208	12	of	of	ADP
ajis02-5323	208	13	certain	certain	ADJ
ajis02-5323	208	14	controls	control	NOUN
ajis02-5323	208	15	,	,	PUNCT
ajis02-5323	208	16	the	the	DET
ajis02-5323	208	17	variation	variation	NOUN
ajis02-5323	208	18	is	be	AUX
ajis02-5323	208	19	not	not	PART
ajis02-5323	208	20	captured	capture	VERB
ajis02-5323	208	21	in	in	ADP
ajis02-5323	208	22	most	most	ADJ
ajis02-5323	208	23	organisations	organisation	NOUN
ajis02-5323	208	24	as	as	SCONJ
ajis02-5323	208	25	the	the	DET
ajis02-5323	208	26	checklists	checklist	NOUN
ajis02-5323	208	27	provide	provide	VERB
ajis02-5323	208	28	only	only	ADV
ajis02-5323	208	29	yes	yes	INTJ
ajis02-5323	208	30	or	or	CCONJ
ajis02-5323	208	31	no	no	DET
ajis02-5323	208	32	answers	answer	NOUN
ajis02-5323	208	33	.	.	PUNCT
ajis02-5323	209	1	only	only	ADV
ajis02-5323	209	2	the	the	DET
ajis02-5323	209	3	most	most	ADV
ajis02-5323	209	4	mature	mature	ADJ
ajis02-5323	209	5	organizations	organization	NOUN
ajis02-5323	209	6	rely	rely	VERB
ajis02-5323	209	7	on	on	ADP
ajis02-5323	209	8	a	a	DET
ajis02-5323	209	9	maturity	maturity	NOUN
ajis02-5323	209	10	scale	scale	NOUN
ajis02-5323	209	11	for	for	ADP
ajis02-5323	209	12	each	each	DET
ajis02-5323	209	13	question	question	NOUN
ajis02-5323	209	14	(	(	PUNCT
ajis02-5323	209	15	among	among	ADP
ajis02-5323	209	16	our	our	PRON
ajis02-5323	209	17	interviewees	interviewee	NOUN
ajis02-5323	209	18	,	,	PUNCT
ajis02-5323	209	19	those	those	PRON
ajis02-5323	209	20	were	be	AUX
ajis02-5323	209	21	the	the	DET
ajis02-5323	209	22	banks	bank	NOUN
ajis02-5323	209	23	)	)	PUNCT
ajis02-5323	209	24	.	.	PUNCT
ajis02-5323	210	1	some	some	DET
ajis02-5323	210	2	organizations	organization	NOUN
ajis02-5323	210	3	integrate	integrate	VERB
ajis02-5323	210	4	questionnaires	questionnaire	NOUN
ajis02-5323	210	5	into	into	ADP
ajis02-5323	210	6	a	a	DET
ajis02-5323	210	7	vendor	vendor	NOUN
ajis02-5323	210	8	management	management	NOUN
ajis02-5323	210	9	platform	platform	NOUN
ajis02-5323	210	10	or	or	CCONJ
ajis02-5323	210	11	rely	rely	VERB
ajis02-5323	210	12	on	on	ADP
ajis02-5323	210	13	a	a	DET
ajis02-5323	210	14	specialized	specialized	ADJ
ajis02-5323	210	15	third	third	ADJ
ajis02-5323	210	16	-	-	PUNCT
ajis02-5323	210	17	party	party	NOUN
ajis02-5323	210	18	provider	provider	NOUN
ajis02-5323	210	19	.	.	PUNCT
ajis02-5323	211	1	these	these	DET
ajis02-5323	211	2	providers	provider	NOUN
ajis02-5323	211	3	possess	possess	VERB
ajis02-5323	211	4	the	the	DET
ajis02-5323	211	5	expertise	expertise	NOUN
ajis02-5323	211	6	and	and	CCONJ
ajis02-5323	211	7	capability	capability	NOUN
ajis02-5323	211	8	to	to	PART
ajis02-5323	211	9	perform	perform	VERB
ajis02-5323	211	10	the	the	DET
ajis02-5323	211	11	assessment	assessment	NOUN
ajis02-5323	211	12	more	more	ADV
ajis02-5323	211	13	effectively	effectively	ADV
ajis02-5323	211	14	than	than	SCONJ
ajis02-5323	211	15	if	if	SCONJ
ajis02-5323	211	16	an	an	DET
ajis02-5323	211	17	organization	organization	NOUN
ajis02-5323	211	18	performs	perform	VERB
ajis02-5323	211	19	it	it	PRON
ajis02-5323	211	20	in	in	ADP
ajis02-5323	211	21	-	-	PUNCT
ajis02-5323	211	22	house	house	NOUN
ajis02-5323	211	23	.	.	PUNCT
ajis02-5323	212	1	the	the	DET
ajis02-5323	212	2	advantage	advantage	NOUN
ajis02-5323	212	3	is	be	AUX
ajis02-5323	212	4	that	that	SCONJ
ajis02-5323	212	5	third	third	ADJ
ajis02-5323	212	6	-	-	PUNCT
ajis02-5323	212	7	party	party	NOUN
ajis02-5323	212	8	providers	provider	NOUN
ajis02-5323	212	9	collect	collect	VERB
ajis02-5323	212	10	large	large	ADJ
ajis02-5323	212	11	amounts	amount	NOUN
ajis02-5323	212	12	of	of	ADP
ajis02-5323	212	13	information	information	NOUN
ajis02-5323	212	14	about	about	ADP
ajis02-5323	212	15	organizations	organization	NOUN
ajis02-5323	212	16	via	via	ADP
ajis02-5323	212	17	online	online	ADJ
ajis02-5323	212	18	questionnaires	questionnaire	NOUN
ajis02-5323	212	19	,	,	PUNCT
ajis02-5323	212	20	which	which	PRON
ajis02-5323	212	21	they	they	PRON
ajis02-5323	212	22	supplement	supplement	VERB
ajis02-5323	212	23	with	with	ADP
ajis02-5323	212	24	public	public	ADJ
ajis02-5323	212	25	information	information	NOUN
ajis02-5323	212	26	and	and	CCONJ
ajis02-5323	212	27	information	information	NOUN
ajis02-5323	212	28	on	on	ADP
ajis02-5323	212	29	past	past	ADJ
ajis02-5323	212	30	incidents	incident	NOUN
ajis02-5323	212	31	,	,	PUNCT
ajis02-5323	212	32	based	base	VERB
ajis02-5323	212	33	on	on	ADP
ajis02-5323	212	34	which	which	PRON
ajis02-5323	212	35	they	they	PRON
ajis02-5323	212	36	develop	develop	VERB
ajis02-5323	212	37	quantitative	quantitative	ADJ
ajis02-5323	212	38	scores	score	NOUN
ajis02-5323	212	39	or	or	CCONJ
ajis02-5323	212	40	even	even	ADV
ajis02-5323	212	41	prediction	prediction	NOUN
ajis02-5323	212	42	models	model	NOUN
ajis02-5323	212	43	of	of	ADP
ajis02-5323	212	44	a	a	DET
ajis02-5323	212	45	cyber	cyber	NOUN
ajis02-5323	212	46	incident	incident	NOUN
ajis02-5323	212	47	.	.	PUNCT
ajis02-5323	213	1	the	the	DET
ajis02-5323	213	2	second	second	ADJ
ajis02-5323	213	3	advantage	advantage	NOUN
ajis02-5323	213	4	is	be	AUX
ajis02-5323	213	5	that	that	SCONJ
ajis02-5323	213	6	they	they	PRON
ajis02-5323	213	7	can	can	AUX
ajis02-5323	213	8	also	also	ADV
ajis02-5323	213	9	provide	provide	VERB
ajis02-5323	213	10	basic	basic	ADJ
ajis02-5323	213	11	risk	risk	NOUN
ajis02-5323	213	12	information	information	NOUN
ajis02-5323	213	13	for	for	ADP
ajis02-5323	213	14	the	the	DET
ajis02-5323	213	15	suppliers	supplier	NOUN
ajis02-5323	213	16	beyond	beyond	ADP
ajis02-5323	213	17	tier	tier	NOUN
ajis02-5323	213	18	1	1	NUM
ajis02-5323	213	19	(	(	PUNCT
ajis02-5323	213	20	suppliers	supplier	NOUN
ajis02-5323	213	21	of	of	ADP
ajis02-5323	213	22	suppliers	supplier	NOUN
ajis02-5323	213	23	)	)	PUNCT
ajis02-5323	213	24	.	.	PUNCT
ajis02-5323	214	1	4.1.4	4.1.4	DET
ajis02-5323	214	2	supplier	supplier	NOUN
ajis02-5323	214	3	cyber	cyber	NOUN
ajis02-5323	214	4	security	security	NOUN
ajis02-5323	214	5	posture	posture	NOUN
ajis02-5323	214	6	characteristics	characteristic	NOUN
ajis02-5323	214	7	in	in	ADP
ajis02-5323	214	8	assessing	assess	VERB
ajis02-5323	214	9	the	the	DET
ajis02-5323	214	10	supplier	supplier	NOUN
ajis02-5323	214	11	’s	’s	PART
ajis02-5323	214	12	cyber	cyber	ADJ
ajis02-5323	214	13	security	security	NOUN
ajis02-5323	214	14	posture	posture	NOUN
ajis02-5323	214	15	,	,	PUNCT
ajis02-5323	214	16	our	our	PRON
ajis02-5323	214	17	interviewees	interviewee	NOUN
ajis02-5323	214	18	suggested	suggest	VERB
ajis02-5323	214	19	that	that	SCONJ
ajis02-5323	214	20	technology	technology	NOUN
ajis02-5323	214	21	is	be	AUX
ajis02-5323	214	22	a	a	DET
ajis02-5323	214	23	key	key	ADJ
ajis02-5323	214	24	characteristic	characteristic	NOUN
ajis02-5323	214	25	of	of	ADP
ajis02-5323	214	26	a	a	DET
ajis02-5323	214	27	supplier	supplier	NOUN
ajis02-5323	214	28	’s	’s	PART
ajis02-5323	214	29	cyber	cyber	ADJ
ajis02-5323	214	30	security	security	NOUN
ajis02-5323	214	31	posture	posture	NOUN
ajis02-5323	214	32	.	.	PUNCT
ajis02-5323	215	1	technology	technology	NOUN
ajis02-5323	215	2	questions	question	NOUN
ajis02-5323	215	3	cover	cover	VERB
ajis02-5323	215	4	all	all	DET
ajis02-5323	215	5	main	main	ADJ
ajis02-5323	215	6	controls	control	NOUN
ajis02-5323	215	7	related	relate	VERB
ajis02-5323	215	8	to	to	ADP
ajis02-5323	215	9	protection	protection	NOUN
ajis02-5323	215	10	,	,	PUNCT
ajis02-5323	215	11	detection	detection	NOUN
ajis02-5323	215	12	,	,	PUNCT
ajis02-5323	215	13	response	response	NOUN
ajis02-5323	215	14	and	and	CCONJ
ajis02-5323	215	15	recovery	recovery	NOUN
ajis02-5323	215	16	(	(	PUNCT
ajis02-5323	215	17	the	the	DET
ajis02-5323	215	18	most	most	ADV
ajis02-5323	215	19	important	important	ADJ
ajis02-5323	215	20	controls	control	NOUN
ajis02-5323	215	21	relate	relate	VERB
ajis02-5323	215	22	to	to	ADP
ajis02-5323	215	23	data	data	NOUN
ajis02-5323	215	24	management	management	NOUN
ajis02-5323	215	25	,	,	PUNCT
ajis02-5323	215	26	authentication	authentication	NOUN
ajis02-5323	215	27	and	and	CCONJ
ajis02-5323	215	28	encryption	encryption	NOUN
ajis02-5323	215	29	methods	method	NOUN
ajis02-5323	215	30	,	,	PUNCT
ajis02-5323	215	31	and	and	CCONJ
ajis02-5323	215	32	identity	identity	NOUN
ajis02-5323	215	33	and	and	CCONJ
ajis02-5323	215	34	access	access	NOUN
ajis02-5323	215	35	management	management	NOUN
ajis02-5323	215	36	)	)	PUNCT
ajis02-5323	215	37	.	.	PUNCT
ajis02-5323	216	1	however	however	ADV
ajis02-5323	216	2	,	,	PUNCT
ajis02-5323	216	3	the	the	DET
ajis02-5323	216	4	technological	technological	ADJ
ajis02-5323	216	5	requirements	requirement	NOUN
ajis02-5323	216	6	and	and	CCONJ
ajis02-5323	216	7	their	their	PRON
ajis02-5323	216	8	checking	check	VERB
ajis02-5323	216	9	widely	widely	ADV
ajis02-5323	216	10	differed	differ	VERB
ajis02-5323	216	11	among	among	ADP
ajis02-5323	216	12	organizations	organization	NOUN
ajis02-5323	216	13	and	and	CCONJ
ajis02-5323	216	14	across	across	ADP
ajis02-5323	216	15	suppliers	supplier	NOUN
ajis02-5323	216	16	:	:	PUNCT
ajis02-5323	216	17	while	while	SCONJ
ajis02-5323	216	18	some	some	PRON
ajis02-5323	216	19	stated	state	VERB
ajis02-5323	216	20	that	that	SCONJ
ajis02-5323	216	21	technological	technological	ADJ
ajis02-5323	216	22	requirements	requirement	NOUN
ajis02-5323	216	23	could	could	AUX
ajis02-5323	216	24	not	not	PART
ajis02-5323	216	25	be	be	AUX
ajis02-5323	216	26	too	too	ADV
ajis02-5323	216	27	high	high	ADJ
ajis02-5323	216	28	,	,	PUNCT
ajis02-5323	216	29	as	as	SCONJ
ajis02-5323	216	30	they	they	PRON
ajis02-5323	216	31	could	could	AUX
ajis02-5323	216	32	then	then	ADV
ajis02-5323	216	33	not	not	PART
ajis02-5323	216	34	find	find	VERB
ajis02-5323	216	35	any	any	DET
ajis02-5323	216	36	supplier	supplier	NOUN
ajis02-5323	216	37	in	in	ADP
ajis02-5323	216	38	a	a	DET
ajis02-5323	216	39	country	country	NOUN
ajis02-5323	216	40	,	,	PUNCT
ajis02-5323	216	41	others	other	NOUN
ajis02-5323	216	42	were	be	AUX
ajis02-5323	216	43	frustrated	frustrate	VERB
ajis02-5323	216	44	because	because	SCONJ
ajis02-5323	216	45	they	they	PRON
ajis02-5323	216	46	were	be	AUX
ajis02-5323	216	47	unable	unable	ADJ
ajis02-5323	216	48	to	to	PART
ajis02-5323	216	49	check	check	VERB
ajis02-5323	216	50	the	the	DET
ajis02-5323	216	51	libraries	library	NOUN
ajis02-5323	216	52	within	within	ADP
ajis02-5323	216	53	the	the	DET
ajis02-5323	216	54	software	software	NOUN
ajis02-5323	216	55	.	.	PUNCT
ajis02-5323	217	1	most	most	ADJ
ajis02-5323	217	2	organizations	organization	NOUN
ajis02-5323	217	3	impose	impose	VERB
ajis02-5323	217	4	mandatory	mandatory	ADJ
ajis02-5323	217	5	requirements	requirement	NOUN
ajis02-5323	217	6	that	that	PRON
ajis02-5323	217	7	would	would	AUX
ajis02-5323	217	8	be	be	AUX
ajis02-5323	217	9	a	a	DET
ajis02-5323	217	10	deal	deal	NOUN
ajis02-5323	217	11	-	-	PUNCT
ajis02-5323	217	12	breaker	breaker	NOUN
ajis02-5323	217	13	if	if	SCONJ
ajis02-5323	217	14	a	a	DET
ajis02-5323	217	15	prospective	prospective	ADJ
ajis02-5323	217	16	supplier	supplier	NOUN
ajis02-5323	217	17	does	do	AUX
ajis02-5323	217	18	not	not	PART
ajis02-5323	217	19	have	have	VERB
ajis02-5323	217	20	them	they	PRON
ajis02-5323	217	21	(	(	PUNCT
ajis02-5323	217	22	e.g.	e.g.	ADV
ajis02-5323	217	23	,	,	PUNCT
ajis02-5323	217	24	a	a	DET
ajis02-5323	217	25	single	single	ADJ
ajis02-5323	217	26	sign	sign	NOUN
ajis02-5323	217	27	-	-	PUNCT
ajis02-5323	217	28	on	on	ADP
ajis02-5323	217	29	)	)	PUNCT
ajis02-5323	217	30	.	.	PUNCT
ajis02-5323	218	1	the	the	DET
ajis02-5323	218	2	importance	importance	NOUN
ajis02-5323	218	3	of	of	ADP
ajis02-5323	218	4	processes	process	NOUN
ajis02-5323	218	5	and	and	CCONJ
ajis02-5323	218	6	people	people	NOUN
ajis02-5323	218	7	has	have	AUX
ajis02-5323	218	8	also	also	ADV
ajis02-5323	218	9	been	be	AUX
ajis02-5323	218	10	stressed	stress	VERB
ajis02-5323	218	11	:	:	PUNCT
ajis02-5323	218	12	“	"	PUNCT
ajis02-5323	218	13	i	i	PRON
ajis02-5323	218	14	'm	be	AUX
ajis02-5323	218	15	less	less	ADV
ajis02-5323	218	16	interested	interested	ADJ
ajis02-5323	218	17	in	in	ADP
ajis02-5323	218	18	the	the	DET
ajis02-5323	218	19	presence	presence	NOUN
ajis02-5323	218	20	of	of	ADP
ajis02-5323	218	21	controls	control	NOUN
ajis02-5323	218	22	than	than	ADP
ajis02-5323	218	23	in	in	ADP
ajis02-5323	218	24	the	the	DET
ajis02-5323	218	25	presence	presence	NOUN
ajis02-5323	218	26	of	of	ADP
ajis02-5323	218	27	an	an	DET
ajis02-5323	218	28	operating	operate	VERB
ajis02-5323	218	29	security	security	NOUN
ajis02-5323	218	30	function	function	NOUN
ajis02-5323	218	31	that	that	PRON
ajis02-5323	218	32	selects	select	VERB
ajis02-5323	218	33	controls	control	VERB
ajis02-5323	218	34	that	that	DET
ajis02-5323	218	35	work	work	NOUN
ajis02-5323	218	36	.	.	PUNCT
ajis02-5323	218	37	”	"	PUNCT
ajis02-5323	219	1	(	(	PUNCT
ajis02-5323	219	2	p21	p21	NOUN
ajis02-5323	219	3	)	)	PUNCT
ajis02-5323	219	4	.	.	PUNCT
ajis02-5323	220	1	regarding	regard	VERB
ajis02-5323	220	2	processes	process	NOUN
ajis02-5323	220	3	,	,	PUNCT
ajis02-5323	220	4	focal	focal	ADJ
ajis02-5323	220	5	organizations	organization	NOUN
ajis02-5323	220	6	are	be	AUX
ajis02-5323	220	7	looking	look	VERB
ajis02-5323	220	8	for	for	ADP
ajis02-5323	220	9	the	the	DET
ajis02-5323	220	10	presence	presence	NOUN
ajis02-5323	220	11	of	of	ADP
ajis02-5323	220	12	the	the	DET
ajis02-5323	220	13	information	information	NOUN
ajis02-5323	220	14	security	security	NOUN
ajis02-5323	220	15	role	role	NOUN
ajis02-5323	220	16	,	,	PUNCT
ajis02-5323	220	17	whether	whether	SCONJ
ajis02-5323	220	18	suppliers	supplier	NOUN
ajis02-5323	220	19	adhere	adhere	VERB
ajis02-5323	220	20	to	to	ADP
ajis02-5323	220	21	any	any	DET
ajis02-5323	220	22	risk	risk	NOUN
ajis02-5323	220	23	management	management	NOUN
ajis02-5323	220	24	framework	framework	NOUN
ajis02-5323	220	25	,	,	PUNCT
ajis02-5323	220	26	have	have	VERB
ajis02-5323	220	27	privacy	privacy	NOUN
ajis02-5323	220	28	policies	policy	NOUN
ajis02-5323	220	29	and	and	CCONJ
ajis02-5323	220	30	documented	document	VERB
ajis02-5323	220	31	processes	process	NOUN
ajis02-5323	220	32	,	,	PUNCT
ajis02-5323	220	33	such	such	ADJ
ajis02-5323	220	34	as	as	ADP
ajis02-5323	220	35	incident	incident	NOUN
ajis02-5323	220	36	response	response	NOUN
ajis02-5323	220	37	and	and	CCONJ
ajis02-5323	220	38	business	business	NOUN
ajis02-5323	220	39	continuity	continuity	NOUN
ajis02-5323	220	40	plans	plan	NOUN
ajis02-5323	220	41	and	and	CCONJ
ajis02-5323	220	42	how	how	SCONJ
ajis02-5323	220	43	they	they	PRON
ajis02-5323	220	44	would	would	AUX
ajis02-5323	220	45	notify	notify	VERB
ajis02-5323	220	46	their	their	PRON
ajis02-5323	220	47	partner	partner	NOUN
ajis02-5323	220	48	about	about	ADP
ajis02-5323	220	49	an	an	DET
ajis02-5323	220	50	incident	incident	NOUN
ajis02-5323	220	51	or	or	CCONJ
ajis02-5323	220	52	changes	change	NOUN
ajis02-5323	220	53	.	.	PUNCT
ajis02-5323	221	1	p12	p12	PROPN
ajis02-5323	221	2	stressed	stress	VERB
ajis02-5323	221	3	that	that	SCONJ
ajis02-5323	221	4	“	"	PUNCT
ajis02-5323	221	5	most	most	ADJ
ajis02-5323	221	6	incidents	incident	NOUN
ajis02-5323	221	7	in	in	ADP
ajis02-5323	221	8	vendors	vendor	NOUN
ajis02-5323	221	9	are	be	AUX
ajis02-5323	221	10	not	not	PART
ajis02-5323	221	11	related	relate	VERB
ajis02-5323	221	12	to	to	ADP
ajis02-5323	221	13	malicious	malicious	ADJ
ajis02-5323	221	14	activity	activity	NOUN
ajis02-5323	221	15	;	;	PUNCT
ajis02-5323	221	16	it	it	PRON
ajis02-5323	221	17	’s	’	VERB
ajis02-5323	221	18	a	a	DET
ajis02-5323	221	19	failure	failure	NOUN
ajis02-5323	221	20	of	of	ADP
ajis02-5323	221	21	technology	technology	NOUN
ajis02-5323	221	22	that	that	PRON
ajis02-5323	221	23	occurs	occur	VERB
ajis02-5323	221	24	from	from	ADP
ajis02-5323	221	25	an	an	DET
ajis02-5323	221	26	error	error	NOUN
ajis02-5323	221	27	.	.	PUNCT
ajis02-5323	222	1	then	then	ADV
ajis02-5323	222	2	continuity	continuity	NOUN
ajis02-5323	222	3	becomes	become	VERB
ajis02-5323	222	4	very	very	ADV
ajis02-5323	222	5	important	important	ADJ
ajis02-5323	222	6	.	.	PUNCT
ajis02-5323	222	7	”	"	PUNCT
ajis02-5323	223	1	regarding	regard	VERB
ajis02-5323	223	2	people	people	NOUN
ajis02-5323	223	3	,	,	PUNCT
ajis02-5323	223	4	organizations	organization	NOUN
ajis02-5323	223	5	look	look	VERB
ajis02-5323	223	6	at	at	ADP
ajis02-5323	223	7	suppliers	supplier	NOUN
ajis02-5323	223	8	’	'	PUNCT
ajis02-5323	223	9	attitudes	attitude	NOUN
ajis02-5323	223	10	towards	towards	ADP
ajis02-5323	223	11	protecting	protect	VERB
ajis02-5323	223	12	information	information	NOUN
ajis02-5323	223	13	,	,	PUNCT
ajis02-5323	223	14	security	security	NOUN
ajis02-5323	223	15	awareness	awareness	NOUN
ajis02-5323	223	16	programs	program	NOUN
ajis02-5323	223	17	for	for	ADP
ajis02-5323	223	18	their	their	PRON
ajis02-5323	223	19	employees	employee	NOUN
ajis02-5323	223	20	,	,	PUNCT
ajis02-5323	223	21	and	and	CCONJ
ajis02-5323	223	22	whether	whether	SCONJ
ajis02-5323	223	23	they	they	PRON
ajis02-5323	223	24	perform	perform	VERB
ajis02-5323	223	25	vetting	vetting	NOUN
ajis02-5323	223	26	of	of	ADP
ajis02-5323	223	27	employees	employee	NOUN
ajis02-5323	223	28	involved	involve	VERB
ajis02-5323	223	29	in	in	ADP
ajis02-5323	223	30	cyber	cyber	ADJ
ajis02-5323	223	31	security	security	NOUN
ajis02-5323	223	32	management	management	NOUN
ajis02-5323	223	33	.	.	PUNCT
ajis02-5323	224	1	interviewees	interviewee	NOUN
ajis02-5323	224	2	raised	raise	VERB
ajis02-5323	224	3	a	a	DET
ajis02-5323	224	4	concern	concern	NOUN
ajis02-5323	224	5	that	that	SCONJ
ajis02-5323	224	6	most	most	ADJ
ajis02-5323	224	7	companies	company	NOUN
ajis02-5323	224	8	fail	fail	VERB
ajis02-5323	224	9	to	to	PART
ajis02-5323	224	10	check	check	VERB
ajis02-5323	224	11	their	their	PRON
ajis02-5323	224	12	employees	employee	NOUN
ajis02-5323	224	13	and	and	CCONJ
ajis02-5323	224	14	provide	provide	VERB
ajis02-5323	224	15	security	security	NOUN
ajis02-5323	224	16	awareness	awareness	NOUN
ajis02-5323	224	17	programs	program	NOUN
ajis02-5323	224	18	only	only	ADV
ajis02-5323	224	19	for	for	ADP
ajis02-5323	224	20	australasian	australasian	ADJ
ajis02-5323	224	21	journal	journal	NOUN
ajis02-5323	224	22	of	of	ADP
ajis02-5323	224	23	information	information	NOUN
ajis02-5323	224	24	systems	system	NOUN
ajis02-5323	224	25	slapnicar	slapnicar	NOUN
ajis02-5323	224	26	,	,	PUNCT
ajis02-5323	224	27	vidmar	vidmar	NOUN
ajis02-5323	224	28	&	&	CCONJ
ajis02-5323	224	29	tsen	tsen	ADJ
ajis02-5323	224	30	2025	2025	NUM
ajis02-5323	224	31	,	,	PUNCT
ajis02-5323	224	32	vol	vol	NOUN
ajis02-5323	224	33	29	29	NUM
ajis02-5323	224	34	,	,	PUNCT
ajis02-5323	224	35	research	research	NOUN
ajis02-5323	224	36	article	article	NOUN
ajis02-5323	224	37	process	process	NOUN
ajis02-5323	224	38	theory	theory	NOUN
ajis02-5323	224	39	of	of	ADP
ajis02-5323	224	40	supplier	supplier	NOUN
ajis02-5323	224	41	cyber	cyber	NOUN
ajis02-5323	224	42	risk	risk	NOUN
ajis02-5323	224	43	assessment	assessment	NOUN
ajis02-5323	224	44	15	15	NUM
ajis02-5323	224	45	their	their	PRON
ajis02-5323	224	46	it	it	NOUN
ajis02-5323	224	47	staff	staff	NOUN
ajis02-5323	224	48	.	.	PUNCT
ajis02-5323	225	1	in	in	ADP
ajis02-5323	225	2	some	some	DET
ajis02-5323	225	3	cases	case	NOUN
ajis02-5323	225	4	,	,	PUNCT
ajis02-5323	225	5	focal	focal	ADJ
ajis02-5323	225	6	organizations	organization	NOUN
ajis02-5323	225	7	check	check	VERB
ajis02-5323	225	8	suppliers	supplier	NOUN
ajis02-5323	225	9	’	’	PART
ajis02-5323	225	10	employees	employee	NOUN
ajis02-5323	225	11	’	'	PUNCT
ajis02-5323	225	12	and	and	CCONJ
ajis02-5323	225	13	senior	senior	ADJ
ajis02-5323	225	14	management	management	NOUN
ajis02-5323	225	15	’s	’s	PART
ajis02-5323	225	16	background	background	NOUN
ajis02-5323	225	17	to	to	PART
ajis02-5323	225	18	verify	verify	VERB
ajis02-5323	225	19	their	their	PRON
ajis02-5323	225	20	security	security	NOUN
ajis02-5323	225	21	qualifications	qualification	NOUN
ajis02-5323	225	22	and	and	CCONJ
ajis02-5323	225	23	trustworthiness	trustworthiness	NOUN
ajis02-5323	225	24	.	.	PUNCT
ajis02-5323	226	1	regulatory	regulatory	ADJ
ajis02-5323	226	2	requirements	requirement	NOUN
ajis02-5323	226	3	and	and	CCONJ
ajis02-5323	226	4	industry	industry	NOUN
ajis02-5323	226	5	standards	standard	NOUN
ajis02-5323	226	6	are	be	AUX
ajis02-5323	226	7	other	other	ADJ
ajis02-5323	226	8	critical	critical	ADJ
ajis02-5323	226	9	factors	factor	NOUN
ajis02-5323	226	10	determining	determine	VERB
ajis02-5323	226	11	supplier	supplier	NOUN
ajis02-5323	226	12	security	security	NOUN
ajis02-5323	226	13	posture	posture	NOUN
ajis02-5323	226	14	.	.	PUNCT
ajis02-5323	227	1	“	"	PUNCT
ajis02-5323	227	2	many	many	ADJ
ajis02-5323	227	3	of	of	ADP
ajis02-5323	227	4	our	our	PRON
ajis02-5323	227	5	key	key	ADJ
ajis02-5323	227	6	suppliers	supplier	NOUN
ajis02-5323	227	7	are	be	AUX
ajis02-5323	227	8	also	also	ADV
ajis02-5323	227	9	captured	capture	VERB
ajis02-5323	227	10	by	by	ADP
ajis02-5323	227	11	the	the	DET
ajis02-5323	227	12	critical	critical	ADJ
ajis02-5323	227	13	infrastructure	infrastructure	NOUN
ajis02-5323	227	14	legislation	legislation	NOUN
ajis02-5323	227	15	.	.	PUNCT
ajis02-5323	228	1	that	that	PRON
ajis02-5323	228	2	creates	create	VERB
ajis02-5323	228	3	a	a	DET
ajis02-5323	228	4	great	great	ADJ
ajis02-5323	228	5	deal	deal	NOUN
ajis02-5323	228	6	of	of	ADP
ajis02-5323	228	7	certainty	certainty	NOUN
ajis02-5323	228	8	.	.	PUNCT
ajis02-5323	229	1	they	they	PRON
ajis02-5323	229	2	need	need	VERB
ajis02-5323	229	3	to	to	PART
ajis02-5323	229	4	produce	produce	VERB
ajis02-5323	229	5	a	a	DET
ajis02-5323	229	6	very	very	ADV
ajis02-5323	229	7	detailed	detailed	ADJ
ajis02-5323	229	8	critical	critical	ADJ
ajis02-5323	229	9	infrastructure	infrastructure	NOUN
ajis02-5323	229	10	management	management	NOUN
ajis02-5323	229	11	plan	plan	NOUN
ajis02-5323	229	12	.	.	PUNCT
ajis02-5323	229	13	”	"	PUNCT
ajis02-5323	230	1	(	(	PUNCT
ajis02-5323	230	2	p6	p6	PROPN
ajis02-5323	230	3	)	)	PUNCT
ajis02-5323	230	4	.	.	PUNCT
ajis02-5323	231	1	if	if	SCONJ
ajis02-5323	231	2	a	a	DET
ajis02-5323	231	3	supplier	supplier	NOUN
ajis02-5323	231	4	is	be	AUX
ajis02-5323	231	5	subject	subject	ADJ
ajis02-5323	231	6	to	to	ADP
ajis02-5323	231	7	privacy	privacy	NOUN
ajis02-5323	231	8	laws	law	NOUN
ajis02-5323	231	9	and	and	CCONJ
ajis02-5323	231	10	the	the	DET
ajis02-5323	231	11	payment	payment	NOUN
ajis02-5323	231	12	card	card	NOUN
ajis02-5323	231	13	industry	industry	NOUN
ajis02-5323	231	14	standards	standard	NOUN
ajis02-5323	231	15	and	and	CCONJ
ajis02-5323	231	16	is	be	AUX
ajis02-5323	231	17	from	from	ADP
ajis02-5323	231	18	the	the	DET
ajis02-5323	231	19	critical	critical	ADJ
ajis02-5323	231	20	industry	industry	NOUN
ajis02-5323	231	21	,	,	PUNCT
ajis02-5323	231	22	the	the	DET
ajis02-5323	231	23	regulation	regulation	NOUN
ajis02-5323	231	24	provides	provide	VERB
ajis02-5323	231	25	a	a	DET
ajis02-5323	231	26	sense	sense	NOUN
ajis02-5323	231	27	of	of	ADP
ajis02-5323	231	28	security	security	NOUN
ajis02-5323	231	29	to	to	ADP
ajis02-5323	231	30	a	a	DET
ajis02-5323	231	31	focal	focal	ADJ
ajis02-5323	231	32	organization	organization	NOUN
ajis02-5323	231	33	.	.	PUNCT
ajis02-5323	232	1	our	our	PRON
ajis02-5323	232	2	respondents	respondent	NOUN
ajis02-5323	232	3	also	also	ADV
ajis02-5323	232	4	acquire	acquire	VERB
ajis02-5323	232	5	information	information	NOUN
ajis02-5323	232	6	about	about	ADP
ajis02-5323	232	7	past	past	ADJ
ajis02-5323	232	8	incidents	incident	NOUN
ajis02-5323	232	9	but	but	CCONJ
ajis02-5323	232	10	have	have	VERB
ajis02-5323	232	11	contrasting	contrast	VERB
ajis02-5323	232	12	opinions	opinion	NOUN
ajis02-5323	232	13	about	about	ADP
ajis02-5323	232	14	whether	whether	SCONJ
ajis02-5323	232	15	past	past	ADJ
ajis02-5323	232	16	incidents	incident	NOUN
ajis02-5323	232	17	indicate	indicate	VERB
ajis02-5323	232	18	future	future	ADJ
ajis02-5323	232	19	incidents	incident	NOUN
ajis02-5323	232	20	or	or	CCONJ
ajis02-5323	232	21	the	the	DET
ajis02-5323	232	22	lesser	less	ADJ
ajis02-5323	232	23	likelihood	likelihood	NOUN
ajis02-5323	232	24	of	of	ADP
ajis02-5323	232	25	another	another	DET
ajis02-5323	232	26	incident	incident	NOUN
ajis02-5323	232	27	because	because	SCONJ
ajis02-5323	232	28	a	a	DET
ajis02-5323	232	29	supplier	supplier	NOUN
ajis02-5323	232	30	has	have	AUX
ajis02-5323	232	31	learnt	learn	VERB
ajis02-5323	232	32	the	the	DET
ajis02-5323	232	33	lesson	lesson	NOUN
ajis02-5323	232	34	(	(	PUNCT
ajis02-5323	232	35	unless	unless	SCONJ
ajis02-5323	232	36	it	it	PRON
ajis02-5323	232	37	had	have	VERB
ajis02-5323	232	38	multiple	multiple	ADJ
ajis02-5323	232	39	breaches	breach	NOUN
ajis02-5323	232	40	)	)	PUNCT
ajis02-5323	232	41	.	.	PUNCT
ajis02-5323	233	1	the	the	DET
ajis02-5323	233	2	complexity	complexity	NOUN
ajis02-5323	233	3	of	of	ADP
ajis02-5323	233	4	a	a	DET
ajis02-5323	233	5	supplier	supplier	NOUN
ajis02-5323	233	6	’s	’s	PART
ajis02-5323	233	7	supply	supply	NOUN
ajis02-5323	233	8	chain	chain	NOUN
ajis02-5323	233	9	is	be	AUX
ajis02-5323	233	10	another	another	DET
ajis02-5323	233	11	cyber	cyber	ADJ
ajis02-5323	233	12	risk	risk	NOUN
ajis02-5323	233	13	posture	posture	NOUN
ajis02-5323	233	14	characteristic	characteristic	NOUN
ajis02-5323	233	15	,	,	PUNCT
ajis02-5323	233	16	challenging	challenge	VERB
ajis02-5323	233	17	to	to	PART
ajis02-5323	233	18	assess	assess	VERB
ajis02-5323	233	19	and	and	CCONJ
ajis02-5323	233	20	manage	manage	VERB
ajis02-5323	233	21	.	.	PUNCT
ajis02-5323	234	1	only	only	ADV
ajis02-5323	234	2	one	one	NUM
ajis02-5323	234	3	of	of	ADP
ajis02-5323	234	4	our	our	PRON
ajis02-5323	234	5	interviewees	interviewee	NOUN
ajis02-5323	234	6	mentioned	mention	VERB
ajis02-5323	234	7	having	having	AUX
ajis02-5323	234	8	engaged	engage	VERB
ajis02-5323	234	9	in	in	ADP
ajis02-5323	234	10	the	the	DET
ajis02-5323	234	11	investigation	investigation	NOUN
ajis02-5323	234	12	beyond	beyond	ADP
ajis02-5323	234	13	tier	tier	NOUN
ajis02-5323	234	14	1	1	NUM
ajis02-5323	234	15	suppliers	supplier	NOUN
ajis02-5323	234	16	:	:	PUNCT
ajis02-5323	234	17	“	"	PUNCT
ajis02-5323	234	18	i	i	PRON
ajis02-5323	234	19	found	find	VERB
ajis02-5323	234	20	that	that	SCONJ
ajis02-5323	234	21	behind	behind	ADP
ajis02-5323	234	22	that	that	DET
ajis02-5323	234	23	third	third	ADJ
ajis02-5323	234	24	party	party	NOUN
ajis02-5323	234	25	provider	provider	NOUN
ajis02-5323	234	26	,	,	PUNCT
ajis02-5323	234	27	there	there	PRON
ajis02-5323	234	28	are	be	VERB
ajis02-5323	234	29	12	12	NUM
ajis02-5323	234	30	other	other	ADJ
ajis02-5323	234	31	companies	company	NOUN
ajis02-5323	234	32	who	who	PRON
ajis02-5323	234	33	manage	manage	VERB
ajis02-5323	234	34	the	the	DET
ajis02-5323	234	35	data	datum	NOUN
ajis02-5323	234	36	of	of	ADP
ajis02-5323	234	37	this	this	DET
ajis02-5323	234	38	company	company	NOUN
ajis02-5323	234	39	across	across	ADP
ajis02-5323	234	40	new	new	PROPN
ajis02-5323	234	41	zealand	zealand	PROPN
ajis02-5323	234	42	,	,	PUNCT
ajis02-5323	234	43	the	the	DET
ajis02-5323	234	44	us	us	PROPN
ajis02-5323	234	45	,	,	PUNCT
ajis02-5323	234	46	australia	australia	PROPN
ajis02-5323	234	47	,	,	PUNCT
ajis02-5323	234	48	and	and	CCONJ
ajis02-5323	234	49	the	the	DET
ajis02-5323	234	50	netherlands	netherlands	PROPN
ajis02-5323	234	51	.	.	PUNCT
ajis02-5323	235	1	it	it	PRON
ajis02-5323	235	2	is	be	AUX
ajis02-5323	235	3	not	not	PART
ajis02-5323	235	4	a	a	DET
ajis02-5323	235	5	supply	supply	NOUN
ajis02-5323	235	6	chain	chain	NOUN
ajis02-5323	235	7	;	;	PUNCT
ajis02-5323	235	8	it	it	PRON
ajis02-5323	235	9	is	be	AUX
ajis02-5323	235	10	a	a	DET
ajis02-5323	235	11	multi	multi	ADJ
ajis02-5323	235	12	-	-	ADJ
ajis02-5323	235	13	layer	layer	ADJ
ajis02-5323	235	14	business	business	NOUN
ajis02-5323	235	15	network	network	NOUN
ajis02-5323	235	16	;	;	PUNCT
ajis02-5323	235	17	one	one	NUM
ajis02-5323	235	18	company	company	NOUN
ajis02-5323	235	19	provides	provide	VERB
ajis02-5323	235	20	infrastructure	infrastructure	NOUN
ajis02-5323	235	21	,	,	PUNCT
ajis02-5323	235	22	other	other	ADJ
ajis02-5323	235	23	companies	company	NOUN
ajis02-5323	235	24	provide	provide	VERB
ajis02-5323	235	25	solutions	solution	NOUN
ajis02-5323	235	26	,	,	PUNCT
ajis02-5323	235	27	third	third	ADJ
ajis02-5323	235	28	companies	company	NOUN
ajis02-5323	235	29	provide	provide	VERB
ajis02-5323	235	30	hardware	hardware	NOUN
ajis02-5323	235	31	,	,	PUNCT
ajis02-5323	235	32	and	and	CCONJ
ajis02-5323	235	33	fourth	fourth	ADJ
ajis02-5323	235	34	companies	company	NOUN
ajis02-5323	235	35	try	try	VERB
ajis02-5323	235	36	to	to	PART
ajis02-5323	235	37	manage	manage	VERB
ajis02-5323	235	38	it	it	PRON
ajis02-5323	235	39	.	.	PUNCT
ajis02-5323	235	40	”	"	PUNCT
ajis02-5323	236	1	(	(	PUNCT
ajis02-5323	236	2	p10	p10	NOUN
ajis02-5323	236	3	)	)	PUNCT
ajis02-5323	236	4	.	.	PUNCT
ajis02-5323	237	1	other	other	ADJ
ajis02-5323	237	2	interviewees	interviewee	NOUN
ajis02-5323	237	3	indicated	indicate	VERB
ajis02-5323	237	4	that	that	SCONJ
ajis02-5323	237	5	while	while	SCONJ
ajis02-5323	237	6	they	they	PRON
ajis02-5323	237	7	are	be	AUX
ajis02-5323	237	8	aware	aware	ADJ
ajis02-5323	237	9	of	of	ADP
ajis02-5323	237	10	their	their	PRON
ajis02-5323	237	11	suppliers	supplier	NOUN
ajis02-5323	237	12	'	'	PART
ajis02-5323	237	13	subcontractors	subcontractor	NOUN
ajis02-5323	237	14	,	,	PUNCT
ajis02-5323	237	15	they	they	PRON
ajis02-5323	237	16	do	do	AUX
ajis02-5323	237	17	not	not	PART
ajis02-5323	237	18	assess	assess	VERB
ajis02-5323	237	19	their	their	PRON
ajis02-5323	237	20	cyber	cyber	ADJ
ajis02-5323	237	21	security	security	NOUN
ajis02-5323	237	22	.	.	PUNCT
ajis02-5323	238	1	only	only	ADV
ajis02-5323	238	2	if	if	SCONJ
ajis02-5323	238	3	it	it	PRON
ajis02-5323	238	4	comes	come	VERB
ajis02-5323	238	5	to	to	ADP
ajis02-5323	238	6	an	an	DET
ajis02-5323	238	7	incident	incident	NOUN
ajis02-5323	238	8	,	,	PUNCT
ajis02-5323	238	9	meaning	mean	VERB
ajis02-5323	238	10	that	that	SCONJ
ajis02-5323	238	11	a	a	DET
ajis02-5323	238	12	subcontractor	subcontractor	NOUN
ajis02-5323	238	13	breaches	breach	VERB
ajis02-5323	238	14	the	the	DET
ajis02-5323	238	15	focal	focal	ADJ
ajis02-5323	238	16	organization	organization	NOUN
ajis02-5323	238	17	’s	’s	PART
ajis02-5323	238	18	security	security	NOUN
ajis02-5323	238	19	requirements	requirement	NOUN
ajis02-5323	238	20	,	,	PUNCT
ajis02-5323	238	21	the	the	DET
ajis02-5323	238	22	latter	latter	ADJ
ajis02-5323	238	23	might	might	AUX
ajis02-5323	238	24	request	request	VERB
ajis02-5323	238	25	an	an	DET
ajis02-5323	238	26	on	on	ADP
ajis02-5323	238	27	-	-	PUNCT
ajis02-5323	238	28	site	site	NOUN
ajis02-5323	238	29	visit	visit	NOUN
ajis02-5323	238	30	of	of	ADP
ajis02-5323	238	31	the	the	DET
ajis02-5323	238	32	subcontractor	subcontractor	NOUN
ajis02-5323	238	33	.	.	PUNCT
ajis02-5323	239	1	however	however	ADV
ajis02-5323	239	2	,	,	PUNCT
ajis02-5323	239	3	some	some	DET
ajis02-5323	239	4	vendor	vendor	NOUN
ajis02-5323	239	5	risk	risk	NOUN
ajis02-5323	239	6	management	management	NOUN
ajis02-5323	239	7	platforms	platform	NOUN
ajis02-5323	239	8	provide	provide	VERB
ajis02-5323	239	9	the	the	DET
ajis02-5323	239	10	basic	basic	ADJ
ajis02-5323	239	11	risk	risk	NOUN
ajis02-5323	239	12	scores	score	NOUN
ajis02-5323	239	13	of	of	ADP
ajis02-5323	239	14	suppliers	supplier	NOUN
ajis02-5323	239	15	’	'	PUNCT
ajis02-5323	239	16	subcontractors	subcontractor	NOUN
ajis02-5323	239	17	,	,	PUNCT
ajis02-5323	239	18	limited	limit	VERB
ajis02-5323	239	19	to	to	ADP
ajis02-5323	239	20	the	the	DET
ajis02-5323	239	21	risks	risk	NOUN
ajis02-5323	239	22	related	relate	VERB
ajis02-5323	239	23	to	to	ADP
ajis02-5323	239	24	their	their	PRON
ajis02-5323	239	25	outward	outward	ADV
ajis02-5323	239	26	-	-	PUNCT
ajis02-5323	239	27	looking	look	VERB
ajis02-5323	239	28	technology	technology	NOUN
ajis02-5323	239	29	.	.	PUNCT
ajis02-5323	240	1	foreign	foreign	ADJ
ajis02-5323	240	2	ownership	ownership	NOUN
ajis02-5323	240	3	/	/	SYM
ajis02-5323	240	4	operations	operation	NOUN
ajis02-5323	240	5	/	/	SYM
ajis02-5323	240	6	influence	influence	NOUN
ajis02-5323	240	7	are	be	AUX
ajis02-5323	240	8	also	also	ADV
ajis02-5323	240	9	a	a	DET
ajis02-5323	240	10	risk	risk	NOUN
ajis02-5323	240	11	as	as	SCONJ
ajis02-5323	240	12	countries	country	NOUN
ajis02-5323	240	13	have	have	VERB
ajis02-5323	240	14	varying	vary	VERB
ajis02-5323	240	15	laws	law	NOUN
ajis02-5323	240	16	and	and	CCONJ
ajis02-5323	240	17	regulations	regulation	NOUN
ajis02-5323	240	18	regarding	regard	VERB
ajis02-5323	240	19	data	data	NOUN
ajis02-5323	240	20	privacy	privacy	NOUN
ajis02-5323	240	21	,	,	PUNCT
ajis02-5323	240	22	surveillance	surveillance	NOUN
ajis02-5323	240	23	,	,	PUNCT
ajis02-5323	240	24	and	and	CCONJ
ajis02-5323	240	25	information	information	NOUN
ajis02-5323	240	26	control	control	NOUN
ajis02-5323	240	27	.	.	PUNCT
ajis02-5323	241	1	some	some	DET
ajis02-5323	241	2	governments	government	NOUN
ajis02-5323	241	3	may	may	AUX
ajis02-5323	241	4	impose	impose	VERB
ajis02-5323	241	5	strict	strict	ADJ
ajis02-5323	241	6	regulations	regulation	NOUN
ajis02-5323	241	7	requiring	require	VERB
ajis02-5323	241	8	companies	company	NOUN
ajis02-5323	241	9	to	to	PART
ajis02-5323	241	10	provide	provide	VERB
ajis02-5323	241	11	access	access	NOUN
ajis02-5323	241	12	to	to	ADP
ajis02-5323	241	13	their	their	PRON
ajis02-5323	241	14	data	datum	NOUN
ajis02-5323	241	15	or	or	CCONJ
ajis02-5323	241	16	compel	compel	VERB
ajis02-5323	241	17	them	they	PRON
ajis02-5323	241	18	to	to	PART
ajis02-5323	241	19	store	store	VERB
ajis02-5323	241	20	it	it	PRON
ajis02-5323	241	21	within	within	ADP
ajis02-5323	241	22	the	the	DET
ajis02-5323	241	23	country	country	NOUN
ajis02-5323	241	24	's	's	PART
ajis02-5323	241	25	borders	border	NOUN
ajis02-5323	241	26	.	.	PUNCT
ajis02-5323	242	1	the	the	DET
ajis02-5323	242	2	supplier	supplier	NOUN
ajis02-5323	242	3	’s	’s	PART
ajis02-5323	242	4	targeting	targeting	NOUN
ajis02-5323	242	5	factor	factor	NOUN
ajis02-5323	242	6	depends	depend	VERB
ajis02-5323	242	7	primarily	primarily	ADV
ajis02-5323	242	8	on	on	ADP
ajis02-5323	242	9	its	its	PRON
ajis02-5323	242	10	industry	industry	NOUN
ajis02-5323	242	11	(	(	PUNCT
ajis02-5323	242	12	e.g.	e.g.	ADV
ajis02-5323	242	13	,	,	PUNCT
ajis02-5323	242	14	critical	critical	ADJ
ajis02-5323	242	15	infrastructure	infrastructure	NOUN
ajis02-5323	242	16	,	,	PUNCT
ajis02-5323	242	17	financial	financial	ADJ
ajis02-5323	242	18	,	,	PUNCT
ajis02-5323	242	19	ict	ict	PROPN
ajis02-5323	242	20	)	)	PUNCT
ajis02-5323	242	21	and	and	CCONJ
ajis02-5323	242	22	whether	whether	SCONJ
ajis02-5323	242	23	it	it	PRON
ajis02-5323	242	24	is	be	AUX
ajis02-5323	242	25	a	a	DET
ajis02-5323	242	26	government	government	NOUN
ajis02-5323	242	27	sc	sc	PROPN
ajis02-5323	242	28	.	.	PUNCT
ajis02-5323	243	1	the	the	DET
ajis02-5323	243	2	business	business	NOUN
ajis02-5323	243	3	characteristics	characteristic	NOUN
ajis02-5323	243	4	of	of	ADP
ajis02-5323	243	5	suppliers	supplier	NOUN
ajis02-5323	243	6	,	,	PUNCT
ajis02-5323	243	7	such	such	ADJ
ajis02-5323	243	8	as	as	ADP
ajis02-5323	243	9	financial	financial	ADJ
ajis02-5323	243	10	health	health	NOUN
ajis02-5323	243	11	,	,	PUNCT
ajis02-5323	243	12	size	size	NOUN
ajis02-5323	243	13	,	,	PUNCT
ajis02-5323	243	14	age	age	NOUN
ajis02-5323	243	15	,	,	PUNCT
ajis02-5323	243	16	and	and	CCONJ
ajis02-5323	243	17	market	market	NOUN
ajis02-5323	243	18	share	share	NOUN
ajis02-5323	243	19	,	,	PUNCT
ajis02-5323	243	20	were	be	AUX
ajis02-5323	243	21	also	also	ADV
ajis02-5323	243	22	suggested	suggest	VERB
ajis02-5323	243	23	as	as	ADV
ajis02-5323	243	24	important	important	ADJ
ajis02-5323	243	25	as	as	SCONJ
ajis02-5323	243	26	if	if	SCONJ
ajis02-5323	243	27	they	they	PRON
ajis02-5323	243	28	are	be	AUX
ajis02-5323	243	29	financially	financially	ADV
ajis02-5323	243	30	vulnerable	vulnerable	ADJ
ajis02-5323	243	31	and	and	CCONJ
ajis02-5323	243	32	unstable	unstable	ADJ
ajis02-5323	243	33	,	,	PUNCT
ajis02-5323	243	34	they	they	PRON
ajis02-5323	243	35	can	can	AUX
ajis02-5323	243	36	become	become	VERB
ajis02-5323	243	37	vulnerable	vulnerable	ADJ
ajis02-5323	243	38	to	to	ADP
ajis02-5323	243	39	a	a	DET
ajis02-5323	243	40	cyberattack	cyberattack	NOUN
ajis02-5323	243	41	.	.	PUNCT
ajis02-5323	244	1	lastly	lastly	ADV
ajis02-5323	244	2	,	,	PUNCT
ajis02-5323	244	3	organizations	organization	NOUN
ajis02-5323	244	4	assess	assess	VERB
ajis02-5323	244	5	the	the	DET
ajis02-5323	244	6	supplier	supplier	NOUN
ajis02-5323	244	7	’s	’s	PART
ajis02-5323	244	8	reputation	reputation	NOUN
ajis02-5323	244	9	and	and	CCONJ
ajis02-5323	244	10	customers	customer	NOUN
ajis02-5323	244	11	’	'	PUNCT
ajis02-5323	244	12	and	and	CCONJ
ajis02-5323	244	13	partners	partner	NOUN
ajis02-5323	244	14	’	’	PART
ajis02-5323	244	15	references	reference	NOUN
ajis02-5323	244	16	.	.	PUNCT
ajis02-5323	245	1	4.1.5	4.1.5	NUM
ajis02-5323	245	2	assurance	assurance	NOUN
ajis02-5323	245	3	whether	whether	SCONJ
ajis02-5323	245	4	organizations	organization	NOUN
ajis02-5323	245	5	require	require	VERB
ajis02-5323	245	6	any	any	DET
ajis02-5323	245	7	assurance	assurance	NOUN
ajis02-5323	245	8	concerning	concern	VERB
ajis02-5323	245	9	the	the	DET
ajis02-5323	245	10	information	information	NOUN
ajis02-5323	245	11	provided	provide	VERB
ajis02-5323	245	12	depends	depend	VERB
ajis02-5323	245	13	on	on	ADP
ajis02-5323	245	14	the	the	DET
ajis02-5323	245	15	supplier	supplier	NOUN
ajis02-5323	245	16	’s	’s	PART
ajis02-5323	245	17	criticality	criticality	NOUN
ajis02-5323	245	18	.	.	PUNCT
ajis02-5323	246	1	“	"	PUNCT
ajis02-5323	246	2	it	it	PRON
ajis02-5323	246	3	depends	depend	VERB
ajis02-5323	246	4	on	on	ADP
ajis02-5323	246	5	the	the	DET
ajis02-5323	246	6	perceived	perceive	VERB
ajis02-5323	246	7	risk	risk	NOUN
ajis02-5323	246	8	how	how	SCONJ
ajis02-5323	246	9	many	many	ADJ
ajis02-5323	246	10	assurance	assurance	NOUN
ajis02-5323	246	11	activities	activity	NOUN
ajis02-5323	246	12	make	make	VERB
ajis02-5323	246	13	sense	sense	NOUN
ajis02-5323	246	14	or	or	CCONJ
ajis02-5323	246	15	are	be	AUX
ajis02-5323	246	16	economically	economically	ADV
ajis02-5323	246	17	viable	viable	ADJ
ajis02-5323	246	18	.	.	PUNCT
ajis02-5323	247	1	if	if	SCONJ
ajis02-5323	247	2	there	there	PRON
ajis02-5323	247	3	's	be	VERB
ajis02-5323	247	4	no	no	DET
ajis02-5323	247	5	personal	personal	ADJ
ajis02-5323	247	6	information	information	NOUN
ajis02-5323	247	7	involved	involve	VERB
ajis02-5323	247	8	,	,	PUNCT
ajis02-5323	247	9	well	well	INTJ
ajis02-5323	247	10	,	,	PUNCT
ajis02-5323	247	11	i	i	PRON
ajis02-5323	247	12	'll	will	AUX
ajis02-5323	247	13	treat	treat	VERB
ajis02-5323	247	14	that	that	PRON
ajis02-5323	247	15	differently	differently	ADV
ajis02-5323	247	16	than	than	ADP
ajis02-5323	247	17	when	when	SCONJ
ajis02-5323	247	18	half	half	DET
ajis02-5323	247	19	a	a	DET
ajis02-5323	247	20	million	million	NUM
ajis02-5323	247	21	personal	personal	ADJ
ajis02-5323	247	22	information	information	NOUN
ajis02-5323	247	23	records	record	NOUN
ajis02-5323	247	24	are	be	AUX
ajis02-5323	247	25	at	at	ADP
ajis02-5323	247	26	risk	risk	NOUN
ajis02-5323	247	27	.	.	PUNCT
ajis02-5323	248	1	i	i	PRON
ajis02-5323	248	2	'm	be	AUX
ajis02-5323	248	3	gon	go	VERB
ajis02-5323	248	4	na	to	PART
ajis02-5323	248	5	have	have	VERB
ajis02-5323	248	6	stronger	strong	ADJ
ajis02-5323	248	7	assurance	assurance	NOUN
ajis02-5323	248	8	built	build	VERB
ajis02-5323	248	9	into	into	ADP
ajis02-5323	248	10	the	the	DET
ajis02-5323	248	11	contract	contract	NOUN
ajis02-5323	248	12	for	for	ADP
ajis02-5323	248	13	the	the	DET
ajis02-5323	248	14	second	second	ADJ
ajis02-5323	248	15	one	one	NOUN
ajis02-5323	248	16	and	and	CCONJ
ajis02-5323	248	17	might	might	AUX
ajis02-5323	248	18	not	not	PART
ajis02-5323	248	19	need	need	VERB
ajis02-5323	248	20	any	any	PRON
ajis02-5323	248	21	for	for	ADP
ajis02-5323	248	22	the	the	DET
ajis02-5323	248	23	first	first	ADJ
ajis02-5323	248	24	one	one	NUM
ajis02-5323	248	25	.	.	PUNCT
ajis02-5323	248	26	”	"	PUNCT
ajis02-5323	249	1	(	(	PUNCT
ajis02-5323	249	2	p21	p21	NOUN
ajis02-5323	249	3	)	)	PUNCT
ajis02-5323	249	4	.	.	PUNCT
ajis02-5323	250	1	only	only	ADV
ajis02-5323	250	2	for	for	ADP
ajis02-5323	250	3	critical	critical	ADJ
ajis02-5323	250	4	suppliers	supplier	NOUN
ajis02-5323	250	5	,	,	PUNCT
ajis02-5323	250	6	the	the	DET
ajis02-5323	250	7	interviewees	interviewee	NOUN
ajis02-5323	250	8	require	require	VERB
ajis02-5323	250	9	audit	audit	NOUN
ajis02-5323	250	10	reports	report	NOUN
ajis02-5323	250	11	,	,	PUNCT
ajis02-5323	250	12	pen	pen	NOUN
ajis02-5323	250	13	tests	test	NOUN
ajis02-5323	250	14	,	,	PUNCT
ajis02-5323	250	15	and/or	and/or	CCONJ
ajis02-5323	250	16	cyber	cyber	ADJ
ajis02-5323	250	17	security	security	NOUN
ajis02-5323	250	18	certifications	certification	NOUN
ajis02-5323	250	19	.	.	PUNCT
ajis02-5323	251	1	however	however	ADV
ajis02-5323	251	2	,	,	PUNCT
ajis02-5323	251	3	not	not	PART
ajis02-5323	251	4	much	much	ADJ
ajis02-5323	251	5	detail	detail	NOUN
ajis02-5323	251	6	might	might	AUX
ajis02-5323	251	7	be	be	AUX
ajis02-5323	251	8	disclosed	disclose	VERB
ajis02-5323	251	9	to	to	ADP
ajis02-5323	251	10	prospective	prospective	ADJ
ajis02-5323	251	11	customers	customer	NOUN
ajis02-5323	251	12	:	:	PUNCT
ajis02-5323	251	13	“	"	PUNCT
ajis02-5323	251	14	in	in	ADP
ajis02-5323	251	15	pen	pen	NOUN
ajis02-5323	251	16	test	test	NOUN
ajis02-5323	251	17	reports	report	NOUN
ajis02-5323	251	18	,	,	PUNCT
ajis02-5323	251	19	they	they	PRON
ajis02-5323	251	20	will	will	AUX
ajis02-5323	251	21	only	only	ADV
ajis02-5323	251	22	give	give	VERB
ajis02-5323	251	23	you	you	PRON
ajis02-5323	251	24	the	the	DET
ajis02-5323	251	25	cover	cover	NOUN
ajis02-5323	251	26	page	page	NOUN
ajis02-5323	251	27	which	which	PRON
ajis02-5323	251	28	addresses	address	VERB
ajis02-5323	251	29	any	any	DET
ajis02-5323	251	30	risks	risk	NOUN
ajis02-5323	251	31	that	that	PRON
ajis02-5323	251	32	were	be	AUX
ajis02-5323	251	33	identified	identify	VERB
ajis02-5323	251	34	and	and	CCONJ
ajis02-5323	251	35	how	how	SCONJ
ajis02-5323	251	36	they	they	PRON
ajis02-5323	251	37	were	be	AUX
ajis02-5323	251	38	mitigated	mitigate	VERB
ajis02-5323	251	39	”	"	PUNCT
ajis02-5323	251	40	(	(	PUNCT
ajis02-5323	251	41	p30	p30	PROPN
ajis02-5323	251	42	)	)	PUNCT
ajis02-5323	251	43	.	.	PUNCT
ajis02-5323	252	1	also	also	ADV
ajis02-5323	252	2	,	,	PUNCT
ajis02-5323	252	3	the	the	DET
ajis02-5323	252	4	iso	iso	NOUN
ajis02-5323	252	5	27001	27001	NUM
ajis02-5323	252	6	certification	certification	NOUN
ajis02-5323	252	7	is	be	AUX
ajis02-5323	252	8	a	a	DET
ajis02-5323	252	9	one	one	NUM
ajis02-5323	252	10	pager	pager	NOUN
ajis02-5323	252	11	that	that	PRON
ajis02-5323	252	12	provides	provide	VERB
ajis02-5323	252	13	the	the	DET
ajis02-5323	252	14	focal	focal	ADJ
ajis02-5323	252	15	organization	organization	NOUN
ajis02-5323	252	16	only	only	ADV
ajis02-5323	252	17	with	with	ADP
ajis02-5323	252	18	proof	proof	NOUN
ajis02-5323	252	19	that	that	SCONJ
ajis02-5323	252	20	a	a	DET
ajis02-5323	252	21	prospective	prospective	ADJ
ajis02-5323	252	22	supplier	supplier	NOUN
ajis02-5323	252	23	meets	meet	VERB
ajis02-5323	252	24	the	the	DET
ajis02-5323	252	25	standard	standard	NOUN
ajis02-5323	252	26	without	without	ADP
ajis02-5323	252	27	any	any	DET
ajis02-5323	252	28	details	detail	NOUN
ajis02-5323	252	29	.	.	PUNCT
ajis02-5323	253	1	only	only	ADV
ajis02-5323	253	2	the	the	DET
ajis02-5323	253	3	soc	soc	NOUN
ajis02-5323	253	4	2	2	NUM
ajis02-5323	253	5	report	report	NOUN
ajis02-5323	253	6	by	by	ADP
ajis02-5323	253	7	the	the	DET
ajis02-5323	253	8	australasian	australasian	ADJ
ajis02-5323	253	9	journal	journal	NOUN
ajis02-5323	253	10	of	of	ADP
ajis02-5323	253	11	information	information	NOUN
ajis02-5323	253	12	systems	system	NOUN
ajis02-5323	253	13	slapnicar	slapnicar	NOUN
ajis02-5323	253	14	,	,	PUNCT
ajis02-5323	253	15	vidmar	vidmar	NOUN
ajis02-5323	253	16	&	&	CCONJ
ajis02-5323	253	17	tsen	tsen	ADJ
ajis02-5323	253	18	2025	2025	NUM
ajis02-5323	253	19	,	,	PUNCT
ajis02-5323	253	20	vol	vol	NOUN
ajis02-5323	253	21	29	29	NUM
ajis02-5323	253	22	,	,	PUNCT
ajis02-5323	253	23	research	research	NOUN
ajis02-5323	253	24	article	article	NOUN
ajis02-5323	253	25	process	process	NOUN
ajis02-5323	253	26	theory	theory	NOUN
ajis02-5323	253	27	of	of	ADP
ajis02-5323	253	28	supplier	supplier	NOUN
ajis02-5323	253	29	cyber	cyber	NOUN
ajis02-5323	253	30	risk	risk	NOUN
ajis02-5323	253	31	assessment	assessment	NOUN
ajis02-5323	253	32	16	16	NUM
ajis02-5323	253	33	american	american	PROPN
ajis02-5323	253	34	institute	institute	PROPN
ajis02-5323	253	35	of	of	ADP
ajis02-5323	253	36	certified	certify	VERB
ajis02-5323	253	37	public	public	ADJ
ajis02-5323	253	38	accountants	accountant	NOUN
ajis02-5323	253	39	offers	offer	VERB
ajis02-5323	253	40	a	a	DET
ajis02-5323	253	41	detailed	detailed	ADJ
ajis02-5323	253	42	and	and	CCONJ
ajis02-5323	253	43	comprehensive	comprehensive	ADJ
ajis02-5323	253	44	assessment	assessment	NOUN
ajis02-5323	253	45	of	of	ADP
ajis02-5323	253	46	the	the	DET
ajis02-5323	253	47	effectiveness	effectiveness	NOUN
ajis02-5323	253	48	of	of	ADP
ajis02-5323	253	49	controls	control	NOUN
ajis02-5323	253	50	.	.	PUNCT
ajis02-5323	254	1	however	however	ADV
ajis02-5323	254	2	,	,	PUNCT
ajis02-5323	254	3	reports	report	VERB
ajis02-5323	254	4	older	old	ADJ
ajis02-5323	254	5	than	than	ADP
ajis02-5323	254	6	a	a	DET
ajis02-5323	254	7	year	year	NOUN
ajis02-5323	254	8	are	be	AUX
ajis02-5323	254	9	already	already	ADV
ajis02-5323	254	10	considered	consider	VERB
ajis02-5323	254	11	outdated	outdated	ADJ
ajis02-5323	254	12	.	.	PUNCT
ajis02-5323	255	1	some	some	DET
ajis02-5323	255	2	organizations	organization	NOUN
ajis02-5323	255	3	even	even	ADV
ajis02-5323	255	4	have	have	VERB
ajis02-5323	255	5	to	to	PART
ajis02-5323	255	6	verify	verify	VERB
ajis02-5323	255	7	that	that	DET
ajis02-5323	255	8	audits	audits	NOUN
ajis02-5323	255	9	have	have	AUX
ajis02-5323	255	10	been	be	AUX
ajis02-5323	255	11	conducted	conduct	VERB
ajis02-5323	255	12	by	by	ADP
ajis02-5323	255	13	certified	certified	ADJ
ajis02-5323	255	14	auditors	auditor	NOUN
ajis02-5323	255	15	.	.	PUNCT
ajis02-5323	256	1	however	however	ADV
ajis02-5323	256	2	,	,	PUNCT
ajis02-5323	256	3	in	in	ADP
ajis02-5323	256	4	most	most	ADJ
ajis02-5323	256	5	cases	case	NOUN
ajis02-5323	256	6	,	,	PUNCT
ajis02-5323	256	7	organizations	organization	NOUN
ajis02-5323	256	8	do	do	AUX
ajis02-5323	256	9	not	not	PART
ajis02-5323	256	10	rely	rely	VERB
ajis02-5323	256	11	on	on	ADP
ajis02-5323	256	12	validation	validation	NOUN
ajis02-5323	256	13	,	,	PUNCT
ajis02-5323	256	14	especially	especially	ADV
ajis02-5323	256	15	for	for	ADP
ajis02-5323	256	16	smes	sme	NOUN
ajis02-5323	256	17	and	and	CCONJ
ajis02-5323	256	18	noncritical	noncritical	ADJ
ajis02-5323	256	19	suppliers	supplier	NOUN
ajis02-5323	256	20	.	.	PUNCT
ajis02-5323	257	1	they	they	PRON
ajis02-5323	257	2	count	count	VERB
ajis02-5323	257	3	on	on	ADP
ajis02-5323	257	4	the	the	DET
ajis02-5323	257	5	supplier	supplier	NOUN
ajis02-5323	257	6	’s	’s	PART
ajis02-5323	257	7	transparency	transparency	NOUN
ajis02-5323	257	8	and	and	CCONJ
ajis02-5323	257	9	willingness	willingness	NOUN
ajis02-5323	257	10	to	to	PART
ajis02-5323	257	11	share	share	VERB
ajis02-5323	257	12	information	information	NOUN
ajis02-5323	257	13	and	and	CCONJ
ajis02-5323	257	14	evaluate	evaluate	VERB
ajis02-5323	257	15	the	the	DET
ajis02-5323	257	16	information	information	NOUN
ajis02-5323	257	17	’s	’s	PART
ajis02-5323	257	18	credibility	credibility	NOUN
ajis02-5323	257	19	via	via	ADP
ajis02-5323	257	20	partners	partner	NOUN
ajis02-5323	257	21	’	’	PART
ajis02-5323	257	22	references	reference	NOUN
ajis02-5323	257	23	.	.	PUNCT
ajis02-5323	258	1	most	most	ADJ
ajis02-5323	258	2	respondents	respondent	NOUN
ajis02-5323	258	3	stressed	stress	VERB
ajis02-5323	258	4	the	the	DET
ajis02-5323	258	5	importance	importance	NOUN
ajis02-5323	258	6	of	of	ADP
ajis02-5323	258	7	trust	trust	NOUN
ajis02-5323	258	8	.	.	PUNCT
ajis02-5323	259	1	however	however	ADV
ajis02-5323	259	2	,	,	PUNCT
ajis02-5323	259	3	several	several	ADJ
ajis02-5323	259	4	respondents	respondent	NOUN
ajis02-5323	259	5	shared	share	VERB
ajis02-5323	259	6	that	that	SCONJ
ajis02-5323	259	7	they	they	PRON
ajis02-5323	259	8	caught	catch	VERB
ajis02-5323	259	9	a	a	DET
ajis02-5323	259	10	supplier	supplier	NOUN
ajis02-5323	259	11	lying	lie	VERB
ajis02-5323	259	12	about	about	ADP
ajis02-5323	259	13	their	their	PRON
ajis02-5323	259	14	cybersecurity	cybersecurity	NOUN
ajis02-5323	259	15	certification	certification	NOUN
ajis02-5323	259	16	:	:	PUNCT
ajis02-5323	259	17	“	"	PUNCT
ajis02-5323	259	18	i	i	PRON
ajis02-5323	259	19	actually	actually	ADV
ajis02-5323	259	20	searched	search	VERB
ajis02-5323	259	21	the	the	DET
ajis02-5323	259	22	iso	iso	NOUN
ajis02-5323	259	23	27001	27001	NUM
ajis02-5323	259	24	database	database	NOUN
ajis02-5323	259	25	of	of	ADP
ajis02-5323	259	26	certificates	certificate	NOUN
ajis02-5323	259	27	to	to	PART
ajis02-5323	259	28	see	see	VERB
ajis02-5323	259	29	if	if	SCONJ
ajis02-5323	259	30	i	i	PRON
ajis02-5323	259	31	could	could	AUX
ajis02-5323	259	32	find	find	VERB
ajis02-5323	259	33	this	this	DET
ajis02-5323	259	34	certificate	certificate	NOUN
ajis02-5323	259	35	(	(	PUNCT
ajis02-5323	259	36	of	of	ADP
ajis02-5323	259	37	a	a	DET
ajis02-5323	259	38	supplier	supplier	NOUN
ajis02-5323	259	39	)	)	PUNCT
ajis02-5323	259	40	,	,	PUNCT
ajis02-5323	259	41	and	and	CCONJ
ajis02-5323	259	42	i	i	PRON
ajis02-5323	259	43	could	could	AUX
ajis02-5323	259	44	n't	not	PART
ajis02-5323	259	45	.	.	PUNCT
ajis02-5323	260	1	there	there	PRON
ajis02-5323	260	2	is	be	VERB
ajis02-5323	260	3	a	a	DET
ajis02-5323	260	4	lot	lot	NOUN
ajis02-5323	260	5	of	of	ADP
ajis02-5323	260	6	trust	trust	NOUN
ajis02-5323	260	7	in	in	ADP
ajis02-5323	260	8	that	that	DET
ajis02-5323	260	9	process	process	NOUN
ajis02-5323	260	10	,	,	PUNCT
ajis02-5323	260	11	and	and	CCONJ
ajis02-5323	260	12	there	there	PRON
ajis02-5323	260	13	have	have	AUX
ajis02-5323	260	14	been	be	AUX
ajis02-5323	260	15	times	time	NOUN
ajis02-5323	260	16	when	when	SCONJ
ajis02-5323	260	17	i	i	PRON
ajis02-5323	260	18	've	have	AUX
ajis02-5323	260	19	wanted	want	VERB
ajis02-5323	260	20	to	to	PART
ajis02-5323	260	21	clarify	clarify	VERB
ajis02-5323	260	22	their	their	PRON
ajis02-5323	260	23	response	response	NOUN
ajis02-5323	260	24	to	to	ADP
ajis02-5323	260	25	something	something	PRON
ajis02-5323	260	26	,	,	PUNCT
ajis02-5323	260	27	and	and	CCONJ
ajis02-5323	260	28	they	they	PRON
ajis02-5323	260	29	had	have	AUX
ajis02-5323	260	30	said	say	VERB
ajis02-5323	260	31	,	,	PUNCT
ajis02-5323	260	32	oh	oh	INTJ
ajis02-5323	260	33	,	,	PUNCT
ajis02-5323	260	34	that	that	PRON
ajis02-5323	260	35	was	be	AUX
ajis02-5323	260	36	a	a	DET
ajis02-5323	260	37	mistake	mistake	NOUN
ajis02-5323	260	38	”	"	PUNCT
ajis02-5323	260	39	(	(	PUNCT
ajis02-5323	260	40	p11	p11	NOUN
ajis02-5323	260	41	)	)	PUNCT
ajis02-5323	260	42	.	.	PUNCT
ajis02-5323	261	1	4.1.6	4.1.6	NUM
ajis02-5323	261	2	determining	determine	VERB
ajis02-5323	261	3	supplier	supplier	NOUN
ajis02-5323	261	4	cyber	cyber	NOUN
ajis02-5323	261	5	risk	risk	NOUN
ajis02-5323	261	6	level	level	NOUN
ajis02-5323	261	7	the	the	DET
ajis02-5323	261	8	diverse	diverse	ADJ
ajis02-5323	261	9	information	information	NOUN
ajis02-5323	261	10	from	from	ADP
ajis02-5323	261	11	the	the	DET
ajis02-5323	261	12	extensive	extensive	ADJ
ajis02-5323	261	13	questionnaire	questionnaire	NOUN
ajis02-5323	261	14	and	and	CCONJ
ajis02-5323	261	15	a	a	DET
ajis02-5323	261	16	due	due	ADJ
ajis02-5323	261	17	diligence	diligence	NOUN
ajis02-5323	261	18	report	report	NOUN
ajis02-5323	261	19	is	be	AUX
ajis02-5323	261	20	rather	rather	ADV
ajis02-5323	261	21	difficult	difficult	ADJ
ajis02-5323	261	22	to	to	PART
ajis02-5323	261	23	synthesize	synthesize	VERB
ajis02-5323	261	24	in	in	ADP
ajis02-5323	261	25	an	an	DET
ajis02-5323	261	26	overall	overall	ADJ
ajis02-5323	261	27	supplier	supplier	NOUN
ajis02-5323	261	28	’s	’s	PART
ajis02-5323	261	29	risk	risk	NOUN
ajis02-5323	261	30	level	level	NOUN
ajis02-5323	261	31	.	.	PUNCT
ajis02-5323	262	1	organizations	organization	NOUN
ajis02-5323	262	2	juxtapose	juxtapose	VERB
ajis02-5323	262	3	the	the	DET
ajis02-5323	262	4	information	information	NOUN
ajis02-5323	262	5	acquired	acquire	VERB
ajis02-5323	262	6	from	from	ADP
ajis02-5323	262	7	the	the	DET
ajis02-5323	262	8	supplier	supplier	NOUN
ajis02-5323	262	9	with	with	ADP
ajis02-5323	262	10	that	that	PRON
ajis02-5323	262	11	from	from	ADP
ajis02-5323	262	12	public	public	ADJ
ajis02-5323	262	13	sources	source	NOUN
ajis02-5323	262	14	and	and	CCONJ
ajis02-5323	262	15	threat	threat	NOUN
ajis02-5323	262	16	intelligence	intelligence	NOUN
ajis02-5323	262	17	for	for	ADP
ajis02-5323	262	18	consistency	consistency	NOUN
ajis02-5323	262	19	.	.	PUNCT
ajis02-5323	263	1	ideally	ideally	ADV
ajis02-5323	263	2	and	and	CCONJ
ajis02-5323	263	3	in	in	ADP
ajis02-5323	263	4	line	line	NOUN
ajis02-5323	263	5	with	with	ADP
ajis02-5323	263	6	iso	iso	NOUN
ajis02-5323	263	7	27005	27005	NUM
ajis02-5323	263	8	,	,	PUNCT
ajis02-5323	263	9	organizations	organization	NOUN
ajis02-5323	263	10	would	would	AUX
ajis02-5323	263	11	first	first	ADV
ajis02-5323	263	12	evaluate	evaluate	VERB
ajis02-5323	263	13	a	a	DET
ajis02-5323	263	14	supplier	supplier	NOUN
ajis02-5323	263	15	’s	’s	PART
ajis02-5323	263	16	criticality	criticality	NOUN
ajis02-5323	263	17	to	to	PART
ajis02-5323	263	18	adopt	adopt	VERB
ajis02-5323	263	19	the	the	DET
ajis02-5323	263	20	proper	proper	ADJ
ajis02-5323	263	21	scope	scope	NOUN
ajis02-5323	263	22	and	and	CCONJ
ajis02-5323	263	23	depth	depth	NOUN
ajis02-5323	263	24	of	of	ADP
ajis02-5323	263	25	the	the	DET
ajis02-5323	263	26	assessment	assessment	NOUN
ajis02-5323	263	27	process	process	NOUN
ajis02-5323	263	28	.	.	PUNCT
ajis02-5323	264	1	criticality	criticality	NOUN
ajis02-5323	264	2	is	be	AUX
ajis02-5323	264	3	associated	associate	VERB
ajis02-5323	264	4	with	with	ADP
ajis02-5323	264	5	the	the	DET
ajis02-5323	264	6	impact	impact	NOUN
ajis02-5323	264	7	of	of	ADP
ajis02-5323	264	8	a	a	DET
ajis02-5323	264	9	cyber	cyber	NOUN
ajis02-5323	264	10	incident	incident	NOUN
ajis02-5323	264	11	related	relate	VERB
ajis02-5323	264	12	to	to	ADP
ajis02-5323	264	13	a	a	DET
ajis02-5323	264	14	supplier	supplier	NOUN
ajis02-5323	264	15	.	.	PUNCT
ajis02-5323	265	1	in	in	ADP
ajis02-5323	265	2	the	the	DET
ajis02-5323	265	3	second	second	ADJ
ajis02-5323	265	4	step	step	NOUN
ajis02-5323	265	5	,	,	PUNCT
ajis02-5323	265	6	the	the	DET
ajis02-5323	265	7	organization	organization	NOUN
ajis02-5323	265	8	would	would	AUX
ajis02-5323	265	9	evaluate	evaluate	VERB
ajis02-5323	265	10	the	the	DET
ajis02-5323	265	11	likelihood	likelihood	NOUN
ajis02-5323	265	12	of	of	ADP
ajis02-5323	265	13	a	a	DET
ajis02-5323	265	14	supplier	supplier	NOUN
ajis02-5323	265	15	having	have	VERB
ajis02-5323	265	16	a	a	DET
ajis02-5323	265	17	cyber	cyber	NOUN
ajis02-5323	265	18	incident	incident	NOUN
ajis02-5323	265	19	based	base	VERB
ajis02-5323	265	20	on	on	ADP
ajis02-5323	265	21	its	its	PRON
ajis02-5323	265	22	assessed	assessed	ADJ
ajis02-5323	265	23	risk	risk	NOUN
ajis02-5323	265	24	posture	posture	NOUN
ajis02-5323	265	25	.	.	PUNCT
ajis02-5323	266	1	however	however	ADV
ajis02-5323	266	2	,	,	PUNCT
ajis02-5323	266	3	in	in	ADP
ajis02-5323	266	4	practice	practice	NOUN
ajis02-5323	266	5	,	,	PUNCT
ajis02-5323	266	6	most	most	ADJ
ajis02-5323	266	7	organizations	organization	NOUN
ajis02-5323	266	8	do	do	AUX
ajis02-5323	266	9	not	not	PART
ajis02-5323	266	10	separately	separately	ADV
ajis02-5323	266	11	assess	assess	VERB
ajis02-5323	266	12	the	the	DET
ajis02-5323	266	13	impact	impact	NOUN
ajis02-5323	266	14	and	and	CCONJ
ajis02-5323	266	15	the	the	DET
ajis02-5323	266	16	likelihood	likelihood	NOUN
ajis02-5323	266	17	but	but	CCONJ
ajis02-5323	266	18	come	come	VERB
ajis02-5323	266	19	up	up	ADP
ajis02-5323	266	20	with	with	ADP
ajis02-5323	266	21	an	an	DET
ajis02-5323	266	22	overall	overall	ADJ
ajis02-5323	266	23	supplier	supplier	NOUN
ajis02-5323	266	24	’s	’s	PART
ajis02-5323	266	25	risk	risk	NOUN
ajis02-5323	266	26	level	level	NOUN
ajis02-5323	266	27	,	,	PUNCT
ajis02-5323	266	28	which	which	PRON
ajis02-5323	266	29	is	be	AUX
ajis02-5323	266	30	determined	determine	VERB
ajis02-5323	266	31	as	as	ADP
ajis02-5323	266	32	a	a	DET
ajis02-5323	266	33	subjective	subjective	ADJ
ajis02-5323	266	34	summary	summary	NOUN
ajis02-5323	266	35	of	of	ADP
ajis02-5323	266	36	numerous	numerous	ADJ
ajis02-5323	266	37	pieces	piece	NOUN
ajis02-5323	266	38	of	of	ADP
ajis02-5323	266	39	information	information	NOUN
ajis02-5323	266	40	,	,	PUNCT
ajis02-5323	266	41	often	often	ADV
ajis02-5323	266	42	qualitative	qualitative	VERB
ajis02-5323	266	43	and	and	CCONJ
ajis02-5323	266	44	defined	define	VERB
ajis02-5323	266	45	on	on	ADP
ajis02-5323	266	46	a	a	DET
ajis02-5323	266	47	high	high	ADJ
ajis02-5323	266	48	,	,	PUNCT
ajis02-5323	266	49	medium	medium	ADJ
ajis02-5323	266	50	,	,	PUNCT
ajis02-5323	266	51	and	and	CCONJ
ajis02-5323	266	52	low	low	ADJ
ajis02-5323	266	53	scale	scale	NOUN
ajis02-5323	266	54	.	.	PUNCT
ajis02-5323	267	1	“	"	PUNCT
ajis02-5323	267	2	how	how	SCONJ
ajis02-5323	267	3	critical	critical	ADJ
ajis02-5323	267	4	a	a	DET
ajis02-5323	267	5	certain	certain	ADJ
ajis02-5323	267	6	supplier	supplier	NOUN
ajis02-5323	267	7	is	be	AUX
ajis02-5323	267	8	a	a	DET
ajis02-5323	267	9	matter	matter	NOUN
ajis02-5323	267	10	of	of	ADP
ajis02-5323	267	11	the	the	DET
ajis02-5323	267	12	management	management	NOUN
ajis02-5323	267	13	subjective	subjective	ADJ
ajis02-5323	267	14	judgment	judgment	NOUN
ajis02-5323	267	15	in	in	ADP
ajis02-5323	267	16	relation	relation	NOUN
ajis02-5323	267	17	to	to	PART
ajis02-5323	267	18	which	which	PRON
ajis02-5323	267	19	controls	control	NOUN
ajis02-5323	267	20	are	be	AUX
ajis02-5323	267	21	missing	miss	VERB
ajis02-5323	267	22	and	and	CCONJ
ajis02-5323	267	23	what	what	PRON
ajis02-5323	267	24	is	be	AUX
ajis02-5323	267	25	the	the	DET
ajis02-5323	267	26	relationship	relationship	NOUN
ajis02-5323	267	27	with	with	ADP
ajis02-5323	267	28	a	a	DET
ajis02-5323	267	29	particular	particular	ADJ
ajis02-5323	267	30	supplier	supplier	NOUN
ajis02-5323	267	31	”	"	PUNCT
ajis02-5323	267	32	(	(	PUNCT
ajis02-5323	267	33	p19	p19	PROPN
ajis02-5323	267	34	)	)	PUNCT
ajis02-5323	267	35	.	.	PUNCT
ajis02-5323	268	1	just	just	ADV
ajis02-5323	268	2	one	one	NUM
ajis02-5323	268	3	organization	organization	NOUN
ajis02-5323	268	4	stated	state	VERB
ajis02-5323	268	5	that	that	SCONJ
ajis02-5323	268	6	it	it	PRON
ajis02-5323	268	7	derives	derive	VERB
ajis02-5323	268	8	the	the	DET
ajis02-5323	268	9	risk	risk	NOUN
ajis02-5323	268	10	level	level	NOUN
ajis02-5323	268	11	in	in	ADP
ajis02-5323	268	12	a	a	DET
ajis02-5323	268	13	formulaic	formulaic	ADJ
ajis02-5323	268	14	manner	manner	NOUN
ajis02-5323	268	15	(	(	PUNCT
ajis02-5323	268	16	taking	take	VERB
ajis02-5323	268	17	a	a	DET
ajis02-5323	268	18	simple	simple	ADJ
ajis02-5323	268	19	non	non	ADJ
ajis02-5323	268	20	-	-	ADJ
ajis02-5323	268	21	weighted	weighted	ADJ
ajis02-5323	268	22	average	average	NOUN
ajis02-5323	268	23	of	of	ADP
ajis02-5323	268	24	the	the	DET
ajis02-5323	268	25	assessed	assessed	ADJ
ajis02-5323	268	26	characteristics	characteristic	NOUN
ajis02-5323	268	27	)	)	PUNCT
ajis02-5323	268	28	.	.	PUNCT
ajis02-5323	269	1	organizations	organization	NOUN
ajis02-5323	269	2	that	that	PRON
ajis02-5323	269	3	use	use	VERB
ajis02-5323	269	4	vendor	vendor	NOUN
ajis02-5323	269	5	management	management	NOUN
ajis02-5323	269	6	platforms	platform	NOUN
ajis02-5323	269	7	receive	receive	VERB
ajis02-5323	269	8	quantitative	quantitative	ADJ
ajis02-5323	269	9	risk	risk	NOUN
ajis02-5323	269	10	scores	score	NOUN
ajis02-5323	269	11	,	,	PUNCT
ajis02-5323	269	12	yet	yet	CCONJ
ajis02-5323	269	13	there	there	PRON
ajis02-5323	269	14	is	be	VERB
ajis02-5323	269	15	limited	limited	ADJ
ajis02-5323	269	16	explainability	explainability	NOUN
ajis02-5323	269	17	about	about	ADP
ajis02-5323	269	18	how	how	SCONJ
ajis02-5323	269	19	the	the	DET
ajis02-5323	269	20	scores	score	NOUN
ajis02-5323	269	21	are	be	AUX
ajis02-5323	269	22	calculated	calculate	VERB
ajis02-5323	269	23	.	.	PUNCT
ajis02-5323	270	1	based	base	VERB
ajis02-5323	270	2	on	on	ADP
ajis02-5323	270	3	the	the	DET
ajis02-5323	270	4	assessed	assess	VERB
ajis02-5323	270	5	cyber	cyber	NOUN
ajis02-5323	270	6	risk	risk	NOUN
ajis02-5323	270	7	level	level	NOUN
ajis02-5323	270	8	,	,	PUNCT
ajis02-5323	270	9	the	the	DET
ajis02-5323	270	10	assessors	assessor	NOUN
ajis02-5323	270	11	(	(	PUNCT
ajis02-5323	270	12	security	security	NOUN
ajis02-5323	270	13	experts	expert	NOUN
ajis02-5323	270	14	)	)	PUNCT
ajis02-5323	270	15	suggest	suggest	VERB
ajis02-5323	270	16	to	to	ADP
ajis02-5323	270	17	decisionmakers	decisionmaker	NOUN
ajis02-5323	270	18	(	(	PUNCT
ajis02-5323	270	19	executive	executive	NOUN
ajis02-5323	270	20	managers	manager	NOUN
ajis02-5323	270	21	)	)	PUNCT
ajis02-5323	270	22	whether	whether	SCONJ
ajis02-5323	270	23	to	to	PART
ajis02-5323	270	24	accept	accept	VERB
ajis02-5323	270	25	a	a	DET
ajis02-5323	270	26	particular	particular	ADJ
ajis02-5323	270	27	supplier	supplier	NOUN
ajis02-5323	270	28	.	.	PUNCT
ajis02-5323	271	1	if	if	SCONJ
ajis02-5323	271	2	the	the	DET
ajis02-5323	271	3	risk	risk	NOUN
ajis02-5323	271	4	level	level	NOUN
ajis02-5323	271	5	is	be	AUX
ajis02-5323	271	6	low	low	ADJ
ajis02-5323	271	7	,	,	PUNCT
ajis02-5323	271	8	then	then	ADV
ajis02-5323	271	9	a	a	DET
ajis02-5323	271	10	supplier	supplier	NOUN
ajis02-5323	271	11	is	be	AUX
ajis02-5323	271	12	offered	offer	VERB
ajis02-5323	271	13	a	a	DET
ajis02-5323	271	14	contract	contract	NOUN
ajis02-5323	271	15	specifying	specify	VERB
ajis02-5323	271	16	detailed	detailed	ADJ
ajis02-5323	271	17	cyber	cyber	NOUN
ajis02-5323	271	18	security	security	NOUN
ajis02-5323	271	19	requirements	requirement	NOUN
ajis02-5323	271	20	by	by	ADP
ajis02-5323	271	21	the	the	DET
ajis02-5323	271	22	focal	focal	ADJ
ajis02-5323	271	23	organizations	organization	NOUN
ajis02-5323	271	24	.	.	PUNCT
ajis02-5323	272	1	however	however	ADV
ajis02-5323	272	2	,	,	PUNCT
ajis02-5323	272	3	if	if	SCONJ
ajis02-5323	272	4	the	the	DET
ajis02-5323	272	5	assessment	assessment	NOUN
ajis02-5323	272	6	indicates	indicate	VERB
ajis02-5323	272	7	a	a	DET
ajis02-5323	272	8	medium	medium	ADJ
ajis02-5323	272	9	risk	risk	NOUN
ajis02-5323	272	10	level	level	NOUN
ajis02-5323	272	11	,	,	PUNCT
ajis02-5323	272	12	most	most	ADJ
ajis02-5323	272	13	organizations	organization	NOUN
ajis02-5323	272	14	do	do	AUX
ajis02-5323	272	15	not	not	PART
ajis02-5323	272	16	outright	outright	ADV
ajis02-5323	272	17	reject	reject	VERB
ajis02-5323	272	18	a	a	DET
ajis02-5323	272	19	supplier	supplier	NOUN
ajis02-5323	272	20	but	but	CCONJ
ajis02-5323	272	21	use	use	VERB
ajis02-5323	272	22	the	the	DET
ajis02-5323	272	23	information	information	NOUN
ajis02-5323	272	24	as	as	ADP
ajis02-5323	272	25	a	a	DET
ajis02-5323	272	26	snapshot	snapshot	NOUN
ajis02-5323	272	27	of	of	ADP
ajis02-5323	272	28	the	the	DET
ajis02-5323	272	29	supplier	supplier	NOUN
ajis02-5323	272	30	’s	’s	PART
ajis02-5323	272	31	(	(	PUNCT
ajis02-5323	272	32	missing	missing	ADJ
ajis02-5323	272	33	)	)	PUNCT
ajis02-5323	272	34	controls	control	NOUN
ajis02-5323	272	35	.	.	PUNCT
ajis02-5323	273	1	they	they	PRON
ajis02-5323	273	2	engage	engage	VERB
ajis02-5323	273	3	with	with	ADP
ajis02-5323	273	4	a	a	DET
ajis02-5323	273	5	supplier	supplier	NOUN
ajis02-5323	273	6	to	to	PART
ajis02-5323	273	7	discuss	discuss	VERB
ajis02-5323	273	8	further	far	ADV
ajis02-5323	273	9	how	how	SCONJ
ajis02-5323	273	10	to	to	PART
ajis02-5323	273	11	uplift	uplift	VERB
ajis02-5323	273	12	its	its	PRON
ajis02-5323	273	13	security	security	NOUN
ajis02-5323	273	14	posture	posture	NOUN
ajis02-5323	273	15	.	.	PUNCT
ajis02-5323	274	1	if	if	SCONJ
ajis02-5323	274	2	the	the	DET
ajis02-5323	274	3	cyber	cyber	NOUN
ajis02-5323	274	4	risk	risk	NOUN
ajis02-5323	274	5	level	level	NOUN
ajis02-5323	274	6	score	score	NOUN
ajis02-5323	274	7	indicates	indicate	VERB
ajis02-5323	274	8	high	high	ADJ
ajis02-5323	274	9	risk	risk	NOUN
ajis02-5323	274	10	,	,	PUNCT
ajis02-5323	274	11	the	the	DET
ajis02-5323	274	12	assessors	assessor	NOUN
ajis02-5323	274	13	suggest	suggest	VERB
ajis02-5323	274	14	rejecting	reject	VERB
ajis02-5323	274	15	the	the	DET
ajis02-5323	274	16	supplier	supplier	NOUN
ajis02-5323	274	17	to	to	ADP
ajis02-5323	274	18	the	the	DET
ajis02-5323	274	19	management	management	NOUN
ajis02-5323	274	20	.	.	PUNCT
ajis02-5323	275	1	however	however	ADV
ajis02-5323	275	2	,	,	PUNCT
ajis02-5323	275	3	they	they	PRON
ajis02-5323	275	4	might	might	AUX
ajis02-5323	275	5	not	not	PART
ajis02-5323	275	6	always	always	ADV
ajis02-5323	275	7	be	be	AUX
ajis02-5323	275	8	listened	listen	VERB
ajis02-5323	275	9	to	to	ADP
ajis02-5323	275	10	.	.	PUNCT
ajis02-5323	276	1	4.2	4.2	NUM
ajis02-5323	276	2	monitoring	monitoring	NOUN
ajis02-5323	276	3	after	after	ADP
ajis02-5323	276	4	onboarding	onboarde	VERB
ajis02-5323	276	5	4.2.1	4.2.1	NOUN
ajis02-5323	276	6	uplifting	uplift	VERB
ajis02-5323	276	7	a	a	DET
ajis02-5323	276	8	supplier	supplier	NOUN
ajis02-5323	276	9	’s	’s	PART
ajis02-5323	276	10	security	security	NOUN
ajis02-5323	276	11	posture	posture	NOUN
ajis02-5323	276	12	often	often	ADV
ajis02-5323	276	13	,	,	PUNCT
ajis02-5323	276	14	when	when	SCONJ
ajis02-5323	276	15	a	a	DET
ajis02-5323	276	16	supplier	supplier	NOUN
ajis02-5323	276	17	is	be	AUX
ajis02-5323	276	18	important	important	ADJ
ajis02-5323	276	19	to	to	ADP
ajis02-5323	276	20	an	an	DET
ajis02-5323	276	21	organization	organization	NOUN
ajis02-5323	276	22	on	on	ADP
ajis02-5323	276	23	business	business	NOUN
ajis02-5323	276	24	grounds	ground	NOUN
ajis02-5323	276	25	but	but	CCONJ
ajis02-5323	276	26	does	do	AUX
ajis02-5323	276	27	not	not	PART
ajis02-5323	276	28	have	have	VERB
ajis02-5323	276	29	all	all	DET
ajis02-5323	276	30	the	the	DET
ajis02-5323	276	31	security	security	NOUN
ajis02-5323	276	32	requirements	requirement	NOUN
ajis02-5323	276	33	in	in	ADP
ajis02-5323	276	34	place	place	NOUN
ajis02-5323	276	35	,	,	PUNCT
ajis02-5323	276	36	focal	focal	ADJ
ajis02-5323	276	37	organizations	organization	NOUN
ajis02-5323	276	38	engage	engage	VERB
ajis02-5323	276	39	in	in	ADP
ajis02-5323	276	40	uplifting	uplift	VERB
ajis02-5323	276	41	a	a	DET
ajis02-5323	276	42	supplier	supplier	NOUN
ajis02-5323	276	43	’s	’s	PART
ajis02-5323	276	44	cyber	cyber	ADJ
ajis02-5323	276	45	security	security	NOUN
ajis02-5323	276	46	posture	posture	NOUN
ajis02-5323	276	47	.	.	PUNCT
ajis02-5323	277	1	also	also	ADV
ajis02-5323	277	2	,	,	PUNCT
ajis02-5323	277	3	focal	focal	ADJ
ajis02-5323	277	4	organizations	organization	NOUN
ajis02-5323	277	5	have	have	VERB
ajis02-5323	277	6	more	more	ADJ
ajis02-5323	277	7	tolerance	tolerance	NOUN
ajis02-5323	277	8	if	if	SCONJ
ajis02-5323	277	9	suppliers	supplier	NOUN
ajis02-5323	277	10	are	be	AUX
ajis02-5323	277	11	not	not	PART
ajis02-5323	277	12	involved	involve	VERB
ajis02-5323	277	13	in	in	ADP
ajis02-5323	277	14	critical	critical	ADJ
ajis02-5323	277	15	processes	process	NOUN
ajis02-5323	277	16	.	.	PUNCT
ajis02-5323	278	1	they	they	PRON
ajis02-5323	278	2	tend	tend	VERB
ajis02-5323	278	3	to	to	PART
ajis02-5323	278	4	onboard	onboard	VERB
ajis02-5323	278	5	such	such	DET
ajis02-5323	278	6	a	a	DET
ajis02-5323	278	7	supplier	supplier	NOUN
ajis02-5323	278	8	but	but	CCONJ
ajis02-5323	278	9	impose	impose	VERB
ajis02-5323	278	10	requirements	requirement	NOUN
ajis02-5323	278	11	australasian	australasian	ADJ
ajis02-5323	278	12	journal	journal	NOUN
ajis02-5323	278	13	of	of	ADP
ajis02-5323	278	14	information	information	NOUN
ajis02-5323	278	15	systems	system	NOUN
ajis02-5323	278	16	slapnicar	slapnicar	NOUN
ajis02-5323	278	17	,	,	PUNCT
ajis02-5323	278	18	vidmar	vidmar	NOUN
ajis02-5323	278	19	&	&	CCONJ
ajis02-5323	278	20	tsen	tsen	ADJ
ajis02-5323	278	21	2025	2025	NUM
ajis02-5323	278	22	,	,	PUNCT
ajis02-5323	278	23	vol	vol	NOUN
ajis02-5323	278	24	29	29	NUM
ajis02-5323	278	25	,	,	PUNCT
ajis02-5323	278	26	research	research	NOUN
ajis02-5323	278	27	article	article	NOUN
ajis02-5323	278	28	process	process	NOUN
ajis02-5323	278	29	theory	theory	NOUN
ajis02-5323	278	30	of	of	ADP
ajis02-5323	278	31	supplier	supplier	NOUN
ajis02-5323	278	32	cyber	cyber	NOUN
ajis02-5323	278	33	risk	risk	NOUN
ajis02-5323	278	34	assessment	assessment	NOUN
ajis02-5323	278	35	17	17	NUM
ajis02-5323	278	36	to	to	PART
ajis02-5323	278	37	implement	implement	VERB
ajis02-5323	278	38	missing	missing	ADJ
ajis02-5323	278	39	controls	control	NOUN
ajis02-5323	278	40	in	in	ADP
ajis02-5323	278	41	the	the	DET
ajis02-5323	278	42	master	master	NOUN
ajis02-5323	278	43	agreement	agreement	NOUN
ajis02-5323	278	44	with	with	ADP
ajis02-5323	278	45	a	a	DET
ajis02-5323	278	46	specific	specific	ADJ
ajis02-5323	278	47	timeline	timeline	NOUN
ajis02-5323	278	48	and	and	CCONJ
ajis02-5323	278	49	a	a	DET
ajis02-5323	278	50	roadmap	roadmap	NOUN
ajis02-5323	278	51	.	.	PUNCT
ajis02-5323	279	1	they	they	PRON
ajis02-5323	279	2	also	also	ADV
ajis02-5323	279	3	provide	provide	VERB
ajis02-5323	279	4	support	support	NOUN
ajis02-5323	279	5	such	such	ADJ
ajis02-5323	279	6	as	as	ADP
ajis02-5323	279	7	joint	joint	ADJ
ajis02-5323	279	8	vulnerability	vulnerability	NOUN
ajis02-5323	279	9	assessment	assessment	NOUN
ajis02-5323	279	10	.	.	PUNCT
ajis02-5323	280	1	“	"	PUNCT
ajis02-5323	280	2	if	if	SCONJ
ajis02-5323	280	3	someone	someone	PRON
ajis02-5323	280	4	is	be	AUX
ajis02-5323	280	5	poorly	poorly	ADV
ajis02-5323	280	6	assessed	assess	VERB
ajis02-5323	280	7	,	,	PUNCT
ajis02-5323	280	8	it	it	PRON
ajis02-5323	280	9	affects	affect	VERB
ajis02-5323	280	10	the	the	DET
ajis02-5323	280	11	overall	overall	ADJ
ajis02-5323	280	12	risk	risk	NOUN
ajis02-5323	280	13	assessment	assessment	NOUN
ajis02-5323	280	14	.	.	PUNCT
ajis02-5323	281	1	if	if	SCONJ
ajis02-5323	281	2	they	they	PRON
ajis02-5323	281	3	are	be	AUX
ajis02-5323	281	4	below	below	ADP
ajis02-5323	281	5	our	our	PRON
ajis02-5323	281	6	risk	risk	NOUN
ajis02-5323	281	7	acceptance	acceptance	NOUN
ajis02-5323	281	8	,	,	PUNCT
ajis02-5323	281	9	they	they	PRON
ajis02-5323	281	10	are	be	AUX
ajis02-5323	281	11	contacted	contact	VERB
ajis02-5323	281	12	and	and	CCONJ
ajis02-5323	281	13	looked	look	VERB
ajis02-5323	281	14	at	at	ADP
ajis02-5323	281	15	to	to	PART
ajis02-5323	281	16	see	see	VERB
ajis02-5323	281	17	if	if	SCONJ
ajis02-5323	281	18	there	there	PRON
ajis02-5323	281	19	are	be	VERB
ajis02-5323	281	20	any	any	DET
ajis02-5323	281	21	minor	minor	ADJ
ajis02-5323	281	22	deficiencies	deficiency	NOUN
ajis02-5323	281	23	,	,	PUNCT
ajis02-5323	281	24	given	give	VERB
ajis02-5323	281	25	a	a	DET
ajis02-5323	281	26	deadline	deadline	NOUN
ajis02-5323	281	27	for	for	ADP
ajis02-5323	281	28	correction	correction	NOUN
ajis02-5323	281	29	,	,	PUNCT
ajis02-5323	281	30	and	and	CCONJ
ajis02-5323	281	31	move	move	VERB
ajis02-5323	281	32	on	on	ADP
ajis02-5323	281	33	with	with	ADP
ajis02-5323	281	34	the	the	DET
ajis02-5323	281	35	process	process	NOUN
ajis02-5323	281	36	”	"	PUNCT
ajis02-5323	281	37	(	(	PUNCT
ajis02-5323	281	38	p20	p20	NOUN
ajis02-5323	281	39	)	)	PUNCT
ajis02-5323	281	40	.	.	PUNCT
ajis02-5323	282	1	assisting	assist	VERB
ajis02-5323	282	2	suppliers	supplier	NOUN
ajis02-5323	282	3	in	in	ADP
ajis02-5323	282	4	safeguarding	safeguard	VERB
ajis02-5323	282	5	the	the	DET
ajis02-5323	282	6	focal	focal	ADJ
ajis02-5323	282	7	organization	organization	NOUN
ajis02-5323	282	8	’s	’s	PART
ajis02-5323	282	9	information	information	NOUN
ajis02-5323	282	10	can	can	AUX
ajis02-5323	282	11	be	be	AUX
ajis02-5323	282	12	mutually	mutually	ADV
ajis02-5323	282	13	beneficial	beneficial	ADJ
ajis02-5323	282	14	,	,	PUNCT
ajis02-5323	282	15	as	as	SCONJ
ajis02-5323	282	16	the	the	DET
ajis02-5323	282	17	expenses	expense	NOUN
ajis02-5323	282	18	associated	associate	VERB
ajis02-5323	282	19	with	with	ADP
ajis02-5323	282	20	remediation	remediation	NOUN
ajis02-5323	282	21	after	after	ADP
ajis02-5323	282	22	a	a	DET
ajis02-5323	282	23	breach	breach	NOUN
ajis02-5323	282	24	and	and	CCONJ
ajis02-5323	282	25	the	the	DET
ajis02-5323	282	26	potential	potential	ADJ
ajis02-5323	282	27	lack	lack	NOUN
ajis02-5323	282	28	of	of	ADP
ajis02-5323	282	29	resilience	resilience	NOUN
ajis02-5323	282	30	would	would	AUX
ajis02-5323	282	31	likely	likely	ADV
ajis02-5323	282	32	surpass	surpass	VERB
ajis02-5323	282	33	the	the	DET
ajis02-5323	282	34	costs	cost	NOUN
ajis02-5323	282	35	of	of	ADP
ajis02-5323	282	36	aiding	aid	VERB
ajis02-5323	282	37	a	a	DET
ajis02-5323	282	38	supplier	supplier	NOUN
ajis02-5323	282	39	in	in	ADP
ajis02-5323	282	40	addressing	address	VERB
ajis02-5323	282	41	any	any	DET
ajis02-5323	282	42	shortcomings	shortcoming	NOUN
ajis02-5323	282	43	.	.	PUNCT
ajis02-5323	283	1	the	the	DET
ajis02-5323	283	2	focal	focal	ADJ
ajis02-5323	283	3	organization	organization	NOUN
ajis02-5323	283	4	and	and	CCONJ
ajis02-5323	283	5	suppliers	supplier	NOUN
ajis02-5323	283	6	might	might	AUX
ajis02-5323	283	7	also	also	ADV
ajis02-5323	283	8	find	find	VERB
ajis02-5323	283	9	it	it	PRON
ajis02-5323	283	10	advantageous	advantageous	ADJ
ajis02-5323	283	11	to	to	PART
ajis02-5323	283	12	collaborate	collaborate	VERB
ajis02-5323	283	13	on	on	ADP
ajis02-5323	283	14	investments	investment	NOUN
ajis02-5323	283	15	in	in	ADP
ajis02-5323	283	16	staff	staff	NOUN
ajis02-5323	283	17	training	training	NOUN
ajis02-5323	283	18	(	(	PUNCT
ajis02-5323	283	19	davis	davis	PROPN
ajis02-5323	283	20	,	,	PUNCT
ajis02-5323	283	21	2015	2015	NUM
ajis02-5323	283	22	;	;	PUNCT
ajis02-5323	283	23	vanajakumari	vanajakumari	PROPN
ajis02-5323	283	24	et	et	PROPN
ajis02-5323	283	25	al	al	PROPN
ajis02-5323	283	26	.	.	PROPN
ajis02-5323	283	27	,	,	PUNCT
ajis02-5323	283	28	2021	2021	NUM
ajis02-5323	283	29	)	)	PUNCT
ajis02-5323	283	30	.	.	PUNCT
ajis02-5323	284	1	4.2.2	4.2.2	NUM
ajis02-5323	284	2	monitoring	monitor	VERB
ajis02-5323	284	3	methods	method	NOUN
ajis02-5323	284	4	and	and	CCONJ
ajis02-5323	284	5	frequency	frequency	NOUN
ajis02-5323	284	6	organizations	organization	NOUN
ajis02-5323	284	7	should	should	AUX
ajis02-5323	284	8	continuously	continuously	ADV
ajis02-5323	284	9	or	or	CCONJ
ajis02-5323	284	10	periodically	periodically	ADV
ajis02-5323	284	11	monitor	monitor	VERB
ajis02-5323	284	12	their	their	PRON
ajis02-5323	284	13	suppliers	supplier	NOUN
ajis02-5323	284	14	’	'	PUNCT
ajis02-5323	284	15	security	security	NOUN
ajis02-5323	284	16	posture	posture	NOUN
ajis02-5323	284	17	to	to	PART
ajis02-5323	284	18	overcome	overcome	VERB
ajis02-5323	284	19	the	the	DET
ajis02-5323	284	20	relatively	relatively	ADV
ajis02-5323	284	21	static	static	ADJ
ajis02-5323	284	22	nature	nature	NOUN
ajis02-5323	284	23	of	of	ADP
ajis02-5323	284	24	risk	risk	NOUN
ajis02-5323	284	25	assessment	assessment	NOUN
ajis02-5323	284	26	and	and	CCONJ
ajis02-5323	284	27	ensure	ensure	VERB
ajis02-5323	284	28	suppliers	supplier	NOUN
ajis02-5323	284	29	remain	remain	VERB
ajis02-5323	284	30	in	in	ADP
ajis02-5323	284	31	line	line	NOUN
ajis02-5323	284	32	with	with	ADP
ajis02-5323	284	33	their	their	PRON
ajis02-5323	284	34	security	security	NOUN
ajis02-5323	284	35	requirements	requirement	NOUN
ajis02-5323	284	36	(	(	PUNCT
ajis02-5323	284	37	davis	davis	NOUN
ajis02-5323	284	38	,	,	PUNCT
ajis02-5323	284	39	2015	2015	NUM
ajis02-5323	284	40	)	)	PUNCT
ajis02-5323	284	41	.	.	PUNCT
ajis02-5323	285	1	monitoring	monitoring	NOUN
ajis02-5323	285	2	can	can	AUX
ajis02-5323	285	3	be	be	AUX
ajis02-5323	285	4	periodic	periodic	ADJ
ajis02-5323	285	5	(	(	PUNCT
ajis02-5323	285	6	annual	annual	ADJ
ajis02-5323	285	7	,	,	PUNCT
ajis02-5323	285	8	biannual	biannual	ADJ
ajis02-5323	285	9	or	or	CCONJ
ajis02-5323	285	10	triannual	triannual	ADJ
ajis02-5323	285	11	)	)	PUNCT
ajis02-5323	285	12	,	,	PUNCT
ajis02-5323	285	13	at	at	ADP
ajis02-5323	285	14	the	the	DET
ajis02-5323	285	15	renewal	renewal	NOUN
ajis02-5323	285	16	of	of	ADP
ajis02-5323	285	17	the	the	DET
ajis02-5323	285	18	contract	contract	NOUN
ajis02-5323	285	19	,	,	PUNCT
ajis02-5323	285	20	or	or	CCONJ
ajis02-5323	285	21	based	base	VERB
ajis02-5323	285	22	on	on	ADP
ajis02-5323	285	23	a	a	DET
ajis02-5323	285	24	trigger	trigger	NOUN
ajis02-5323	285	25	,	,	PUNCT
ajis02-5323	285	26	depending	depend	VERB
ajis02-5323	285	27	on	on	ADP
ajis02-5323	285	28	the	the	DET
ajis02-5323	285	29	supplier	supplier	NOUN
ajis02-5323	285	30	’s	’s	PART
ajis02-5323	285	31	criticality	criticality	NOUN
ajis02-5323	285	32	and	and	CCONJ
ajis02-5323	285	33	the	the	DET
ajis02-5323	285	34	method	method	NOUN
ajis02-5323	285	35	of	of	ADP
ajis02-5323	285	36	monitoring	monitoring	NOUN
ajis02-5323	285	37	.	.	PUNCT
ajis02-5323	286	1	our	our	PRON
ajis02-5323	286	2	findings	finding	NOUN
ajis02-5323	286	3	suggest	suggest	VERB
ajis02-5323	286	4	a	a	DET
ajis02-5323	286	5	significant	significant	ADJ
ajis02-5323	286	6	variation	variation	NOUN
ajis02-5323	286	7	in	in	ADP
ajis02-5323	286	8	the	the	DET
ajis02-5323	286	9	maturity	maturity	NOUN
ajis02-5323	286	10	of	of	ADP
ajis02-5323	286	11	monitoring	monitoring	NOUN
ajis02-5323	286	12	.	.	PUNCT
ajis02-5323	287	1	for	for	ADP
ajis02-5323	287	2	critical	critical	ADJ
ajis02-5323	287	3	suppliers	supplier	NOUN
ajis02-5323	287	4	,	,	PUNCT
ajis02-5323	287	5	organizations	organization	NOUN
ajis02-5323	287	6	periodically	periodically	ADV
ajis02-5323	287	7	check	check	VERB
ajis02-5323	287	8	compliance	compliance	NOUN
ajis02-5323	287	9	with	with	ADP
ajis02-5323	287	10	the	the	DET
ajis02-5323	287	11	contract	contract	NOUN
ajis02-5323	287	12	,	,	PUNCT
ajis02-5323	287	13	conduct	conduct	VERB
ajis02-5323	287	14	face	face	NOUN
ajis02-5323	287	15	-	-	PUNCT
ajis02-5323	287	16	to	to	ADP
ajis02-5323	287	17	-	-	PUNCT
ajis02-5323	287	18	face	face	NOUN
ajis02-5323	287	19	meetings	meeting	NOUN
ajis02-5323	287	20	,	,	PUNCT
ajis02-5323	287	21	or	or	CCONJ
ajis02-5323	287	22	require	require	VERB
ajis02-5323	287	23	audit	audit	NOUN
ajis02-5323	287	24	reports	report	NOUN
ajis02-5323	287	25	or	or	CCONJ
ajis02-5323	287	26	pen	pen	NOUN
ajis02-5323	287	27	tests	test	NOUN
ajis02-5323	287	28	.	.	PUNCT
ajis02-5323	288	1	for	for	ADP
ajis02-5323	288	2	non	non	ADJ
ajis02-5323	288	3	-	-	ADJ
ajis02-5323	288	4	critical	critical	ADJ
ajis02-5323	288	5	suppliers	supplier	NOUN
ajis02-5323	288	6	,	,	PUNCT
ajis02-5323	288	7	performance	performance	NOUN
ajis02-5323	288	8	review	review	NOUN
ajis02-5323	288	9	and	and	CCONJ
ajis02-5323	288	10	security	security	NOUN
ajis02-5323	288	11	requirements	requirement	NOUN
ajis02-5323	288	12	are	be	AUX
ajis02-5323	288	13	mostly	mostly	ADV
ajis02-5323	288	14	checked	check	VERB
ajis02-5323	288	15	only	only	ADV
ajis02-5323	288	16	at	at	ADP
ajis02-5323	288	17	the	the	DET
ajis02-5323	288	18	renewal	renewal	NOUN
ajis02-5323	288	19	of	of	ADP
ajis02-5323	288	20	the	the	DET
ajis02-5323	288	21	contract	contract	NOUN
ajis02-5323	288	22	.	.	PUNCT
ajis02-5323	289	1	the	the	DET
ajis02-5323	289	2	largest	large	ADJ
ajis02-5323	289	3	organisations	organisation	NOUN
ajis02-5323	289	4	are	be	AUX
ajis02-5323	289	5	only	only	ADV
ajis02-5323	289	6	just	just	ADV
ajis02-5323	289	7	starting	start	VERB
ajis02-5323	289	8	to	to	PART
ajis02-5323	289	9	invoke	invoke	VERB
ajis02-5323	289	10	the	the	DET
ajis02-5323	289	11	right	right	NOUN
ajis02-5323	289	12	to	to	PART
ajis02-5323	289	13	audit	audit	VERB
ajis02-5323	289	14	.	.	PUNCT
ajis02-5323	290	1	only	only	ADV
ajis02-5323	290	2	the	the	DET
ajis02-5323	290	3	most	most	ADV
ajis02-5323	290	4	mature	mature	ADJ
ajis02-5323	290	5	organizations	organization	NOUN
ajis02-5323	290	6	monitor	monitor	VERB
ajis02-5323	290	7	critical	critical	ADJ
ajis02-5323	290	8	suppliers	supplier	NOUN
ajis02-5323	290	9	continuously	continuously	ADV
ajis02-5323	290	10	by	by	ADP
ajis02-5323	290	11	integrating	integrate	VERB
ajis02-5323	290	12	threat	threat	NOUN
ajis02-5323	290	13	intelligence	intelligence	NOUN
ajis02-5323	290	14	with	with	ADP
ajis02-5323	290	15	the	the	DET
ajis02-5323	290	16	focal	focal	ADJ
ajis02-5323	290	17	organization	organization	NOUN
ajis02-5323	290	18	’s	’s	PART
ajis02-5323	290	19	security	security	NOUN
ajis02-5323	290	20	information	information	NOUN
ajis02-5323	290	21	and	and	CCONJ
ajis02-5323	290	22	event	event	NOUN
ajis02-5323	290	23	management	management	NOUN
ajis02-5323	290	24	system	system	NOUN
ajis02-5323	290	25	(	(	PUNCT
ajis02-5323	290	26	siem	siem	PROPN
ajis02-5323	290	27	)	)	PUNCT
ajis02-5323	290	28	.	.	PUNCT
ajis02-5323	291	1	intrusive	intrusive	ADJ
ajis02-5323	291	2	methods	method	NOUN
ajis02-5323	291	3	require	require	VERB
ajis02-5323	291	4	direct	direct	ADJ
ajis02-5323	291	5	contact	contact	NOUN
ajis02-5323	291	6	with	with	ADP
ajis02-5323	291	7	the	the	DET
ajis02-5323	291	8	supplier	supplier	NOUN
ajis02-5323	291	9	’s	’s	PART
ajis02-5323	291	10	network	network	NOUN
ajis02-5323	291	11	and	and	CCONJ
ajis02-5323	291	12	include	include	VERB
ajis02-5323	291	13	network	network	NOUN
ajis02-5323	291	14	vulnerability	vulnerability	NOUN
ajis02-5323	291	15	scanning	scanning	NOUN
ajis02-5323	291	16	,	,	PUNCT
ajis02-5323	291	17	log	log	NOUN
ajis02-5323	291	18	reviews	review	NOUN
ajis02-5323	291	19	,	,	PUNCT
ajis02-5323	291	20	and	and	CCONJ
ajis02-5323	291	21	prediction	prediction	NOUN
ajis02-5323	291	22	of	of	ADP
ajis02-5323	291	23	cyber	cyber	ADJ
ajis02-5323	291	24	threats	threat	NOUN
ajis02-5323	291	25	by	by	ADP
ajis02-5323	291	26	machine	machine	NOUN
ajis02-5323	291	27	learning	learning	NOUN
ajis02-5323	291	28	methods	method	NOUN
ajis02-5323	291	29	(	(	PUNCT
ajis02-5323	291	30	keskin	keskin	PROPN
ajis02-5323	291	31	et	et	PROPN
ajis02-5323	291	32	al	al	PROPN
ajis02-5323	291	33	.	.	PROPN
ajis02-5323	291	34	,	,	PUNCT
ajis02-5323	291	35	2021	2021	NUM
ajis02-5323	291	36	;	;	PUNCT
ajis02-5323	291	37	al	al	PROPN
ajis02-5323	291	38	-	-	PUNCT
ajis02-5323	291	39	ansari	ansari	PROPN
ajis02-5323	291	40	&	&	CCONJ
ajis02-5323	291	41	asubait	asubait	PROPN
ajis02-5323	291	42	,	,	PUNCT
ajis02-5323	291	43	2022	2022	NUM
ajis02-5323	291	44	)	)	PUNCT
ajis02-5323	291	45	.	.	PUNCT
ajis02-5323	292	1	“	"	PUNCT
ajis02-5323	292	2	so	so	ADV
ajis02-5323	292	3	,	,	PUNCT
ajis02-5323	292	4	we	we	PRON
ajis02-5323	292	5	have	have	VERB
ajis02-5323	292	6	threat	threat	NOUN
ajis02-5323	292	7	management	management	NOUN
ajis02-5323	292	8	for	for	ADP
ajis02-5323	292	9	our	our	PRON
ajis02-5323	292	10	organization	organization	NOUN
ajis02-5323	292	11	,	,	PUNCT
ajis02-5323	292	12	we	we	PRON
ajis02-5323	292	13	use	use	VERB
ajis02-5323	292	14	the	the	DET
ajis02-5323	292	15	platform	platform	NOUN
ajis02-5323	293	1	[	[	X
ajis02-5323	293	2	name	name	NOUN
ajis02-5323	293	3	of	of	ADP
ajis02-5323	293	4	the	the	DET
ajis02-5323	293	5	platform	platform	NOUN
ajis02-5323	293	6	]	]	PUNCT
ajis02-5323	293	7	,	,	PUNCT
ajis02-5323	293	8	and	and	CCONJ
ajis02-5323	293	9	we	we	PRON
ajis02-5323	293	10	wanna	wanna	ADV
ajis02-5323	293	11	use	use	VERB
ajis02-5323	293	12	the	the	DET
ajis02-5323	293	13	same	same	ADJ
ajis02-5323	293	14	kind	kind	NOUN
ajis02-5323	293	15	of	of	ADP
ajis02-5323	293	16	technology	technology	NOUN
ajis02-5323	293	17	to	to	PART
ajis02-5323	293	18	keep	keep	VERB
ajis02-5323	293	19	an	an	DET
ajis02-5323	293	20	eye	eye	NOUN
ajis02-5323	293	21	out	out	ADP
ajis02-5323	293	22	for	for	ADP
ajis02-5323	293	23	alerts	alert	NOUN
ajis02-5323	293	24	when	when	SCONJ
ajis02-5323	293	25	a	a	DET
ajis02-5323	293	26	hack	hack	NOUN
ajis02-5323	293	27	happens	happen	VERB
ajis02-5323	293	28	in	in	ADP
ajis02-5323	293	29	one	one	NUM
ajis02-5323	293	30	of	of	ADP
ajis02-5323	293	31	our	our	PRON
ajis02-5323	293	32	vendors	vendor	NOUN
ajis02-5323	293	33	”	"	PUNCT
ajis02-5323	293	34	(	(	PUNCT
ajis02-5323	293	35	p33	p33	NOUN
ajis02-5323	293	36	)	)	PUNCT
ajis02-5323	293	37	.	.	PUNCT
ajis02-5323	294	1	the	the	DET
ajis02-5323	294	2	costs	cost	NOUN
ajis02-5323	294	3	and	and	CCONJ
ajis02-5323	294	4	the	the	DET
ajis02-5323	294	5	level	level	NOUN
ajis02-5323	294	6	of	of	ADP
ajis02-5323	294	7	expertise	expertise	NOUN
ajis02-5323	294	8	associated	associate	VERB
ajis02-5323	294	9	with	with	ADP
ajis02-5323	294	10	conducting	conduct	VERB
ajis02-5323	294	11	these	these	DET
ajis02-5323	294	12	assessments	assessment	NOUN
ajis02-5323	294	13	are	be	AUX
ajis02-5323	294	14	considerable	considerable	ADJ
ajis02-5323	294	15	.	.	PUNCT
ajis02-5323	295	1	interestingly	interestingly	ADV
ajis02-5323	295	2	,	,	PUNCT
ajis02-5323	295	3	nobody	nobody	PRON
ajis02-5323	295	4	(	(	PUNCT
ajis02-5323	295	5	but	but	CCONJ
ajis02-5323	295	6	german	german	ADJ
ajis02-5323	295	7	banks	bank	NOUN
ajis02-5323	295	8	)	)	PUNCT
ajis02-5323	295	9	monitors	monitor	VERB
ajis02-5323	295	10	the	the	DET
ajis02-5323	295	11	leading	lead	VERB
ajis02-5323	295	12	cloud	cloud	NOUN
ajis02-5323	295	13	providers	provider	NOUN
ajis02-5323	295	14	because	because	SCONJ
ajis02-5323	295	15	of	of	ADP
ajis02-5323	295	16	the	the	DET
ajis02-5323	295	17	power	power	NOUN
ajis02-5323	295	18	imbalance	imbalance	NOUN
ajis02-5323	295	19	between	between	ADP
ajis02-5323	295	20	cloud	cloud	NOUN
ajis02-5323	295	21	providers	provider	NOUN
ajis02-5323	295	22	such	such	ADJ
ajis02-5323	295	23	as	as	ADP
ajis02-5323	295	24	microsoft	microsoft	PROPN
ajis02-5323	295	25	,	,	PUNCT
ajis02-5323	295	26	aws	aw	NOUN
ajis02-5323	295	27	,	,	PUNCT
ajis02-5323	295	28	and	and	CCONJ
ajis02-5323	295	29	google	google	PROPN
ajis02-5323	295	30	vs.	vs.	ADP
ajis02-5323	295	31	focal	focal	ADJ
ajis02-5323	295	32	organizations	organization	NOUN
ajis02-5323	295	33	.	.	PUNCT
ajis02-5323	296	1	however	however	ADV
ajis02-5323	296	2	,	,	PUNCT
ajis02-5323	296	3	the	the	DET
ajis02-5323	296	4	chief	chief	NOUN
ajis02-5323	296	5	it	it	PRON
ajis02-5323	296	6	auditor	auditor	NOUN
ajis02-5323	296	7	of	of	ADP
ajis02-5323	296	8	a	a	DET
ajis02-5323	296	9	german	german	ADJ
ajis02-5323	296	10	bank	bank	NOUN
ajis02-5323	296	11	explained	explain	VERB
ajis02-5323	296	12	that	that	SCONJ
ajis02-5323	296	13	the	the	DET
ajis02-5323	296	14	bank	bank	NOUN
ajis02-5323	296	15	,	,	PUNCT
ajis02-5323	296	16	in	in	ADP
ajis02-5323	296	17	a	a	DET
ajis02-5323	296	18	consortium	consortium	NOUN
ajis02-5323	296	19	with	with	ADP
ajis02-5323	296	20	other	other	ADJ
ajis02-5323	296	21	banks	bank	NOUN
ajis02-5323	296	22	,	,	PUNCT
ajis02-5323	296	23	conducts	conduct	NOUN
ajis02-5323	296	24	on	on	ADP
ajis02-5323	296	25	-	-	PUNCT
ajis02-5323	296	26	site	site	NOUN
ajis02-5323	296	27	audits	audits	NOUN
ajis02-5323	296	28	of	of	ADP
ajis02-5323	296	29	these	these	DET
ajis02-5323	296	30	systemically	systemically	ADV
ajis02-5323	296	31	important	important	ADJ
ajis02-5323	296	32	cloud	cloud	NOUN
ajis02-5323	296	33	providers	provider	NOUN
ajis02-5323	296	34	as	as	SCONJ
ajis02-5323	296	35	this	this	PRON
ajis02-5323	296	36	is	be	AUX
ajis02-5323	296	37	required	require	VERB
ajis02-5323	296	38	by	by	ADP
ajis02-5323	296	39	german	german	ADJ
ajis02-5323	296	40	prudential	prudential	ADJ
ajis02-5323	296	41	regulation	regulation	NOUN
ajis02-5323	296	42	.	.	PUNCT
ajis02-5323	297	1	“	"	PUNCT
ajis02-5323	297	2	we	we	PRON
ajis02-5323	297	3	are	be	AUX
ajis02-5323	297	4	not	not	PART
ajis02-5323	297	5	competitors	competitor	NOUN
ajis02-5323	297	6	,	,	PUNCT
ajis02-5323	297	7	and	and	CCONJ
ajis02-5323	297	8	you	you	PRON
ajis02-5323	297	9	also	also	ADV
ajis02-5323	297	10	gain	gain	VERB
ajis02-5323	297	11	more	more	ADJ
ajis02-5323	297	12	power	power	NOUN
ajis02-5323	297	13	in	in	ADP
ajis02-5323	297	14	the	the	DET
ajis02-5323	297	15	team	team	NOUN
ajis02-5323	297	16	.	.	PUNCT
ajis02-5323	298	1	it	it	PRON
ajis02-5323	298	2	includes	include	VERB
ajis02-5323	298	3	the	the	DET
ajis02-5323	298	4	biggest	big	ADJ
ajis02-5323	298	5	german	german	ADJ
ajis02-5323	298	6	banks	bank	NOUN
ajis02-5323	298	7	,	,	PUNCT
ajis02-5323	298	8	the	the	DET
ajis02-5323	298	9	biggest	big	ADJ
ajis02-5323	298	10	insurance	insurance	NOUN
ajis02-5323	298	11	companies	company	NOUN
ajis02-5323	298	12	,	,	PUNCT
ajis02-5323	298	13	and	and	CCONJ
ajis02-5323	298	14	also	also	ADV
ajis02-5323	298	15	,	,	PUNCT
ajis02-5323	298	16	i	i	PRON
ajis02-5323	298	17	think	think	VERB
ajis02-5323	298	18	,	,	PUNCT
ajis02-5323	298	19	the	the	DET
ajis02-5323	298	20	biggest	big	ADJ
ajis02-5323	298	21	italian	italian	ADJ
ajis02-5323	298	22	banks	bank	NOUN
ajis02-5323	298	23	.	.	PUNCT
ajis02-5323	298	24	”	"	PUNCT
ajis02-5323	299	1	(	(	PUNCT
ajis02-5323	299	2	p13	p13	PROPN
ajis02-5323	299	3	)	)	PUNCT
ajis02-5323	299	4	.	.	PUNCT
ajis02-5323	300	1	other	other	ADJ
ajis02-5323	300	2	organizations	organization	NOUN
ajis02-5323	300	3	mostly	mostly	ADV
ajis02-5323	300	4	rely	rely	VERB
ajis02-5323	300	5	on	on	ADP
ajis02-5323	300	6	public	public	ADJ
ajis02-5323	300	7	information	information	NOUN
ajis02-5323	300	8	and	and	CCONJ
ajis02-5323	300	9	certifications	certification	NOUN
ajis02-5323	300	10	about	about	ADP
ajis02-5323	300	11	the	the	DET
ajis02-5323	300	12	largest	large	ADJ
ajis02-5323	300	13	cloud	cloud	NOUN
ajis02-5323	300	14	providers3	providers3	NOUN
ajis02-5323	300	15	.	.	PUNCT
ajis02-5323	301	1	we	we	PRON
ajis02-5323	301	2	came	come	VERB
ajis02-5323	301	3	across	across	ADP
ajis02-5323	301	4	some	some	DET
ajis02-5323	301	5	organizations	organization	NOUN
ajis02-5323	301	6	that	that	PRON
ajis02-5323	301	7	have	have	VERB
ajis02-5323	301	8	a	a	DET
ajis02-5323	301	9	solid	solid	ADJ
ajis02-5323	301	10	risk	risk	NOUN
ajis02-5323	301	11	assessment	assessment	NOUN
ajis02-5323	301	12	process	process	NOUN
ajis02-5323	301	13	before	before	ADP
ajis02-5323	301	14	onboarding	onboarde	VERB
ajis02-5323	301	15	but	but	CCONJ
ajis02-5323	301	16	do	do	AUX
ajis02-5323	301	17	not	not	PART
ajis02-5323	301	18	monitor	monitor	VERB
ajis02-5323	301	19	a	a	DET
ajis02-5323	301	20	supplier	supplier	NOUN
ajis02-5323	301	21	after	after	ADP
ajis02-5323	301	22	onboarding	onboarde	VERB
ajis02-5323	301	23	.	.	PUNCT
ajis02-5323	302	1	“	"	PUNCT
ajis02-5323	302	2	we	we	PRON
ajis02-5323	302	3	're	be	AUX
ajis02-5323	302	4	typically	typically	ADV
ajis02-5323	302	5	relying	rely	VERB
ajis02-5323	302	6	a	a	DET
ajis02-5323	302	7	lot	lot	NOUN
ajis02-5323	302	8	more	more	ADJ
ajis02-5323	302	9	on	on	ADP
ajis02-5323	302	10	the	the	DET
ajis02-5323	302	11	assessment	assessment	NOUN
ajis02-5323	302	12	than	than	ADP
ajis02-5323	302	13	the	the	DET
ajis02-5323	302	14	actual	actual	ADJ
ajis02-5323	302	15	contractual	contractual	ADJ
ajis02-5323	302	16	obligations	obligation	NOUN
ajis02-5323	302	17	at	at	ADP
ajis02-5323	302	18	the	the	DET
ajis02-5323	302	19	moment	moment	NOUN
ajis02-5323	302	20	.	.	PUNCT
ajis02-5323	303	1	no	no	DET
ajis02-5323	303	2	follow	follow	NOUN
ajis02-5323	303	3	-	-	PUNCT
ajis02-5323	303	4	up	up	NOUN
ajis02-5323	303	5	of	of	ADP
ajis02-5323	303	6	vendors	vendor	NOUN
ajis02-5323	303	7	later	later	ADV
ajis02-5323	303	8	.	.	PUNCT
ajis02-5323	304	1	we	we	PRON
ajis02-5323	304	2	are	be	AUX
ajis02-5323	304	3	developing	develop	VERB
ajis02-5323	304	4	a	a	DET
ajis02-5323	304	5	new	new	ADJ
ajis02-5323	304	6	policy	policy	NOUN
ajis02-5323	304	7	here	here	ADV
ajis02-5323	304	8	for	for	ADP
ajis02-5323	304	9	vendors	vendor	NOUN
ajis02-5323	304	10	having	having	AUX
ajis02-5323	304	11	protected	protect	VERB
ajis02-5323	304	12	data	datum	NOUN
ajis02-5323	304	13	.	.	PUNCT
ajis02-5323	304	14	”	"	PUNCT
ajis02-5323	305	1	(	(	PUNCT
ajis02-5323	305	2	p14	p14	PROPN
ajis02-5323	305	3	)	)	PUNCT
ajis02-5323	305	4	.	.	PUNCT
ajis02-5323	306	1	in	in	ADP
ajis02-5323	306	2	contrast	contrast	NOUN
ajis02-5323	306	3	,	,	PUNCT
ajis02-5323	306	4	other	other	ADJ
ajis02-5323	306	5	3	3	NUM
ajis02-5323	306	6	the	the	DET
ajis02-5323	306	7	eu	eu	PROPN
ajis02-5323	306	8	dora	dora	PROPN
ajis02-5323	306	9	regulation	regulation	NOUN
ajis02-5323	306	10	stipulates	stipulate	VERB
ajis02-5323	306	11	that	that	SCONJ
ajis02-5323	306	12	such	such	ADJ
ajis02-5323	306	13	providers	provider	NOUN
ajis02-5323	306	14	will	will	AUX
ajis02-5323	306	15	be	be	AUX
ajis02-5323	306	16	monitored	monitor	VERB
ajis02-5323	306	17	by	by	ADP
ajis02-5323	306	18	the	the	DET
ajis02-5323	306	19	financial	financial	ADJ
ajis02-5323	306	20	regulator	regulator	NOUN
ajis02-5323	306	21	itself	itself	PRON
ajis02-5323	306	22	because	because	SCONJ
ajis02-5323	306	23	of	of	ADP
ajis02-5323	306	24	their	their	PRON
ajis02-5323	306	25	systemic	systemic	ADJ
ajis02-5323	306	26	importance	importance	NOUN
ajis02-5323	306	27	.	.	PUNCT
ajis02-5323	307	1	australasian	australasian	ADJ
ajis02-5323	307	2	journal	journal	NOUN
ajis02-5323	307	3	of	of	ADP
ajis02-5323	307	4	information	information	NOUN
ajis02-5323	307	5	systems	system	NOUN
ajis02-5323	307	6	slapnicar	slapnicar	NOUN
ajis02-5323	307	7	,	,	PUNCT
ajis02-5323	307	8	vidmar	vidmar	NOUN
ajis02-5323	307	9	&	&	CCONJ
ajis02-5323	307	10	tsen	tsen	ADJ
ajis02-5323	307	11	2025	2025	NUM
ajis02-5323	307	12	,	,	PUNCT
ajis02-5323	307	13	vol	vol	NOUN
ajis02-5323	307	14	29	29	NUM
ajis02-5323	307	15	,	,	PUNCT
ajis02-5323	307	16	research	research	NOUN
ajis02-5323	307	17	article	article	NOUN
ajis02-5323	307	18	process	process	NOUN
ajis02-5323	307	19	theory	theory	NOUN
ajis02-5323	307	20	of	of	ADP
ajis02-5323	307	21	supplier	supplier	NOUN
ajis02-5323	307	22	cyber	cyber	NOUN
ajis02-5323	307	23	risk	risk	NOUN
ajis02-5323	307	24	assessment	assessment	NOUN
ajis02-5323	307	25	18	18	NUM
ajis02-5323	307	26	organizations	organization	NOUN
ajis02-5323	307	27	have	have	AUX
ajis02-5323	307	28	integrated	integrate	VERB
ajis02-5323	307	29	their	their	PRON
ajis02-5323	307	30	existing	exist	VERB
ajis02-5323	307	31	suppliers	supplier	NOUN
ajis02-5323	307	32	on	on	ADP
ajis02-5323	307	33	their	their	PRON
ajis02-5323	307	34	vulnerability	vulnerability	NOUN
ajis02-5323	307	35	scanning	scan	VERB
ajis02-5323	307	36	platform	platform	NOUN
ajis02-5323	307	37	and	and	CCONJ
ajis02-5323	307	38	conduct	conduct	VERB
ajis02-5323	307	39	continuous	continuous	ADJ
ajis02-5323	307	40	monitoring	monitoring	NOUN
ajis02-5323	307	41	but	but	CCONJ
ajis02-5323	307	42	do	do	AUX
ajis02-5323	307	43	not	not	PART
ajis02-5323	307	44	have	have	VERB
ajis02-5323	307	45	a	a	DET
ajis02-5323	307	46	mature	mature	ADJ
ajis02-5323	307	47	risk	risk	NOUN
ajis02-5323	307	48	assessment	assessment	NOUN
ajis02-5323	307	49	process	process	NOUN
ajis02-5323	307	50	for	for	ADP
ajis02-5323	307	51	suppliers	supplier	NOUN
ajis02-5323	307	52	before	before	ADP
ajis02-5323	307	53	onboarding	onboarde	VERB
ajis02-5323	307	54	.	.	PUNCT
ajis02-5323	308	1	the	the	DET
ajis02-5323	308	2	greatest	great	ADJ
ajis02-5323	308	3	challenge	challenge	NOUN
ajis02-5323	308	4	is	be	AUX
ajis02-5323	308	5	ensuring	ensure	VERB
ajis02-5323	308	6	that	that	SCONJ
ajis02-5323	308	7	a	a	DET
ajis02-5323	308	8	supplier	supplier	NOUN
ajis02-5323	308	9	deletes	delete	VERB
ajis02-5323	308	10	the	the	DET
ajis02-5323	308	11	data	datum	NOUN
ajis02-5323	308	12	as	as	SCONJ
ajis02-5323	308	13	agreed	agree	VERB
ajis02-5323	308	14	and	and	CCONJ
ajis02-5323	308	15	monitoring	monitor	VERB
ajis02-5323	308	16	the	the	DET
ajis02-5323	308	17	deletion	deletion	NOUN
ajis02-5323	308	18	after	after	SCONJ
ajis02-5323	308	19	the	the	DET
ajis02-5323	308	20	contract	contract	NOUN
ajis02-5323	308	21	is	be	AUX
ajis02-5323	308	22	terminated	terminate	VERB
ajis02-5323	308	23	,	,	PUNCT
ajis02-5323	308	24	especially	especially	ADV
ajis02-5323	308	25	in	in	ADP
ajis02-5323	308	26	jurisdictions	jurisdiction	NOUN
ajis02-5323	308	27	without	without	ADP
ajis02-5323	308	28	regulations	regulation	NOUN
ajis02-5323	308	29	as	as	ADV
ajis02-5323	308	30	strict	strict	ADJ
ajis02-5323	308	31	as	as	ADP
ajis02-5323	308	32	gdpr	gdpr	NOUN
ajis02-5323	308	33	:	:	PUNCT
ajis02-5323	308	34	“	"	PUNCT
ajis02-5323	308	35	we	we	PRON
ajis02-5323	308	36	are	be	AUX
ajis02-5323	308	37	an	an	DET
ajis02-5323	308	38	organization	organization	NOUN
ajis02-5323	308	39	highly	highly	ADV
ajis02-5323	308	40	dependent	dependent	ADJ
ajis02-5323	308	41	on	on	ADP
ajis02-5323	308	42	third	third	ADJ
ajis02-5323	308	43	party	party	NOUN
ajis02-5323	308	44	providers	provider	NOUN
ajis02-5323	308	45	.	.	PUNCT
ajis02-5323	309	1	the	the	DET
ajis02-5323	309	2	first	first	ADJ
ajis02-5323	309	3	thing	thing	NOUN
ajis02-5323	309	4	is	be	AUX
ajis02-5323	309	5	really	really	ADV
ajis02-5323	309	6	about	about	ADP
ajis02-5323	309	7	getting	getting	AUX
ajis02-5323	309	8	breached	breach	VERB
ajis02-5323	309	9	by	by	ADP
ajis02-5323	309	10	third	third	ADJ
ajis02-5323	309	11	parties	party	NOUN
ajis02-5323	309	12	,	,	PUNCT
ajis02-5323	309	13	and	and	CCONJ
ajis02-5323	309	14	the	the	DET
ajis02-5323	309	15	second	second	ADJ
ajis02-5323	309	16	risk	risk	NOUN
ajis02-5323	309	17	,	,	PUNCT
ajis02-5323	309	18	in	in	ADP
ajis02-5323	309	19	my	my	PRON
ajis02-5323	309	20	view	view	NOUN
ajis02-5323	309	21	,	,	PUNCT
ajis02-5323	309	22	is	be	AUX
ajis02-5323	309	23	about	about	ADP
ajis02-5323	309	24	the	the	DET
ajis02-5323	309	25	fact	fact	NOUN
ajis02-5323	309	26	that	that	SCONJ
ajis02-5323	309	27	they	they	PRON
ajis02-5323	309	28	keep	keep	VERB
ajis02-5323	309	29	our	our	PRON
ajis02-5323	309	30	data	datum	NOUN
ajis02-5323	309	31	for	for	ADP
ajis02-5323	309	32	longer	long	ADJ
ajis02-5323	309	33	than	than	SCONJ
ajis02-5323	309	34	we	we	PRON
ajis02-5323	309	35	have	have	AUX
ajis02-5323	309	36	agreed	agree	VERB
ajis02-5323	309	37	to	to	ADP
ajis02-5323	309	38	beforehand	beforehand	ADV
ajis02-5323	309	39	.	.	PUNCT
ajis02-5323	310	1	it	it	PRON
ajis02-5323	310	2	's	be	AUX
ajis02-5323	310	3	difficult	difficult	ADJ
ajis02-5323	310	4	to	to	PART
ajis02-5323	310	5	keep	keep	VERB
ajis02-5323	310	6	that	that	DET
ajis02-5323	310	7	overview	overview	NOUN
ajis02-5323	310	8	unless	unless	SCONJ
ajis02-5323	310	9	you	you	PRON
ajis02-5323	310	10	actually	actually	ADV
ajis02-5323	310	11	go	go	VERB
ajis02-5323	310	12	to	to	ADP
ajis02-5323	310	13	their	their	PRON
ajis02-5323	310	14	organization	organization	NOUN
ajis02-5323	310	15	and	and	CCONJ
ajis02-5323	310	16	do	do	VERB
ajis02-5323	310	17	an	an	DET
ajis02-5323	310	18	internal	internal	ADJ
ajis02-5323	310	19	test	test	NOUN
ajis02-5323	310	20	whether	whether	SCONJ
ajis02-5323	310	21	they	they	PRON
ajis02-5323	310	22	still	still	ADV
ajis02-5323	310	23	have	have	VERB
ajis02-5323	310	24	our	our	PRON
ajis02-5323	310	25	data	datum	NOUN
ajis02-5323	310	26	”	"	PUNCT
ajis02-5323	310	27	(	(	PUNCT
ajis02-5323	310	28	p33	p33	NOUN
ajis02-5323	310	29	)	)	PUNCT
ajis02-5323	310	30	.	.	PUNCT
ajis02-5323	311	1	4.3	4.3	NUM
ajis02-5323	311	2	contextual	contextual	ADJ
ajis02-5323	311	3	factors	factor	NOUN
ajis02-5323	311	4	the	the	DET
ajis02-5323	311	5	best	good	ADJ
ajis02-5323	311	6	way	way	NOUN
ajis02-5323	311	7	to	to	PART
ajis02-5323	311	8	understand	understand	VERB
ajis02-5323	311	9	how	how	SCONJ
ajis02-5323	311	10	the	the	DET
ajis02-5323	311	11	process	process	NOUN
ajis02-5323	311	12	of	of	ADP
ajis02-5323	311	13	supplier	supplier	NOUN
ajis02-5323	311	14	risk	risk	NOUN
ajis02-5323	311	15	assessment	assessment	NOUN
ajis02-5323	311	16	is	be	AUX
ajis02-5323	311	17	applied	apply	VERB
ajis02-5323	311	18	in	in	ADP
ajis02-5323	311	19	organizations	organization	NOUN
ajis02-5323	311	20	is	be	AUX
ajis02-5323	311	21	by	by	ADP
ajis02-5323	311	22	considering	consider	VERB
ajis02-5323	311	23	its	its	PRON
ajis02-5323	311	24	maturity	maturity	NOUN
ajis02-5323	311	25	.	.	PUNCT
ajis02-5323	312	1	boyson	boyson	NOUN
ajis02-5323	312	2	(	(	PUNCT
ajis02-5323	312	3	2014	2014	NUM
ajis02-5323	312	4	)	)	PUNCT
ajis02-5323	312	5	defines	define	VERB
ajis02-5323	312	6	the	the	DET
ajis02-5323	312	7	maturity	maturity	NOUN
ajis02-5323	312	8	of	of	ADP
ajis02-5323	312	9	c	c	NOUN
ajis02-5323	312	10	-	-	PUNCT
ajis02-5323	312	11	scrm	scrm	NOUN
ajis02-5323	312	12	as	as	ADP
ajis02-5323	312	13	emergent	emergent	ADV
ajis02-5323	312	14	,	,	PUNCT
ajis02-5323	312	15	that	that	ADV
ajis02-5323	312	16	is	is	ADV
ajis02-5323	312	17	,	,	PUNCT
ajis02-5323	312	18	where	where	SCONJ
ajis02-5323	312	19	no	no	DET
ajis02-5323	312	20	systematic	systematic	ADJ
ajis02-5323	312	21	risk	risk	NOUN
ajis02-5323	312	22	assessment	assessment	NOUN
ajis02-5323	312	23	activities	activity	NOUN
ajis02-5323	312	24	and	and	CCONJ
ajis02-5323	312	25	no	no	DET
ajis02-5323	312	26	risk	risk	NOUN
ajis02-5323	312	27	monitoring	monitoring	NOUN
ajis02-5323	312	28	or	or	CCONJ
ajis02-5323	312	29	digital	digital	ADJ
ajis02-5323	312	30	forensics	forensic	NOUN
ajis02-5323	312	31	and	and	CCONJ
ajis02-5323	312	32	reporting	reporting	NOUN
ajis02-5323	312	33	capacity	capacity	NOUN
ajis02-5323	312	34	take	take	VERB
ajis02-5323	312	35	place	place	NOUN
ajis02-5323	312	36	,	,	PUNCT
ajis02-5323	312	37	diligent	diligent	ADJ
ajis02-5323	312	38	,	,	PUNCT
ajis02-5323	312	39	when	when	SCONJ
ajis02-5323	312	40	organizations	organization	NOUN
ajis02-5323	312	41	engage	engage	VERB
ajis02-5323	312	42	in	in	ADP
ajis02-5323	312	43	selected	select	VERB
ajis02-5323	312	44	risk	risk	NOUN
ajis02-5323	312	45	assessment	assessment	NOUN
ajis02-5323	312	46	activities	activity	NOUN
ajis02-5323	312	47	across	across	ADP
ajis02-5323	312	48	the	the	DET
ajis02-5323	312	49	enterprise	enterprise	NOUN
ajis02-5323	312	50	but	but	CCONJ
ajis02-5323	312	51	have	have	VERB
ajis02-5323	312	52	a	a	DET
ajis02-5323	312	53	limited	limited	ADJ
ajis02-5323	312	54	capacity	capacity	NOUN
ajis02-5323	312	55	of	of	ADP
ajis02-5323	312	56	risk	risk	NOUN
ajis02-5323	312	57	monitoring	monitoring	NOUN
ajis02-5323	312	58	,	,	PUNCT
ajis02-5323	312	59	and	and	CCONJ
ajis02-5323	312	60	proficient	proficient	ADJ
ajis02-5323	312	61	for	for	ADP
ajis02-5323	312	62	extensive	extensive	ADJ
ajis02-5323	312	63	supply	supply	NOUN
ajis02-5323	312	64	chain	chain	NOUN
ajis02-5323	312	65	-	-	PUNCT
ajis02-5323	312	66	wide	wide	ADJ
ajis02-5323	312	67	risk	risk	NOUN
ajis02-5323	312	68	assessment	assessment	NOUN
ajis02-5323	312	69	activities	activity	NOUN
ajis02-5323	312	70	involving	involve	VERB
ajis02-5323	312	71	suppliers	supplier	NOUN
ajis02-5323	312	72	and	and	CCONJ
ajis02-5323	312	73	customers	customer	NOUN
ajis02-5323	312	74	and	and	CCONJ
ajis02-5323	312	75	extensive	extensive	ADJ
ajis02-5323	312	76	capacity	capacity	NOUN
ajis02-5323	312	77	of	of	ADP
ajis02-5323	312	78	monitoring	monitoring	NOUN
ajis02-5323	312	79	.	.	PUNCT
ajis02-5323	313	1	while	while	SCONJ
ajis02-5323	313	2	we	we	PRON
ajis02-5323	313	3	do	do	AUX
ajis02-5323	313	4	not	not	PART
ajis02-5323	313	5	intend	intend	VERB
ajis02-5323	313	6	to	to	PART
ajis02-5323	313	7	classify	classify	VERB
ajis02-5323	313	8	our	our	PRON
ajis02-5323	313	9	18	18	NUM
ajis02-5323	313	10	organizations	organization	NOUN
ajis02-5323	313	11	into	into	ADP
ajis02-5323	313	12	specific	specific	ADJ
ajis02-5323	313	13	maturity	maturity	NOUN
ajis02-5323	313	14	levels	level	NOUN
ajis02-5323	313	15	based	base	VERB
ajis02-5323	313	16	on	on	ADP
ajis02-5323	313	17	interviews	interview	NOUN
ajis02-5323	313	18	,	,	PUNCT
ajis02-5323	313	19	we	we	PRON
ajis02-5323	313	20	have	have	AUX
ajis02-5323	313	21	observed	observe	VERB
ajis02-5323	313	22	significant	significant	ADJ
ajis02-5323	313	23	variation	variation	NOUN
ajis02-5323	313	24	in	in	ADP
ajis02-5323	313	25	the	the	DET
ajis02-5323	313	26	maturity	maturity	NOUN
ajis02-5323	313	27	of	of	ADP
ajis02-5323	313	28	supplier	supplier	NOUN
ajis02-5323	313	29	cyber	cyber	NOUN
ajis02-5323	313	30	risk	risk	NOUN
ajis02-5323	313	31	assessments	assessment	NOUN
ajis02-5323	313	32	along	along	ADP
ajis02-5323	313	33	these	these	DET
ajis02-5323	313	34	levels	level	NOUN
ajis02-5323	313	35	–	–	PUNCT
ajis02-5323	313	36	that	that	ADV
ajis02-5323	313	37	is	is	ADV
ajis02-5323	313	38	,	,	PUNCT
ajis02-5323	313	39	which	which	DET
ajis02-5323	313	40	steps	step	NOUN
ajis02-5323	313	41	of	of	ADP
ajis02-5323	313	42	the	the	DET
ajis02-5323	313	43	assessment	assessment	NOUN
ajis02-5323	313	44	they	they	PRON
ajis02-5323	313	45	apply	apply	VERB
ajis02-5323	313	46	and	and	CCONJ
ajis02-5323	313	47	how	how	SCONJ
ajis02-5323	313	48	thorough	thorough	ADJ
ajis02-5323	313	49	they	they	PRON
ajis02-5323	313	50	are	be	AUX
ajis02-5323	313	51	.	.	PUNCT
ajis02-5323	314	1	the	the	DET
ajis02-5323	314	2	variation	variation	NOUN
ajis02-5323	314	3	is	be	AUX
ajis02-5323	314	4	influenced	influence	VERB
ajis02-5323	314	5	by	by	ADP
ajis02-5323	314	6	several	several	ADJ
ajis02-5323	314	7	contextual	contextual	ADJ
ajis02-5323	314	8	factors	factor	NOUN
ajis02-5323	314	9	characteristics	characteristic	NOUN
ajis02-5323	314	10	of	of	ADP
ajis02-5323	314	11	the	the	DET
ajis02-5323	314	12	focal	focal	ADJ
ajis02-5323	314	13	organization	organization	NOUN
ajis02-5323	314	14	.	.	PUNCT
ajis02-5323	315	1	one	one	NUM
ajis02-5323	315	2	of	of	ADP
ajis02-5323	315	3	our	our	PRON
ajis02-5323	315	4	participating	participate	VERB
ajis02-5323	315	5	organizations	organization	NOUN
ajis02-5323	315	6	stands	stand	VERB
ajis02-5323	315	7	out	out	ADP
ajis02-5323	315	8	,	,	PUNCT
ajis02-5323	315	9	and	and	CCONJ
ajis02-5323	315	10	that	that	PRON
ajis02-5323	315	11	is	be	AUX
ajis02-5323	315	12	the	the	DET
ajis02-5323	315	13	german	german	ADJ
ajis02-5323	315	14	bank	bank	NOUN
ajis02-5323	315	15	.	.	PUNCT
ajis02-5323	316	1	the	the	DET
ajis02-5323	316	2	two	two	NUM
ajis02-5323	316	3	contextual	contextual	ADJ
ajis02-5323	316	4	factors	factor	NOUN
ajis02-5323	316	5	that	that	PRON
ajis02-5323	316	6	differentiate	differentiate	VERB
ajis02-5323	316	7	the	the	DET
ajis02-5323	316	8	german	german	ADJ
ajis02-5323	316	9	bank	bank	NOUN
ajis02-5323	316	10	from	from	ADP
ajis02-5323	316	11	all	all	DET
ajis02-5323	316	12	other	other	ADJ
ajis02-5323	316	13	participating	participate	VERB
ajis02-5323	316	14	organizations	organization	NOUN
ajis02-5323	316	15	are	be	AUX
ajis02-5323	316	16	a	a	DET
ajis02-5323	316	17	combination	combination	NOUN
ajis02-5323	316	18	of	of	ADP
ajis02-5323	316	19	size	size	NOUN
ajis02-5323	316	20	and	and	CCONJ
ajis02-5323	316	21	regulation	regulation	NOUN
ajis02-5323	316	22	,	,	PUNCT
ajis02-5323	316	23	specifically	specifically	ADV
ajis02-5323	316	24	,	,	PUNCT
ajis02-5323	316	25	german	german	ADJ
ajis02-5323	316	26	prudential	prudential	ADJ
ajis02-5323	316	27	banking	banking	NOUN
ajis02-5323	316	28	regulation	regulation	NOUN
ajis02-5323	316	29	.	.	PUNCT
ajis02-5323	317	1	“	"	PUNCT
ajis02-5323	317	2	we	we	PRON
ajis02-5323	317	3	are	be	AUX
ajis02-5323	317	4	doing	do	VERB
ajis02-5323	317	5	on	on	ADP
ajis02-5323	317	6	-	-	PUNCT
ajis02-5323	317	7	site	site	NOUN
ajis02-5323	317	8	audits	audits	NOUN
ajis02-5323	317	9	for	for	ADP
ajis02-5323	317	10	all	all	DET
ajis02-5323	317	11	material	material	NOUN
ajis02-5323	317	12	partners	partner	NOUN
ajis02-5323	317	13	.	.	PUNCT
ajis02-5323	318	1	we	we	PRON
ajis02-5323	318	2	do	do	AUX
ajis02-5323	318	3	not	not	PART
ajis02-5323	318	4	rely	rely	VERB
ajis02-5323	318	5	on	on	ADP
ajis02-5323	318	6	reports	report	NOUN
ajis02-5323	318	7	.	.	PUNCT
ajis02-5323	319	1	i	i	PRON
ajis02-5323	319	2	read	read	VERB
ajis02-5323	319	3	the	the	DET
ajis02-5323	319	4	report	report	NOUN
ajis02-5323	319	5	before	before	SCONJ
ajis02-5323	319	6	i	i	PRON
ajis02-5323	319	7	start	start	VERB
ajis02-5323	319	8	to	to	PART
ajis02-5323	319	9	understand	understand	VERB
ajis02-5323	319	10	the	the	DET
ajis02-5323	319	11	partner	partner	NOUN
ajis02-5323	319	12	,	,	PUNCT
ajis02-5323	319	13	but	but	CCONJ
ajis02-5323	319	14	i	i	PRON
ajis02-5323	319	15	also	also	ADV
ajis02-5323	319	16	take	take	VERB
ajis02-5323	319	17	my	my	PRON
ajis02-5323	319	18	own	own	ADJ
ajis02-5323	319	19	sample	sample	NOUN
ajis02-5323	319	20	testing	testing	NOUN
ajis02-5323	319	21	,	,	PUNCT
ajis02-5323	319	22	and	and	CCONJ
ajis02-5323	319	23	i	i	PRON
ajis02-5323	319	24	want	want	VERB
ajis02-5323	319	25	to	to	PART
ajis02-5323	319	26	have	have	VERB
ajis02-5323	319	27	a	a	DET
ajis02-5323	319	28	look	look	NOUN
ajis02-5323	319	29	at	at	ADP
ajis02-5323	319	30	the	the	DET
ajis02-5323	319	31	whole	whole	ADJ
ajis02-5323	319	32	documentation	documentation	NOUN
ajis02-5323	319	33	by	by	ADP
ajis02-5323	319	34	myself	myself	PRON
ajis02-5323	319	35	and	and	CCONJ
ajis02-5323	319	36	normally	normally	ADV
ajis02-5323	319	37	on	on	ADP
ajis02-5323	319	38	-	-	PUNCT
ajis02-5323	319	39	site	site	NOUN
ajis02-5323	319	40	.	.	PUNCT
ajis02-5323	319	41	”	"	PUNCT
ajis02-5323	320	1	(	(	PUNCT
ajis02-5323	320	2	p13	p13	PROPN
ajis02-5323	320	3	)	)	PUNCT
ajis02-5323	320	4	.	.	PUNCT
ajis02-5323	321	1	both	both	DET
ajis02-5323	321	2	factors	factor	NOUN
ajis02-5323	321	3	have	have	VERB
ajis02-5323	321	4	implications	implication	NOUN
ajis02-5323	321	5	for	for	ADP
ajis02-5323	321	6	an	an	DET
ajis02-5323	321	7	organization	organization	NOUN
ajis02-5323	321	8	’s	’s	PART
ajis02-5323	321	9	risk	risk	NOUN
ajis02-5323	321	10	culture	culture	NOUN
ajis02-5323	321	11	and	and	CCONJ
ajis02-5323	321	12	appetite	appetite	NOUN
ajis02-5323	321	13	(	(	PUNCT
ajis02-5323	321	14	gale	gale	NOUN
ajis02-5323	321	15	et	et	PROPN
ajis02-5323	321	16	al	al	PROPN
ajis02-5323	321	17	.	.	PROPN
ajis02-5323	321	18	,	,	PUNCT
ajis02-5323	321	19	2022	2022	NUM
ajis02-5323	321	20	;	;	PUNCT
ajis02-5323	321	21	monev	monev	NOUN
ajis02-5323	321	22	,	,	PUNCT
ajis02-5323	321	23	2021	2021	NUM
ajis02-5323	321	24	)	)	PUNCT
ajis02-5323	321	25	,	,	PUNCT
ajis02-5323	321	26	which	which	PRON
ajis02-5323	321	27	in	in	ADP
ajis02-5323	321	28	turn	turn	NOUN
ajis02-5323	321	29	affect	affect	VERB
ajis02-5323	321	30	financial	financial	ADJ
ajis02-5323	321	31	resources	resource	NOUN
ajis02-5323	321	32	dedicated	dedicate	VERB
ajis02-5323	321	33	to	to	ADP
ajis02-5323	321	34	c	c	NOUN
ajis02-5323	321	35	-	-	PUNCT
ajis02-5323	321	36	scrm	scrm	NOUN
ajis02-5323	321	37	and	and	CCONJ
ajis02-5323	321	38	the	the	DET
ajis02-5323	321	39	attraction	attraction	NOUN
ajis02-5323	321	40	of	of	ADP
ajis02-5323	321	41	talent	talent	NOUN
ajis02-5323	321	42	.	.	PUNCT
ajis02-5323	322	1	larger	large	ADJ
ajis02-5323	322	2	organizations	organization	NOUN
ajis02-5323	322	3	have	have	VERB
ajis02-5323	322	4	a	a	DET
ajis02-5323	322	5	larger	large	ADJ
ajis02-5323	322	6	and	and	CCONJ
ajis02-5323	322	7	more	more	ADV
ajis02-5323	322	8	complex	complex	ADJ
ajis02-5323	322	9	sc	sc	NOUN
ajis02-5323	322	10	and	and	CCONJ
ajis02-5323	322	11	are	be	AUX
ajis02-5323	322	12	more	more	ADV
ajis02-5323	322	13	exposed	expose	VERB
ajis02-5323	322	14	to	to	ADP
ajis02-5323	322	15	cyber	cyber	ADJ
ajis02-5323	322	16	risk	risk	NOUN
ajis02-5323	322	17	from	from	ADP
ajis02-5323	322	18	the	the	DET
ajis02-5323	322	19	sc	sc	PROPN
ajis02-5323	322	20	.	.	PUNCT
ajis02-5323	323	1	correspondingly	correspondingly	ADV
ajis02-5323	323	2	,	,	PUNCT
ajis02-5323	323	3	they	they	PRON
ajis02-5323	323	4	have	have	VERB
ajis02-5323	323	5	a	a	DET
ajis02-5323	323	6	broader	broad	ADJ
ajis02-5323	323	7	scope	scope	NOUN
ajis02-5323	323	8	of	of	ADP
ajis02-5323	323	9	assessment	assessment	NOUN
ajis02-5323	323	10	and	and	CCONJ
ajis02-5323	323	11	assess	assess	VERB
ajis02-5323	323	12	more	more	ADJ
ajis02-5323	323	13	than	than	ADP
ajis02-5323	323	14	just	just	ADV
ajis02-5323	323	15	critical	critical	ADJ
ajis02-5323	323	16	suppliers	supplier	NOUN
ajis02-5323	323	17	.	.	PUNCT
ajis02-5323	324	1	in	in	ADP
ajis02-5323	324	2	the	the	DET
ajis02-5323	324	3	financial	financial	ADJ
ajis02-5323	324	4	industry	industry	NOUN
ajis02-5323	324	5	,	,	PUNCT
ajis02-5323	324	6	classification	classification	NOUN
ajis02-5323	324	7	of	of	ADP
ajis02-5323	324	8	suppliers	supplier	NOUN
ajis02-5323	324	9	,	,	PUNCT
ajis02-5323	324	10	risk	risk	NOUN
ajis02-5323	324	11	assessment	assessment	NOUN
ajis02-5323	324	12	and	and	CCONJ
ajis02-5323	324	13	monitoring	monitoring	NOUN
ajis02-5323	324	14	are	be	AUX
ajis02-5323	324	15	subject	subject	ADJ
ajis02-5323	324	16	to	to	ADP
ajis02-5323	324	17	prudential	prudential	ADJ
ajis02-5323	324	18	oversight	oversight	NOUN
ajis02-5323	324	19	(	(	PUNCT
ajis02-5323	324	20	e.g.	e.g.	ADV
ajis02-5323	324	21	,	,	PUNCT
ajis02-5323	324	22	eba	eba	NOUN
ajis02-5323	324	23	guidelines	guideline	VERB
ajis02-5323	324	24	on	on	ADP
ajis02-5323	324	25	outsourcing	outsourcing	NOUN
ajis02-5323	324	26	arrangements	arrangement	NOUN
ajis02-5323	324	27	,	,	PUNCT
ajis02-5323	324	28	2019	2019	NUM
ajis02-5323	324	29	)	)	PUNCT
ajis02-5323	324	30	.	.	PUNCT
ajis02-5323	325	1	the	the	DET
ajis02-5323	325	2	eba	eba	PROPN
ajis02-5323	325	3	guidelines	guideline	NOUN
ajis02-5323	325	4	,	,	PUNCT
ajis02-5323	325	5	for	for	ADP
ajis02-5323	325	6	example	example	NOUN
ajis02-5323	325	7	,	,	PUNCT
ajis02-5323	325	8	require	require	VERB
ajis02-5323	325	9	a	a	DET
ajis02-5323	325	10	manager	manager	NOUN
ajis02-5323	325	11	managing	manage	VERB
ajis02-5323	325	12	outsourced	outsource	VERB
ajis02-5323	325	13	arrangements	arrangement	NOUN
ajis02-5323	325	14	to	to	PART
ajis02-5323	325	15	be	be	AUX
ajis02-5323	325	16	in	in	ADP
ajis02-5323	325	17	a	a	DET
ajis02-5323	325	18	senior	senior	ADJ
ajis02-5323	325	19	management	management	NOUN
ajis02-5323	325	20	position	position	NOUN
ajis02-5323	325	21	,	,	PUNCT
ajis02-5323	325	22	which	which	PRON
ajis02-5323	325	23	significantly	significantly	ADV
ajis02-5323	325	24	elevates	elevate	VERB
ajis02-5323	325	25	the	the	DET
ajis02-5323	325	26	importance	importance	NOUN
ajis02-5323	325	27	of	of	ADP
ajis02-5323	325	28	this	this	DET
ajis02-5323	325	29	area	area	NOUN
ajis02-5323	325	30	and	and	CCONJ
ajis02-5323	325	31	allocated	allocate	VERB
ajis02-5323	325	32	resources	resource	NOUN
ajis02-5323	325	33	.	.	PUNCT
ajis02-5323	326	1	furthermore	furthermore	ADV
ajis02-5323	326	2	,	,	PUNCT
ajis02-5323	326	3	the	the	DET
ajis02-5323	326	4	eu	eu	PROPN
ajis02-5323	326	5	prudential	prudential	PROPN
ajis02-5323	326	6	requirements	requirement	NOUN
ajis02-5323	326	7	for	for	ADP
ajis02-5323	326	8	the	the	DET
ajis02-5323	326	9	financial	financial	ADJ
ajis02-5323	326	10	industry	industry	NOUN
ajis02-5323	326	11	are	be	AUX
ajis02-5323	326	12	considerably	considerably	ADV
ajis02-5323	326	13	increasing	increase	VERB
ajis02-5323	326	14	(	(	PUNCT
ajis02-5323	326	15	dora	dora	INTJ
ajis02-5323	326	16	,	,	PUNCT
ajis02-5323	326	17	20234	20234	NUM
ajis02-5323	326	18	)	)	PUNCT
ajis02-5323	326	19	,	,	PUNCT
ajis02-5323	326	20	and	and	CCONJ
ajis02-5323	326	21	the	the	DET
ajis02-5323	326	22	affected	affected	ADJ
ajis02-5323	326	23	participants	participant	NOUN
ajis02-5323	326	24	stressed	stress	VERB
ajis02-5323	326	25	that	that	SCONJ
ajis02-5323	326	26	they	they	PRON
ajis02-5323	326	27	are	be	AUX
ajis02-5323	326	28	already	already	ADV
ajis02-5323	326	29	upscaling	upscale	VERB
ajis02-5323	326	30	their	their	PRON
ajis02-5323	326	31	capabilities	capability	NOUN
ajis02-5323	326	32	to	to	PART
ajis02-5323	326	33	become	become	VERB
ajis02-5323	326	34	compliant	compliant	ADJ
ajis02-5323	326	35	.	.	PUNCT
ajis02-5323	327	1	4	4	NUM
ajis02-5323	327	2	dora	dora	NOUN
ajis02-5323	327	3	requires	require	VERB
ajis02-5323	327	4	more	more	ADJ
ajis02-5323	327	5	validation	validation	NOUN
ajis02-5323	327	6	checks	check	NOUN
ajis02-5323	327	7	,	,	PUNCT
ajis02-5323	327	8	and	and	CCONJ
ajis02-5323	327	9	stipulates	stipulate	VERB
ajis02-5323	327	10	the	the	DET
ajis02-5323	327	11	lead	lead	ADJ
ajis02-5323	327	12	overseer	overseer	NOUN
ajis02-5323	327	13	over	over	ADP
ajis02-5323	327	14	the	the	DET
ajis02-5323	327	15	critical	critical	ADJ
ajis02-5323	327	16	ict	ict	NOUN
ajis02-5323	327	17	service	service	NOUN
ajis02-5323	327	18	providers	provider	NOUN
ajis02-5323	327	19	being	be	AUX
ajis02-5323	327	20	one	one	NUM
ajis02-5323	327	21	of	of	ADP
ajis02-5323	327	22	the	the	DET
ajis02-5323	327	23	three	three	NUM
ajis02-5323	327	24	eu	eu	PROPN
ajis02-5323	327	25	financial	financial	ADJ
ajis02-5323	327	26	authorities	authority	NOUN
ajis02-5323	327	27	.	.	PUNCT
ajis02-5323	328	1	australasian	australasian	ADJ
ajis02-5323	328	2	journal	journal	NOUN
ajis02-5323	328	3	of	of	ADP
ajis02-5323	328	4	information	information	NOUN
ajis02-5323	328	5	systems	system	NOUN
ajis02-5323	328	6	slapnicar	slapnicar	NOUN
ajis02-5323	328	7	,	,	PUNCT
ajis02-5323	328	8	vidmar	vidmar	NOUN
ajis02-5323	328	9	&	&	CCONJ
ajis02-5323	328	10	tsen	tsen	ADJ
ajis02-5323	328	11	2025	2025	NUM
ajis02-5323	328	12	,	,	PUNCT
ajis02-5323	328	13	vol	vol	NOUN
ajis02-5323	328	14	29	29	NUM
ajis02-5323	328	15	,	,	PUNCT
ajis02-5323	328	16	research	research	NOUN
ajis02-5323	328	17	article	article	NOUN
ajis02-5323	328	18	process	process	NOUN
ajis02-5323	328	19	theory	theory	NOUN
ajis02-5323	328	20	of	of	ADP
ajis02-5323	328	21	supplier	supplier	NOUN
ajis02-5323	328	22	cyber	cyber	NOUN
ajis02-5323	328	23	risk	risk	NOUN
ajis02-5323	328	24	assessment	assessment	NOUN
ajis02-5323	328	25	19	19	NUM
ajis02-5323	328	26	however	however	ADV
ajis02-5323	328	27	,	,	PUNCT
ajis02-5323	328	28	in	in	ADP
ajis02-5323	328	29	the	the	DET
ajis02-5323	328	30	case	case	NOUN
ajis02-5323	328	31	of	of	ADP
ajis02-5323	328	32	the	the	DET
ajis02-5323	328	33	german	german	ADJ
ajis02-5323	328	34	bank	bank	NOUN
ajis02-5323	328	35	,	,	PUNCT
ajis02-5323	328	36	the	the	DET
ajis02-5323	328	37	crucial	crucial	ADJ
ajis02-5323	328	38	determinant	determinant	NOUN
ajis02-5323	328	39	of	of	ADP
ajis02-5323	328	40	its	its	PRON
ajis02-5323	328	41	proficiency	proficiency	NOUN
ajis02-5323	328	42	is	be	AUX
ajis02-5323	328	43	the	the	DET
ajis02-5323	328	44	pooling	pooling	NOUN
ajis02-5323	328	45	of	of	ADP
ajis02-5323	328	46	resources	resource	NOUN
ajis02-5323	328	47	within	within	ADP
ajis02-5323	328	48	the	the	DET
ajis02-5323	328	49	industry	industry	NOUN
ajis02-5323	328	50	.	.	PUNCT
ajis02-5323	329	1	given	give	VERB
ajis02-5323	329	2	the	the	DET
ajis02-5323	329	3	complexity	complexity	NOUN
ajis02-5323	329	4	of	of	ADP
ajis02-5323	329	5	sc	sc	PROPN
ajis02-5323	329	6	,	,	PUNCT
ajis02-5323	329	7	the	the	DET
ajis02-5323	329	8	nature	nature	NOUN
ajis02-5323	329	9	of	of	ADP
ajis02-5323	329	10	various	various	ADJ
ajis02-5323	329	11	risks	risk	NOUN
ajis02-5323	329	12	from	from	ADP
ajis02-5323	329	13	suppliers	supplier	NOUN
ajis02-5323	329	14	(	(	PUNCT
ajis02-5323	329	15	not	not	PART
ajis02-5323	329	16	just	just	ADV
ajis02-5323	329	17	cyber	cyber	ADJ
ajis02-5323	329	18	but	but	CCONJ
ajis02-5323	329	19	also	also	ADV
ajis02-5323	329	20	,	,	PUNCT
ajis02-5323	329	21	for	for	ADP
ajis02-5323	329	22	example	example	NOUN
ajis02-5323	329	23	,	,	PUNCT
ajis02-5323	329	24	geopolitical	geopolitical	ADJ
ajis02-5323	329	25	and	and	CCONJ
ajis02-5323	329	26	esg	esg	NOUN
ajis02-5323	329	27	risks	risk	NOUN
ajis02-5323	329	28	)	)	PUNCT
ajis02-5323	329	29	and	and	CCONJ
ajis02-5323	329	30	the	the	DET
ajis02-5323	329	31	sheer	sheer	ADJ
ajis02-5323	329	32	size	size	NOUN
ajis02-5323	329	33	of	of	ADP
ajis02-5323	329	34	cloud	cloud	NOUN
ajis02-5323	329	35	providers	provider	NOUN
ajis02-5323	329	36	,	,	PUNCT
ajis02-5323	329	37	pooling	pool	VERB
ajis02-5323	329	38	resources	resource	NOUN
ajis02-5323	329	39	seems	seem	VERB
ajis02-5323	329	40	to	to	PART
ajis02-5323	329	41	be	be	AUX
ajis02-5323	329	42	the	the	DET
ajis02-5323	329	43	most	most	ADV
ajis02-5323	329	44	effective	effective	ADJ
ajis02-5323	329	45	way	way	NOUN
ajis02-5323	329	46	to	to	PART
ajis02-5323	329	47	share	share	VERB
ajis02-5323	329	48	not	not	PART
ajis02-5323	329	49	only	only	ADV
ajis02-5323	329	50	costs	cost	NOUN
ajis02-5323	329	51	of	of	ADP
ajis02-5323	329	52	expensive	expensive	ADJ
ajis02-5323	329	53	risk	risk	NOUN
ajis02-5323	329	54	assessment	assessment	NOUN
ajis02-5323	329	55	but	but	CCONJ
ajis02-5323	329	56	also	also	ADV
ajis02-5323	329	57	expertise	expertise	NOUN
ajis02-5323	329	58	and	and	CCONJ
ajis02-5323	329	59	information	information	NOUN
ajis02-5323	329	60	.	.	PUNCT
ajis02-5323	330	1	“	"	PUNCT
ajis02-5323	330	2	we	we	PRON
ajis02-5323	330	3	audit	audit	VERB
ajis02-5323	330	4	google	google	PROPN
ajis02-5323	330	5	,	,	PUNCT
ajis02-5323	330	6	microsoft	microsoft	PROPN
ajis02-5323	330	7	and	and	CCONJ
ajis02-5323	330	8	aws	aw	NOUN
ajis02-5323	330	9	every	every	DET
ajis02-5323	330	10	year	year	NOUN
ajis02-5323	330	11	in	in	ADP
ajis02-5323	330	12	a	a	DET
ajis02-5323	330	13	team	team	NOUN
ajis02-5323	330	14	from	from	ADP
ajis02-5323	330	15	europe	europe	PROPN
ajis02-5323	330	16	with	with	ADP
ajis02-5323	330	17	financial	financial	ADJ
ajis02-5323	330	18	institutions	institution	NOUN
ajis02-5323	330	19	and	and	CCONJ
ajis02-5323	330	20	insurance	insurance	NOUN
ajis02-5323	330	21	companies	company	NOUN
ajis02-5323	330	22	,	,	PUNCT
ajis02-5323	330	23	because	because	SCONJ
ajis02-5323	330	24	they	they	PRON
ajis02-5323	330	25	are	be	AUX
ajis02-5323	330	26	under	under	ADP
ajis02-5323	330	27	the	the	DET
ajis02-5323	330	28	same	same	ADJ
ajis02-5323	330	29	regulator	regulator	NOUN
ajis02-5323	330	30	,	,	PUNCT
ajis02-5323	330	31	and	and	CCONJ
ajis02-5323	330	32	we	we	PRON
ajis02-5323	330	33	are	be	AUX
ajis02-5323	330	34	visiting	visit	VERB
ajis02-5323	330	35	the	the	DET
ajis02-5323	330	36	big	big	ADJ
ajis02-5323	330	37	three	three	NUM
ajis02-5323	330	38	american	american	ADJ
ajis02-5323	330	39	companies	company	NOUN
ajis02-5323	330	40	together	together	ADV
ajis02-5323	330	41	.	.	PUNCT
ajis02-5323	331	1	it	it	PRON
ajis02-5323	331	2	's	be	AUX
ajis02-5323	331	3	normally	normally	ADV
ajis02-5323	331	4	a	a	DET
ajis02-5323	331	5	lot	lot	NOUN
ajis02-5323	331	6	of	of	ADP
ajis02-5323	331	7	fun	fun	NOUN
ajis02-5323	331	8	.	.	PUNCT
ajis02-5323	332	1	it	it	PRON
ajis02-5323	332	2	's	be	AUX
ajis02-5323	332	3	20	20	NUM
ajis02-5323	332	4	auditors	auditor	NOUN
ajis02-5323	332	5	.	.	PUNCT
ajis02-5323	332	6	”	"	PUNCT
ajis02-5323	333	1	(	(	PUNCT
ajis02-5323	333	2	p13	p13	NOUN
ajis02-5323	333	3	)	)	PUNCT
ajis02-5323	333	4	regulation	regulation	NOUN
ajis02-5323	333	5	(	(	PUNCT
ajis02-5323	333	6	e.g.	e.g.	ADV
ajis02-5323	333	7	,	,	PUNCT
ajis02-5323	333	8	security	security	NOUN
ajis02-5323	333	9	of	of	ADP
ajis02-5323	333	10	critical	critical	ADJ
ajis02-5323	333	11	infrastructure	infrastructure	NOUN
ajis02-5323	333	12	2018	2018	NUM
ajis02-5323	333	13	in	in	ADP
ajis02-5323	333	14	australia	australia	PROPN
ajis02-5323	333	15	,	,	PUNCT
ajis02-5323	333	16	the	the	DET
ajis02-5323	333	17	network	network	NOUN
ajis02-5323	333	18	and	and	CCONJ
ajis02-5323	333	19	information	information	NOUN
ajis02-5323	333	20	system	system	NOUN
ajis02-5323	333	21	directive	directive	NOUN
ajis02-5323	333	22	2022	2022	NUM
ajis02-5323	333	23	in	in	ADP
ajis02-5323	333	24	the	the	DET
ajis02-5323	333	25	eu	eu	PROPN
ajis02-5323	333	26	)	)	PUNCT
ajis02-5323	333	27	has	have	AUX
ajis02-5323	333	28	also	also	ADV
ajis02-5323	333	29	resulted	result	VERB
ajis02-5323	333	30	in	in	ADP
ajis02-5323	333	31	a	a	DET
ajis02-5323	333	32	typically	typically	ADV
ajis02-5323	333	33	higher	high	ADJ
ajis02-5323	333	34	maturity	maturity	NOUN
ajis02-5323	333	35	of	of	ADP
ajis02-5323	333	36	the	the	DET
ajis02-5323	333	37	critical	critical	ADJ
ajis02-5323	333	38	infrastructure	infrastructure	NOUN
ajis02-5323	333	39	,	,	PUNCT
ajis02-5323	333	40	such	such	ADJ
ajis02-5323	333	41	as	as	ADP
ajis02-5323	333	42	it	it	PRON
ajis02-5323	333	43	,	,	PUNCT
ajis02-5323	333	44	transport	transport	NOUN
ajis02-5323	333	45	,	,	PUNCT
ajis02-5323	333	46	energy	energy	NOUN
ajis02-5323	333	47	,	,	PUNCT
ajis02-5323	333	48	and	and	CCONJ
ajis02-5323	333	49	healthcare	healthcare	PROPN
ajis02-5323	333	50	,	,	PUNCT
ajis02-5323	333	51	compared	compare	VERB
ajis02-5323	333	52	to	to	ADP
ajis02-5323	333	53	other	other	ADJ
ajis02-5323	333	54	non	non	ADJ
ajis02-5323	333	55	-	-	ADJ
ajis02-5323	333	56	critical	critical	ADJ
ajis02-5323	333	57	industries	industry	NOUN
ajis02-5323	333	58	.	.	PUNCT
ajis02-5323	334	1	while	while	SCONJ
ajis02-5323	334	2	security	security	NOUN
ajis02-5323	334	3	is	be	AUX
ajis02-5323	334	4	a	a	DET
ajis02-5323	334	5	top	top	ADJ
ajis02-5323	334	6	priority	priority	NOUN
ajis02-5323	334	7	in	in	ADP
ajis02-5323	334	8	the	the	DET
ajis02-5323	334	9	provision	provision	NOUN
ajis02-5323	334	10	of	of	ADP
ajis02-5323	334	11	critical	critical	ADJ
ajis02-5323	334	12	services	service	NOUN
ajis02-5323	334	13	,	,	PUNCT
ajis02-5323	334	14	in	in	ADP
ajis02-5323	334	15	other	other	ADJ
ajis02-5323	334	16	industries	industry	NOUN
ajis02-5323	334	17	,	,	PUNCT
ajis02-5323	334	18	some	some	DET
ajis02-5323	334	19	interviewees	interviewee	NOUN
ajis02-5323	334	20	acknowledged	acknowledge	VERB
ajis02-5323	334	21	that	that	SCONJ
ajis02-5323	334	22	cyber	cyber	ADJ
ajis02-5323	334	23	security	security	NOUN
ajis02-5323	334	24	is	be	AUX
ajis02-5323	334	25	not	not	PART
ajis02-5323	334	26	the	the	DET
ajis02-5323	334	27	decisive	decisive	ADJ
ajis02-5323	334	28	factor	factor	NOUN
ajis02-5323	334	29	in	in	ADP
ajis02-5323	334	30	the	the	DET
ajis02-5323	334	31	selection	selection	NOUN
ajis02-5323	334	32	of	of	ADP
ajis02-5323	334	33	a	a	DET
ajis02-5323	334	34	supplier	supplier	NOUN
ajis02-5323	334	35	,	,	PUNCT
ajis02-5323	334	36	but	but	CCONJ
ajis02-5323	334	37	the	the	DET
ajis02-5323	334	38	price	price	NOUN
ajis02-5323	334	39	of	of	ADP
ajis02-5323	334	40	a	a	DET
ajis02-5323	334	41	service	service	NOUN
ajis02-5323	334	42	or	or	CCONJ
ajis02-5323	334	43	a	a	DET
ajis02-5323	334	44	product	product	NOUN
ajis02-5323	334	45	,	,	PUNCT
ajis02-5323	334	46	even	even	ADV
ajis02-5323	334	47	if	if	SCONJ
ajis02-5323	334	48	such	such	DET
ajis02-5323	334	49	a	a	DET
ajis02-5323	334	50	cheaper	cheap	ADJ
ajis02-5323	334	51	supplier	supplier	NOUN
ajis02-5323	334	52	is	be	AUX
ajis02-5323	334	53	more	more	ADV
ajis02-5323	334	54	likely	likely	ADJ
ajis02-5323	334	55	to	to	PART
ajis02-5323	334	56	pose	pose	VERB
ajis02-5323	334	57	a	a	DET
ajis02-5323	334	58	higher	high	ADJ
ajis02-5323	334	59	cyber	cyber	NOUN
ajis02-5323	334	60	risk	risk	NOUN
ajis02-5323	334	61	.	.	PUNCT
ajis02-5323	335	1	this	this	PRON
ajis02-5323	335	2	is	be	AUX
ajis02-5323	335	3	especially	especially	ADV
ajis02-5323	335	4	problematic	problematic	ADJ
ajis02-5323	335	5	in	in	ADP
ajis02-5323	335	6	the	the	DET
ajis02-5323	335	7	public	public	ADJ
ajis02-5323	335	8	sector	sector	NOUN
ajis02-5323	335	9	,	,	PUNCT
ajis02-5323	335	10	where	where	SCONJ
ajis02-5323	335	11	even	even	ADV
ajis02-5323	335	12	if	if	SCONJ
ajis02-5323	335	13	an	an	DET
ajis02-5323	335	14	organization	organization	NOUN
ajis02-5323	335	15	belongs	belong	VERB
ajis02-5323	335	16	to	to	ADP
ajis02-5323	335	17	critical	critical	ADJ
ajis02-5323	335	18	infrastructure	infrastructure	NOUN
ajis02-5323	335	19	(	(	PUNCT
ajis02-5323	335	20	in	in	ADP
ajis02-5323	335	21	this	this	DET
ajis02-5323	335	22	study	study	NOUN
ajis02-5323	335	23	,	,	PUNCT
ajis02-5323	335	24	a	a	DET
ajis02-5323	335	25	public	public	ADJ
ajis02-5323	335	26	hospital	hospital	NOUN
ajis02-5323	335	27	)	)	PUNCT
ajis02-5323	335	28	,	,	PUNCT
ajis02-5323	335	29	it	it	PRON
ajis02-5323	335	30	is	be	AUX
ajis02-5323	335	31	subject	subject	ADJ
ajis02-5323	335	32	to	to	ADP
ajis02-5323	335	33	public	public	ADJ
ajis02-5323	335	34	tender	tender	NOUN
ajis02-5323	335	35	legislation	legislation	NOUN
ajis02-5323	335	36	,	,	PUNCT
ajis02-5323	335	37	which	which	PRON
ajis02-5323	335	38	emphasizes	emphasize	VERB
ajis02-5323	335	39	the	the	DET
ajis02-5323	335	40	price	price	NOUN
ajis02-5323	335	41	and	and	CCONJ
ajis02-5323	335	42	quality	quality	NOUN
ajis02-5323	335	43	of	of	ADP
ajis02-5323	335	44	service	service	NOUN
ajis02-5323	335	45	/	/	SYM
ajis02-5323	335	46	product	product	NOUN
ajis02-5323	335	47	above	above	ADP
ajis02-5323	335	48	other	other	ADJ
ajis02-5323	335	49	supplier	supplier	NOUN
ajis02-5323	335	50	selection	selection	NOUN
ajis02-5323	335	51	criteria	criterion	NOUN
ajis02-5323	335	52	.	.	PUNCT
ajis02-5323	336	1	while	while	SCONJ
ajis02-5323	336	2	each	each	DET
ajis02-5323	336	3	contextual	contextual	ADJ
ajis02-5323	336	4	factor	factor	NOUN
ajis02-5323	336	5	has	have	VERB
ajis02-5323	336	6	an	an	DET
ajis02-5323	336	7	independent	independent	ADJ
ajis02-5323	336	8	effect	effect	NOUN
ajis02-5323	336	9	on	on	ADP
ajis02-5323	336	10	the	the	DET
ajis02-5323	336	11	process	process	NOUN
ajis02-5323	336	12	,	,	PUNCT
ajis02-5323	336	13	their	their	PRON
ajis02-5323	336	14	interaction	interaction	NOUN
ajis02-5323	336	15	may	may	AUX
ajis02-5323	336	16	boost	boost	VERB
ajis02-5323	336	17	(	(	PUNCT
ajis02-5323	336	18	size	size	NOUN
ajis02-5323	336	19	and	and	CCONJ
ajis02-5323	336	20	regulation	regulation	NOUN
ajis02-5323	336	21	)	)	PUNCT
ajis02-5323	336	22	or	or	CCONJ
ajis02-5323	336	23	downplay	downplay	VERB
ajis02-5323	336	24	(	(	PUNCT
ajis02-5323	336	25	critical	critical	ADJ
ajis02-5323	336	26	infrastructure	infrastructure	NOUN
ajis02-5323	336	27	subject	subject	ADJ
ajis02-5323	336	28	to	to	ADP
ajis02-5323	336	29	public	public	ADJ
ajis02-5323	336	30	procurement	procurement	NOUN
ajis02-5323	336	31	legislation	legislation	NOUN
ajis02-5323	336	32	)	)	PUNCT
ajis02-5323	336	33	the	the	DET
ajis02-5323	336	34	maturity	maturity	NOUN
ajis02-5323	336	35	of	of	ADP
ajis02-5323	336	36	the	the	DET
ajis02-5323	336	37	process	process	NOUN
ajis02-5323	336	38	.	.	PUNCT
ajis02-5323	337	1	regulated	regulated	ADJ
ajis02-5323	337	2	and	and	CCONJ
ajis02-5323	337	3	large	large	ADJ
ajis02-5323	337	4	organizations	organization	NOUN
ajis02-5323	337	5	dedicate	dedicate	VERB
ajis02-5323	337	6	more	more	ADJ
ajis02-5323	337	7	resources	resource	NOUN
ajis02-5323	337	8	to	to	ADP
ajis02-5323	337	9	it	it	PRON
ajis02-5323	337	10	governance	governance	NOUN
ajis02-5323	337	11	,	,	PUNCT
ajis02-5323	337	12	characterized	characterize	VERB
ajis02-5323	337	13	by	by	ADP
ajis02-5323	337	14	strong	strong	ADJ
ajis02-5323	337	15	top	top	ADJ
ajis02-5323	337	16	leadership	leadership	NOUN
ajis02-5323	337	17	support	support	NOUN
ajis02-5323	337	18	,	,	PUNCT
ajis02-5323	337	19	clearly	clearly	ADV
ajis02-5323	337	20	defined	define	VERB
ajis02-5323	337	21	responsibilities	responsibility	NOUN
ajis02-5323	337	22	,	,	PUNCT
ajis02-5323	337	23	high	high	ADJ
ajis02-5323	337	24	hierarchical	hierarchical	ADJ
ajis02-5323	337	25	position	position	NOUN
ajis02-5323	337	26	of	of	ADP
ajis02-5323	337	27	it	it	PRON
ajis02-5323	337	28	and	and	CCONJ
ajis02-5323	337	29	security	security	NOUN
ajis02-5323	337	30	roles	role	NOUN
ajis02-5323	337	31	,	,	PUNCT
ajis02-5323	337	32	and	and	CCONJ
ajis02-5323	337	33	experienced	experienced	ADJ
ajis02-5323	337	34	and	and	CCONJ
ajis02-5323	337	35	knowledgeable	knowledgeable	ADJ
ajis02-5323	337	36	security	security	NOUN
ajis02-5323	337	37	staff	staff	NOUN
ajis02-5323	337	38	in	in	ADP
ajis02-5323	337	39	charge	charge	NOUN
ajis02-5323	337	40	of	of	ADP
ajis02-5323	337	41	c	c	NOUN
ajis02-5323	337	42	-	-	PUNCT
ajis02-5323	337	43	scrm	scrm	NOUN
ajis02-5323	337	44	.	.	PUNCT
ajis02-5323	338	1	their	their	PRON
ajis02-5323	338	2	agency	agency	NOUN
ajis02-5323	338	3	leads	lead	VERB
ajis02-5323	338	4	to	to	ADP
ajis02-5323	338	5	the	the	DET
ajis02-5323	338	6	continuous	continuous	ADJ
ajis02-5323	338	7	development	development	NOUN
ajis02-5323	338	8	of	of	ADP
ajis02-5323	338	9	risk	risk	NOUN
ajis02-5323	338	10	assessment	assessment	NOUN
ajis02-5323	338	11	and	and	CCONJ
ajis02-5323	338	12	monitoring	monitoring	NOUN
ajis02-5323	338	13	methods	method	NOUN
ajis02-5323	338	14	.	.	PUNCT
ajis02-5323	339	1	one	one	NUM
ajis02-5323	339	2	such	such	ADJ
ajis02-5323	339	3	good	good	ADJ
ajis02-5323	339	4	example	example	NOUN
ajis02-5323	339	5	of	of	ADP
ajis02-5323	339	6	cyber	cyber	ADJ
ajis02-5323	339	7	security	security	NOUN
ajis02-5323	339	8	experts	expert	NOUN
ajis02-5323	339	9	’	'	PUNCT
ajis02-5323	339	10	agency	agency	NOUN
ajis02-5323	339	11	is	be	AUX
ajis02-5323	339	12	a	a	DET
ajis02-5323	339	13	national	national	ADJ
ajis02-5323	339	14	approach	approach	NOUN
ajis02-5323	339	15	to	to	ADP
ajis02-5323	339	16	safer	safe	ADJ
ajis02-5323	339	17	technologies	technology	NOUN
ajis02-5323	339	18	in	in	ADP
ajis02-5323	339	19	schools	school	NOUN
ajis02-5323	339	20	and	and	CCONJ
ajis02-5323	339	21	pooling	pooling	NOUN
ajis02-5323	339	22	of	of	ADP
ajis02-5323	339	23	resources	resource	NOUN
ajis02-5323	339	24	in	in	ADP
ajis02-5323	339	25	primary	primary	ADJ
ajis02-5323	339	26	and	and	CCONJ
ajis02-5323	339	27	secondary	secondary	ADJ
ajis02-5323	339	28	education	education	NOUN
ajis02-5323	339	29	in	in	ADP
ajis02-5323	339	30	australia	australia	PROPN
ajis02-5323	339	31	,	,	PUNCT
ajis02-5323	339	32	where	where	SCONJ
ajis02-5323	339	33	hundreds	hundred	NOUN
ajis02-5323	339	34	of	of	ADP
ajis02-5323	339	35	state	state	NOUN
ajis02-5323	339	36	and	and	CCONJ
ajis02-5323	339	37	territory	territory	NOUN
ajis02-5323	339	38	schools	school	NOUN
ajis02-5323	339	39	rely	rely	VERB
ajis02-5323	339	40	on	on	ADP
ajis02-5323	339	41	a	a	DET
ajis02-5323	339	42	common	common	ADJ
ajis02-5323	339	43	third	third	ADJ
ajis02-5323	339	44	-	-	PUNCT
ajis02-5323	339	45	party	party	NOUN
ajis02-5323	339	46	risk	risk	NOUN
ajis02-5323	339	47	management	management	NOUN
ajis02-5323	339	48	program	program	NOUN
ajis02-5323	339	49	completed	complete	VERB
ajis02-5323	339	50	by	by	ADP
ajis02-5323	339	51	prospective	prospective	ADJ
ajis02-5323	339	52	vendors	vendor	NOUN
ajis02-5323	339	53	once	once	ADV
ajis02-5323	339	54	and	and	CCONJ
ajis02-5323	339	55	for	for	ADP
ajis02-5323	339	56	all	all	PRON
ajis02-5323	339	57	.	.	PUNCT
ajis02-5323	340	1	this	this	PRON
ajis02-5323	340	2	minimizes	minimize	VERB
ajis02-5323	340	3	the	the	DET
ajis02-5323	340	4	duplication	duplication	NOUN
ajis02-5323	340	5	of	of	ADP
ajis02-5323	340	6	work	work	NOUN
ajis02-5323	340	7	on	on	ADP
ajis02-5323	340	8	both	both	DET
ajis02-5323	340	9	sides	side	NOUN
ajis02-5323	340	10	.	.	PUNCT
ajis02-5323	341	1	merely	merely	ADV
ajis02-5323	341	2	participating	participate	VERB
ajis02-5323	341	3	in	in	ADP
ajis02-5323	341	4	this	this	DET
ajis02-5323	341	5	program	program	NOUN
ajis02-5323	341	6	and	and	CCONJ
ajis02-5323	341	7	completing	complete	VERB
ajis02-5323	341	8	the	the	DET
ajis02-5323	341	9	questionnaires	questionnaire	NOUN
ajis02-5323	341	10	provides	provide	VERB
ajis02-5323	341	11	security	security	NOUN
ajis02-5323	341	12	enhancement	enhancement	NOUN
ajis02-5323	341	13	opportunities	opportunity	NOUN
ajis02-5323	341	14	for	for	ADP
ajis02-5323	341	15	both	both	DET
ajis02-5323	341	16	schools	school	NOUN
ajis02-5323	341	17	and	and	CCONJ
ajis02-5323	341	18	vendors	vendor	NOUN
ajis02-5323	341	19	.	.	PUNCT
ajis02-5323	342	1	for	for	ADP
ajis02-5323	342	2	schools	school	NOUN
ajis02-5323	342	3	,	,	PUNCT
ajis02-5323	342	4	it	it	PRON
ajis02-5323	342	5	includes	include	VERB
ajis02-5323	342	6	agreeing	agree	VERB
ajis02-5323	342	7	on	on	ADP
ajis02-5323	342	8	a	a	DET
ajis02-5323	342	9	common	common	ADJ
ajis02-5323	342	10	set	set	NOUN
ajis02-5323	342	11	of	of	ADP
ajis02-5323	342	12	privacy	privacy	NOUN
ajis02-5323	342	13	criteria	criterion	NOUN
ajis02-5323	342	14	and	and	CCONJ
ajis02-5323	342	15	managing	manage	VERB
ajis02-5323	342	16	resources	resource	NOUN
ajis02-5323	342	17	efficiently	efficiently	ADV
ajis02-5323	342	18	.	.	PUNCT
ajis02-5323	343	1	vendors	vendor	NOUN
ajis02-5323	343	2	want	want	VERB
ajis02-5323	343	3	to	to	PART
ajis02-5323	343	4	‘	'	PUNCT
ajis02-5323	343	5	look	look	VERB
ajis02-5323	343	6	good	good	ADJ
ajis02-5323	343	7	’	'	PUNCT
ajis02-5323	343	8	as	as	SCONJ
ajis02-5323	343	9	it	it	PRON
ajis02-5323	343	10	opens	open	VERB
ajis02-5323	343	11	up	up	ADP
ajis02-5323	343	12	the	the	DET
ajis02-5323	343	13	market	market	NOUN
ajis02-5323	343	14	(	(	PUNCT
ajis02-5323	343	15	p32	p32	NOUN
ajis02-5323	343	16	)	)	PUNCT
ajis02-5323	343	17	.	.	PUNCT
ajis02-5323	344	1	in	in	ADP
ajis02-5323	344	2	many	many	ADJ
ajis02-5323	344	3	organizations	organization	NOUN
ajis02-5323	344	4	,	,	PUNCT
ajis02-5323	344	5	security	security	NOUN
ajis02-5323	344	6	roles	role	NOUN
ajis02-5323	344	7	have	have	AUX
ajis02-5323	344	8	only	only	ADV
ajis02-5323	344	9	recently	recently	ADV
ajis02-5323	344	10	been	be	AUX
ajis02-5323	344	11	set	set	VERB
ajis02-5323	344	12	up	up	ADP
ajis02-5323	344	13	,	,	PUNCT
ajis02-5323	344	14	and	and	CCONJ
ajis02-5323	344	15	the	the	DET
ajis02-5323	344	16	supplier	supplier	NOUN
ajis02-5323	344	17	cyber	cyber	NOUN
ajis02-5323	344	18	risk	risk	NOUN
ajis02-5323	344	19	process	process	NOUN
ajis02-5323	344	20	has	have	VERB
ajis02-5323	344	21	yet	yet	ADV
ajis02-5323	344	22	to	to	PART
ajis02-5323	344	23	be	be	AUX
ajis02-5323	344	24	fully	fully	ADV
ajis02-5323	344	25	established	establish	VERB
ajis02-5323	344	26	.	.	PUNCT
ajis02-5323	345	1	the	the	DET
ajis02-5323	345	2	demand	demand	NOUN
ajis02-5323	345	3	for	for	ADP
ajis02-5323	345	4	experts	expert	NOUN
ajis02-5323	345	5	exceeds	exceed	VERB
ajis02-5323	345	6	the	the	DET
ajis02-5323	345	7	supply	supply	NOUN
ajis02-5323	345	8	.	.	PUNCT
ajis02-5323	346	1	organizations	organization	NOUN
ajis02-5323	346	2	are	be	AUX
ajis02-5323	346	3	also	also	ADV
ajis02-5323	346	4	affected	affect	VERB
ajis02-5323	346	5	by	by	ADP
ajis02-5323	346	6	significant	significant	ADJ
ajis02-5323	346	7	fluctuations	fluctuation	NOUN
ajis02-5323	346	8	of	of	ADP
ajis02-5323	346	9	experts	expert	NOUN
ajis02-5323	346	10	,	,	PUNCT
ajis02-5323	346	11	which	which	PRON
ajis02-5323	346	12	can	can	AUX
ajis02-5323	346	13	,	,	PUNCT
ajis02-5323	346	14	on	on	ADP
ajis02-5323	346	15	the	the	DET
ajis02-5323	346	16	one	one	NUM
ajis02-5323	346	17	hand	hand	NOUN
ajis02-5323	346	18	,	,	PUNCT
ajis02-5323	346	19	have	have	VERB
ajis02-5323	346	20	a	a	DET
ajis02-5323	346	21	positive	positive	ADJ
ajis02-5323	346	22	effect	effect	NOUN
ajis02-5323	346	23	via	via	ADP
ajis02-5323	346	24	the	the	DET
ajis02-5323	346	25	mimicry	mimicry	NOUN
ajis02-5323	346	26	of	of	ADP
ajis02-5323	346	27	best	good	ADJ
ajis02-5323	346	28	practices	practice	NOUN
ajis02-5323	346	29	but	but	CCONJ
ajis02-5323	346	30	also	also	ADV
ajis02-5323	346	31	a	a	DET
ajis02-5323	346	32	negative	negative	ADJ
ajis02-5323	346	33	impact	impact	NOUN
ajis02-5323	346	34	because	because	SCONJ
ajis02-5323	346	35	of	of	ADP
ajis02-5323	346	36	less	less	ADJ
ajis02-5323	346	37	-	-	PUNCT
ajis02-5323	346	38	than	than	ADP
ajis02-5323	346	39	-	-	PUNCT
ajis02-5323	346	40	perfect	perfect	ADJ
ajis02-5323	346	41	transfer	transfer	NOUN
ajis02-5323	346	42	of	of	ADP
ajis02-5323	346	43	knowledge	knowledge	NOUN
ajis02-5323	346	44	.	.	PUNCT
ajis02-5323	347	1	lastly	lastly	ADV
ajis02-5323	347	2	,	,	PUNCT
ajis02-5323	347	3	efficiency	efficiency	NOUN
ajis02-5323	347	4	(	(	PUNCT
ajis02-5323	347	5	the	the	DET
ajis02-5323	347	6	cost	cost	NOUN
ajis02-5323	347	7	-	-	PUNCT
ajis02-5323	347	8	benefit	benefit	NOUN
ajis02-5323	347	9	analysis	analysis	NOUN
ajis02-5323	347	10	)	)	PUNCT
ajis02-5323	347	11	is	be	AUX
ajis02-5323	347	12	the	the	DET
ajis02-5323	347	13	ultimate	ultimate	ADJ
ajis02-5323	347	14	determinant	determinant	NOUN
ajis02-5323	347	15	of	of	ADP
ajis02-5323	347	16	the	the	DET
ajis02-5323	347	17	maturity	maturity	NOUN
ajis02-5323	347	18	of	of	ADP
ajis02-5323	347	19	the	the	DET
ajis02-5323	347	20	assessment	assessment	NOUN
ajis02-5323	347	21	process	process	NOUN
ajis02-5323	347	22	.	.	PUNCT
ajis02-5323	348	1	our	our	PRON
ajis02-5323	348	2	findings	finding	NOUN
ajis02-5323	348	3	indicate	indicate	VERB
ajis02-5323	348	4	that	that	SCONJ
ajis02-5323	348	5	while	while	SCONJ
ajis02-5323	348	6	the	the	DET
ajis02-5323	348	7	security	security	NOUN
ajis02-5323	348	8	experts	expert	NOUN
ajis02-5323	348	9	are	be	AUX
ajis02-5323	348	10	familiar	familiar	ADJ
ajis02-5323	348	11	with	with	ADP
ajis02-5323	348	12	best	good	ADJ
ajis02-5323	348	13	practices	practice	NOUN
ajis02-5323	348	14	and	and	CCONJ
ajis02-5323	348	15	cyber	cyber	NOUN
ajis02-5323	348	16	security	security	NOUN
ajis02-5323	348	17	standards	standard	NOUN
ajis02-5323	348	18	,	,	PUNCT
ajis02-5323	348	19	the	the	DET
ajis02-5323	348	20	challenge	challenge	NOUN
ajis02-5323	348	21	is	be	AUX
ajis02-5323	348	22	to	to	PART
ajis02-5323	348	23	comply	comply	VERB
ajis02-5323	348	24	with	with	ADP
ajis02-5323	348	25	them	they	PRON
ajis02-5323	348	26	due	due	ADP
ajis02-5323	348	27	to	to	ADP
ajis02-5323	348	28	constrained	constrained	ADJ
ajis02-5323	348	29	resources	resource	NOUN
ajis02-5323	348	30	.	.	PUNCT
ajis02-5323	349	1	a	a	DET
ajis02-5323	349	2	massive	massive	ADJ
ajis02-5323	349	3	retail	retail	ADJ
ajis02-5323	349	4	organization	organization	NOUN
ajis02-5323	349	5	may	may	AUX
ajis02-5323	349	6	have	have	VERB
ajis02-5323	349	7	10,000	10,000	NUM
ajis02-5323	349	8	suppliers	supplier	NOUN
ajis02-5323	349	9	subject	subject	ADJ
ajis02-5323	349	10	to	to	ADP
ajis02-5323	349	11	assessment	assessment	NOUN
ajis02-5323	349	12	and	and	CCONJ
ajis02-5323	349	13	monitoring	monitoring	NOUN
ajis02-5323	349	14	,	,	PUNCT
ajis02-5323	349	15	requiring	require	VERB
ajis02-5323	349	16	mammoth	mammoth	ADJ
ajis02-5323	349	17	resources	resource	NOUN
ajis02-5323	349	18	.	.	PUNCT
ajis02-5323	350	1	allocation	allocation	NOUN
ajis02-5323	350	2	of	of	ADP
ajis02-5323	350	3	resources	resource	NOUN
ajis02-5323	350	4	to	to	ADP
ajis02-5323	350	5	this	this	DET
ajis02-5323	350	6	area	area	NOUN
ajis02-5323	350	7	is	be	AUX
ajis02-5323	350	8	proportionate	proportionate	ADJ
ajis02-5323	350	9	to	to	ADP
ajis02-5323	350	10	the	the	DET
ajis02-5323	350	11	perception	perception	NOUN
ajis02-5323	350	12	of	of	ADP
ajis02-5323	350	13	cyber	cyber	ADJ
ajis02-5323	350	14	risk	risk	NOUN
ajis02-5323	350	15	exposure	exposure	NOUN
ajis02-5323	350	16	and	and	CCONJ
ajis02-5323	350	17	the	the	DET
ajis02-5323	350	18	benefits	benefit	NOUN
ajis02-5323	350	19	of	of	ADP
ajis02-5323	350	20	managing	manage	VERB
ajis02-5323	350	21	cyber	cyber	NOUN
ajis02-5323	350	22	risk	risk	NOUN
ajis02-5323	350	23	.	.	PUNCT
ajis02-5323	351	1	if	if	SCONJ
ajis02-5323	351	2	cyber	cyber	ADJ
ajis02-5323	351	3	incidents	incident	NOUN
ajis02-5323	351	4	from	from	ADP
ajis02-5323	351	5	the	the	DET
ajis02-5323	351	6	sc	sc	PROPN
ajis02-5323	351	7	have	have	AUX
ajis02-5323	351	8	never	never	ADV
ajis02-5323	351	9	been	be	AUX
ajis02-5323	351	10	experienced	experience	VERB
ajis02-5323	351	11	and	and	CCONJ
ajis02-5323	351	12	are	be	AUX
ajis02-5323	351	13	perceived	perceive	VERB
ajis02-5323	351	14	as	as	ADP
ajis02-5323	351	15	australasian	australasian	ADJ
ajis02-5323	351	16	journal	journal	NOUN
ajis02-5323	351	17	of	of	ADP
ajis02-5323	351	18	information	information	NOUN
ajis02-5323	351	19	systems	system	NOUN
ajis02-5323	351	20	slapnicar	slapnicar	NOUN
ajis02-5323	351	21	,	,	PUNCT
ajis02-5323	351	22	vidmar	vidmar	NOUN
ajis02-5323	351	23	&	&	CCONJ
ajis02-5323	351	24	tsen	tsen	ADJ
ajis02-5323	351	25	2025	2025	NUM
ajis02-5323	351	26	,	,	PUNCT
ajis02-5323	351	27	vol	vol	NOUN
ajis02-5323	351	28	29	29	NUM
ajis02-5323	351	29	,	,	PUNCT
ajis02-5323	351	30	research	research	NOUN
ajis02-5323	351	31	article	article	NOUN
ajis02-5323	351	32	process	process	NOUN
ajis02-5323	351	33	theory	theory	NOUN
ajis02-5323	351	34	of	of	ADP
ajis02-5323	351	35	supplier	supplier	NOUN
ajis02-5323	351	36	cyber	cyber	NOUN
ajis02-5323	351	37	risk	risk	NOUN
ajis02-5323	351	38	assessment	assessment	NOUN
ajis02-5323	351	39	20	20	NUM
ajis02-5323	351	40	highly	highly	ADV
ajis02-5323	351	41	uncertain	uncertain	ADJ
ajis02-5323	351	42	and	and	CCONJ
ajis02-5323	351	43	out	out	ADP
ajis02-5323	351	44	of	of	ADP
ajis02-5323	351	45	control	control	NOUN
ajis02-5323	351	46	,	,	PUNCT
ajis02-5323	351	47	the	the	DET
ajis02-5323	351	48	benefits	benefit	NOUN
ajis02-5323	351	49	of	of	ADP
ajis02-5323	351	50	allocating	allocate	VERB
ajis02-5323	351	51	resources	resource	NOUN
ajis02-5323	351	52	may	may	AUX
ajis02-5323	351	53	also	also	ADV
ajis02-5323	351	54	seem	seem	VERB
ajis02-5323	351	55	somewhat	somewhat	ADV
ajis02-5323	351	56	uncertain	uncertain	ADJ
ajis02-5323	351	57	.	.	PUNCT
ajis02-5323	352	1	in	in	ADP
ajis02-5323	352	2	multi	multi	ADJ
ajis02-5323	352	3	-	-	ADJ
ajis02-5323	352	4	billion	billion	NUM
ajis02-5323	352	5	dollar	dollar	NOUN
ajis02-5323	352	6	organizations	organization	NOUN
ajis02-5323	352	7	,	,	PUNCT
ajis02-5323	352	8	there	there	PRON
ajis02-5323	352	9	are	be	VERB
ajis02-5323	352	10	usually	usually	ADV
ajis02-5323	352	11	not	not	PART
ajis02-5323	352	12	more	more	ADJ
ajis02-5323	352	13	than	than	ADP
ajis02-5323	352	14	one	one	NUM
ajis02-5323	352	15	to	to	PART
ajis02-5323	352	16	three	three	NUM
ajis02-5323	352	17	persons	person	NOUN
ajis02-5323	352	18	involved	involve	VERB
ajis02-5323	352	19	in	in	ADP
ajis02-5323	352	20	assessments	assessment	NOUN
ajis02-5323	352	21	.	.	PUNCT
ajis02-5323	353	1	although	although	SCONJ
ajis02-5323	353	2	our	our	PRON
ajis02-5323	353	3	interviewees	interviewee	NOUN
ajis02-5323	353	4	demonstrated	demonstrate	VERB
ajis02-5323	353	5	awareness	awareness	NOUN
ajis02-5323	353	6	of	of	ADP
ajis02-5323	353	7	risks	risk	NOUN
ajis02-5323	353	8	and	and	CCONJ
ajis02-5323	353	9	how	how	SCONJ
ajis02-5323	353	10	to	to	PART
ajis02-5323	353	11	manage	manage	VERB
ajis02-5323	353	12	them	they	PRON
ajis02-5323	353	13	,	,	PUNCT
ajis02-5323	353	14	they	they	PRON
ajis02-5323	353	15	also	also	ADV
ajis02-5323	353	16	expressed	express	VERB
ajis02-5323	353	17	frustration	frustration	NOUN
ajis02-5323	353	18	with	with	ADP
ajis02-5323	353	19	the	the	DET
ajis02-5323	353	20	extensive	extensive	ADJ
ajis02-5323	353	21	scope	scope	NOUN
ajis02-5323	353	22	and	and	CCONJ
ajis02-5323	353	23	risks	risk	NOUN
ajis02-5323	353	24	’	'	PUNCT
ajis02-5323	353	25	uncontrollability	uncontrollability	NOUN
ajis02-5323	353	26	.	.	PUNCT
ajis02-5323	354	1	4.4	4.4	NUM
ajis02-5323	354	2	effectiveness	effectiveness	NOUN
ajis02-5323	354	3	of	of	ADP
ajis02-5323	354	4	the	the	DET
ajis02-5323	354	5	assessment	assessment	NOUN
ajis02-5323	354	6	process	process	NOUN
ajis02-5323	354	7	in	in	ADP
ajis02-5323	354	8	identifying	identify	VERB
ajis02-5323	354	9	risky	risky	ADJ
ajis02-5323	354	10	suppliers	supplier	NOUN
ajis02-5323	354	11	in	in	ADP
ajis02-5323	354	12	this	this	DET
ajis02-5323	354	13	section	section	NOUN
ajis02-5323	354	14	,	,	PUNCT
ajis02-5323	354	15	we	we	PRON
ajis02-5323	354	16	present	present	VERB
ajis02-5323	354	17	the	the	DET
ajis02-5323	354	18	survey	survey	NOUN
ajis02-5323	354	19	findings	finding	NOUN
ajis02-5323	354	20	.	.	PUNCT
ajis02-5323	355	1	before	before	ADP
ajis02-5323	355	2	presenting	present	VERB
ajis02-5323	355	3	the	the	DET
ajis02-5323	355	4	findings	finding	NOUN
ajis02-5323	355	5	about	about	ADP
ajis02-5323	355	6	the	the	DET
ajis02-5323	355	7	effectiveness	effectiveness	NOUN
ajis02-5323	355	8	of	of	ADP
ajis02-5323	355	9	the	the	DET
ajis02-5323	355	10	process	process	NOUN
ajis02-5323	355	11	in	in	ADP
ajis02-5323	355	12	identifying	identify	VERB
ajis02-5323	355	13	risky	risky	ADJ
ajis02-5323	355	14	suppliers	supplier	NOUN
ajis02-5323	355	15	,	,	PUNCT
ajis02-5323	355	16	we	we	PRON
ajis02-5323	355	17	triangulate	triangulate	VERB
ajis02-5323	355	18	the	the	DET
ajis02-5323	355	19	interview	interview	NOUN
ajis02-5323	355	20	findings	finding	NOUN
ajis02-5323	355	21	with	with	ADP
ajis02-5323	355	22	those	those	PRON
ajis02-5323	355	23	from	from	ADP
ajis02-5323	355	24	the	the	DET
ajis02-5323	355	25	survey	survey	NOUN
ajis02-5323	355	26	.	.	PUNCT
ajis02-5323	356	1	we	we	PRON
ajis02-5323	356	2	tested	test	VERB
ajis02-5323	356	3	whether	whether	SCONJ
ajis02-5323	356	4	supplier	supplier	NOUN
ajis02-5323	356	5	criticality	criticality	NOUN
ajis02-5323	356	6	dictates	dictate	VERB
ajis02-5323	356	7	the	the	DET
ajis02-5323	356	8	scope	scope	NOUN
ajis02-5323	356	9	of	of	ADP
ajis02-5323	356	10	the	the	DET
ajis02-5323	356	11	assessment	assessment	NOUN
ajis02-5323	356	12	process	process	NOUN
ajis02-5323	356	13	with	with	ADP
ajis02-5323	356	14	the	the	DET
ajis02-5323	356	15	correlation	correlation	NOUN
ajis02-5323	356	16	analysis	analysis	NOUN
ajis02-5323	356	17	between	between	ADP
ajis02-5323	356	18	criticality	criticality	NOUN
ajis02-5323	356	19	and	and	CCONJ
ajis02-5323	356	20	the	the	DET
ajis02-5323	356	21	number	number	NOUN
ajis02-5323	356	22	of	of	ADP
ajis02-5323	356	23	controls	control	NOUN
ajis02-5323	356	24	assessing	assess	VERB
ajis02-5323	356	25	supplier	supplier	NOUN
ajis02-5323	356	26	characteristics	characteristic	NOUN
ajis02-5323	356	27	related	relate	VERB
ajis02-5323	356	28	to	to	ADP
ajis02-5323	356	29	technology	technology	NOUN
ajis02-5323	356	30	,	,	PUNCT
ajis02-5323	356	31	people	people	NOUN
ajis02-5323	356	32	,	,	PUNCT
ajis02-5323	356	33	processes	process	NOUN
ajis02-5323	356	34	and	and	CCONJ
ajis02-5323	356	35	general	general	ADJ
ajis02-5323	356	36	information	information	NOUN
ajis02-5323	356	37	(	(	PUNCT
ajis02-5323	356	38	see	see	VERB
ajis02-5323	356	39	table	table	NOUN
ajis02-5323	356	40	3	3	NUM
ajis02-5323	356	41	)	)	PUNCT
ajis02-5323	356	42	.	.	PUNCT
ajis02-5323	357	1	we	we	PRON
ajis02-5323	357	2	find	find	VERB
ajis02-5323	357	3	that	that	SCONJ
ajis02-5323	357	4	if	if	SCONJ
ajis02-5323	357	5	a	a	DET
ajis02-5323	357	6	supplier	supplier	NOUN
ajis02-5323	357	7	is	be	AUX
ajis02-5323	357	8	critical	critical	ADJ
ajis02-5323	357	9	to	to	ADP
ajis02-5323	357	10	the	the	DET
ajis02-5323	357	11	focal	focal	ADJ
ajis02-5323	357	12	organization	organization	NOUN
ajis02-5323	357	13	’s	’s	PART
ajis02-5323	357	14	operations	operation	NOUN
ajis02-5323	357	15	,	,	PUNCT
ajis02-5323	357	16	a	a	DET
ajis02-5323	357	17	significantly	significantly	ADV
ajis02-5323	357	18	higher	high	ADJ
ajis02-5323	357	19	number	number	NOUN
ajis02-5323	357	20	of	of	ADP
ajis02-5323	357	21	supplier	supplier	NOUN
ajis02-5323	357	22	controls	control	NOUN
ajis02-5323	357	23	is	be	AUX
ajis02-5323	357	24	assessed	assess	VERB
ajis02-5323	357	25	related	relate	VERB
ajis02-5323	357	26	to	to	ADP
ajis02-5323	357	27	technology	technology	NOUN
ajis02-5323	357	28	and	and	CCONJ
ajis02-5323	357	29	processes	process	NOUN
ajis02-5323	357	30	(	(	PUNCT
ajis02-5323	357	31	but	but	CCONJ
ajis02-5323	357	32	not	not	PART
ajis02-5323	357	33	to	to	ADP
ajis02-5323	357	34	people	people	NOUN
ajis02-5323	357	35	and	and	CCONJ
ajis02-5323	357	36	general	general	ADJ
ajis02-5323	357	37	information	information	NOUN
ajis02-5323	357	38	)	)	PUNCT
ajis02-5323	357	39	.	.	PUNCT
ajis02-5323	358	1	however	however	ADV
ajis02-5323	358	2	,	,	PUNCT
ajis02-5323	358	3	we	we	PRON
ajis02-5323	358	4	did	do	AUX
ajis02-5323	358	5	not	not	PART
ajis02-5323	358	6	find	find	VERB
ajis02-5323	358	7	support	support	NOUN
ajis02-5323	358	8	that	that	SCONJ
ajis02-5323	358	9	suppliers	supplier	NOUN
ajis02-5323	358	10	with	with	ADP
ajis02-5323	358	11	access	access	NOUN
ajis02-5323	358	12	to	to	ADP
ajis02-5323	358	13	sensitive	sensitive	ADJ
ajis02-5323	358	14	data	datum	NOUN
ajis02-5323	358	15	are	be	AUX
ajis02-5323	358	16	more	more	ADV
ajis02-5323	358	17	scrutinized	scrutinize	VERB
ajis02-5323	358	18	,	,	PUNCT
ajis02-5323	358	19	partly	partly	ADV
ajis02-5323	358	20	perhaps	perhaps	ADV
ajis02-5323	358	21	because	because	SCONJ
ajis02-5323	358	22	of	of	ADP
ajis02-5323	358	23	the	the	DET
ajis02-5323	358	24	correlation	correlation	NOUN
ajis02-5323	358	25	between	between	ADP
ajis02-5323	358	26	the	the	DET
ajis02-5323	358	27	involvement	involvement	NOUN
ajis02-5323	358	28	of	of	ADP
ajis02-5323	358	29	a	a	DET
ajis02-5323	358	30	supplier	supplier	NOUN
ajis02-5323	358	31	in	in	ADP
ajis02-5323	358	32	critical	critical	ADJ
ajis02-5323	358	33	processes	process	NOUN
ajis02-5323	358	34	and	and	CCONJ
ajis02-5323	358	35	their	their	PRON
ajis02-5323	358	36	access	access	NOUN
ajis02-5323	358	37	to	to	ADP
ajis02-5323	358	38	sensitive	sensitive	ADJ
ajis02-5323	358	39	information	information	NOUN
ajis02-5323	358	40	.	.	PUNCT
ajis02-5323	359	1	data	datum	NOUN
ajis02-5323	359	2	sensitivity	sensitivity	NOUN
ajis02-5323	359	3	a	a	DET
ajis02-5323	359	4	supplier	supplier	NOUN
ajis02-5323	359	5	has	have	VERB
ajis02-5323	359	6	access	access	NOUN
ajis02-5323	359	7	to	to	ADP
ajis02-5323	359	8	criticality	criticality	NOUN
ajis02-5323	359	9	of	of	ADP
ajis02-5323	359	10	processes	process	NOUN
ajis02-5323	359	11	a	a	DET
ajis02-5323	359	12	supplier	supplier	NOUN
ajis02-5323	359	13	is	be	AUX
ajis02-5323	359	14	involved	involve	VERB
ajis02-5323	359	15	in	in	ADP
ajis02-5323	359	16	data	datum	NOUN
ajis02-5323	359	17	sensitivity	sensitivity	NOUN
ajis02-5323	359	18	a	a	DET
ajis02-5323	359	19	supplier	supplier	NOUN
ajis02-5323	359	20	has	have	VERB
ajis02-5323	359	21	access	access	NOUN
ajis02-5323	359	22	to	to	ADP
ajis02-5323	359	23	1	1	NUM
ajis02-5323	359	24	.391	.391	NUM
ajis02-5323	359	25	*	*	NOUN
ajis02-5323	359	26	*	*	NOUN
ajis02-5323	359	27	criticality	criticality	NOUN
ajis02-5323	359	28	of	of	ADP
ajis02-5323	359	29	processes	process	NOUN
ajis02-5323	359	30	a	a	DET
ajis02-5323	359	31	supplier	supplier	NOUN
ajis02-5323	359	32	is	be	AUX
ajis02-5323	359	33	involved	involve	VERB
ajis02-5323	359	34	in	in	ADP
ajis02-5323	359	35	.391	.391	NUM
ajis02-5323	359	36	*	*	PROPN
ajis02-5323	359	37	*	*	SYM
ajis02-5323	359	38	1	1	NUM
ajis02-5323	359	39	number	number	NOUN
ajis02-5323	359	40	of	of	ADP
ajis02-5323	359	41	supplier	supplier	NOUN
ajis02-5323	359	42	’s	’s	PART
ajis02-5323	359	43	controls	control	NOUN
ajis02-5323	359	44	assessed	assess	VERB
ajis02-5323	359	45	(	(	PUNCT
ajis02-5323	359	46	total	total	ADJ
ajis02-5323	359	47	)	)	PUNCT
ajis02-5323	359	48	0.177	0.177	NUM
ajis02-5323	359	49	.360	.360	NUM
ajis02-5323	359	50	*	*	PUNCT
ajis02-5323	359	51	*	*	PUNCT
ajis02-5323	359	52	n	n	PROPN
ajis02-5323	359	53	of	of	ADP
ajis02-5323	359	54	supplier	supplier	NOUN
ajis02-5323	359	55	’s	’s	PART
ajis02-5323	359	56	technology	technology	NOUN
ajis02-5323	359	57	controls	control	NOUN
ajis02-5323	359	58	assessed	assess	VERB
ajis02-5323	359	59	0.143	0.143	NUM
ajis02-5323	359	60	.364	.364	NUM
ajis02-5323	359	61	*	*	PUNCT
ajis02-5323	359	62	*	*	NOUN
ajis02-5323	359	63	n	n	PROPN
ajis02-5323	359	64	of	of	ADP
ajis02-5323	359	65	supplier	supplier	NOUN
ajis02-5323	359	66	’s	’s	PART
ajis02-5323	359	67	processes	process	NOUN
ajis02-5323	359	68	controls	control	NOUN
ajis02-5323	359	69	assessed	assess	VERB
ajis02-5323	359	70	0.206	0.206	NUM
ajis02-5323	359	71	.326	.326	NUM
ajis02-5323	359	72	*	*	PUNCT
ajis02-5323	359	73	n	n	PROPN
ajis02-5323	359	74	of	of	ADP
ajis02-5323	359	75	supplier	supplier	NOUN
ajis02-5323	359	76	’s	’s	PART
ajis02-5323	359	77	people	people	NOUN
ajis02-5323	359	78	controls	control	VERB
ajis02-5323	359	79	assessed	assess	VERB
ajis02-5323	359	80	0.099	0.099	NUM
ajis02-5323	359	81	0.251	0.251	NUM
ajis02-5323	359	82	n	n	PROPN
ajis02-5323	359	83	of	of	ADP
ajis02-5323	359	84	supplier	supplier	NOUN
ajis02-5323	359	85	’s	’s	PART
ajis02-5323	359	86	general	general	ADJ
ajis02-5323	359	87	information	information	NOUN
ajis02-5323	359	88	categories	category	NOUN
ajis02-5323	359	89	assessed	assess	VERB
ajis02-5323	359	90	-0.124	-0.124	PROPN
ajis02-5323	359	91	0.047	0.047	NUM
ajis02-5323	359	92	note	note	NOUN
ajis02-5323	359	93	:	:	PUNCT
ajis02-5323	360	1	*	*	PUNCT
ajis02-5323	360	2	*	*	PUNCT
ajis02-5323	360	3	p	p	X
ajis02-5323	360	4	<	<	X
ajis02-5323	360	5	0.01	0.01	NUM
ajis02-5323	360	6	(	(	PUNCT
ajis02-5323	360	7	2	2	NUM
ajis02-5323	360	8	-	-	PUNCT
ajis02-5323	360	9	tailed	tailed	ADJ
ajis02-5323	360	10	)	)	PUNCT
ajis02-5323	360	11	,	,	PUNCT
ajis02-5323	360	12	*	*	PUNCT
ajis02-5323	361	1	p	p	X
ajis02-5323	361	2	<	<	X
ajis02-5323	361	3	0.05	0.05	NUM
ajis02-5323	361	4	level	level	NOUN
ajis02-5323	361	5	(	(	PUNCT
ajis02-5323	361	6	2	2	NUM
ajis02-5323	361	7	-	-	PUNCT
ajis02-5323	361	8	tailed	tailed	ADJ
ajis02-5323	361	9	)	)	PUNCT
ajis02-5323	361	10	.	.	PUNCT
ajis02-5323	362	1	table	table	NOUN
ajis02-5323	362	2	3	3	NUM
ajis02-5323	362	3	:	:	PUNCT
ajis02-5323	362	4	correlations	correlation	NOUN
ajis02-5323	362	5	between	between	ADP
ajis02-5323	362	6	supplier	supplier	NOUN
ajis02-5323	362	7	’s	’s	PART
ajis02-5323	362	8	criticality	criticality	NOUN
ajis02-5323	362	9	and	and	CCONJ
ajis02-5323	362	10	the	the	DET
ajis02-5323	362	11	scope	scope	NOUN
ajis02-5323	362	12	of	of	ADP
ajis02-5323	362	13	risk	risk	NOUN
ajis02-5323	362	14	assessment	assessment	NOUN
ajis02-5323	362	15	(	(	PUNCT
ajis02-5323	362	16	the	the	DET
ajis02-5323	362	17	number	number	NOUN
ajis02-5323	362	18	of	of	ADP
ajis02-5323	362	19	assessed	assessed	ADJ
ajis02-5323	362	20	controls	control	NOUN
ajis02-5323	362	21	)	)	PUNCT
ajis02-5323	362	22	regarding	regard	VERB
ajis02-5323	362	23	the	the	DET
ajis02-5323	362	24	contextual	contextual	ADJ
ajis02-5323	362	25	factors	factor	NOUN
ajis02-5323	362	26	,	,	PUNCT
ajis02-5323	362	27	we	we	PRON
ajis02-5323	362	28	do	do	AUX
ajis02-5323	362	29	not	not	PART
ajis02-5323	362	30	find	find	VERB
ajis02-5323	362	31	the	the	DET
ajis02-5323	362	32	size	size	NOUN
ajis02-5323	362	33	of	of	ADP
ajis02-5323	362	34	the	the	DET
ajis02-5323	362	35	focal	focal	ADJ
ajis02-5323	362	36	organization	organization	NOUN
ajis02-5323	362	37	to	to	PART
ajis02-5323	362	38	be	be	AUX
ajis02-5323	362	39	associated	associate	VERB
ajis02-5323	362	40	with	with	ADP
ajis02-5323	362	41	the	the	DET
ajis02-5323	362	42	assessment	assessment	NOUN
ajis02-5323	362	43	scope	scope	NOUN
ajis02-5323	362	44	.	.	PUNCT
ajis02-5323	363	1	concerning	concern	VERB
ajis02-5323	363	2	it	it	PRON
ajis02-5323	363	3	governance	governance	NOUN
ajis02-5323	363	4	,	,	PUNCT
ajis02-5323	363	5	if	if	SCONJ
ajis02-5323	363	6	an	an	DET
ajis02-5323	363	7	organization	organization	NOUN
ajis02-5323	363	8	has	have	VERB
ajis02-5323	363	9	a	a	DET
ajis02-5323	363	10	cyber	cyber	NOUN
ajis02-5323	363	11	expert	expert	NOUN
ajis02-5323	363	12	who	who	PRON
ajis02-5323	363	13	assesses	assess	VERB
ajis02-5323	363	14	supplier	supplier	NOUN
ajis02-5323	363	15	cyber	cyber	NOUN
ajis02-5323	363	16	risk	risk	NOUN
ajis02-5323	363	17	,	,	PUNCT
ajis02-5323	363	18	then	then	ADV
ajis02-5323	363	19	this	this	PRON
ajis02-5323	363	20	is	be	AUX
ajis02-5323	363	21	associated	associate	VERB
ajis02-5323	363	22	with	with	ADP
ajis02-5323	363	23	a	a	DET
ajis02-5323	363	24	broader	broad	ADJ
ajis02-5323	363	25	scope	scope	NOUN
ajis02-5323	363	26	of	of	ADP
ajis02-5323	363	27	assessment	assessment	NOUN
ajis02-5323	363	28	of	of	ADP
ajis02-5323	363	29	supplier	supplier	NOUN
ajis02-5323	363	30	’s	’s	PART
ajis02-5323	363	31	processes	process	NOUN
ajis02-5323	363	32	.	.	PUNCT
ajis02-5323	364	1	however	however	ADV
ajis02-5323	364	2	,	,	PUNCT
ajis02-5323	364	3	we	we	PRON
ajis02-5323	364	4	do	do	AUX
ajis02-5323	364	5	not	not	PART
ajis02-5323	364	6	find	find	VERB
ajis02-5323	364	7	the	the	DET
ajis02-5323	364	8	scope	scope	NOUN
ajis02-5323	364	9	to	to	PART
ajis02-5323	364	10	differ	differ	VERB
ajis02-5323	364	11	for	for	ADP
ajis02-5323	364	12	other	other	ADJ
ajis02-5323	364	13	areas	area	NOUN
ajis02-5323	364	14	.	.	PUNCT
ajis02-5323	365	1	interestingly	interestingly	ADV
ajis02-5323	365	2	,	,	PUNCT
ajis02-5323	365	3	we	we	PRON
ajis02-5323	365	4	find	find	VERB
ajis02-5323	365	5	that	that	SCONJ
ajis02-5323	365	6	those	those	DET
ajis02-5323	365	7	organizations	organization	NOUN
ajis02-5323	365	8	that	that	PRON
ajis02-5323	365	9	use	use	VERB
ajis02-5323	365	10	some	some	DET
ajis02-5323	365	11	sort	sort	NOUN
ajis02-5323	365	12	of	of	ADP
ajis02-5323	365	13	vendor	vendor	NOUN
ajis02-5323	365	14	management	management	NOUN
ajis02-5323	365	15	software	software	NOUN
ajis02-5323	365	16	assess	assess	VERB
ajis02-5323	365	17	fewer	few	ADJ
ajis02-5323	365	18	controls	control	NOUN
ajis02-5323	365	19	for	for	ADP
ajis02-5323	365	20	technology	technology	NOUN
ajis02-5323	365	21	and	and	CCONJ
ajis02-5323	365	22	people	people	NOUN
ajis02-5323	365	23	but	but	CCONJ
ajis02-5323	365	24	not	not	PART
ajis02-5323	365	25	for	for	ADP
ajis02-5323	365	26	processes	process	NOUN
ajis02-5323	365	27	and	and	CCONJ
ajis02-5323	365	28	general	general	ADJ
ajis02-5323	365	29	information	information	NOUN
ajis02-5323	365	30	.	.	PUNCT
ajis02-5323	366	1	it	it	PRON
ajis02-5323	366	2	might	might	AUX
ajis02-5323	366	3	be	be	AUX
ajis02-5323	366	4	that	that	SCONJ
ajis02-5323	366	5	these	these	DET
ajis02-5323	366	6	platforms	platform	NOUN
ajis02-5323	366	7	monitor	monitor	VERB
ajis02-5323	366	8	other	other	ADJ
ajis02-5323	366	9	controls	control	NOUN
ajis02-5323	366	10	than	than	ADP
ajis02-5323	366	11	those	those	PRON
ajis02-5323	366	12	assessed	assess	VERB
ajis02-5323	366	13	in	in	ADP
ajis02-5323	366	14	our	our	PRON
ajis02-5323	366	15	questionnaire	questionnaire	NOUN
ajis02-5323	366	16	(	(	PUNCT
ajis02-5323	366	17	they	they	PRON
ajis02-5323	366	18	focus	focus	VERB
ajis02-5323	366	19	on	on	ADP
ajis02-5323	366	20	outward	outward	ADV
ajis02-5323	366	21	-	-	PUNCT
ajis02-5323	366	22	looking	look	VERB
ajis02-5323	366	23	websites	website	NOUN
ajis02-5323	366	24	)	)	PUNCT
ajis02-5323	366	25	.	.	PUNCT
ajis02-5323	367	1	among	among	ADP
ajis02-5323	367	2	industries	industry	NOUN
ajis02-5323	367	3	,	,	PUNCT
ajis02-5323	367	4	organizations	organization	NOUN
ajis02-5323	367	5	from	from	ADP
ajis02-5323	367	6	the	the	DET
ajis02-5323	367	7	financial	financial	ADJ
ajis02-5323	367	8	and	and	CCONJ
ajis02-5323	367	9	ict	ict	PROPN
ajis02-5323	367	10	industries	industry	NOUN
ajis02-5323	367	11	were	be	AUX
ajis02-5323	367	12	found	find	VERB
ajis02-5323	367	13	to	to	PART
ajis02-5323	367	14	assess	assess	VERB
ajis02-5323	367	15	a	a	DET
ajis02-5323	367	16	significantly	significantly	ADV
ajis02-5323	367	17	larger	large	ADJ
ajis02-5323	367	18	number	number	NOUN
ajis02-5323	367	19	of	of	ADP
ajis02-5323	367	20	controls	control	NOUN
ajis02-5323	367	21	in	in	ADP
ajis02-5323	367	22	all	all	DET
ajis02-5323	367	23	areas	area	NOUN
ajis02-5323	367	24	except	except	SCONJ
ajis02-5323	367	25	for	for	ADP
ajis02-5323	367	26	processes	process	NOUN
ajis02-5323	367	27	(	(	PUNCT
ajis02-5323	367	28	table	table	NOUN
ajis02-5323	367	29	4	4	NUM
ajis02-5323	367	30	)	)	PUNCT
ajis02-5323	367	31	.	.	PUNCT
ajis02-5323	368	1	the	the	DET
ajis02-5323	368	2	size	size	NOUN
ajis02-5323	368	3	of	of	ADP
ajis02-5323	368	4	our	our	PRON
ajis02-5323	368	5	sample	sample	NOUN
ajis02-5323	368	6	and	and	CCONJ
ajis02-5323	368	7	the	the	DET
ajis02-5323	368	8	nature	nature	NOUN
ajis02-5323	368	9	of	of	ADP
ajis02-5323	368	10	the	the	DET
ajis02-5323	368	11	variables	variable	NOUN
ajis02-5323	368	12	did	do	AUX
ajis02-5323	368	13	not	not	PART
ajis02-5323	368	14	allow	allow	VERB
ajis02-5323	368	15	us	we	PRON
ajis02-5323	368	16	to	to	PART
ajis02-5323	368	17	assess	assess	VERB
ajis02-5323	368	18	a	a	DET
ajis02-5323	368	19	causality	causality	NOUN
ajis02-5323	368	20	model	model	NOUN
ajis02-5323	368	21	and	and	CCONJ
ajis02-5323	368	22	interactions	interaction	NOUN
ajis02-5323	368	23	among	among	ADP
ajis02-5323	368	24	the	the	DET
ajis02-5323	368	25	contextual	contextual	ADJ
ajis02-5323	368	26	variables	variable	NOUN
ajis02-5323	368	27	;	;	PUNCT
ajis02-5323	368	28	however	however	ADV
ajis02-5323	368	29	,	,	PUNCT
ajis02-5323	368	30	the	the	DET
ajis02-5323	368	31	results	result	NOUN
ajis02-5323	368	32	,	,	PUNCT
ajis02-5323	368	33	by	by	ADP
ajis02-5323	368	34	and	and	CCONJ
ajis02-5323	368	35	large	large	ADJ
ajis02-5323	368	36	,	,	PUNCT
ajis02-5323	368	37	support	support	VERB
ajis02-5323	368	38	the	the	DET
ajis02-5323	368	39	interview	interview	NOUN
ajis02-5323	368	40	findings	finding	NOUN
ajis02-5323	368	41	,	,	PUNCT
ajis02-5323	368	42	except	except	SCONJ
ajis02-5323	368	43	for	for	ADP
ajis02-5323	368	44	size	size	NOUN
ajis02-5323	368	45	.	.	PUNCT
ajis02-5323	369	1	australasian	australasian	ADJ
ajis02-5323	369	2	journal	journal	NOUN
ajis02-5323	369	3	of	of	ADP
ajis02-5323	369	4	information	information	NOUN
ajis02-5323	369	5	systems	system	NOUN
ajis02-5323	369	6	slapnicar	slapnicar	NOUN
ajis02-5323	369	7	,	,	PUNCT
ajis02-5323	369	8	vidmar	vidmar	NOUN
ajis02-5323	369	9	&	&	CCONJ
ajis02-5323	369	10	tsen	tsen	ADJ
ajis02-5323	369	11	2025	2025	NUM
ajis02-5323	369	12	,	,	PUNCT
ajis02-5323	369	13	vol	vol	NOUN
ajis02-5323	369	14	29	29	NUM
ajis02-5323	369	15	,	,	PUNCT
ajis02-5323	369	16	research	research	NOUN
ajis02-5323	369	17	article	article	NOUN
ajis02-5323	369	18	process	process	NOUN
ajis02-5323	369	19	theory	theory	NOUN
ajis02-5323	369	20	of	of	ADP
ajis02-5323	369	21	supplier	supplier	NOUN
ajis02-5323	369	22	cyber	cyber	NOUN
ajis02-5323	369	23	risk	risk	NOUN
ajis02-5323	369	24	assessment	assessment	NOUN
ajis02-5323	369	25	21	21	NUM
ajis02-5323	369	26	note	note	NOUN
ajis02-5323	369	27	:	:	PUNCT
ajis02-5323	369	28	we	we	PRON
ajis02-5323	369	29	used	use	VERB
ajis02-5323	369	30	analysis	analysis	NOUN
ajis02-5323	369	31	of	of	ADP
ajis02-5323	369	32	variance	variance	NOUN
ajis02-5323	369	33	(	(	PUNCT
ajis02-5323	369	34	anova	anova	PROPN
ajis02-5323	369	35	)	)	PUNCT
ajis02-5323	369	36	to	to	PART
ajis02-5323	369	37	analyze	analyze	VERB
ajis02-5323	369	38	whether	whether	SCONJ
ajis02-5323	369	39	the	the	DET
ajis02-5323	369	40	fact	fact	NOUN
ajis02-5323	369	41	that	that	SCONJ
ajis02-5323	369	42	an	an	DET
ajis02-5323	369	43	organization	organization	NOUN
ajis02-5323	369	44	employs	employ	VERB
ajis02-5323	369	45	a	a	DET
ajis02-5323	369	46	specific	specific	ADJ
ajis02-5323	369	47	expert	expert	NOUN
ajis02-5323	369	48	for	for	ADP
ajis02-5323	369	49	assessments	assessment	NOUN
ajis02-5323	369	50	of	of	ADP
ajis02-5323	369	51	supplier	supplier	NOUN
ajis02-5323	369	52	cyber	cyber	NOUN
ajis02-5323	369	53	risk	risk	NOUN
ajis02-5323	369	54	,	,	PUNCT
ajis02-5323	369	55	uses	use	VERB
ajis02-5323	369	56	vendor	vendor	NOUN
ajis02-5323	369	57	management	management	NOUN
ajis02-5323	369	58	software	software	NOUN
ajis02-5323	369	59	,	,	PUNCT
ajis02-5323	369	60	and	and	CCONJ
ajis02-5323	369	61	is	be	AUX
ajis02-5323	369	62	from	from	ADP
ajis02-5323	369	63	the	the	DET
ajis02-5323	369	64	financial	financial	ADJ
ajis02-5323	369	65	or	or	CCONJ
ajis02-5323	369	66	ict	ict	NOUN
ajis02-5323	369	67	sector	sector	NOUN
ajis02-5323	369	68	,	,	PUNCT
ajis02-5323	369	69	affects	affect	VERB
ajis02-5323	369	70	the	the	DET
ajis02-5323	369	71	number	number	NOUN
ajis02-5323	369	72	of	of	ADP
ajis02-5323	369	73	controls	control	NOUN
ajis02-5323	369	74	assessed	assess	VERB
ajis02-5323	369	75	(	(	PUNCT
ajis02-5323	369	76	the	the	DET
ajis02-5323	369	77	scope	scope	NOUN
ajis02-5323	369	78	of	of	ADP
ajis02-5323	369	79	the	the	DET
ajis02-5323	369	80	assessment	assessment	NOUN
ajis02-5323	369	81	)	)	PUNCT
ajis02-5323	369	82	.	.	PUNCT
ajis02-5323	370	1	the	the	DET
ajis02-5323	370	2	number	number	NOUN
ajis02-5323	370	3	of	of	ADP
ajis02-5323	370	4	controls	control	NOUN
ajis02-5323	370	5	in	in	ADP
ajis02-5323	370	6	the	the	DET
ajis02-5323	370	7	brackets	bracket	NOUN
ajis02-5323	370	8	for	for	ADP
ajis02-5323	370	9	each	each	DET
ajis02-5323	370	10	area	area	NOUN
ajis02-5323	370	11	indicates	indicate	VERB
ajis02-5323	370	12	the	the	DET
ajis02-5323	370	13	maximum	maximum	ADJ
ajis02-5323	370	14	number	number	NOUN
ajis02-5323	370	15	of	of	ADP
ajis02-5323	370	16	controls	control	NOUN
ajis02-5323	370	17	considered	consider	VERB
ajis02-5323	370	18	in	in	ADP
ajis02-5323	370	19	this	this	DET
ajis02-5323	370	20	study	study	NOUN
ajis02-5323	370	21	for	for	ADP
ajis02-5323	370	22	that	that	DET
ajis02-5323	370	23	specific	specific	ADJ
ajis02-5323	370	24	area	area	NOUN
ajis02-5323	370	25	,	,	PUNCT
ajis02-5323	370	26	and	and	CCONJ
ajis02-5323	370	27	bolded	bolde	VERB
ajis02-5323	370	28	means	mean	NOUN
ajis02-5323	370	29	with	with	ADP
ajis02-5323	370	30	asterisks	asterisk	NOUN
ajis02-5323	370	31	indicate	indicate	VERB
ajis02-5323	370	32	which	which	DET
ajis02-5323	370	33	areas	area	NOUN
ajis02-5323	370	34	significantly	significantly	ADV
ajis02-5323	370	35	differ	differ	VERB
ajis02-5323	370	36	between	between	ADP
ajis02-5323	370	37	the	the	DET
ajis02-5323	370	38	two	two	NUM
ajis02-5323	370	39	groups	group	NOUN
ajis02-5323	370	40	.	.	PUNCT
ajis02-5323	371	1	*	*	PUNCT
ajis02-5323	371	2	*	*	PUNCT
ajis02-5323	371	3	p	p	X
ajis02-5323	371	4	<	<	X
ajis02-5323	371	5	0.01	0.01	NUM
ajis02-5323	371	6	(	(	PUNCT
ajis02-5323	371	7	2	2	NUM
ajis02-5323	371	8	-	-	PUNCT
ajis02-5323	371	9	tailed	tailed	ADJ
ajis02-5323	371	10	)	)	PUNCT
ajis02-5323	371	11	,	,	PUNCT
ajis02-5323	371	12	*	*	PUNCT
ajis02-5323	372	1	p	p	X
ajis02-5323	372	2	<	<	X
ajis02-5323	372	3	0.05	0.05	NUM
ajis02-5323	372	4	level	level	NOUN
ajis02-5323	372	5	(	(	PUNCT
ajis02-5323	372	6	2	2	NUM
ajis02-5323	372	7	-	-	PUNCT
ajis02-5323	372	8	tailed	tailed	ADJ
ajis02-5323	372	9	)	)	PUNCT
ajis02-5323	372	10	.	.	PUNCT
ajis02-5323	373	1	table	table	NOUN
ajis02-5323	373	2	4	4	NUM
ajis02-5323	373	3	:	:	PUNCT
ajis02-5323	373	4	anova	anova	VERB
ajis02-5323	373	5	analysis	analysis	NOUN
ajis02-5323	373	6	of	of	ADP
ajis02-5323	373	7	the	the	DET
ajis02-5323	373	8	scope	scope	NOUN
ajis02-5323	373	9	of	of	ADP
ajis02-5323	373	10	assessment	assessment	NOUN
ajis02-5323	373	11	cyber	cyber	NOUN
ajis02-5323	373	12	expert	expert	NOUN
ajis02-5323	373	13	who	who	PRON
ajis02-5323	373	14	assesses	assess	VERB
ajis02-5323	373	15	supplier	supplier	NOUN
ajis02-5323	373	16	cyber	cyber	NOUN
ajis02-5323	373	17	risk	risk	NOUN
ajis02-5323	374	1	n	n	PRON
ajis02-5323	374	2	mean	mean	VERB
ajis02-5323	374	3	std	std	PROPN
ajis02-5323	374	4	.	.	PUNCT
ajis02-5323	375	1	dev	dev	PROPN
ajis02-5323	375	2	se	se	PROPN
ajis02-5323	375	3	mean	mean	PROPN
ajis02-5323	375	4	vendor	vendor	PROPN
ajis02-5323	375	5	managem	managem	PROPN
ajis02-5323	375	6	ent	ent	PROPN
ajis02-5323	375	7	software	software	PROPN
ajis02-5323	375	8	n	n	PRON
ajis02-5323	375	9	mean	mean	VERB
ajis02-5323	375	10	std	std	PROPN
ajis02-5323	375	11	.	.	PUNCT
ajis02-5323	376	1	dev	dev	PROPN
ajis02-5323	376	2	se	se	X
ajis02-5323	376	3	mean	mean	VERB
ajis02-5323	376	4	fin/	fin/	NOUN
ajis02-5323	376	5	ict	ict	NOUN
ajis02-5323	376	6	sector	sector	NOUN
ajis02-5323	376	7	n	n	PRON
ajis02-5323	376	8	mean	mean	VERB
ajis02-5323	376	9	std	std	PROPN
ajis02-5323	376	10	.	.	PUNCT
ajis02-5323	377	1	dev	dev	AUX
ajis02-5323	377	2	se	se	X
ajis02-5323	377	3	mean	mean	VERB
ajis02-5323	377	4	supplier	supplier	NOUN
ajis02-5323	377	5	's	's	PART
ajis02-5323	377	6	characteristics	characteristic	NOUN
ajis02-5323	377	7	total	total	NOUN
ajis02-5323	377	8	(	(	PUNCT
ajis02-5323	377	9	n	n	NOUN
ajis02-5323	377	10	of	of	ADP
ajis02-5323	377	11	controls	control	NOUN
ajis02-5323	377	12	=	=	NOUN
ajis02-5323	377	13	29	29	NUM
ajis02-5323	377	14	)	)	PUNCT
ajis02-5323	378	1	yes	yes	INTJ
ajis02-5323	378	2	37	37	NUM
ajis02-5323	379	1	25.5	25.5	NUM
ajis02-5323	379	2	5.00	5.00	NUM
ajis02-5323	379	3	0.82	0.82	NUM
ajis02-5323	380	1	yes	yes	INTJ
ajis02-5323	380	2	31	31	NUM
ajis02-5323	381	1	24.3	24.3	NUM
ajis02-5323	381	2	*	*	SYM
ajis02-5323	381	3	*	*	PUNCT
ajis02-5323	381	4	6.13	6.13	NUM
ajis02-5323	381	5	1.10	1.10	NUM
ajis02-5323	381	6	yes	yes	NOUN
ajis02-5323	381	7	17	17	NUM
ajis02-5323	381	8	27.1	27.1	NUM
ajis02-5323	381	9	*	*	PUNCT
ajis02-5323	381	10	*	*	PUNCT
ajis02-5323	381	11	3.02	3.02	NUM
ajis02-5323	381	12	0.73	0.73	NUM
ajis02-5323	381	13	no	no	DET
ajis02-5323	381	14	13	13	NUM
ajis02-5323	381	15	23.4	23.4	NUM
ajis02-5323	381	16	5.95	5.95	NUM
ajis02-5323	381	17	1.65	1.65	NUM
ajis02-5323	381	18	no	no	DET
ajis02-5323	381	19	21	21	NUM
ajis02-5323	381	20	26.6	26.6	NUM
ajis02-5323	381	21	*	*	PUNCT
ajis02-5323	381	22	*	*	PUNCT
ajis02-5323	381	23	2.93	2.93	NUM
ajis02-5323	381	24	0.64	0.64	NUM
ajis02-5323	381	25	no	no	DET
ajis02-5323	381	26	36	36	NUM
ajis02-5323	381	27	24.1	24.1	NUM
ajis02-5323	381	28	*	*	SYM
ajis02-5323	381	29	*	*	PUNCT
ajis02-5323	381	30	5.71	5.71	NUM
ajis02-5323	381	31	0.95	0.95	NUM
ajis02-5323	381	32	supplier	supplier	NOUN
ajis02-5323	381	33	's	's	PART
ajis02-5323	381	34	technology	technology	NOUN
ajis02-5323	381	35	yes	yes	INTJ
ajis02-5323	381	36	37	37	NUM
ajis02-5323	381	37	11.3	11.3	NUM
ajis02-5323	381	38	3.64	3.64	NUM
ajis02-5323	381	39	0.60	0.60	NUM
ajis02-5323	382	1	yes	yes	INTJ
ajis02-5323	382	2	31	31	NUM
ajis02-5323	382	3	10.5	10.5	NUM
ajis02-5323	382	4	*	*	PUNCT
ajis02-5323	382	5	*	*	PUNCT
ajis02-5323	382	6	4.49	4.49	NUM
ajis02-5323	382	7	0.81	0.81	NUM
ajis02-5323	382	8	yes	yes	NOUN
ajis02-5323	382	9	17	17	NUM
ajis02-5323	382	10	12.4	12.4	NUM
ajis02-5323	382	11	*	*	PUNCT
ajis02-5323	382	12	*	*	PUNCT
ajis02-5323	382	13	1.97	1.97	NUM
ajis02-5323	382	14	0.48	0.48	NUM
ajis02-5323	382	15	(	(	PUNCT
ajis02-5323	382	16	n	n	PROPN
ajis02-5323	382	17	of	of	ADP
ajis02-5323	382	18	controls	control	NOUN
ajis02-5323	382	19	=	=	NOUN
ajis02-5323	382	20	13	13	NUM
ajis02-5323	382	21	)	)	PUNCT
ajis02-5323	383	1	no	no	DET
ajis02-5323	383	2	13	13	NUM
ajis02-5323	383	3	10.2	10.2	NUM
ajis02-5323	383	4	4.26	4.26	NUM
ajis02-5323	383	5	1.18	1.18	NUM
ajis02-5323	383	6	no	no	DET
ajis02-5323	383	7	21	21	NUM
ajis02-5323	383	8	12.2	12.2	NUM
ajis02-5323	383	9	*	*	PUNCT
ajis02-5323	383	10	*	*	PUNCT
ajis02-5323	383	11	1.70	1.70	NUM
ajis02-5323	383	12	0.37	0.37	NUM
ajis02-5323	383	13	no	no	DET
ajis02-5323	383	14	36	36	NUM
ajis02-5323	383	15	10.5	10.5	NUM
ajis02-5323	383	16	*	*	PUNCT
ajis02-5323	383	17	*	*	PUNCT
ajis02-5323	383	18	4.20	4.20	NUM
ajis02-5323	383	19	0.70	0.70	NUM
ajis02-5323	383	20	supplier	supplier	NOUN
ajis02-5323	383	21	's	's	PART
ajis02-5323	383	22	processes	process	NOUN
ajis02-5323	383	23	yes	yes	INTJ
ajis02-5323	383	24	37	37	NUM
ajis02-5323	383	25	2.9	2.9	NUM
ajis02-5323	383	26	*	*	SYM
ajis02-5323	383	27	*	*	PUNCT
ajis02-5323	383	28	1.40	1.40	NUM
ajis02-5323	383	29	0.23	0.23	NUM
ajis02-5323	384	1	yes	yes	INTJ
ajis02-5323	384	2	31	31	NUM
ajis02-5323	384	3	2.6	2.6	NUM
ajis02-5323	384	4	*	*	SYM
ajis02-5323	384	5	*	*	NOUN
ajis02-5323	384	6	0.56	0.56	NUM
ajis02-5323	384	7	0.10	0.10	NUM
ajis02-5323	384	8	yes	yes	NOUN
ajis02-5323	384	9	17	17	NUM
ajis02-5323	384	10	3.2	3.2	NUM
ajis02-5323	384	11	1.29	1.29	NUM
ajis02-5323	384	12	0.31	0.31	NUM
ajis02-5323	384	13	(	(	PUNCT
ajis02-5323	384	14	n	n	PROPN
ajis02-5323	384	15	of	of	ADP
ajis02-5323	384	16	controls=4	controls=4	PROPN
ajis02-5323	384	17	)	)	PUNCT
ajis02-5323	385	1	no	no	DET
ajis02-5323	385	2	13	13	NUM
ajis02-5323	385	3	2	2	NUM
ajis02-5323	385	4	*	*	SYM
ajis02-5323	385	5	*	*	PUNCT
ajis02-5323	385	6	1.68	1.68	NUM
ajis02-5323	385	7	0.47	0.47	NUM
ajis02-5323	385	8	no	no	DET
ajis02-5323	385	9	21	21	NUM
ajis02-5323	385	10	2.8	2.8	NUM
ajis02-5323	385	11	*	*	PUNCT
ajis02-5323	385	12	*	*	PUNCT
ajis02-5323	385	13	0.40	0.40	NUM
ajis02-5323	385	14	0.09	0.09	NUM
ajis02-5323	385	15	no	no	DET
ajis02-5323	385	16	36	36	NUM
ajis02-5323	385	17	2.5	2.5	NUM
ajis02-5323	385	18	1.56	1.56	NUM
ajis02-5323	385	19	0.26	0.26	NUM
ajis02-5323	385	20	supplier	supplier	NOUN
ajis02-5323	385	21	's	's	PART
ajis02-5323	385	22	people	people	NOUN
ajis02-5323	385	23	yes	yes	INTJ
ajis02-5323	385	24	37	37	NUM
ajis02-5323	385	25	2.7	2.7	NUM
ajis02-5323	385	26	0.52	0.52	NUM
ajis02-5323	385	27	0.09	0.09	NUM
ajis02-5323	386	1	yes	yes	NOUN
ajis02-5323	386	2	31	31	NUM
ajis02-5323	386	3	2.6	2.6	NUM
ajis02-5323	386	4	1.59	1.59	NUM
ajis02-5323	386	5	0.29	0.29	NUM
ajis02-5323	386	6	yes	yes	NOUN
ajis02-5323	386	7	17	17	NUM
ajis02-5323	386	8	2.8	2.8	NUM
ajis02-5323	386	9	*	*	NUM
ajis02-5323	386	10	0.39	0.39	NUM
ajis02-5323	386	11	0.10	0.10	NUM
ajis02-5323	386	12	(	(	PUNCT
ajis02-5323	386	13	n	n	PROPN
ajis02-5323	386	14	of	of	ADP
ajis02-5323	386	15	controls=3	controls=3	PROPN
ajis02-5323	386	16	)	)	PUNCT
ajis02-5323	387	1	no	no	DET
ajis02-5323	387	2	13	13	NUM
ajis02-5323	387	3	2.6	2.6	NUM
ajis02-5323	387	4	0.51	0.51	NUM
ajis02-5323	387	5	0.14	0.14	NUM
ajis02-5323	387	6	no	no	DET
ajis02-5323	387	7	21	21	NUM
ajis02-5323	387	8	2.9	2.9	NUM
ajis02-5323	387	9	1.39	1.39	NUM
ajis02-5323	387	10	0.30	0.30	NUM
ajis02-5323	387	11	no	no	DET
ajis02-5323	387	12	36	36	NUM
ajis02-5323	387	13	2.6	2.6	NUM
ajis02-5323	387	14	*	*	SYM
ajis02-5323	387	15	0.55	0.55	NUM
ajis02-5323	387	16	0.09	0.09	NUM
ajis02-5323	387	17	supplier	supplier	NOUN
ajis02-5323	387	18	's	's	PART
ajis02-5323	387	19	general	general	ADJ
ajis02-5323	387	20	information	information	NOUN
ajis02-5323	387	21	yes	yes	INTJ
ajis02-5323	387	22	37	37	NUM
ajis02-5323	387	23	8.6	8.6	NUM
ajis02-5323	387	24	0.76	0.76	NUM
ajis02-5323	387	25	0.12	0.12	NUM
ajis02-5323	387	26	yes	yes	NOUN
ajis02-5323	387	27	31	31	NUM
ajis02-5323	387	28	8.6	8.6	NUM
ajis02-5323	387	29	0.56	0.56	NUM
ajis02-5323	387	30	0.10	0.10	NUM
ajis02-5323	387	31	yes	yes	NOUN
ajis02-5323	387	32	17	17	NUM
ajis02-5323	387	33	8.8	8.8	NUM
ajis02-5323	387	34	*	*	NUM
ajis02-5323	387	35	0.44	0.44	NUM
ajis02-5323	387	36	0.11	0.11	NUM
ajis02-5323	387	37	(	(	PUNCT
ajis02-5323	387	38	n	n	PROPN
ajis02-5323	387	39	of	of	ADP
ajis02-5323	387	40	controls=9	controls=9	PROPN
ajis02-5323	387	41	)	)	PUNCT
ajis02-5323	388	1	no	no	DET
ajis02-5323	388	2	13	13	NUM
ajis02-5323	388	3	8.6	8.6	NUM
ajis02-5323	388	4	0.65	0.65	NUM
ajis02-5323	388	5	0.18	0.18	NUM
ajis02-5323	388	6	no	no	DET
ajis02-5323	388	7	21	21	NUM
ajis02-5323	388	8	8.7	8.7	NUM
ajis02-5323	388	9	0.80	0.80	NUM
ajis02-5323	388	10	0.17	0.17	NUM
ajis02-5323	388	11	no	no	DET
ajis02-5323	388	12	36	36	NUM
ajis02-5323	388	13	8.5	8.5	NUM
ajis02-5323	388	14	*	*	NUM
ajis02-5323	388	15	0.85	0.85	NUM
ajis02-5323	388	16	0.14	0.14	NUM
ajis02-5323	388	17	australasian	australasian	ADJ
ajis02-5323	388	18	journal	journal	NOUN
ajis02-5323	388	19	of	of	ADP
ajis02-5323	388	20	information	information	NOUN
ajis02-5323	388	21	systems	system	NOUN
ajis02-5323	388	22	slapnicar	slapnicar	NOUN
ajis02-5323	388	23	,	,	PUNCT
ajis02-5323	388	24	vidmar	vidmar	NOUN
ajis02-5323	388	25	&	&	CCONJ
ajis02-5323	388	26	tsen	tsen	ADJ
ajis02-5323	388	27	2025	2025	NUM
ajis02-5323	388	28	,	,	PUNCT
ajis02-5323	388	29	vol	vol	NOUN
ajis02-5323	388	30	29	29	NUM
ajis02-5323	388	31	,	,	PUNCT
ajis02-5323	388	32	research	research	NOUN
ajis02-5323	388	33	article	article	NOUN
ajis02-5323	388	34	process	process	NOUN
ajis02-5323	388	35	theory	theory	NOUN
ajis02-5323	388	36	of	of	ADP
ajis02-5323	388	37	supplier	supplier	NOUN
ajis02-5323	388	38	cyber	cyber	NOUN
ajis02-5323	388	39	risk	risk	NOUN
ajis02-5323	388	40	assessment	assessment	NOUN
ajis02-5323	388	41	22	22	NUM
ajis02-5323	388	42	to	to	PART
ajis02-5323	388	43	analyze	analyze	VERB
ajis02-5323	388	44	whether	whether	SCONJ
ajis02-5323	388	45	the	the	DET
ajis02-5323	388	46	risk	risk	NOUN
ajis02-5323	388	47	assessment	assessment	NOUN
ajis02-5323	388	48	process	process	NOUN
ajis02-5323	388	49	can	can	AUX
ajis02-5323	388	50	effectively	effectively	ADV
ajis02-5323	388	51	identify	identify	VERB
ajis02-5323	388	52	risky	risky	ADJ
ajis02-5323	388	53	suppliers	supplier	NOUN
ajis02-5323	388	54	we	we	PRON
ajis02-5323	388	55	compared	compare	VERB
ajis02-5323	388	56	the	the	DET
ajis02-5323	388	57	assessed	assessed	ADJ
ajis02-5323	388	58	quality	quality	NOUN
ajis02-5323	388	59	of	of	ADP
ajis02-5323	388	60	controls	control	NOUN
ajis02-5323	388	61	between	between	ADP
ajis02-5323	388	62	the	the	DET
ajis02-5323	388	63	suppliers	supplier	NOUN
ajis02-5323	388	64	that	that	PRON
ajis02-5323	388	65	suffered	suffer	VERB
ajis02-5323	388	66	a	a	DET
ajis02-5323	388	67	cyber	cyber	NOUN
ajis02-5323	388	68	incident	incident	NOUN
ajis02-5323	388	69	and	and	CCONJ
ajis02-5323	388	70	those	those	PRON
ajis02-5323	388	71	that	that	PRON
ajis02-5323	388	72	did	do	VERB
ajis02-5323	388	73	n’t	not	PART
ajis02-5323	388	74	.	.	PUNCT
ajis02-5323	389	1	the	the	DET
ajis02-5323	389	2	analysis	analysis	NOUN
ajis02-5323	389	3	is	be	AUX
ajis02-5323	389	4	presented	present	VERB
ajis02-5323	389	5	in	in	ADP
ajis02-5323	389	6	tables	table	NOUN
ajis02-5323	389	7	5	5	NUM
ajis02-5323	389	8	and	and	CCONJ
ajis02-5323	389	9	6	6	NUM
ajis02-5323	389	10	.	.	PUNCT
ajis02-5323	390	1	on	on	ADP
ajis02-5323	390	2	eight	eight	NUM
ajis02-5323	390	3	out	out	ADP
ajis02-5323	390	4	of	of	ADP
ajis02-5323	390	5	13	13	NUM
ajis02-5323	390	6	technology	technology	NOUN
ajis02-5323	390	7	controls	control	NOUN
ajis02-5323	390	8	,	,	PUNCT
ajis02-5323	390	9	suppliers	supplier	NOUN
ajis02-5323	390	10	without	without	ADP
ajis02-5323	390	11	an	an	DET
ajis02-5323	390	12	incident	incident	NOUN
ajis02-5323	390	13	scored	score	VERB
ajis02-5323	390	14	significantly	significantly	ADV
ajis02-5323	390	15	better	well	ADV
ajis02-5323	390	16	than	than	ADP
ajis02-5323	390	17	suppliers	supplier	NOUN
ajis02-5323	390	18	with	with	ADP
ajis02-5323	390	19	an	an	DET
ajis02-5323	390	20	incident	incident	NOUN
ajis02-5323	390	21	.	.	PUNCT
ajis02-5323	391	1	this	this	PRON
ajis02-5323	391	2	supports	support	VERB
ajis02-5323	391	3	the	the	DET
ajis02-5323	391	4	interview	interview	NOUN
ajis02-5323	391	5	findings	finding	NOUN
ajis02-5323	391	6	that	that	SCONJ
ajis02-5323	391	7	the	the	DET
ajis02-5323	391	8	assessment	assessment	NOUN
ajis02-5323	391	9	of	of	ADP
ajis02-5323	391	10	technology	technology	NOUN
ajis02-5323	391	11	is	be	AUX
ajis02-5323	391	12	the	the	DET
ajis02-5323	391	13	most	most	ADV
ajis02-5323	391	14	important	important	ADJ
ajis02-5323	391	15	area	area	NOUN
ajis02-5323	391	16	for	for	ADP
ajis02-5323	391	17	understanding	understand	VERB
ajis02-5323	391	18	supplier	supplier	NOUN
ajis02-5323	391	19	cyber	cyber	NOUN
ajis02-5323	391	20	security	security	NOUN
ajis02-5323	391	21	posture	posture	NOUN
ajis02-5323	391	22	and	and	CCONJ
ajis02-5323	391	23	that	that	SCONJ
ajis02-5323	391	24	weaknesses	weakness	NOUN
ajis02-5323	391	25	can	can	AUX
ajis02-5323	391	26	be	be	AUX
ajis02-5323	391	27	identified	identify	VERB
ajis02-5323	391	28	in	in	ADP
ajis02-5323	391	29	a	a	DET
ajis02-5323	391	30	thorough	thorough	ADJ
ajis02-5323	391	31	assessment	assessment	NOUN
ajis02-5323	391	32	process	process	NOUN
ajis02-5323	391	33	.	.	PUNCT
ajis02-5323	392	1	suppliers	supplier	NOUN
ajis02-5323	392	2	who	who	PRON
ajis02-5323	392	3	have	have	AUX
ajis02-5323	392	4	n’t	not	PART
ajis02-5323	392	5	experienced	experience	VERB
ajis02-5323	392	6	an	an	DET
ajis02-5323	392	7	incident	incident	NOUN
ajis02-5323	392	8	were	be	AUX
ajis02-5323	392	9	also	also	ADV
ajis02-5323	392	10	better	well	ADV
ajis02-5323	392	11	assessed	assess	VERB
ajis02-5323	392	12	on	on	ADP
ajis02-5323	392	13	management	management	NOUN
ajis02-5323	392	14	attitudes	attitude	NOUN
ajis02-5323	392	15	towards	towards	ADP
ajis02-5323	392	16	protecting	protect	VERB
ajis02-5323	392	17	information	information	NOUN
ajis02-5323	392	18	(	(	PUNCT
ajis02-5323	392	19	people	people	NOUN
ajis02-5323	392	20	)	)	PUNCT
ajis02-5323	392	21	,	,	PUNCT
ajis02-5323	392	22	transparency	transparency	NOUN
ajis02-5323	392	23	and	and	CCONJ
ajis02-5323	392	24	reputation	reputation	NOUN
ajis02-5323	392	25	(	(	PUNCT
ajis02-5323	392	26	general	general	ADJ
ajis02-5323	392	27	information	information	NOUN
ajis02-5323	392	28	)	)	PUNCT
ajis02-5323	392	29	.	.	PUNCT
ajis02-5323	393	1	in	in	ADP
ajis02-5323	393	2	contrast	contrast	NOUN
ajis02-5323	393	3	to	to	ADP
ajis02-5323	393	4	the	the	DET
ajis02-5323	393	5	interview	interview	NOUN
ajis02-5323	393	6	findings	finding	NOUN
ajis02-5323	393	7	,	,	PUNCT
ajis02-5323	393	8	process	process	NOUN
ajis02-5323	393	9	controls	control	NOUN
ajis02-5323	393	10	were	be	AUX
ajis02-5323	393	11	not	not	PART
ajis02-5323	393	12	significantly	significantly	ADV
ajis02-5323	393	13	different	different	ADJ
ajis02-5323	393	14	.	.	PUNCT
ajis02-5323	394	1	the	the	DET
ajis02-5323	394	2	descriptive	descriptive	ADJ
ajis02-5323	394	3	statistics	statistic	NOUN
ajis02-5323	394	4	indicate	indicate	VERB
ajis02-5323	394	5	that	that	SCONJ
ajis02-5323	394	6	processes	process	NOUN
ajis02-5323	394	7	were	be	AUX
ajis02-5323	394	8	perceived	perceive	VERB
ajis02-5323	394	9	as	as	ADP
ajis02-5323	394	10	well	well	ADV
ajis02-5323	394	11	-	-	PUNCT
ajis02-5323	394	12	established	establish	VERB
ajis02-5323	394	13	also	also	ADV
ajis02-5323	394	14	for	for	ADP
ajis02-5323	394	15	suppliers	supplier	NOUN
ajis02-5323	394	16	that	that	PRON
ajis02-5323	394	17	had	have	VERB
ajis02-5323	394	18	an	an	DET
ajis02-5323	394	19	incident	incident	NOUN
ajis02-5323	394	20	.	.	PUNCT
ajis02-5323	395	1	the	the	DET
ajis02-5323	395	2	survey	survey	NOUN
ajis02-5323	395	3	also	also	ADV
ajis02-5323	395	4	showed	show	VERB
ajis02-5323	395	5	threat	threat	NOUN
ajis02-5323	395	6	intelligence	intelligence	NOUN
ajis02-5323	395	7	is	be	AUX
ajis02-5323	395	8	paramount	paramount	ADJ
ajis02-5323	395	9	,	,	PUNCT
ajis02-5323	395	10	as	as	SCONJ
ajis02-5323	395	11	red	red	ADJ
ajis02-5323	395	12	flags	flag	NOUN
ajis02-5323	395	13	were	be	AUX
ajis02-5323	395	14	provided	provide	VERB
ajis02-5323	395	15	significantly	significantly	ADV
ajis02-5323	395	16	more	more	ADV
ajis02-5323	395	17	often	often	ADV
ajis02-5323	395	18	for	for	ADP
ajis02-5323	395	19	suppliers	supplier	NOUN
ajis02-5323	395	20	that	that	PRON
ajis02-5323	395	21	suffered	suffer	VERB
ajis02-5323	395	22	an	an	DET
ajis02-5323	395	23	incident	incident	NOUN
ajis02-5323	395	24	than	than	ADP
ajis02-5323	395	25	for	for	ADP
ajis02-5323	395	26	those	those	PRON
ajis02-5323	395	27	who	who	PRON
ajis02-5323	395	28	did	do	VERB
ajis02-5323	395	29	not	not	PART
ajis02-5323	395	30	(	(	PUNCT
ajis02-5323	395	31	24	24	NUM
ajis02-5323	395	32	%	%	NOUN
ajis02-5323	395	33	vs	vs	ADP
ajis02-5323	395	34	3.6	3.6	NUM
ajis02-5323	395	35	%	%	NOUN
ajis02-5323	395	36	)	)	PUNCT
ajis02-5323	395	37	.	.	PUNCT
ajis02-5323	396	1	another	another	DET
ajis02-5323	396	2	noteworthy	noteworthy	ADJ
ajis02-5323	396	3	finding	finding	NOUN
ajis02-5323	396	4	is	be	AUX
ajis02-5323	396	5	that	that	SCONJ
ajis02-5323	396	6	in	in	ADP
ajis02-5323	396	7	our	our	PRON
ajis02-5323	396	8	more	more	ADV
ajis02-5323	396	9	detailed	detailed	ADJ
ajis02-5323	396	10	analysis	analysis	NOUN
ajis02-5323	396	11	(	(	PUNCT
ajis02-5323	396	12	for	for	ADP
ajis02-5323	396	13	brevity	brevity	NOUN
ajis02-5323	396	14	,	,	PUNCT
ajis02-5323	396	15	not	not	PART
ajis02-5323	396	16	tabulated	tabulate	VERB
ajis02-5323	396	17	)	)	PUNCT
ajis02-5323	396	18	,	,	PUNCT
ajis02-5323	396	19	those	those	DET
ajis02-5323	396	20	suppliers	supplier	NOUN
ajis02-5323	396	21	that	that	PRON
ajis02-5323	396	22	the	the	DET
ajis02-5323	396	23	focal	focal	ADJ
ajis02-5323	396	24	organization	organization	NOUN
ajis02-5323	396	25	classified	classify	VERB
ajis02-5323	396	26	as	as	ADP
ajis02-5323	396	27	less	less	ADV
ajis02-5323	396	28	critical	critical	ADJ
ajis02-5323	396	29	reported	report	VERB
ajis02-5323	396	30	a	a	DET
ajis02-5323	396	31	cyber	cyber	NOUN
ajis02-5323	396	32	incident	incident	NOUN
ajis02-5323	396	33	more	more	ADV
ajis02-5323	396	34	frequently	frequently	ADV
ajis02-5323	396	35	than	than	ADP
ajis02-5323	396	36	those	those	PRON
ajis02-5323	396	37	that	that	PRON
ajis02-5323	396	38	were	be	AUX
ajis02-5323	396	39	classified	classify	VERB
ajis02-5323	396	40	as	as	ADP
ajis02-5323	396	41	more	more	ADV
ajis02-5323	396	42	critical	critical	ADJ
ajis02-5323	396	43	,	,	PUNCT
ajis02-5323	396	44	but	but	CCONJ
ajis02-5323	396	45	there	there	PRON
ajis02-5323	396	46	was	be	VERB
ajis02-5323	396	47	no	no	DET
ajis02-5323	396	48	difference	difference	NOUN
ajis02-5323	396	49	in	in	ADP
ajis02-5323	396	50	the	the	DET
ajis02-5323	396	51	number	number	NOUN
ajis02-5323	396	52	of	of	ADP
ajis02-5323	396	53	incidents	incident	NOUN
ajis02-5323	396	54	between	between	ADP
ajis02-5323	396	55	suppliers	supplier	NOUN
ajis02-5323	396	56	that	that	PRON
ajis02-5323	396	57	had	have	VERB
ajis02-5323	396	58	access	access	NOUN
ajis02-5323	396	59	to	to	ADP
ajis02-5323	396	60	sensitive	sensitive	ADJ
ajis02-5323	396	61	data	datum	NOUN
ajis02-5323	396	62	and	and	CCONJ
ajis02-5323	396	63	those	those	PRON
ajis02-5323	396	64	that	that	PRON
ajis02-5323	396	65	do	do	VERB
ajis02-5323	396	66	not	not	PART
ajis02-5323	396	67	.	.	PUNCT
ajis02-5323	397	1	this	this	PRON
ajis02-5323	397	2	suggests	suggest	VERB
ajis02-5323	397	3	that	that	SCONJ
ajis02-5323	397	4	contrary	contrary	ADV
ajis02-5323	397	5	to	to	ADP
ajis02-5323	397	6	current	current	ADJ
ajis02-5323	397	7	practices	practice	NOUN
ajis02-5323	397	8	,	,	PUNCT
ajis02-5323	397	9	organizations	organization	NOUN
ajis02-5323	397	10	might	might	AUX
ajis02-5323	397	11	need	need	VERB
ajis02-5323	397	12	to	to	PART
ajis02-5323	397	13	pay	pay	VERB
ajis02-5323	397	14	more	more	ADJ
ajis02-5323	397	15	attention	attention	NOUN
ajis02-5323	397	16	to	to	ADP
ajis02-5323	397	17	suppliers	supplier	NOUN
ajis02-5323	397	18	that	that	PRON
ajis02-5323	397	19	are	be	AUX
ajis02-5323	397	20	classified	classify	VERB
ajis02-5323	397	21	as	as	ADP
ajis02-5323	397	22	less	less	ADV
ajis02-5323	397	23	critical	critical	ADJ
ajis02-5323	397	24	,	,	PUNCT
ajis02-5323	397	25	as	as	SCONJ
ajis02-5323	397	26	they	they	PRON
ajis02-5323	397	27	might	might	AUX
ajis02-5323	397	28	be	be	AUX
ajis02-5323	397	29	a	a	DET
ajis02-5323	397	30	weak	weak	ADJ
ajis02-5323	397	31	point	point	NOUN
ajis02-5323	397	32	of	of	ADP
ajis02-5323	397	33	access	access	NOUN
ajis02-5323	397	34	.	.	PUNCT
ajis02-5323	398	1	overall	overall	ADV
ajis02-5323	398	2	,	,	PUNCT
ajis02-5323	398	3	the	the	DET
ajis02-5323	398	4	findings	finding	NOUN
ajis02-5323	398	5	from	from	ADP
ajis02-5323	398	6	the	the	DET
ajis02-5323	398	7	survey	survey	NOUN
ajis02-5323	398	8	suggest	suggest	VERB
ajis02-5323	398	9	that	that	SCONJ
ajis02-5323	398	10	the	the	DET
ajis02-5323	398	11	process	process	NOUN
ajis02-5323	398	12	of	of	ADP
ajis02-5323	398	13	supplier	supplier	NOUN
ajis02-5323	398	14	cyber	cyber	NOUN
ajis02-5323	398	15	risk	risk	NOUN
ajis02-5323	398	16	assessment	assessment	NOUN
ajis02-5323	398	17	can	can	AUX
ajis02-5323	398	18	be	be	AUX
ajis02-5323	398	19	effective	effective	ADJ
ajis02-5323	398	20	in	in	ADP
ajis02-5323	398	21	identifying	identify	VERB
ajis02-5323	398	22	risky	risky	ADJ
ajis02-5323	398	23	suppliers	supplier	NOUN
ajis02-5323	398	24	.	.	PUNCT
ajis02-5323	399	1	supplier	supplier	NOUN
ajis02-5323	399	2	controls	control	NOUN
ajis02-5323	399	3	incident	incident	NOUN
ajis02-5323	399	4	n	n	PRON
ajis02-5323	399	5	mean	mean	VERB
ajis02-5323	399	6	std	std	NOUN
ajis02-5323	399	7	.	.	PUNCT
ajis02-5323	400	1	deviation	deviation	NOUN
ajis02-5323	400	2	std	std	NOUN
ajis02-5323	400	3	.	.	PUNCT
ajis02-5323	400	4	error	error	NOUN
ajis02-5323	400	5	mean	mean	NOUN
ajis02-5323	400	6	technology	technology	NOUN
ajis02-5323	400	7	(	(	PUNCT
ajis02-5323	400	8	1	1	NUM
ajis02-5323	400	9	min	min	NOUN
ajis02-5323	400	10	4	4	NUM
ajis02-5323	400	11	max	max	PROPN
ajis02-5323	400	12	)	)	PUNCT
ajis02-5323	400	13	commitment	commitment	NOUN
ajis02-5323	400	14	to	to	ADP
ajis02-5323	400	15	secure	secure	VERB
ajis02-5323	400	16	-	-	PUNCT
ajis02-5323	400	17	by	by	ADP
ajis02-5323	400	18	-	-	PUNCT
ajis02-5323	400	19	design	design	NOUN
ajis02-5323	400	20	practices	practice	NOUN
ajis02-5323	400	21	yes	yes	INTJ
ajis02-5323	400	22	21	21	NUM
ajis02-5323	400	23	2.48	2.48	NUM
ajis02-5323	400	24	.981	.981	NUM
ajis02-5323	400	25	.214	.214	NUM
ajis02-5323	400	26	no	no	DET
ajis02-5323	400	27	24	24	NUM
ajis02-5323	400	28	2.88	2.88	NUM
ajis02-5323	400	29	1.116	1.116	NUM
ajis02-5323	400	30	.228	.228	NUM
ajis02-5323	400	31	use	use	NOUN
ajis02-5323	400	32	of	of	ADP
ajis02-5323	400	33	secure	secure	ADJ
ajis02-5323	400	34	coding	code	VERB
ajis02-5323	400	35	practices	practice	NOUN
ajis02-5323	400	36	yes	yes	INTJ
ajis02-5323	400	37	21	21	NUM
ajis02-5323	400	38	2.29	2.29	NUM
ajis02-5323	400	39	*	*	PROPN
ajis02-5323	400	40	1.007	1.007	NUM
ajis02-5323	400	41	.220	.220	NUM
ajis02-5323	400	42	no	no	DET
ajis02-5323	400	43	24	24	NUM
ajis02-5323	400	44	2.71	2.71	NUM
ajis02-5323	400	45	*	*	NUM
ajis02-5323	400	46	1.042	1.042	NUM
ajis02-5323	400	47	.213	.213	NUM
ajis02-5323	400	48	delivery	delivery	NOUN
ajis02-5323	400	49	of	of	ADP
ajis02-5323	400	50	secure	secure	NOUN
ajis02-5323	400	51	-	-	PUNCT
ajis02-5323	400	52	by	by	ADP
ajis02-5323	400	53	-	-	PUNCT
ajis02-5323	400	54	default	default	NOUN
ajis02-5323	400	55	products	product	NOUN
ajis02-5323	400	56	and	and	CCONJ
ajis02-5323	400	57	services	service	NOUN
ajis02-5323	400	58	yes	yes	INTJ
ajis02-5323	400	59	20	20	NUM
ajis02-5323	400	60	2.30	2.30	NUM
ajis02-5323	400	61	1.031	1.031	NUM
ajis02-5323	400	62	.231	.231	NUM
ajis02-5323	400	63	no	no	DET
ajis02-5323	400	64	24	24	NUM
ajis02-5323	400	65	2.54	2.54	NUM
ajis02-5323	400	66	1.215	1.215	NUM
ajis02-5323	400	67	.248	.248	NUM
ajis02-5323	400	68	commitment	commitment	NOUN
ajis02-5323	400	69	to	to	ADP
ajis02-5323	400	70	maintaining	maintain	VERB
ajis02-5323	400	71	the	the	DET
ajis02-5323	400	72	security	security	NOUN
ajis02-5323	400	73	of	of	ADP
ajis02-5323	400	74	their	their	PRON
ajis02-5323	400	75	products	product	NOUN
ajis02-5323	400	76	and	and	CCONJ
ajis02-5323	400	77	services	service	NOUN
ajis02-5323	400	78	yes	yes	INTJ
ajis02-5323	400	79	22	22	NUM
ajis02-5323	400	80	2.50	2.50	NUM
ajis02-5323	400	81	1.012	1.012	NUM
ajis02-5323	400	82	.216	.216	NUM
ajis02-5323	400	83	no	no	DET
ajis02-5323	400	84	25	25	NUM
ajis02-5323	400	85	2.76	2.76	NUM
ajis02-5323	400	86	1.052	1.052	NUM
ajis02-5323	400	87	.210	.210	NUM
ajis02-5323	400	88	vulnerability	vulnerability	NOUN
ajis02-5323	400	89	disclosure	disclosure	NOUN
ajis02-5323	400	90	policy	policy	NOUN
ajis02-5323	400	91	yes	yes	INTJ
ajis02-5323	400	92	18	18	NUM
ajis02-5323	400	93	2.28	2.28	NUM
ajis02-5323	400	94	1.179	1.179	NUM
ajis02-5323	400	95	.278	.278	NUM
ajis02-5323	400	96	no	no	DET
ajis02-5323	400	97	25	25	NUM
ajis02-5323	400	98	2.72	2.72	NUM
ajis02-5323	400	99	1.173	1.173	NUM
ajis02-5323	400	100	.235	.235	NUM
ajis02-5323	400	101	protected	protect	VERB
ajis02-5323	400	102	third	third	ADJ
ajis02-5323	400	103	-	-	PUNCT
ajis02-5323	400	104	party	party	NOUN
ajis02-5323	400	105	access	access	NOUN
ajis02-5323	400	106	yes	yes	INTJ
ajis02-5323	400	107	18	18	NUM
ajis02-5323	400	108	2.22	2.22	NUM
ajis02-5323	400	109	*	*	NOUN
ajis02-5323	400	110	1.114	1.114	NUM
ajis02-5323	400	111	.263	.263	NUM
ajis02-5323	400	112	no	no	DET
ajis02-5323	400	113	25	25	NUM
ajis02-5323	400	114	2.76	2.76	NUM
ajis02-5323	400	115	*	*	NUM
ajis02-5323	400	116	1.091	1.091	NUM
ajis02-5323	400	117	.218	.218	NUM
ajis02-5323	400	118	use	use	NOUN
ajis02-5323	400	119	of	of	ADP
ajis02-5323	400	120	encryption	encryption	NOUN
ajis02-5323	400	121	and	and	CCONJ
ajis02-5323	400	122	cryptography	cryptography	NOUN
ajis02-5323	401	1	yes	yes	INTJ
ajis02-5323	401	2	22	22	NUM
ajis02-5323	401	3	2.18	2.18	NUM
ajis02-5323	401	4	*	*	SYM
ajis02-5323	401	5	*	*	PROPN
ajis02-5323	402	1	1.053	1.053	NUM
ajis02-5323	402	2	.224	.224	NUM
ajis02-5323	402	3	no	no	DET
ajis02-5323	402	4	25	25	NUM
ajis02-5323	402	5	3.08	3.08	NUM
ajis02-5323	402	6	*	*	PUNCT
ajis02-5323	402	7	*	*	NOUN
ajis02-5323	402	8	.954	.954	NUM
ajis02-5323	402	9	.191	.191	NUM
ajis02-5323	402	10	updated	update	VERB
ajis02-5323	402	11	and	and	CCONJ
ajis02-5323	402	12	patched	patched	ADJ
ajis02-5323	402	13	software	software	NOUN
ajis02-5323	402	14	and	and	CCONJ
ajis02-5323	402	15	servers	server	NOUN
ajis02-5323	402	16	yes	yes	INTJ
ajis02-5323	402	17	21	21	NUM
ajis02-5323	402	18	2.33	2.33	NUM
ajis02-5323	402	19	*	*	PUNCT
ajis02-5323	402	20	*	*	PUNCT
ajis02-5323	402	21	1.017	1.017	NUM
ajis02-5323	402	22	.222	.222	NUM
ajis02-5323	402	23	no	no	DET
ajis02-5323	402	24	25	25	NUM
ajis02-5323	402	25	3.04	3.04	NUM
ajis02-5323	402	26	*	*	PUNCT
ajis02-5323	402	27	*	*	PROPN
ajis02-5323	402	28	1.060	1.060	NUM
ajis02-5323	402	29	.212	.212	NUM
ajis02-5323	402	30	strong	strong	ADJ
ajis02-5323	402	31	password	password	NOUN
ajis02-5323	402	32	systems	system	NOUN
ajis02-5323	402	33	supported	support	VERB
ajis02-5323	402	34	with	with	ADP
ajis02-5323	402	35	mfa	mfa	PROPN
ajis02-5323	402	36	yes	yes	PROPN
ajis02-5323	402	37	20	20	NUM
ajis02-5323	402	38	2.35	2.35	NUM
ajis02-5323	402	39	*	*	PUNCT
ajis02-5323	402	40	1.226	1.226	NUM
ajis02-5323	402	41	.274	.274	NUM
ajis02-5323	402	42	no	no	DET
ajis02-5323	402	43	26	26	NUM
ajis02-5323	402	44	2.85	2.85	NUM
ajis02-5323	402	45	*	*	SYM
ajis02-5323	402	46	1.084	1.084	NUM
ajis02-5323	402	47	.213	.213	NUM
ajis02-5323	402	48	secure	secure	ADJ
ajis02-5323	402	49	configuration	configuration	NOUN
ajis02-5323	402	50	of	of	ADP
ajis02-5323	402	51	tools	tool	NOUN
ajis02-5323	402	52	and	and	CCONJ
ajis02-5323	402	53	firewalls	firewall	NOUN
ajis02-5323	402	54	yes	yes	INTJ
ajis02-5323	402	55	21	21	NUM
ajis02-5323	402	56	2.24	2.24	NUM
ajis02-5323	402	57	*	*	PUNCT
ajis02-5323	402	58	*	*	PUNCT
ajis02-5323	402	59	1.091	1.091	NUM
ajis02-5323	402	60	.238	.238	NUM
ajis02-5323	402	61	no	no	DET
ajis02-5323	402	62	26	26	NUM
ajis02-5323	402	63	2.88	2.88	NUM
ajis02-5323	402	64	*	*	PUNCT
ajis02-5323	402	65	*	*	PUNCT
ajis02-5323	402	66	.993	.993	NUM
ajis02-5323	402	67	.195	.195	NUM
ajis02-5323	402	68	detection	detection	NOUN
ajis02-5323	402	69	systems	system	NOUN
ajis02-5323	402	70	yes	yes	ADV
ajis02-5323	402	71	21	21	NUM
ajis02-5323	402	72	2.29	2.29	NUM
ajis02-5323	402	73	*	*	PROPN
ajis02-5323	402	74	1.056	1.056	NUM
ajis02-5323	402	75	.230	.230	NUM
ajis02-5323	402	76	no	no	DET
ajis02-5323	402	77	26	26	NUM
ajis02-5323	402	78	2.81	2.81	NUM
ajis02-5323	402	79	*	*	NUM
ajis02-5323	402	80	1.167	1.167	NUM
ajis02-5323	402	81	.229	.229	NUM
ajis02-5323	402	82	physical	physical	ADJ
ajis02-5323	402	83	security	security	NOUN
ajis02-5323	402	84	controls	control	VERB
ajis02-5323	402	85	yes	yes	INTJ
ajis02-5323	402	86	22	22	NUM
ajis02-5323	402	87	2.41	2.41	NUM
ajis02-5323	402	88	*	*	NUM
ajis02-5323	402	89	1.221	1.221	NUM
ajis02-5323	402	90	.260	.260	NUM
ajis02-5323	402	91	no	no	DET
ajis02-5323	402	92	25	25	NUM
ajis02-5323	402	93	2.88	2.88	NUM
ajis02-5323	402	94	*	*	SYM
ajis02-5323	402	95	1.092	1.092	NUM
ajis02-5323	402	96	.218	.218	NUM
ajis02-5323	402	97	people	people	NOUN
ajis02-5323	402	98	(	(	PUNCT
ajis02-5323	402	99	1	1	NUM
ajis02-5323	402	100	min	min	NOUN
ajis02-5323	402	101	5	5	NUM
ajis02-5323	402	102	max	max	PROPN
ajis02-5323	402	103	)	)	PUNCT
ajis02-5323	402	104	australasian	australasian	ADJ
ajis02-5323	402	105	journal	journal	NOUN
ajis02-5323	402	106	of	of	ADP
ajis02-5323	402	107	information	information	NOUN
ajis02-5323	402	108	systems	system	NOUN
ajis02-5323	402	109	slapnicar	slapnicar	NOUN
ajis02-5323	402	110	,	,	PUNCT
ajis02-5323	402	111	vidmar	vidmar	NOUN
ajis02-5323	402	112	&	&	CCONJ
ajis02-5323	402	113	tsen	tsen	ADJ
ajis02-5323	402	114	2025	2025	NUM
ajis02-5323	402	115	,	,	PUNCT
ajis02-5323	402	116	vol	vol	NOUN
ajis02-5323	402	117	29	29	NUM
ajis02-5323	402	118	,	,	PUNCT
ajis02-5323	402	119	research	research	NOUN
ajis02-5323	402	120	article	article	NOUN
ajis02-5323	402	121	process	process	NOUN
ajis02-5323	402	122	theory	theory	NOUN
ajis02-5323	402	123	of	of	ADP
ajis02-5323	402	124	supplier	supplier	NOUN
ajis02-5323	402	125	cyber	cyber	NOUN
ajis02-5323	402	126	risk	risk	NOUN
ajis02-5323	402	127	assessment	assessment	NOUN
ajis02-5323	402	128	23	23	NUM
ajis02-5323	402	129	how	how	SCONJ
ajis02-5323	402	130	thoroughly	thoroughly	ADV
ajis02-5323	402	131	does	do	VERB
ajis02-5323	402	132	your	your	PRON
ajis02-5323	402	133	chosen	choose	VERB
ajis02-5323	402	134	supplier	supplier	NOUN
ajis02-5323	402	135	perform	perform	NOUN
ajis02-5323	402	136	employee	employee	NOUN
ajis02-5323	402	137	background	background	NOUN
ajis02-5323	402	138	checks	check	NOUN
ajis02-5323	402	139	for	for	ADP
ajis02-5323	402	140	those	those	PRON
ajis02-5323	402	141	involved	involve	VERB
ajis02-5323	402	142	in	in	ADP
ajis02-5323	402	143	cyber	cyber	ADJ
ajis02-5323	402	144	risk	risk	NOUN
ajis02-5323	402	145	management	management	NOUN
ajis02-5323	403	1	yes	yes	INTJ
ajis02-5323	403	2	24	24	NUM
ajis02-5323	403	3	3.13	3.13	NUM
ajis02-5323	403	4	.900	.900	NUM
ajis02-5323	403	5	.184	.184	NUM
ajis02-5323	404	1	no	no	DET
ajis02-5323	404	2	28	28	NUM
ajis02-5323	404	3	3.07	3.07	NUM
ajis02-5323	404	4	1.152	1.152	NUM
ajis02-5323	404	5	.218	.218	NUM
ajis02-5323	404	6	how	how	SCONJ
ajis02-5323	404	7	would	would	AUX
ajis02-5323	404	8	you	you	PRON
ajis02-5323	404	9	rate	rate	VERB
ajis02-5323	404	10	your	your	PRON
ajis02-5323	404	11	chosen	choose	VERB
ajis02-5323	404	12	supplier	supplier	NOUN
ajis02-5323	404	13	's	's	PART
ajis02-5323	404	14	management	management	NOUN
ajis02-5323	404	15	attitudes	attitude	NOUN
ajis02-5323	404	16	towards	towards	ADP
ajis02-5323	404	17	the	the	DET
ajis02-5323	404	18	protection	protection	NOUN
ajis02-5323	404	19	of	of	ADP
ajis02-5323	404	20	information	information	NOUN
ajis02-5323	404	21	yes	yes	INTJ
ajis02-5323	404	22	25	25	NUM
ajis02-5323	404	23	2.56	2.56	NUM
ajis02-5323	404	24	*	*	PUNCT
ajis02-5323	404	25	*	*	PUNCT
ajis02-5323	404	26	1.325	1.325	NUM
ajis02-5323	404	27	.265	.265	NUM
ajis02-5323	404	28	no	no	DET
ajis02-5323	404	29	28	28	NUM
ajis02-5323	404	30	3.18	3.18	NUM
ajis02-5323	404	31	*	*	PUNCT
ajis02-5323	404	32	*	*	PROPN
ajis02-5323	404	33	1.188	1.188	NUM
ajis02-5323	404	34	.225	.225	NUM
ajis02-5323	404	35	general	general	ADJ
ajis02-5323	404	36	information	information	NOUN
ajis02-5323	404	37	(	(	PUNCT
ajis02-5323	404	38	1	1	NUM
ajis02-5323	404	39	min	min	NOUN
ajis02-5323	404	40	5	5	NUM
ajis02-5323	404	41	max	max	PROPN
ajis02-5323	404	42	)	)	PUNCT
ajis02-5323	404	43	how	how	SCONJ
ajis02-5323	404	44	complex	complex	ADJ
ajis02-5323	404	45	is	be	AUX
ajis02-5323	404	46	your	your	PRON
ajis02-5323	404	47	supplier	supplier	NOUN
ajis02-5323	404	48	's	's	PART
ajis02-5323	404	49	supply	supply	NOUN
ajis02-5323	404	50	chain	chain	NOUN
ajis02-5323	404	51	?	?	PUNCT
ajis02-5323	405	1	yes	yes	INTJ
ajis02-5323	405	2	25	25	NUM
ajis02-5323	405	3	3.00	3.00	NUM
ajis02-5323	405	4	1.041	1.041	NUM
ajis02-5323	405	5	.208	.208	NUM
ajis02-5323	405	6	no	no	DET
ajis02-5323	405	7	28	28	NUM
ajis02-5323	405	8	2.79	2.79	NUM
ajis02-5323	405	9	1.134	1.134	NUM
ajis02-5323	405	10	.214	.214	NUM
ajis02-5323	405	11	how	how	SCONJ
ajis02-5323	405	12	likely	likely	ADV
ajis02-5323	405	13	is	be	AUX
ajis02-5323	405	14	your	your	PRON
ajis02-5323	405	15	selected	select	VERB
ajis02-5323	405	16	supplier	supplier	NOUN
ajis02-5323	405	17	subject	subject	NOUN
ajis02-5323	405	18	to	to	ADP
ajis02-5323	405	19	foreign	foreign	ADJ
ajis02-5323	405	20	ownership	ownership	NOUN
ajis02-5323	405	21	,	,	PUNCT
ajis02-5323	405	22	operations	operation	NOUN
ajis02-5323	405	23	or	or	CCONJ
ajis02-5323	405	24	control	control	NOUN
ajis02-5323	405	25	?	?	PUNCT
ajis02-5323	406	1	yes	yes	INTJ
ajis02-5323	406	2	25	25	NUM
ajis02-5323	406	3	2.72	2.72	NUM
ajis02-5323	406	4	1.242	1.242	NUM
ajis02-5323	406	5	.248	.248	NUM
ajis02-5323	406	6	no	no	DET
ajis02-5323	406	7	28	28	NUM
ajis02-5323	406	8	2.75	2.75	NUM
ajis02-5323	406	9	1.266	1.266	NUM
ajis02-5323	406	10	.239	.239	NUM
ajis02-5323	406	11	how	how	SCONJ
ajis02-5323	406	12	attractive	attractive	ADJ
ajis02-5323	406	13	is	be	AUX
ajis02-5323	406	14	your	your	PRON
ajis02-5323	406	15	chosen	choose	VERB
ajis02-5323	406	16	supplier	supplier	NOUN
ajis02-5323	406	17	as	as	ADP
ajis02-5323	406	18	a	a	DET
ajis02-5323	406	19	target	target	NOUN
ajis02-5323	406	20	for	for	ADP
ajis02-5323	406	21	cyber	cyber	ADJ
ajis02-5323	406	22	incidents	incident	NOUN
ajis02-5323	406	23	?	?	PUNCT
ajis02-5323	407	1	yes	yes	INTJ
ajis02-5323	407	2	25	25	NUM
ajis02-5323	407	3	3.60	3.60	NUM
ajis02-5323	407	4	1.000	1.000	NUM
ajis02-5323	407	5	.200	.200	NUM
ajis02-5323	408	1	no	no	DET
ajis02-5323	408	2	28	28	NUM
ajis02-5323	408	3	3.57	3.57	NUM
ajis02-5323	408	4	1.103	1.103	NUM
ajis02-5323	408	5	.208	.208	NUM
ajis02-5323	408	6	what	what	PRON
ajis02-5323	408	7	is	be	AUX
ajis02-5323	408	8	your	your	PRON
ajis02-5323	408	9	chosen	choose	VERB
ajis02-5323	408	10	supplier	supplier	NOUN
ajis02-5323	408	11	's	's	PART
ajis02-5323	408	12	financial	financial	ADJ
ajis02-5323	408	13	health	health	NOUN
ajis02-5323	408	14	?	?	PUNCT
ajis02-5323	409	1	yes	yes	INTJ
ajis02-5323	409	2	25	25	NUM
ajis02-5323	409	3	3.96	3.96	NUM
ajis02-5323	409	4	.978	.978	NUM
ajis02-5323	409	5	.196	.196	NUM
ajis02-5323	409	6	no	no	DET
ajis02-5323	409	7	28	28	NUM
ajis02-5323	409	8	4.25	4.25	NUM
ajis02-5323	409	9	.967	.967	NUM
ajis02-5323	409	10	.183	.183	X
ajis02-5323	410	1	what	what	PRON
ajis02-5323	410	2	is	be	AUX
ajis02-5323	410	3	your	your	PRON
ajis02-5323	410	4	chosen	choose	VERB
ajis02-5323	410	5	supplier	supplier	NOUN
ajis02-5323	410	6	's	's	PART
ajis02-5323	410	7	market	market	NOUN
ajis02-5323	410	8	share	share	NOUN
ajis02-5323	410	9	?	?	PUNCT
ajis02-5323	411	1	yes	yes	INTJ
ajis02-5323	411	2	25	25	NUM
ajis02-5323	411	3	3.00	3.00	NUM
ajis02-5323	411	4	.816	.816	NUM
ajis02-5323	411	5	.163	.163	NUM
ajis02-5323	412	1	no	no	DET
ajis02-5323	412	2	28	28	NUM
ajis02-5323	412	3	3.04	3.04	NUM
ajis02-5323	412	4	.922	.922	NUM
ajis02-5323	412	5	.174	.174	NUM
ajis02-5323	413	1	what	what	PRON
ajis02-5323	413	2	is	be	AUX
ajis02-5323	413	3	your	your	PRON
ajis02-5323	413	4	chosen	choose	VERB
ajis02-5323	413	5	supplier	supplier	NOUN
ajis02-5323	413	6	's	's	PART
ajis02-5323	413	7	age	age	NOUN
ajis02-5323	413	8	?	?	PUNCT
ajis02-5323	414	1	(	(	PUNCT
ajis02-5323	414	2	1	1	NUM
ajis02-5323	414	3	min	min	NOUN
ajis02-5323	414	4	–	–	PUNCT
ajis02-5323	414	5	4	4	NUM
ajis02-5323	414	6	max	max	NOUN
ajis02-5323	414	7	)	)	PUNCT
ajis02-5323	414	8	yes	yes	ADV
ajis02-5323	415	1	23	23	NUM
ajis02-5323	415	2	2.87	2.87	NUM
ajis02-5323	415	3	*	*	NOUN
ajis02-5323	415	4	.344	.344	NUM
ajis02-5323	415	5	.072	.072	NUM
ajis02-5323	415	6	no	no	DET
ajis02-5323	415	7	26	26	NUM
ajis02-5323	415	8	2.65	2.65	NUM
ajis02-5323	415	9	*	*	NOUN
ajis02-5323	415	10	.562	.562	NUM
ajis02-5323	415	11	.110	.110	NUM
ajis02-5323	416	1	what	what	PRON
ajis02-5323	416	2	is	be	AUX
ajis02-5323	416	3	your	your	PRON
ajis02-5323	416	4	chosen	choose	VERB
ajis02-5323	416	5	supplier	supplier	NOUN
ajis02-5323	416	6	's	's	PART
ajis02-5323	416	7	size	size	NOUN
ajis02-5323	416	8	?	?	PUNCT
ajis02-5323	417	1	(	(	PUNCT
ajis02-5323	417	2	1	1	NUM
ajis02-5323	417	3	min	min	NOUN
ajis02-5323	417	4	–	–	PUNCT
ajis02-5323	417	5	4	4	NUM
ajis02-5323	417	6	max	max	NOUN
ajis02-5323	417	7	)	)	PUNCT
ajis02-5323	418	1	yes	yes	INTJ
ajis02-5323	419	1	22	22	NUM
ajis02-5323	419	2	2.64	2.64	NUM
ajis02-5323	419	3	*	*	NUM
ajis02-5323	419	4	.727	.727	NUM
ajis02-5323	419	5	.155	.155	NUM
ajis02-5323	420	1	no	no	DET
ajis02-5323	420	2	27	27	NUM
ajis02-5323	420	3	2.33	2.33	NUM
ajis02-5323	420	4	*	*	NOUN
ajis02-5323	420	5	.832	.832	NUM
ajis02-5323	420	6	.160	.160	NUM
ajis02-5323	420	7	how	how	SCONJ
ajis02-5323	420	8	would	would	AUX
ajis02-5323	420	9	you	you	PRON
ajis02-5323	420	10	assess	assess	VERB
ajis02-5323	420	11	your	your	PRON
ajis02-5323	420	12	chosen	choose	VERB
ajis02-5323	420	13	supplier	supplier	NOUN
ajis02-5323	420	14	customers	customer	NOUN
ajis02-5323	420	15	'	'	PART
ajis02-5323	420	16	references	reference	NOUN
ajis02-5323	420	17	and	and	CCONJ
ajis02-5323	420	18	reputation	reputation	NOUN
ajis02-5323	420	19	?	?	PUNCT
ajis02-5323	421	1	yes	yes	INTJ
ajis02-5323	422	1	24	24	NUM
ajis02-5323	422	2	3.46	3.46	NUM
ajis02-5323	422	3	*	*	NUM
ajis02-5323	422	4	1.062	1.062	NUM
ajis02-5323	422	5	.217	.217	NUM
ajis02-5323	422	6	no	no	DET
ajis02-5323	422	7	27	27	NUM
ajis02-5323	422	8	3.85	3.85	NUM
ajis02-5323	422	9	*	*	NUM
ajis02-5323	422	10	.949	.949	NUM
ajis02-5323	422	11	.183	.183	NUM
ajis02-5323	422	12	how	how	SCONJ
ajis02-5323	422	13	would	would	AUX
ajis02-5323	422	14	you	you	PRON
ajis02-5323	422	15	assess	assess	VERB
ajis02-5323	422	16	the	the	DET
ajis02-5323	422	17	quality	quality	NOUN
ajis02-5323	422	18	of	of	ADP
ajis02-5323	422	19	information	information	NOUN
ajis02-5323	422	20	and	and	CCONJ
ajis02-5323	422	21	transparency	transparency	NOUN
ajis02-5323	422	22	of	of	ADP
ajis02-5323	422	23	your	your	PRON
ajis02-5323	422	24	chosen	choose	VERB
ajis02-5323	422	25	supplier	supplier	NOUN
ajis02-5323	422	26	with	with	ADP
ajis02-5323	422	27	regard	regard	NOUN
ajis02-5323	422	28	to	to	ADP
ajis02-5323	422	29	its	its	PRON
ajis02-5323	422	30	cyber	cyber	ADJ
ajis02-5323	422	31	security	security	NOUN
ajis02-5323	422	32	risk	risk	NOUN
ajis02-5323	422	33	management	management	NOUN
ajis02-5323	422	34	?	?	PUNCT
ajis02-5323	423	1	yes	yes	INTJ
ajis02-5323	423	2	25	25	NUM
ajis02-5323	423	3	2.56	2.56	NUM
ajis02-5323	423	4	*	*	PUNCT
ajis02-5323	423	5	*	*	PUNCT
ajis02-5323	423	6	1.083	1.083	NUM
ajis02-5323	423	7	.217	.217	NUM
ajis02-5323	423	8	no	no	DET
ajis02-5323	423	9	28	28	NUM
ajis02-5323	423	10	3.46	3.46	NUM
ajis02-5323	423	11	*	*	PUNCT
ajis02-5323	423	12	*	*	X
ajis02-5323	423	13	.838	.838	NUM
ajis02-5323	423	14	.158	.158	NUM
ajis02-5323	423	15	what	what	PRON
ajis02-5323	423	16	kind	kind	NOUN
ajis02-5323	423	17	of	of	ADP
ajis02-5323	423	18	assurance	assurance	NOUN
ajis02-5323	423	19	does	do	AUX
ajis02-5323	423	20	your	your	PRON
ajis02-5323	423	21	chosen	choose	VERB
ajis02-5323	423	22	supplier	supplier	NOUN
ajis02-5323	423	23	provide	provide	VERB
ajis02-5323	423	24	with	with	ADP
ajis02-5323	423	25	regard	regard	NOUN
ajis02-5323	423	26	to	to	ADP
ajis02-5323	423	27	its	its	PRON
ajis02-5323	423	28	cyber	cyber	ADJ
ajis02-5323	423	29	security	security	NOUN
ajis02-5323	423	30	(	(	PUNCT
ajis02-5323	423	31	e.g.	e.g.	ADV
ajis02-5323	423	32	penetration	penetration	NOUN
ajis02-5323	423	33	tests	test	NOUN
ajis02-5323	423	34	,	,	PUNCT
ajis02-5323	423	35	assurance	assurance	NOUN
ajis02-5323	423	36	conducted	conduct	VERB
ajis02-5323	423	37	by	by	ADP
ajis02-5323	423	38	a	a	DET
ajis02-5323	423	39	third	third	ADJ
ajis02-5323	423	40	party	party	NOUN
ajis02-5323	423	41	,	,	PUNCT
ajis02-5323	423	42	audit	audit	NOUN
ajis02-5323	423	43	reports	report	NOUN
ajis02-5323	423	44	)	)	PUNCT
ajis02-5323	423	45	?	?	PUNCT
ajis02-5323	424	1	yes	yes	INTJ
ajis02-5323	424	2	18	18	NUM
ajis02-5323	424	3	3.33	3.33	NUM
ajis02-5323	424	4	1.283	1.283	NUM
ajis02-5323	424	5	.302	.302	NUM
ajis02-5323	425	1	no	no	DET
ajis02-5323	425	2	23	23	NUM
ajis02-5323	425	3	3.78	3.78	NUM
ajis02-5323	425	4	1.242	1.242	NUM
ajis02-5323	425	5	.259	.259	NUM
ajis02-5323	425	6	note	note	NOUN
ajis02-5323	425	7	:	:	PUNCT
ajis02-5323	425	8	variance	variance	NOUN
ajis02-5323	425	9	analysis	analysis	NOUN
ajis02-5323	425	10	of	of	ADP
ajis02-5323	425	11	supplier	supplier	NOUN
ajis02-5323	425	12	’s	’s	PART
ajis02-5323	425	13	controls	control	NOUN
ajis02-5323	425	14	based	base	VERB
ajis02-5323	425	15	on	on	ADP
ajis02-5323	425	16	the	the	DET
ajis02-5323	425	17	notification	notification	NOUN
ajis02-5323	425	18	that	that	PRON
ajis02-5323	425	19	a	a	DET
ajis02-5323	425	20	supplier	supplier	NOUN
ajis02-5323	425	21	had	have	VERB
ajis02-5323	425	22	an	an	DET
ajis02-5323	425	23	incident	incident	NOUN
ajis02-5323	425	24	in	in	ADP
ajis02-5323	425	25	the	the	DET
ajis02-5323	425	26	past	past	ADJ
ajis02-5323	425	27	12	12	NUM
ajis02-5323	425	28	months	month	NOUN
ajis02-5323	425	29	(	(	PUNCT
ajis02-5323	425	30	those	those	DET
ajis02-5323	425	31	suppliers	supplier	NOUN
ajis02-5323	425	32	are	be	AUX
ajis02-5323	425	33	in	in	ADP
ajis02-5323	425	34	the	the	DET
ajis02-5323	425	35	incident	incident	NOUN
ajis02-5323	425	36	yes	yes	INTJ
ajis02-5323	425	37	group	group	NOUN
ajis02-5323	425	38	,	,	PUNCT
ajis02-5323	425	39	and	and	CCONJ
ajis02-5323	425	40	those	those	PRON
ajis02-5323	425	41	without	without	ADP
ajis02-5323	425	42	an	an	DET
ajis02-5323	425	43	incident	incident	NOUN
ajis02-5323	425	44	are	be	AUX
ajis02-5323	425	45	in	in	ADP
ajis02-5323	425	46	the	the	DET
ajis02-5323	425	47	incident	incident	NOUN
ajis02-5323	425	48	no	no	DET
ajis02-5323	425	49	group	group	NOUN
ajis02-5323	425	50	)	)	PUNCT
ajis02-5323	425	51	.	.	PUNCT
ajis02-5323	426	1	*	*	PUNCT
ajis02-5323	427	1	p	p	X
ajis02-5323	427	2	<	<	X
ajis02-5323	427	3	0.1	0.1	NUM
ajis02-5323	427	4	,	,	PUNCT
ajis02-5323	427	5	*	*	PUNCT
ajis02-5323	427	6	*	*	PUNCT
ajis02-5323	427	7	p	p	X
ajis02-5323	427	8	<	<	X
ajis02-5323	427	9	0.05	0.05	NUM
ajis02-5323	427	10	(	(	PUNCT
ajis02-5323	427	11	two	two	NUM
ajis02-5323	427	12	-	-	PUNCT
ajis02-5323	427	13	tailed	tailed	ADJ
ajis02-5323	427	14	)	)	PUNCT
ajis02-5323	427	15	table	table	NOUN
ajis02-5323	427	16	5	5	NUM
ajis02-5323	427	17	:	:	PUNCT
ajis02-5323	427	18	variance	variance	NOUN
ajis02-5323	427	19	analysis	analysis	NOUN
ajis02-5323	427	20	of	of	ADP
ajis02-5323	427	21	supplier	supplier	NOUN
ajis02-5323	427	22	’s	’s	PART
ajis02-5323	427	23	controls	control	NOUN
ajis02-5323	427	24	based	base	VERB
ajis02-5323	427	25	on	on	ADP
ajis02-5323	427	26	received	receive	VERB
ajis02-5323	427	27	notification	notification	NOUN
ajis02-5323	427	28	that	that	SCONJ
ajis02-5323	427	29	a	a	DET
ajis02-5323	427	30	supplier	supplier	NOUN
ajis02-5323	427	31	had	have	AUX
ajis02-5323	427	32	an	an	DET
ajis02-5323	427	33	incident	incident	NOUN
ajis02-5323	427	34	in	in	ADP
ajis02-5323	427	35	the	the	DET
ajis02-5323	427	36	past	past	ADJ
ajis02-5323	427	37	12	12	NUM
ajis02-5323	427	38	months	month	NOUN
ajis02-5323	427	39	supplier	supplier	NOUN
ajis02-5323	427	40	controls	control	NOUN
ajis02-5323	427	41	(	(	PUNCT
ajis02-5323	427	42	yes	yes	INTJ
ajis02-5323	427	43	/	/	SYM
ajis02-5323	427	44	no	no	DET
ajis02-5323	427	45	questions	question	NOUN
ajis02-5323	427	46	)	)	PUNCT
ajis02-5323	427	47	incident	incident	NOUN
ajis02-5323	427	48	frequency	frequency	NOUN
ajis02-5323	427	49	chi	chi	ADJ
ajis02-5323	427	50	-	-	PUNCT
ajis02-5323	427	51	square	square	ADJ
ajis02-5323	427	52	technology	technology	NOUN
ajis02-5323	427	53	vulnerability	vulnerability	NOUN
ajis02-5323	427	54	and	and	CCONJ
ajis02-5323	427	55	penetration	penetration	NOUN
ajis02-5323	427	56	testing	testing	NOUN
ajis02-5323	427	57	performed	perform	VERB
ajis02-5323	427	58	yes	yes	NUM
ajis02-5323	427	59	52.4	52.4	NUM
ajis02-5323	427	60	%	%	NOUN
ajis02-5323	427	61	no	no	DET
ajis02-5323	427	62	60.0	60.0	NUM
ajis02-5323	427	63	%	%	NOUN
ajis02-5323	427	64	0.241	0.241	NUM
ajis02-5323	427	65	processes	process	NOUN
ajis02-5323	427	66	documented	document	VERB
ajis02-5323	427	67	incident	incident	NOUN
ajis02-5323	427	68	response	response	NOUN
ajis02-5323	427	69	plan	plan	NOUN
ajis02-5323	427	70	yes	yes	INTJ
ajis02-5323	427	71	75.0	75.0	NUM
ajis02-5323	427	72	%	%	NOUN
ajis02-5323	427	73	no	no	DET
ajis02-5323	427	74	94.1	94.1	NUM
ajis02-5323	427	75	%	%	NOUN
ajis02-5323	427	76	2.343	2.343	NUM
ajis02-5323	427	77	documented	document	VERB
ajis02-5323	427	78	business	business	NOUN
ajis02-5323	427	79	continuity	continuity	NOUN
ajis02-5323	427	80	plan	plan	NOUN
ajis02-5323	427	81	yes	yes	INTJ
ajis02-5323	427	82	82.4	82.4	NUM
ajis02-5323	427	83	%	%	NOUN
ajis02-5323	427	84	no	no	DET
ajis02-5323	427	85	83.3	83.3	NUM
ajis02-5323	427	86	%	%	NOUN
ajis02-5323	427	87	0.006	0.006	NUM
ajis02-5323	427	88	information	information	NOUN
ajis02-5323	427	89	security	security	NOUN
ajis02-5323	427	90	role	role	NOUN
ajis02-5323	427	91	in	in	ADP
ajis02-5323	427	92	place	place	NOUN
ajis02-5323	427	93	yes	yes	INTJ
ajis02-5323	427	94	88.2	88.2	NUM
ajis02-5323	427	95	%	%	NOUN
ajis02-5323	427	96	no	no	DET
ajis02-5323	427	97	85.0	85.0	NUM
ajis02-5323	427	98	%	%	NOUN
ajis02-5323	427	99	0.082	0.082	NUM
ajis02-5323	427	100	security	security	NOUN
ajis02-5323	427	101	policies	policy	NOUN
ajis02-5323	427	102	,	,	PUNCT
ajis02-5323	427	103	frameworks	framework	NOUN
ajis02-5323	427	104	,	,	PUNCT
ajis02-5323	427	105	and	and	CCONJ
ajis02-5323	427	106	documents	document	NOUN
ajis02-5323	427	107	yes	yes	INTJ
ajis02-5323	427	108	100.0	100.0	NUM
ajis02-5323	427	109	%	%	NOUN
ajis02-5323	427	110	no	no	DET
ajis02-5323	427	111	86.4	86.4	NUM
ajis02-5323	427	112	%	%	NOUN
ajis02-5323	427	113	2.511	2.511	NUM
ajis02-5323	427	114	people	people	NOUN
ajis02-5323	427	115	australasian	australasian	ADJ
ajis02-5323	427	116	journal	journal	NOUN
ajis02-5323	427	117	of	of	ADP
ajis02-5323	427	118	information	information	NOUN
ajis02-5323	427	119	systems	system	NOUN
ajis02-5323	427	120	slapnicar	slapnicar	NOUN
ajis02-5323	427	121	,	,	PUNCT
ajis02-5323	427	122	vidmar	vidmar	NOUN
ajis02-5323	427	123	&	&	CCONJ
ajis02-5323	427	124	tsen	tsen	ADJ
ajis02-5323	427	125	2025	2025	NUM
ajis02-5323	427	126	,	,	PUNCT
ajis02-5323	427	127	vol	vol	NOUN
ajis02-5323	427	128	29	29	NUM
ajis02-5323	427	129	,	,	PUNCT
ajis02-5323	427	130	research	research	NOUN
ajis02-5323	427	131	article	article	NOUN
ajis02-5323	427	132	process	process	NOUN
ajis02-5323	427	133	theory	theory	NOUN
ajis02-5323	427	134	of	of	ADP
ajis02-5323	427	135	supplier	supplier	NOUN
ajis02-5323	427	136	cyber	cyber	NOUN
ajis02-5323	427	137	risk	risk	NOUN
ajis02-5323	427	138	assessment	assessment	NOUN
ajis02-5323	427	139	24	24	NUM
ajis02-5323	427	140	security	security	NOUN
ajis02-5323	427	141	awareness	awareness	NOUN
ajis02-5323	427	142	program	program	NOUN
ajis02-5323	427	143	for	for	ADP
ajis02-5323	427	144	employees	employee	NOUN
ajis02-5323	427	145	yes	yes	INTJ
ajis02-5323	427	146	93.8	93.8	NUM
ajis02-5323	427	147	%	%	NOUN
ajis02-5323	427	148	no	no	PRON
ajis02-5323	427	149	85.7	85.7	NUM
ajis02-5323	427	150	%	%	NOUN
ajis02-5323	427	151	0.608	0.608	NUM
ajis02-5323	427	152	general	general	ADJ
ajis02-5323	427	153	red	red	ADJ
ajis02-5323	427	154	flags	flag	NOUN
ajis02-5323	427	155	by	by	ADP
ajis02-5323	427	156	threat	threat	NOUN
ajis02-5323	427	157	intelligence	intelligence	NOUN
ajis02-5323	427	158	yes	yes	INTJ
ajis02-5323	427	159	24	24	NUM
ajis02-5323	427	160	%	%	NOUN
ajis02-5323	427	161	*	*	PUNCT
ajis02-5323	427	162	*	*	PUNCT
ajis02-5323	428	1	no	no	DET
ajis02-5323	428	2	3.6	3.6	NUM
ajis02-5323	428	3	%	%	NOUN
ajis02-5323	428	4	*	*	PUNCT
ajis02-5323	428	5	*	*	PROPN
ajis02-5323	428	6	4.8	4.8	NUM
ajis02-5323	428	7	note	note	NOUN
ajis02-5323	428	8	:	:	PUNCT
ajis02-5323	428	9	we	we	PRON
ajis02-5323	428	10	used	use	VERB
ajis02-5323	428	11	the	the	DET
ajis02-5323	428	12	cross	cross	ADJ
ajis02-5323	428	13	-	-	ADJ
ajis02-5323	428	14	tabulation	tabulation	NOUN
ajis02-5323	428	15	analysis	analysis	NOUN
ajis02-5323	428	16	and	and	CCONJ
ajis02-5323	428	17	chi	chi	ADJ
ajis02-5323	428	18	-	-	PUNCT
ajis02-5323	428	19	square	square	ADJ
ajis02-5323	428	20	estimator	estimator	NOUN
ajis02-5323	428	21	to	to	PART
ajis02-5323	428	22	assess	assess	VERB
ajis02-5323	428	23	whether	whether	SCONJ
ajis02-5323	428	24	the	the	DET
ajis02-5323	428	25	frequency	frequency	NOUN
ajis02-5323	428	26	of	of	ADP
ajis02-5323	428	27	controls	control	NOUN
ajis02-5323	428	28	in	in	ADP
ajis02-5323	428	29	suppliers	supplier	NOUN
ajis02-5323	428	30	without	without	ADP
ajis02-5323	428	31	an	an	DET
ajis02-5323	428	32	incident	incident	NOUN
ajis02-5323	428	33	significantly	significantly	ADV
ajis02-5323	428	34	differs	differ	VERB
ajis02-5323	428	35	(	(	PUNCT
ajis02-5323	428	36	incident	incident	NOUN
ajis02-5323	428	37	no	no	DET
ajis02-5323	428	38	group	group	NOUN
ajis02-5323	428	39	)	)	PUNCT
ajis02-5323	428	40	from	from	ADP
ajis02-5323	428	41	those	those	PRON
ajis02-5323	428	42	in	in	ADP
ajis02-5323	428	43	suppliers	supplier	NOUN
ajis02-5323	428	44	who	who	PRON
ajis02-5323	428	45	suffered	suffer	VERB
ajis02-5323	428	46	an	an	DET
ajis02-5323	428	47	incident	incident	NOUN
ajis02-5323	428	48	(	(	PUNCT
ajis02-5323	428	49	incident	incident	NOUN
ajis02-5323	428	50	yes	yes	INTJ
ajis02-5323	428	51	group	group	NOUN
ajis02-5323	428	52	)	)	PUNCT
ajis02-5323	428	53	.	.	PUNCT
ajis02-5323	429	1	*	*	PUNCT
ajis02-5323	430	1	*	*	PUNCT
ajis02-5323	430	2	p	p	X
ajis02-5323	430	3	<	<	X
ajis02-5323	430	4	0.05	0.05	NUM
ajis02-5323	430	5	(	(	PUNCT
ajis02-5323	430	6	two	two	NUM
ajis02-5323	430	7	-	-	PUNCT
ajis02-5323	430	8	tailed	tailed	ADJ
ajis02-5323	430	9	)	)	PUNCT
ajis02-5323	430	10	table	table	NOUN
ajis02-5323	430	11	6	6	NUM
ajis02-5323	430	12	:	:	PUNCT
ajis02-5323	430	13	cross	cross	ADJ
ajis02-5323	430	14	-	-	NOUN
ajis02-5323	430	15	tabulation	tabulation	NOUN
ajis02-5323	430	16	analysis	analysis	NOUN
ajis02-5323	430	17	of	of	ADP
ajis02-5323	430	18	supplier	supplier	NOUN
ajis02-5323	430	19	’s	’s	PART
ajis02-5323	430	20	characteristics	characteristic	NOUN
ajis02-5323	430	21	based	base	VERB
ajis02-5323	430	22	on	on	ADP
ajis02-5323	430	23	received	receive	VERB
ajis02-5323	430	24	notification	notification	NOUN
ajis02-5323	430	25	that	that	SCONJ
ajis02-5323	430	26	a	a	DET
ajis02-5323	430	27	supplier	supplier	NOUN
ajis02-5323	430	28	had	have	AUX
ajis02-5323	430	29	an	an	DET
ajis02-5323	430	30	incident	incident	NOUN
ajis02-5323	430	31	in	in	ADP
ajis02-5323	430	32	the	the	DET
ajis02-5323	430	33	past	past	ADJ
ajis02-5323	430	34	12	12	NUM
ajis02-5323	430	35	months	month	NOUN
ajis02-5323	430	36	5	5	NUM
ajis02-5323	430	37	discussion	discussion	NOUN
ajis02-5323	430	38	5.1	5.1	NUM
ajis02-5323	430	39	theoretical	theoretical	ADJ
ajis02-5323	430	40	contributions	contribution	NOUN
ajis02-5323	430	41	cyber	cyber	NOUN
ajis02-5323	430	42	security	security	NOUN
ajis02-5323	430	43	management	management	NOUN
ajis02-5323	430	44	studies	study	NOUN
ajis02-5323	430	45	are	be	AUX
ajis02-5323	430	46	generally	generally	ADV
ajis02-5323	430	47	based	base	VERB
ajis02-5323	430	48	on	on	ADP
ajis02-5323	430	49	variance	variance	NOUN
ajis02-5323	430	50	theories	theory	NOUN
ajis02-5323	430	51	that	that	PRON
ajis02-5323	430	52	suggest	suggest	VERB
ajis02-5323	430	53	a	a	DET
ajis02-5323	430	54	determinate	determinate	ADJ
ajis02-5323	430	55	relationship	relationship	NOUN
ajis02-5323	430	56	between	between	ADP
ajis02-5323	430	57	cause	cause	NOUN
ajis02-5323	430	58	and	and	CCONJ
ajis02-5323	430	59	effect	effect	NOUN
ajis02-5323	430	60	;	;	PUNCT
ajis02-5323	430	61	that	that	PRON
ajis02-5323	430	62	is	be	AUX
ajis02-5323	430	63	,	,	PUNCT
ajis02-5323	430	64	more	more	ADJ
ajis02-5323	430	65	controls	control	NOUN
ajis02-5323	430	66	invariably	invariably	ADV
ajis02-5323	430	67	lead	lead	VERB
ajis02-5323	430	68	to	to	ADP
ajis02-5323	430	69	smaller	small	ADJ
ajis02-5323	430	70	cyber	cyber	NOUN
ajis02-5323	430	71	risks	risk	NOUN
ajis02-5323	430	72	whereby	whereby	SCONJ
ajis02-5323	430	73	the	the	DET
ajis02-5323	430	74	risks	risk	NOUN
ajis02-5323	430	75	can	can	AUX
ajis02-5323	430	76	be	be	AUX
ajis02-5323	430	77	measured	measure	VERB
ajis02-5323	430	78	(	(	PUNCT
ajis02-5323	430	79	baskerville	baskerville	NOUN
ajis02-5323	430	80	,	,	PUNCT
ajis02-5323	430	81	2005	2005	NUM
ajis02-5323	430	82	)	)	PUNCT
ajis02-5323	430	83	.	.	PUNCT
ajis02-5323	431	1	however	however	ADV
ajis02-5323	431	2	,	,	PUNCT
ajis02-5323	431	3	given	give	VERB
ajis02-5323	431	4	the	the	DET
ajis02-5323	431	5	high	high	ADJ
ajis02-5323	431	6	unpredictability	unpredictability	NOUN
ajis02-5323	431	7	and	and	CCONJ
ajis02-5323	431	8	uncontrollability	uncontrollability	NOUN
ajis02-5323	431	9	of	of	ADP
ajis02-5323	431	10	supplier	supplier	NOUN
ajis02-5323	431	11	cyber	cyber	NOUN
ajis02-5323	431	12	risks	risk	NOUN
ajis02-5323	431	13	and	and	CCONJ
ajis02-5323	431	14	challenges	challenge	NOUN
ajis02-5323	431	15	of	of	ADP
ajis02-5323	431	16	its	its	PRON
ajis02-5323	431	17	measurement	measurement	NOUN
ajis02-5323	431	18	,	,	PUNCT
ajis02-5323	431	19	in	in	ADP
ajis02-5323	431	20	formulating	formulate	VERB
ajis02-5323	431	21	the	the	DET
ajis02-5323	431	22	process	process	NOUN
ajis02-5323	431	23	theory	theory	NOUN
ajis02-5323	431	24	of	of	ADP
ajis02-5323	431	25	supplier	supplier	NOUN
ajis02-5323	431	26	cyber	cyber	NOUN
ajis02-5323	431	27	risk	risk	NOUN
ajis02-5323	431	28	,	,	PUNCT
ajis02-5323	431	29	we	we	PRON
ajis02-5323	431	30	rely	rely	VERB
ajis02-5323	431	31	on	on	ADP
ajis02-5323	431	32	a	a	DET
ajis02-5323	431	33	different	different	ADJ
ajis02-5323	431	34	logical	logical	ADJ
ajis02-5323	431	35	structure	structure	NOUN
ajis02-5323	431	36	–	–	PUNCT
ajis02-5323	431	37	that	that	PRON
ajis02-5323	431	38	of	of	ADP
ajis02-5323	431	39	life	life	NOUN
ajis02-5323	431	40	-	-	PUNCT
ajis02-5323	431	41	cycle	cycle	NOUN
ajis02-5323	431	42	process	process	NOUN
ajis02-5323	431	43	theories	theory	NOUN
ajis02-5323	431	44	,	,	PUNCT
ajis02-5323	431	45	which	which	PRON
ajis02-5323	431	46	propose	propose	VERB
ajis02-5323	431	47	that	that	SCONJ
ajis02-5323	431	48	the	the	DET
ajis02-5323	431	49	outcome	outcome	NOUN
ajis02-5323	431	50	(	(	PUNCT
ajis02-5323	431	51	in	in	ADP
ajis02-5323	431	52	our	our	PRON
ajis02-5323	431	53	case	case	NOUN
ajis02-5323	431	54	,	,	PUNCT
ajis02-5323	431	55	the	the	DET
ajis02-5323	431	56	mitigation	mitigation	NOUN
ajis02-5323	431	57	of	of	ADP
ajis02-5323	431	58	supplier	supplier	NOUN
ajis02-5323	431	59	cyber	cyber	NOUN
ajis02-5323	431	60	risk	risk	NOUN
ajis02-5323	431	61	)	)	PUNCT
ajis02-5323	431	62	is	be	AUX
ajis02-5323	431	63	contingent	contingent	ADJ
ajis02-5323	431	64	on	on	ADP
ajis02-5323	431	65	a	a	DET
ajis02-5323	431	66	sequence	sequence	NOUN
ajis02-5323	431	67	of	of	ADP
ajis02-5323	431	68	steps	step	NOUN
ajis02-5323	431	69	rather	rather	ADV
ajis02-5323	431	70	than	than	ADP
ajis02-5323	431	71	on	on	ADP
ajis02-5323	431	72	an	an	DET
ajis02-5323	431	73	expected	expect	VERB
ajis02-5323	431	74	relationship	relationship	NOUN
ajis02-5323	431	75	between	between	ADP
ajis02-5323	431	76	the	the	DET
ajis02-5323	431	77	controls	control	NOUN
ajis02-5323	431	78	and	and	CCONJ
ajis02-5323	431	79	the	the	DET
ajis02-5323	431	80	risk	risk	NOUN
ajis02-5323	431	81	(	(	PUNCT
ajis02-5323	431	82	mohr	mohr	PROPN
ajis02-5323	431	83	,	,	PUNCT
ajis02-5323	431	84	1982	1982	NUM
ajis02-5323	431	85	;	;	PUNCT
ajis02-5323	431	86	markus	markus	PROPN
ajis02-5323	431	87	&	&	CCONJ
ajis02-5323	431	88	robey	robey	PROPN
ajis02-5323	431	89	,	,	PUNCT
ajis02-5323	431	90	1988	1988	NUM
ajis02-5323	431	91	,	,	PUNCT
ajis02-5323	431	92	van	van	PROPN
ajis02-5323	431	93	de	de	PROPN
ajis02-5323	431	94	ven	ven	PROPN
ajis02-5323	431	95	&	&	CCONJ
ajis02-5323	431	96	poole	poole	PROPN
ajis02-5323	431	97	,	,	PUNCT
ajis02-5323	431	98	1995	1995	NUM
ajis02-5323	431	99	;	;	PUNCT
ajis02-5323	431	100	baskerville	baskerville	NOUN
ajis02-5323	431	101	,	,	PUNCT
ajis02-5323	431	102	2005	2005	NUM
ajis02-5323	431	103	)	)	PUNCT
ajis02-5323	431	104	.	.	PUNCT
ajis02-5323	432	1	hence	hence	ADV
ajis02-5323	432	2	,	,	PUNCT
ajis02-5323	432	3	if	if	SCONJ
ajis02-5323	432	4	some	some	DET
ajis02-5323	432	5	steps	step	NOUN
ajis02-5323	432	6	in	in	ADP
ajis02-5323	432	7	the	the	DET
ajis02-5323	432	8	process	process	NOUN
ajis02-5323	432	9	are	be	AUX
ajis02-5323	432	10	missed	miss	VERB
ajis02-5323	432	11	,	,	PUNCT
ajis02-5323	432	12	a	a	DET
ajis02-5323	432	13	risky	risky	ADJ
ajis02-5323	432	14	supplier	supplier	NOUN
ajis02-5323	432	15	will	will	AUX
ajis02-5323	432	16	not	not	PART
ajis02-5323	432	17	be	be	AUX
ajis02-5323	432	18	identified	identify	VERB
ajis02-5323	432	19	.	.	PUNCT
ajis02-5323	433	1	the	the	DET
ajis02-5323	433	2	process	process	NOUN
ajis02-5323	433	3	theories	theory	NOUN
ajis02-5323	433	4	,	,	PUNCT
ajis02-5323	433	5	however	however	ADV
ajis02-5323	433	6	,	,	PUNCT
ajis02-5323	433	7	do	do	AUX
ajis02-5323	433	8	not	not	PART
ajis02-5323	433	9	suggest	suggest	VERB
ajis02-5323	433	10	that	that	SCONJ
ajis02-5323	433	11	the	the	DET
ajis02-5323	433	12	outcome	outcome	NOUN
ajis02-5323	433	13	is	be	AUX
ajis02-5323	433	14	guaranteed	guarantee	VERB
ajis02-5323	433	15	:	:	PUNCT
ajis02-5323	433	16	it	it	PRON
ajis02-5323	433	17	might	might	AUX
ajis02-5323	433	18	happen	happen	VERB
ajis02-5323	433	19	under	under	ADP
ajis02-5323	433	20	certain	certain	ADJ
ajis02-5323	433	21	conditions	condition	NOUN
ajis02-5323	433	22	but	but	CCONJ
ajis02-5323	433	23	not	not	PART
ajis02-5323	433	24	necessarily	necessarily	ADV
ajis02-5323	433	25	(	(	PUNCT
ajis02-5323	433	26	markus	markus	PROPN
ajis02-5323	433	27	&	&	CCONJ
ajis02-5323	433	28	robey	robey	PROPN
ajis02-5323	433	29	,	,	PUNCT
ajis02-5323	433	30	1988	1988	NUM
ajis02-5323	433	31	;	;	PUNCT
ajis02-5323	433	32	p.	p.	NOUN
ajis02-5323	433	33	591	591	NUM
ajis02-5323	433	34	)	)	PUNCT
ajis02-5323	433	35	.	.	PUNCT
ajis02-5323	434	1	we	we	PRON
ajis02-5323	434	2	identify	identify	VERB
ajis02-5323	434	3	the	the	DET
ajis02-5323	434	4	elements	element	NOUN
ajis02-5323	434	5	(	(	PUNCT
ajis02-5323	434	6	steps	step	NOUN
ajis02-5323	434	7	)	)	PUNCT
ajis02-5323	434	8	of	of	ADP
ajis02-5323	434	9	the	the	DET
ajis02-5323	434	10	process	process	NOUN
ajis02-5323	434	11	of	of	ADP
ajis02-5323	434	12	supplier	supplier	NOUN
ajis02-5323	434	13	cyber	cyber	NOUN
ajis02-5323	434	14	risk	risk	NOUN
ajis02-5323	434	15	assessment	assessment	NOUN
ajis02-5323	434	16	and	and	CCONJ
ajis02-5323	434	17	their	their	PRON
ajis02-5323	434	18	sequential	sequential	ADJ
ajis02-5323	434	19	logic	logic	NOUN
ajis02-5323	434	20	and	and	CCONJ
ajis02-5323	434	21	study	study	VERB
ajis02-5323	434	22	how	how	SCONJ
ajis02-5323	434	23	one	one	NUM
ajis02-5323	434	24	phase	phase	NOUN
ajis02-5323	434	25	influences	influence	VERB
ajis02-5323	434	26	the	the	DET
ajis02-5323	434	27	next	next	ADJ
ajis02-5323	434	28	(	(	PUNCT
ajis02-5323	434	29	figure	figure	NOUN
ajis02-5323	434	30	1	1	NUM
ajis02-5323	434	31	)	)	PUNCT
ajis02-5323	434	32	.	.	PUNCT
ajis02-5323	435	1	our	our	PRON
ajis02-5323	435	2	quantitative	quantitative	ADJ
ajis02-5323	435	3	findings	finding	NOUN
ajis02-5323	435	4	support	support	VERB
ajis02-5323	435	5	that	that	SCONJ
ajis02-5323	435	6	the	the	DET
ajis02-5323	435	7	appropriate	appropriate	ADJ
ajis02-5323	435	8	elements	element	NOUN
ajis02-5323	435	9	of	of	ADP
ajis02-5323	435	10	the	the	DET
ajis02-5323	435	11	process	process	NOUN
ajis02-5323	435	12	were	be	AUX
ajis02-5323	435	13	derived	derive	VERB
ajis02-5323	435	14	during	during	ADP
ajis02-5323	435	15	the	the	DET
ajis02-5323	435	16	qualitative	qualitative	ADJ
ajis02-5323	435	17	analysis	analysis	NOUN
ajis02-5323	435	18	and	and	CCONJ
ajis02-5323	435	19	that	that	SCONJ
ajis02-5323	435	20	assessing	assess	VERB
ajis02-5323	435	21	these	these	DET
ajis02-5323	435	22	elements	element	NOUN
ajis02-5323	435	23	would	would	AUX
ajis02-5323	435	24	likely	likely	ADV
ajis02-5323	435	25	help	help	VERB
ajis02-5323	435	26	an	an	DET
ajis02-5323	435	27	organization	organization	NOUN
ajis02-5323	435	28	identify	identify	VERB
ajis02-5323	435	29	a	a	DET
ajis02-5323	435	30	risky	risky	ADJ
ajis02-5323	435	31	supplier	supplier	NOUN
ajis02-5323	435	32	.	.	PUNCT
ajis02-5323	436	1	in	in	ADP
ajis02-5323	436	2	addition	addition	NOUN
ajis02-5323	436	3	to	to	ADP
ajis02-5323	436	4	identifying	identify	VERB
ajis02-5323	436	5	the	the	DET
ajis02-5323	436	6	sequential	sequential	ADJ
ajis02-5323	436	7	steps	step	NOUN
ajis02-5323	436	8	of	of	ADP
ajis02-5323	436	9	the	the	DET
ajis02-5323	436	10	process	process	NOUN
ajis02-5323	436	11	,	,	PUNCT
ajis02-5323	436	12	the	the	DET
ajis02-5323	436	13	teleological	teleological	ADJ
ajis02-5323	436	14	process	process	NOUN
ajis02-5323	436	15	theory	theory	NOUN
ajis02-5323	436	16	adds	add	VERB
ajis02-5323	436	17	the	the	DET
ajis02-5323	436	18	perspective	perspective	NOUN
ajis02-5323	436	19	that	that	SCONJ
ajis02-5323	436	20	resource	resource	NOUN
ajis02-5323	436	21	limitations	limitation	NOUN
ajis02-5323	436	22	and	and	CCONJ
ajis02-5323	436	23	organizational	organizational	ADJ
ajis02-5323	436	24	environment	environment	NOUN
ajis02-5323	436	25	constrain	constrain	VERB
ajis02-5323	436	26	organizations	organization	NOUN
ajis02-5323	436	27	in	in	ADP
ajis02-5323	436	28	what	what	PRON
ajis02-5323	436	29	can	can	AUX
ajis02-5323	436	30	be	be	AUX
ajis02-5323	436	31	accomplished	accomplish	VERB
ajis02-5323	436	32	(	(	PUNCT
ajis02-5323	436	33	van	van	PROPN
ajis02-5323	436	34	de	de	X
ajis02-5323	436	35	ven	ven	PROPN
ajis02-5323	436	36	&	&	CCONJ
ajis02-5323	436	37	poole	poole	PROPN
ajis02-5323	436	38	,	,	PUNCT
ajis02-5323	436	39	1995	1995	NUM
ajis02-5323	436	40	)	)	PUNCT
ajis02-5323	436	41	.	.	PUNCT
ajis02-5323	437	1	we	we	PRON
ajis02-5323	437	2	considered	consider	VERB
ajis02-5323	437	3	this	this	DET
ajis02-5323	437	4	perspective	perspective	NOUN
ajis02-5323	437	5	when	when	SCONJ
ajis02-5323	437	6	analyzing	analyze	VERB
ajis02-5323	437	7	how	how	SCONJ
ajis02-5323	437	8	contextual	contextual	ADJ
ajis02-5323	437	9	factors	factor	NOUN
ajis02-5323	437	10	affect	affect	VERB
ajis02-5323	437	11	the	the	DET
ajis02-5323	437	12	maturity	maturity	NOUN
ajis02-5323	437	13	of	of	ADP
ajis02-5323	437	14	the	the	DET
ajis02-5323	437	15	process	process	NOUN
ajis02-5323	437	16	.	.	PUNCT
ajis02-5323	438	1	adapting	adapt	VERB
ajis02-5323	438	2	the	the	DET
ajis02-5323	438	3	process	process	NOUN
ajis02-5323	438	4	’s	’s	PART
ajis02-5323	438	5	scope	scope	NOUN
ajis02-5323	438	6	and	and	CCONJ
ajis02-5323	438	7	depth	depth	NOUN
ajis02-5323	438	8	to	to	ADP
ajis02-5323	438	9	supplier	supplier	NOUN
ajis02-5323	438	10	criticality	criticality	NOUN
ajis02-5323	438	11	demonstrates	demonstrate	VERB
ajis02-5323	438	12	that	that	SCONJ
ajis02-5323	438	13	organizations	organization	NOUN
ajis02-5323	438	14	optimize	optimize	VERB
ajis02-5323	438	15	their	their	PRON
ajis02-5323	438	16	resources	resource	NOUN
ajis02-5323	438	17	by	by	ADP
ajis02-5323	438	18	following	follow	VERB
ajis02-5323	438	19	a	a	DET
ajis02-5323	438	20	risk	risk	NOUN
ajis02-5323	438	21	-	-	PUNCT
ajis02-5323	438	22	based	base	VERB
ajis02-5323	438	23	principle	principle	NOUN
ajis02-5323	438	24	,	,	PUNCT
ajis02-5323	438	25	which	which	PRON
ajis02-5323	438	26	focuses	focus	VERB
ajis02-5323	438	27	on	on	ADP
ajis02-5323	438	28	identifying	identify	VERB
ajis02-5323	438	29	and	and	CCONJ
ajis02-5323	438	30	mitigating	mitigate	VERB
ajis02-5323	438	31	the	the	DET
ajis02-5323	438	32	most	most	ADV
ajis02-5323	438	33	pertinent	pertinent	ADJ
ajis02-5323	438	34	risks	risk	NOUN
ajis02-5323	438	35	first	first	ADV
ajis02-5323	438	36	(	(	PUNCT
ajis02-5323	438	37	lin	lin	PROPN
ajis02-5323	438	38	&	&	CCONJ
ajis02-5323	438	39	saebeler	saebeler	PROPN
ajis02-5323	438	40	,	,	PUNCT
ajis02-5323	438	41	2019	2019	NUM
ajis02-5323	438	42	;	;	PUNCT
ajis02-5323	438	43	pollmeier	pollmeier	NOUN
ajis02-5323	438	44	et	et	PROPN
ajis02-5323	438	45	al	al	PROPN
ajis02-5323	438	46	.	.	PROPN
ajis02-5323	438	47	2022	2022	NUM
ajis02-5323	438	48	)	)	PUNCT
ajis02-5323	438	49	.	.	PUNCT
ajis02-5323	439	1	for	for	ADP
ajis02-5323	439	2	example	example	NOUN
ajis02-5323	439	3	,	,	PUNCT
ajis02-5323	439	4	organizations	organization	NOUN
ajis02-5323	439	5	with	with	ADP
ajis02-5323	439	6	massive	massive	ADJ
ajis02-5323	439	7	numbers	number	NOUN
ajis02-5323	439	8	of	of	ADP
ajis02-5323	439	9	suppliers	supplier	NOUN
ajis02-5323	439	10	can	can	AUX
ajis02-5323	439	11	only	only	ADV
ajis02-5323	439	12	focus	focus	VERB
ajis02-5323	439	13	on	on	ADP
ajis02-5323	439	14	critical	critical	ADJ
ajis02-5323	439	15	suppliers	supplier	NOUN
ajis02-5323	439	16	,	,	PUNCT
ajis02-5323	439	17	leaving	leave	VERB
ajis02-5323	439	18	many	many	ADJ
ajis02-5323	439	19	non	non	ADJ
ajis02-5323	439	20	-	-	ADJ
ajis02-5323	439	21	critical	critical	ADJ
ajis02-5323	439	22	ones	one	NOUN
ajis02-5323	439	23	unassessed	unassesse	VERB
ajis02-5323	439	24	and	and	CCONJ
ajis02-5323	439	25	non	non	ADJ
ajis02-5323	439	26	-	-	VERB
ajis02-5323	439	27	monitored	monitored	ADJ
ajis02-5323	439	28	.	.	PUNCT
ajis02-5323	440	1	“	"	PUNCT
ajis02-5323	440	2	you	you	PRON
ajis02-5323	440	3	can	can	AUX
ajis02-5323	440	4	have	have	VERB
ajis02-5323	440	5	hundreds	hundred	NOUN
ajis02-5323	440	6	of	of	ADP
ajis02-5323	440	7	questionnaires	questionnaire	NOUN
ajis02-5323	440	8	,	,	PUNCT
ajis02-5323	440	9	and	and	CCONJ
ajis02-5323	440	10	you	you	PRON
ajis02-5323	440	11	do	do	AUX
ajis02-5323	440	12	not	not	PART
ajis02-5323	440	13	have	have	VERB
ajis02-5323	440	14	resources	resource	NOUN
ajis02-5323	440	15	to	to	PART
ajis02-5323	440	16	analyze	analyze	VERB
ajis02-5323	440	17	those	those	DET
ajis02-5323	440	18	questionnaires	questionnaire	NOUN
ajis02-5323	440	19	;	;	PUNCT
ajis02-5323	440	20	they	they	PRON
ajis02-5323	440	21	are	be	AUX
ajis02-5323	440	22	in	in	ADP
ajis02-5323	440	23	excel	excel	NOUN
ajis02-5323	440	24	or	or	CCONJ
ajis02-5323	440	25	word	word	NOUN
ajis02-5323	440	26	documents	document	NOUN
ajis02-5323	440	27	.	.	PUNCT
ajis02-5323	441	1	the	the	DET
ajis02-5323	441	2	first	first	ADJ
ajis02-5323	441	3	party	party	NOUN
ajis02-5323	441	4	reads	read	VERB
ajis02-5323	441	5	it	it	PRON
ajis02-5323	441	6	at	at	ADP
ajis02-5323	441	7	a	a	DET
ajis02-5323	441	8	point	point	NOUN
ajis02-5323	441	9	in	in	ADP
ajis02-5323	441	10	time	time	NOUN
ajis02-5323	441	11	,	,	PUNCT
ajis02-5323	441	12	and	and	CCONJ
ajis02-5323	441	13	then	then	ADV
ajis02-5323	441	14	it	it	PRON
ajis02-5323	441	15	gets	get	VERB
ajis02-5323	441	16	it	it	PRON
ajis02-5323	441	17	stored	store	VERB
ajis02-5323	441	18	,	,	PUNCT
ajis02-5323	441	19	but	but	CCONJ
ajis02-5323	441	20	then	then	ADV
ajis02-5323	441	21	it	it	PRON
ajis02-5323	441	22	is	be	AUX
ajis02-5323	441	23	never	never	ADV
ajis02-5323	441	24	looked	look	VERB
ajis02-5323	441	25	at	at	ADV
ajis02-5323	441	26	again	again	ADV
ajis02-5323	441	27	.	.	PUNCT
ajis02-5323	441	28	”	"	PUNCT
ajis02-5323	442	1	(	(	PUNCT
ajis02-5323	442	2	p18	p18	NOUN
ajis02-5323	442	3	)	)	PUNCT
ajis02-5323	442	4	.	.	PUNCT
ajis02-5323	443	1	the	the	DET
ajis02-5323	443	2	adaptability	adaptability	NOUN
ajis02-5323	443	3	of	of	ADP
ajis02-5323	443	4	the	the	DET
ajis02-5323	443	5	process	process	NOUN
ajis02-5323	443	6	(	(	PUNCT
ajis02-5323	443	7	to	to	PART
ajis02-5323	443	8	constraint	constraint	VERB
ajis02-5323	443	9	resources	resource	NOUN
ajis02-5323	443	10	)	)	PUNCT
ajis02-5323	443	11	is	be	AUX
ajis02-5323	443	12	a	a	DET
ajis02-5323	443	13	fundamental	fundamental	ADJ
ajis02-5323	443	14	principle	principle	NOUN
ajis02-5323	443	15	of	of	ADP
ajis02-5323	443	16	teleological	teleological	ADJ
ajis02-5323	443	17	process	process	NOUN
ajis02-5323	443	18	theory	theory	NOUN
ajis02-5323	443	19	(	(	PUNCT
ajis02-5323	443	20	van	van	PROPN
ajis02-5323	443	21	de	de	X
ajis02-5323	443	22	ven	ven	PROPN
ajis02-5323	443	23	&	&	CCONJ
ajis02-5323	443	24	poole	poole	PROPN
ajis02-5323	443	25	,	,	PUNCT
ajis02-5323	443	26	1995	1995	NUM
ajis02-5323	443	27	;	;	PUNCT
ajis02-5323	443	28	bekmeier	bekmeier	NOUN
ajis02-5323	443	29	-	-	PUNCT
ajis02-5323	443	30	feuerhahn	feuerhahn	NOUN
ajis02-5323	443	31	,	,	PUNCT
ajis02-5323	443	32	2009	2009	NUM
ajis02-5323	443	33	)	)	PUNCT
ajis02-5323	443	34	.	.	PUNCT
ajis02-5323	444	1	we	we	PRON
ajis02-5323	444	2	find	find	VERB
ajis02-5323	444	3	that	that	SCONJ
ajis02-5323	444	4	organizations	organization	NOUN
ajis02-5323	444	5	that	that	PRON
ajis02-5323	444	6	are	be	AUX
ajis02-5323	444	7	more	more	ADV
ajis02-5323	444	8	exposed	expose	VERB
ajis02-5323	444	9	to	to	ADP
ajis02-5323	444	10	cyber	cyber	ADJ
ajis02-5323	444	11	risk	risk	NOUN
ajis02-5323	444	12	and	and	CCONJ
ajis02-5323	444	13	are	be	AUX
ajis02-5323	444	14	larger	large	ADJ
ajis02-5323	444	15	have	have	VERB
ajis02-5323	444	16	more	more	ADJ
ajis02-5323	444	17	resources	resource	NOUN
ajis02-5323	444	18	and	and	CCONJ
ajis02-5323	444	19	expand	expand	VERB
ajis02-5323	444	20	their	their	PRON
ajis02-5323	444	21	assessment	assessment	NOUN
ajis02-5323	444	22	beyond	beyond	ADP
ajis02-5323	444	23	just	just	ADV
ajis02-5323	444	24	critical	critical	ADJ
ajis02-5323	444	25	suppliers	supplier	NOUN
ajis02-5323	444	26	.	.	PUNCT
ajis02-5323	445	1	they	they	PRON
ajis02-5323	445	2	automate	automate	VERB
ajis02-5323	445	3	the	the	DET
ajis02-5323	445	4	process	process	NOUN
ajis02-5323	445	5	after	after	SCONJ
ajis02-5323	445	6	a	a	DET
ajis02-5323	445	7	supplier	supplier	NOUN
ajis02-5323	445	8	is	be	AUX
ajis02-5323	445	9	onboarded	onboarde	VERB
ajis02-5323	445	10	,	,	PUNCT
ajis02-5323	445	11	invest	invest	VERB
ajis02-5323	445	12	more	more	ADJ
ajis02-5323	445	13	resources	resource	NOUN
ajis02-5323	445	14	in	in	ADP
ajis02-5323	445	15	ensuring	ensure	VERB
ajis02-5323	445	16	that	that	SCONJ
ajis02-5323	445	17	supplier	supplier	NOUN
ajis02-5323	445	18	australasian	australasian	ADJ
ajis02-5323	445	19	journal	journal	NOUN
ajis02-5323	445	20	of	of	ADP
ajis02-5323	445	21	information	information	NOUN
ajis02-5323	445	22	systems	system	NOUN
ajis02-5323	445	23	slapnicar	slapnicar	NOUN
ajis02-5323	445	24	,	,	PUNCT
ajis02-5323	445	25	vidmar	vidmar	NOUN
ajis02-5323	445	26	&	&	CCONJ
ajis02-5323	445	27	tsen	tsen	ADJ
ajis02-5323	445	28	2025	2025	NUM
ajis02-5323	445	29	,	,	PUNCT
ajis02-5323	445	30	vol	vol	NOUN
ajis02-5323	445	31	29	29	NUM
ajis02-5323	445	32	,	,	PUNCT
ajis02-5323	445	33	research	research	NOUN
ajis02-5323	445	34	article	article	NOUN
ajis02-5323	445	35	process	process	NOUN
ajis02-5323	445	36	theory	theory	NOUN
ajis02-5323	445	37	of	of	ADP
ajis02-5323	445	38	supplier	supplier	NOUN
ajis02-5323	445	39	cyber	cyber	NOUN
ajis02-5323	445	40	risk	risk	NOUN
ajis02-5323	445	41	assessment	assessment	NOUN
ajis02-5323	445	42	25	25	NUM
ajis02-5323	445	43	information	information	NOUN
ajis02-5323	445	44	remains	remain	VERB
ajis02-5323	445	45	accurate	accurate	ADJ
ajis02-5323	445	46	and	and	CCONJ
ajis02-5323	445	47	that	that	SCONJ
ajis02-5323	445	48	a	a	DET
ajis02-5323	445	49	supplier	supplier	NOUN
ajis02-5323	445	50	maintains	maintain	VERB
ajis02-5323	445	51	its	its	PRON
ajis02-5323	445	52	security	security	NOUN
ajis02-5323	445	53	posture	posture	NOUN
ajis02-5323	445	54	even	even	ADV
ajis02-5323	445	55	after	after	ADP
ajis02-5323	445	56	onboarding	onboarde	VERB
ajis02-5323	445	57	.	.	PUNCT
ajis02-5323	446	1	compared	compare	VERB
ajis02-5323	446	2	to	to	ADP
ajis02-5323	446	3	the	the	DET
ajis02-5323	446	4	findings	finding	NOUN
ajis02-5323	446	5	of	of	ADP
ajis02-5323	446	6	prior	prior	ADJ
ajis02-5323	446	7	research	research	NOUN
ajis02-5323	446	8	(	(	PUNCT
ajis02-5323	446	9	e.g.	e.g.	ADV
ajis02-5323	446	10	,	,	PUNCT
ajis02-5323	446	11	gaudenzi	gaudenzi	PROPN
ajis02-5323	446	12	&	&	CCONJ
ajis02-5323	446	13	siciliano	siciliano	PROPN
ajis02-5323	446	14	,	,	PUNCT
ajis02-5323	446	15	2018	2018	NUM
ajis02-5323	446	16	;	;	PUNCT
ajis02-5323	446	17	colicchia	colicchia	VERB
ajis02-5323	446	18	et	et	PROPN
ajis02-5323	446	19	al	al	PROPN
ajis02-5323	446	20	.	.	PROPN
ajis02-5323	446	21	,	,	PUNCT
ajis02-5323	446	22	2019	2019	NUM
ajis02-5323	446	23	;	;	PUNCT
ajis02-5323	446	24	boyens	boyen	NOUN
ajis02-5323	446	25	et	et	PROPN
ajis02-5323	446	26	al	al	PROPN
ajis02-5323	446	27	.	.	PROPN
ajis02-5323	446	28	,	,	PUNCT
ajis02-5323	446	29	2020	2020	NUM
ajis02-5323	446	30	)	)	PUNCT
ajis02-5323	446	31	who	who	PRON
ajis02-5323	446	32	found	find	VERB
ajis02-5323	446	33	that	that	SCONJ
ajis02-5323	446	34	the	the	DET
ajis02-5323	446	35	majority	majority	NOUN
ajis02-5323	446	36	of	of	ADP
ajis02-5323	446	37	c	c	PROPN
ajis02-5323	446	38	-	-	PUNCT
ajis02-5323	446	39	scrm	scrm	NOUN
ajis02-5323	446	40	initiatives	initiative	NOUN
ajis02-5323	446	41	are	be	AUX
ajis02-5323	446	42	primarily	primarily	ADV
ajis02-5323	446	43	associated	associate	VERB
ajis02-5323	446	44	with	with	ADP
ajis02-5323	446	45	the	the	DET
ajis02-5323	446	46	it	it	PRON
ajis02-5323	446	47	domain	domain	NOUN
ajis02-5323	446	48	(	(	PUNCT
ajis02-5323	446	49	technology	technology	NOUN
ajis02-5323	446	50	)	)	PUNCT
ajis02-5323	446	51	and	and	CCONJ
ajis02-5323	446	52	that	that	SCONJ
ajis02-5323	446	53	organizations	organization	NOUN
ajis02-5323	446	54	are	be	AUX
ajis02-5323	446	55	prioritizing	prioritize	VERB
ajis02-5323	446	56	protection	protection	NOUN
ajis02-5323	446	57	measures	measure	NOUN
ajis02-5323	446	58	over	over	ADP
ajis02-5323	446	59	cyber	cyber	ADJ
ajis02-5323	446	60	risk	risk	NOUN
ajis02-5323	446	61	assessment	assessment	NOUN
ajis02-5323	446	62	,	,	PUNCT
ajis02-5323	446	63	we	we	PRON
ajis02-5323	446	64	found	find	VERB
ajis02-5323	446	65	that	that	SCONJ
ajis02-5323	446	66	in	in	ADP
ajis02-5323	446	67	the	the	DET
ajis02-5323	446	68	recent	recent	ADJ
ajis02-5323	446	69	years	year	NOUN
ajis02-5323	446	70	,	,	PUNCT
ajis02-5323	446	71	this	this	DET
ajis02-5323	446	72	process	process	NOUN
ajis02-5323	446	73	has	have	AUX
ajis02-5323	446	74	rapidly	rapidly	ADV
ajis02-5323	446	75	progressed	progress	VERB
ajis02-5323	446	76	.	.	PUNCT
ajis02-5323	447	1	still	still	ADV
ajis02-5323	447	2	,	,	PUNCT
ajis02-5323	447	3	most	most	ADJ
ajis02-5323	447	4	interviewees	interviewee	NOUN
ajis02-5323	447	5	concur	concur	VERB
ajis02-5323	447	6	that	that	SCONJ
ajis02-5323	447	7	their	their	PRON
ajis02-5323	447	8	supplier	supplier	NOUN
ajis02-5323	447	9	risk	risk	NOUN
ajis02-5323	447	10	assessment	assessment	NOUN
ajis02-5323	447	11	and	and	CCONJ
ajis02-5323	447	12	monitoring	monitoring	NOUN
ajis02-5323	447	13	process	process	NOUN
ajis02-5323	447	14	is	be	AUX
ajis02-5323	447	15	a	a	DET
ajis02-5323	447	16	‘	'	PUNCT
ajis02-5323	447	17	work	work	NOUN
ajis02-5323	447	18	in	in	ADP
ajis02-5323	447	19	progress	progress	NOUN
ajis02-5323	447	20	’	'	PUNCT
ajis02-5323	447	21	.	.	PUNCT
ajis02-5323	448	1	while	while	SCONJ
ajis02-5323	448	2	prior	prior	ADJ
ajis02-5323	448	3	studies	study	NOUN
ajis02-5323	448	4	interpret	interpret	VERB
ajis02-5323	448	5	the	the	DET
ajis02-5323	448	6	assessment	assessment	NOUN
ajis02-5323	448	7	of	of	ADP
ajis02-5323	448	8	the	the	DET
ajis02-5323	448	9	suppliers	supplier	NOUN
ajis02-5323	448	10	’	'	PUNCT
ajis02-5323	448	11	it	it	PRON
ajis02-5323	448	12	domain	domain	VERB
ajis02-5323	448	13	(	(	PUNCT
ajis02-5323	448	14	technology	technology	NOUN
ajis02-5323	448	15	)	)	PUNCT
ajis02-5323	448	16	as	as	ADP
ajis02-5323	448	17	early	early	ADJ
ajis02-5323	448	18	stages	stage	NOUN
ajis02-5323	448	19	of	of	ADP
ajis02-5323	448	20	maturity	maturity	NOUN
ajis02-5323	448	21	,	,	PUNCT
ajis02-5323	448	22	we	we	PRON
ajis02-5323	448	23	observe	observe	VERB
ajis02-5323	448	24	that	that	SCONJ
ajis02-5323	448	25	most	most	ADJ
ajis02-5323	448	26	organizations	organization	NOUN
ajis02-5323	448	27	have	have	AUX
ajis02-5323	448	28	expanded	expand	VERB
ajis02-5323	448	29	beyond	beyond	ADP
ajis02-5323	448	30	merely	merely	ADV
ajis02-5323	448	31	assessing	assess	VERB
ajis02-5323	448	32	this	this	DET
ajis02-5323	448	33	area	area	NOUN
ajis02-5323	448	34	.	.	PUNCT
ajis02-5323	449	1	however	however	ADV
ajis02-5323	449	2	,	,	PUNCT
ajis02-5323	449	3	we	we	PRON
ajis02-5323	449	4	also	also	ADV
ajis02-5323	449	5	find	find	VERB
ajis02-5323	449	6	that	that	SCONJ
ajis02-5323	449	7	technology	technology	NOUN
ajis02-5323	449	8	remains	remain	VERB
ajis02-5323	449	9	the	the	DET
ajis02-5323	449	10	most	most	ADV
ajis02-5323	449	11	critical	critical	ADJ
ajis02-5323	449	12	characteristic	characteristic	NOUN
ajis02-5323	449	13	of	of	ADP
ajis02-5323	449	14	the	the	DET
ajis02-5323	449	15	supplier	supplier	NOUN
ajis02-5323	449	16	's	's	PART
ajis02-5323	449	17	risk	risk	NOUN
ajis02-5323	449	18	posture	posture	NOUN
ajis02-5323	449	19	.	.	PUNCT
ajis02-5323	450	1	a	a	DET
ajis02-5323	450	2	significant	significant	ADJ
ajis02-5323	450	3	share	share	NOUN
ajis02-5323	450	4	of	of	ADP
ajis02-5323	450	5	organizations	organization	NOUN
ajis02-5323	450	6	is	be	AUX
ajis02-5323	450	7	only	only	ADV
ajis02-5323	450	8	at	at	ADP
ajis02-5323	450	9	the	the	DET
ajis02-5323	450	10	low	low	ADJ
ajis02-5323	450	11	maturity	maturity	NOUN
ajis02-5323	450	12	of	of	ADP
ajis02-5323	450	13	the	the	DET
ajis02-5323	450	14	described	describe	VERB
ajis02-5323	450	15	process	process	NOUN
ajis02-5323	450	16	–	–	PUNCT
ajis02-5323	450	17	many	many	ADJ
ajis02-5323	450	18	have	have	AUX
ajis02-5323	450	19	just	just	ADV
ajis02-5323	450	20	started	start	VERB
ajis02-5323	450	21	to	to	PART
ajis02-5323	450	22	assess	assess	VERB
ajis02-5323	450	23	the	the	DET
ajis02-5323	450	24	cyber	cyber	ADJ
ajis02-5323	450	25	risk	risk	NOUN
ajis02-5323	450	26	of	of	ADP
ajis02-5323	450	27	suppliers	supplier	NOUN
ajis02-5323	450	28	in	in	ADP
ajis02-5323	450	29	the	the	DET
ajis02-5323	450	30	selection	selection	NOUN
ajis02-5323	450	31	process	process	NOUN
ajis02-5323	450	32	but	but	CCONJ
ajis02-5323	450	33	are	be	AUX
ajis02-5323	450	34	struggling	struggle	VERB
ajis02-5323	450	35	to	to	PART
ajis02-5323	450	36	catch	catch	VERB
ajis02-5323	450	37	up	up	ADP
ajis02-5323	450	38	with	with	ADP
ajis02-5323	450	39	monitoring	monitor	VERB
ajis02-5323	450	40	hundreds	hundred	NOUN
ajis02-5323	450	41	or	or	CCONJ
ajis02-5323	450	42	thousands	thousand	NOUN
ajis02-5323	450	43	of	of	ADP
ajis02-5323	450	44	existing	exist	VERB
ajis02-5323	450	45	suppliers	supplier	NOUN
ajis02-5323	450	46	.	.	PUNCT
ajis02-5323	451	1	some	some	DET
ajis02-5323	451	2	organizations	organization	NOUN
ajis02-5323	451	3	rely	rely	VERB
ajis02-5323	451	4	on	on	ADP
ajis02-5323	451	5	reduced	reduce	VERB
ajis02-5323	451	6	assessment	assessment	NOUN
ajis02-5323	451	7	due	due	ADP
ajis02-5323	451	8	to	to	ADP
ajis02-5323	451	9	resource	resource	NOUN
ajis02-5323	451	10	constraints	constraint	NOUN
ajis02-5323	451	11	,	,	PUNCT
ajis02-5323	451	12	while	while	SCONJ
ajis02-5323	451	13	in	in	ADP
ajis02-5323	451	14	others	other	NOUN
ajis02-5323	451	15	,	,	PUNCT
ajis02-5323	451	16	the	the	DET
ajis02-5323	451	17	assessment	assessment	NOUN
ajis02-5323	451	18	is	be	AUX
ajis02-5323	451	19	lax	lax	ADJ
ajis02-5323	451	20	as	as	SCONJ
ajis02-5323	451	21	the	the	DET
ajis02-5323	451	22	assessment	assessment	NOUN
ajis02-5323	451	23	outcome	outcome	NOUN
ajis02-5323	451	24	is	be	AUX
ajis02-5323	451	25	not	not	PART
ajis02-5323	451	26	decisive	decisive	ADJ
ajis02-5323	451	27	for	for	ADP
ajis02-5323	451	28	the	the	DET
ajis02-5323	451	29	decision	decision	NOUN
ajis02-5323	451	30	to	to	PART
ajis02-5323	451	31	onboard	onboard	VERB
ajis02-5323	451	32	a	a	DET
ajis02-5323	451	33	supplier	supplier	NOUN
ajis02-5323	451	34	due	due	ADP
ajis02-5323	451	35	to	to	ADP
ajis02-5323	451	36	the	the	DET
ajis02-5323	451	37	lack	lack	NOUN
ajis02-5323	451	38	of	of	ADP
ajis02-5323	451	39	management	management	NOUN
ajis02-5323	451	40	support	support	NOUN
ajis02-5323	451	41	,	,	PUNCT
ajis02-5323	451	42	which	which	PRON
ajis02-5323	451	43	considers	consider	VERB
ajis02-5323	451	44	other	other	ADJ
ajis02-5323	451	45	factors	factor	NOUN
ajis02-5323	451	46	more	more	ADV
ajis02-5323	451	47	important	important	ADJ
ajis02-5323	451	48	.	.	PUNCT
ajis02-5323	452	1	in	in	ADP
ajis02-5323	452	2	sum	sum	NOUN
ajis02-5323	452	3	,	,	PUNCT
ajis02-5323	452	4	organizations	organization	NOUN
ajis02-5323	452	5	repetitively	repetitively	ADV
ajis02-5323	452	6	review	review	VERB
ajis02-5323	452	7	their	their	PRON
ajis02-5323	452	8	achievable	achievable	ADJ
ajis02-5323	452	9	goals	goal	NOUN
ajis02-5323	452	10	and	and	CCONJ
ajis02-5323	452	11	strive	strive	VERB
ajis02-5323	452	12	to	to	PART
ajis02-5323	452	13	advance	advance	VERB
ajis02-5323	452	14	and	and	CCONJ
ajis02-5323	452	15	modify	modify	VERB
ajis02-5323	452	16	their	their	PRON
ajis02-5323	452	17	assessment	assessment	NOUN
ajis02-5323	452	18	processes	process	NOUN
ajis02-5323	452	19	in	in	ADP
ajis02-5323	452	20	accordance	accordance	NOUN
ajis02-5323	452	21	with	with	ADP
ajis02-5323	452	22	teleological	teleological	ADJ
ajis02-5323	452	23	process	process	NOUN
ajis02-5323	452	24	theory	theory	NOUN
ajis02-5323	452	25	(	(	PUNCT
ajis02-5323	452	26	van	van	PROPN
ajis02-5323	452	27	de	de	X
ajis02-5323	452	28	ven	ven	PROPN
ajis02-5323	452	29	&	&	CCONJ
ajis02-5323	452	30	poole	poole	PROPN
ajis02-5323	452	31	,	,	PUNCT
ajis02-5323	452	32	1995	1995	NUM
ajis02-5323	452	33	)	)	PUNCT
ajis02-5323	452	34	.	.	PUNCT
ajis02-5323	453	1	by	by	ADP
ajis02-5323	453	2	proposing	propose	VERB
ajis02-5323	453	3	a	a	DET
ajis02-5323	453	4	process	process	NOUN
ajis02-5323	453	5	theory	theory	NOUN
ajis02-5323	453	6	of	of	ADP
ajis02-5323	453	7	supplier	supplier	NOUN
ajis02-5323	453	8	cyber	cyber	NOUN
ajis02-5323	453	9	risk	risk	NOUN
ajis02-5323	453	10	assessment	assessment	NOUN
ajis02-5323	453	11	,	,	PUNCT
ajis02-5323	453	12	this	this	DET
ajis02-5323	453	13	study	study	NOUN
ajis02-5323	453	14	makes	make	VERB
ajis02-5323	453	15	a	a	DET
ajis02-5323	453	16	theoretical	theoretical	ADJ
ajis02-5323	453	17	contribution	contribution	NOUN
ajis02-5323	453	18	to	to	ADP
ajis02-5323	453	19	the	the	DET
ajis02-5323	453	20	existing	exist	VERB
ajis02-5323	453	21	research	research	NOUN
ajis02-5323	453	22	on	on	ADP
ajis02-5323	453	23	c	c	NOUN
ajis02-5323	453	24	-	-	PUNCT
ajis02-5323	453	25	scrm	scrm	NOUN
ajis02-5323	453	26	by	by	ADP
ajis02-5323	453	27	utilizing	utilize	VERB
ajis02-5323	453	28	a	a	DET
ajis02-5323	453	29	perspective	perspective	NOUN
ajis02-5323	453	30	that	that	PRON
ajis02-5323	453	31	has	have	AUX
ajis02-5323	453	32	n't	not	PART
ajis02-5323	453	33	been	be	AUX
ajis02-5323	453	34	researched	research	VERB
ajis02-5323	453	35	in	in	ADP
ajis02-5323	453	36	previous	previous	ADJ
ajis02-5323	453	37	studies	study	NOUN
ajis02-5323	453	38	that	that	PRON
ajis02-5323	453	39	focused	focus	VERB
ajis02-5323	453	40	predominantly	predominantly	ADV
ajis02-5323	453	41	on	on	ADP
ajis02-5323	453	42	normative	normative	ADJ
ajis02-5323	453	43	guidance	guidance	NOUN
ajis02-5323	453	44	,	,	PUNCT
ajis02-5323	453	45	technical	technical	ADJ
ajis02-5323	453	46	solutions	solution	NOUN
ajis02-5323	453	47	,	,	PUNCT
ajis02-5323	453	48	or	or	CCONJ
ajis02-5323	453	49	described	describe	VERB
ajis02-5323	453	50	practices	practice	NOUN
ajis02-5323	453	51	in	in	ADP
ajis02-5323	453	52	selected	select	VERB
ajis02-5323	453	53	case	case	NOUN
ajis02-5323	453	54	studies	study	NOUN
ajis02-5323	453	55	.	.	PUNCT
ajis02-5323	454	1	the	the	DET
ajis02-5323	454	2	fundamental	fundamental	ADJ
ajis02-5323	454	3	theoretical	theoretical	ADJ
ajis02-5323	454	4	contribution	contribution	NOUN
ajis02-5323	454	5	is	be	AUX
ajis02-5323	454	6	the	the	DET
ajis02-5323	454	7	integration	integration	NOUN
ajis02-5323	454	8	of	of	ADP
ajis02-5323	454	9	life	life	NOUN
ajis02-5323	454	10	-	-	PUNCT
ajis02-5323	454	11	cycle	cycle	NOUN
ajis02-5323	454	12	and	and	CCONJ
ajis02-5323	454	13	teleological	teleological	ADJ
ajis02-5323	454	14	process	process	NOUN
ajis02-5323	454	15	theories	theory	NOUN
ajis02-5323	454	16	in	in	ADP
ajis02-5323	454	17	the	the	DET
ajis02-5323	454	18	context	context	NOUN
ajis02-5323	454	19	of	of	ADP
ajis02-5323	454	20	c	c	PROPN
ajis02-5323	454	21	-	-	PUNCT
ajis02-5323	454	22	scrm	scrm	NOUN
ajis02-5323	454	23	.	.	PUNCT
ajis02-5323	455	1	dictated	dictate	VERB
ajis02-5323	455	2	by	by	ADP
ajis02-5323	455	3	constrained	constrained	ADJ
ajis02-5323	455	4	resources	resource	NOUN
ajis02-5323	455	5	,	,	PUNCT
ajis02-5323	455	6	this	this	DET
ajis02-5323	455	7	integration	integration	NOUN
ajis02-5323	455	8	is	be	AUX
ajis02-5323	455	9	achieved	achieve	VERB
ajis02-5323	455	10	by	by	ADP
ajis02-5323	455	11	focusing	focus	VERB
ajis02-5323	455	12	on	on	ADP
ajis02-5323	455	13	suppliers	supplier	NOUN
ajis02-5323	455	14	'	'	PART
ajis02-5323	455	15	criticality	criticality	NOUN
ajis02-5323	455	16	and	and	CCONJ
ajis02-5323	455	17	applying	apply	VERB
ajis02-5323	455	18	sequential	sequential	ADJ
ajis02-5323	455	19	steps	step	NOUN
ajis02-5323	455	20	in	in	ADP
ajis02-5323	455	21	a	a	DET
ajis02-5323	455	22	risk	risk	NOUN
ajis02-5323	455	23	-	-	PUNCT
ajis02-5323	455	24	based	base	VERB
ajis02-5323	455	25	manner	manner	NOUN
ajis02-5323	455	26	.	.	PUNCT
ajis02-5323	456	1	5.2	5.2	NUM
ajis02-5323	456	2	practical	practical	ADJ
ajis02-5323	456	3	contributions	contribution	NOUN
ajis02-5323	456	4	from	from	ADP
ajis02-5323	456	5	our	our	PRON
ajis02-5323	456	6	findings	finding	NOUN
ajis02-5323	456	7	,	,	PUNCT
ajis02-5323	456	8	significant	significant	ADJ
ajis02-5323	456	9	practical	practical	ADJ
ajis02-5323	456	10	implications	implication	NOUN
ajis02-5323	456	11	arise	arise	VERB
ajis02-5323	456	12	.	.	PUNCT
ajis02-5323	457	1	first	first	ADV
ajis02-5323	457	2	,	,	PUNCT
ajis02-5323	457	3	the	the	DET
ajis02-5323	457	4	most	most	ADV
ajis02-5323	457	5	important	important	ADJ
ajis02-5323	457	6	concern	concern	NOUN
ajis02-5323	457	7	is	be	AUX
ajis02-5323	457	8	the	the	DET
ajis02-5323	457	9	lack	lack	NOUN
ajis02-5323	457	10	of	of	ADP
ajis02-5323	457	11	resources	resource	NOUN
ajis02-5323	457	12	dedicated	dedicate	VERB
ajis02-5323	457	13	to	to	PART
ajis02-5323	457	14	supplier	supplier	VERB
ajis02-5323	457	15	cyber	cyber	ADJ
ajis02-5323	457	16	risk	risk	NOUN
ajis02-5323	457	17	assessment	assessment	NOUN
ajis02-5323	457	18	.	.	PUNCT
ajis02-5323	458	1	pooling	pool	VERB
ajis02-5323	458	2	resources	resource	NOUN
ajis02-5323	458	3	with	with	ADP
ajis02-5323	458	4	other	other	ADJ
ajis02-5323	458	5	organizations	organization	NOUN
ajis02-5323	458	6	using	use	VERB
ajis02-5323	458	7	the	the	DET
ajis02-5323	458	8	same	same	ADJ
ajis02-5323	458	9	suppliers	supplier	NOUN
ajis02-5323	458	10	for	for	ADP
ajis02-5323	458	11	cyber	cyber	ADJ
ajis02-5323	458	12	risk	risk	NOUN
ajis02-5323	458	13	assessments	assessment	NOUN
ajis02-5323	458	14	and	and	CCONJ
ajis02-5323	458	15	other	other	ADJ
ajis02-5323	458	16	operational	operational	ADJ
ajis02-5323	458	17	and	and	CCONJ
ajis02-5323	458	18	strategic	strategic	ADJ
ajis02-5323	458	19	risk	risk	NOUN
ajis02-5323	458	20	assessments	assessment	NOUN
ajis02-5323	458	21	in	in	ADP
ajis02-5323	458	22	the	the	DET
ajis02-5323	458	23	sc	sc	PROPN
ajis02-5323	458	24	(	(	PUNCT
ajis02-5323	458	25	e.g.	e.g.	ADV
ajis02-5323	458	26	,	,	PUNCT
ajis02-5323	458	27	esg	esg	NOUN
ajis02-5323	458	28	)	)	PUNCT
ajis02-5323	458	29	would	would	AUX
ajis02-5323	458	30	be	be	AUX
ajis02-5323	458	31	one	one	NUM
ajis02-5323	458	32	way	way	NOUN
ajis02-5323	458	33	to	to	PART
ajis02-5323	458	34	optimize	optimize	VERB
ajis02-5323	458	35	the	the	DET
ajis02-5323	458	36	available	available	ADJ
ajis02-5323	458	37	resources	resource	NOUN
ajis02-5323	458	38	.	.	PUNCT
ajis02-5323	459	1	another	another	DET
ajis02-5323	459	2	solution	solution	NOUN
ajis02-5323	459	3	could	could	AUX
ajis02-5323	459	4	be	be	AUX
ajis02-5323	459	5	using	use	VERB
ajis02-5323	459	6	vendor	vendor	NOUN
ajis02-5323	459	7	management	management	NOUN
ajis02-5323	459	8	platforms	platform	NOUN
ajis02-5323	459	9	(	(	PUNCT
ajis02-5323	459	10	keskin	keskin	PROPN
ajis02-5323	459	11	et	et	PROPN
ajis02-5323	459	12	al	al	PROPN
ajis02-5323	459	13	.	.	PROPN
ajis02-5323	459	14	,	,	PUNCT
ajis02-5323	459	15	2021	2021	NUM
ajis02-5323	459	16	)	)	PUNCT
ajis02-5323	459	17	and	and	CCONJ
ajis02-5323	459	18	automation	automation	NOUN
ajis02-5323	459	19	tools	tool	NOUN
ajis02-5323	459	20	for	for	ADP
ajis02-5323	459	21	monitoring	monitor	VERB
ajis02-5323	459	22	onboarded	onboarde	VERB
ajis02-5323	459	23	suppliers	supplier	NOUN
ajis02-5323	459	24	.	.	PUNCT
ajis02-5323	460	1	however	however	ADV
ajis02-5323	460	2	,	,	PUNCT
ajis02-5323	460	3	vendor	vendor	NOUN
ajis02-5323	460	4	management	management	NOUN
ajis02-5323	460	5	platforms	platform	NOUN
ajis02-5323	460	6	should	should	AUX
ajis02-5323	460	7	not	not	PART
ajis02-5323	460	8	operate	operate	VERB
ajis02-5323	460	9	as	as	ADP
ajis02-5323	460	10	a	a	DET
ajis02-5323	460	11	black	black	ADJ
ajis02-5323	460	12	box	box	NOUN
ajis02-5323	460	13	–	–	PUNCT
ajis02-5323	460	14	the	the	DET
ajis02-5323	460	15	scores	score	NOUN
ajis02-5323	460	16	need	need	VERB
ajis02-5323	460	17	to	to	PART
ajis02-5323	460	18	be	be	AUX
ajis02-5323	460	19	understood	understand	VERB
ajis02-5323	460	20	and	and	CCONJ
ajis02-5323	460	21	aligned	align	VERB
ajis02-5323	460	22	with	with	ADP
ajis02-5323	460	23	other	other	ADJ
ajis02-5323	460	24	cyber	cyber	ADJ
ajis02-5323	460	25	risks	risk	NOUN
ajis02-5323	460	26	related	relate	VERB
ajis02-5323	460	27	assessments	assessment	NOUN
ajis02-5323	460	28	if	if	SCONJ
ajis02-5323	460	29	they	they	PRON
ajis02-5323	460	30	are	be	AUX
ajis02-5323	460	31	to	to	PART
ajis02-5323	460	32	affect	affect	VERB
ajis02-5323	460	33	business	business	NOUN
ajis02-5323	460	34	decisions	decision	NOUN
ajis02-5323	460	35	.	.	PUNCT
ajis02-5323	461	1	third	third	ADJ
ajis02-5323	461	2	,	,	PUNCT
ajis02-5323	461	3	in	in	ADP
ajis02-5323	461	4	most	most	ADJ
ajis02-5323	461	5	of	of	ADP
ajis02-5323	461	6	the	the	DET
ajis02-5323	461	7	interviewed	interview	VERB
ajis02-5323	461	8	organizations	organization	NOUN
ajis02-5323	461	9	,	,	PUNCT
ajis02-5323	461	10	despite	despite	SCONJ
ajis02-5323	461	11	reliance	reliance	NOUN
ajis02-5323	461	12	on	on	ADP
ajis02-5323	461	13	various	various	ADJ
ajis02-5323	461	14	methods	method	NOUN
ajis02-5323	461	15	and	and	CCONJ
ajis02-5323	461	16	tools	tool	NOUN
ajis02-5323	461	17	,	,	PUNCT
ajis02-5323	461	18	translating	translate	VERB
ajis02-5323	461	19	a	a	DET
ajis02-5323	461	20	supplier	supplier	NOUN
ajis02-5323	461	21	’s	’s	PART
ajis02-5323	461	22	information	information	NOUN
ajis02-5323	461	23	into	into	ADP
ajis02-5323	461	24	risk	risk	NOUN
ajis02-5323	461	25	score	score	NOUN
ajis02-5323	461	26	is	be	AUX
ajis02-5323	461	27	a	a	DET
ajis02-5323	461	28	subjective	subjective	ADJ
ajis02-5323	461	29	expert	expert	ADJ
ajis02-5323	461	30	judgment	judgment	NOUN
ajis02-5323	461	31	.	.	PUNCT
ajis02-5323	462	1	the	the	DET
ajis02-5323	462	2	objectivity	objectivity	NOUN
ajis02-5323	462	3	of	of	ADP
ajis02-5323	462	4	assessments	assessment	NOUN
ajis02-5323	462	5	could	could	AUX
ajis02-5323	462	6	improve	improve	VERB
ajis02-5323	462	7	if	if	SCONJ
ajis02-5323	462	8	organizations	organization	NOUN
ajis02-5323	462	9	started	start	VERB
ajis02-5323	462	10	building	build	VERB
ajis02-5323	462	11	a	a	DET
ajis02-5323	462	12	database	database	NOUN
ajis02-5323	462	13	of	of	ADP
ajis02-5323	462	14	suppliers	supplier	NOUN
ajis02-5323	462	15	’	'	PUNCT
ajis02-5323	462	16	characteristics	characteristic	NOUN
ajis02-5323	462	17	that	that	PRON
ajis02-5323	462	18	would	would	AUX
ajis02-5323	462	19	enable	enable	VERB
ajis02-5323	462	20	benchmarking	benchmarking	NOUN
ajis02-5323	462	21	and	and	CCONJ
ajis02-5323	462	22	validation	validation	NOUN
ajis02-5323	462	23	of	of	ADP
ajis02-5323	462	24	the	the	DET
ajis02-5323	462	25	assessment	assessment	NOUN
ajis02-5323	462	26	methods	method	NOUN
ajis02-5323	462	27	by	by	ADP
ajis02-5323	462	28	analyzing	analyze	VERB
ajis02-5323	462	29	ex	ex	NOUN
ajis02-5323	462	30	-	-	NOUN
ajis02-5323	462	31	post	post	VERB
ajis02-5323	462	32	whether	whether	SCONJ
ajis02-5323	462	33	suppliers	supplier	NOUN
ajis02-5323	462	34	assessed	assess	VERB
ajis02-5323	462	35	with	with	ADP
ajis02-5323	462	36	a	a	DET
ajis02-5323	462	37	higher	high	ADJ
ajis02-5323	462	38	/	/	SYM
ajis02-5323	462	39	lower	low	ADJ
ajis02-5323	462	40	risk	risk	NOUN
ajis02-5323	462	41	score	score	NOUN
ajis02-5323	462	42	were	be	AUX
ajis02-5323	462	43	actually	actually	ADV
ajis02-5323	462	44	more	more	ADV
ajis02-5323	462	45	/	/	SYM
ajis02-5323	462	46	less	less	ADV
ajis02-5323	462	47	risky	risky	ADJ
ajis02-5323	462	48	.	.	PUNCT
ajis02-5323	463	1	fourth	fourth	ADV
ajis02-5323	463	2	,	,	PUNCT
ajis02-5323	463	3	the	the	DET
ajis02-5323	463	4	likelihood	likelihood	NOUN
ajis02-5323	463	5	of	of	ADP
ajis02-5323	463	6	a	a	DET
ajis02-5323	463	7	supplier	supplier	NOUN
ajis02-5323	463	8	suffering	suffer	VERB
ajis02-5323	463	9	a	a	DET
ajis02-5323	463	10	cyber	cyber	NOUN
ajis02-5323	463	11	incident	incident	NOUN
ajis02-5323	463	12	and	and	CCONJ
ajis02-5323	463	13	the	the	DET
ajis02-5323	463	14	likelihood	likelihood	NOUN
ajis02-5323	463	15	that	that	SCONJ
ajis02-5323	463	16	this	this	DET
ajis02-5323	463	17	incident	incident	NOUN
ajis02-5323	463	18	would	would	AUX
ajis02-5323	463	19	affect	affect	VERB
ajis02-5323	463	20	the	the	DET
ajis02-5323	463	21	focal	focal	ADJ
ajis02-5323	463	22	organization	organization	NOUN
ajis02-5323	463	23	are	be	AUX
ajis02-5323	463	24	not	not	PART
ajis02-5323	463	25	perfectly	perfectly	ADV
ajis02-5323	463	26	correlated	correlate	VERB
ajis02-5323	463	27	.	.	PUNCT
ajis02-5323	464	1	the	the	DET
ajis02-5323	464	2	latter	latter	ADJ
ajis02-5323	464	3	depends	depend	VERB
ajis02-5323	464	4	on	on	ADP
ajis02-5323	464	5	australasian	australasian	ADJ
ajis02-5323	464	6	journal	journal	NOUN
ajis02-5323	464	7	of	of	ADP
ajis02-5323	464	8	information	information	NOUN
ajis02-5323	464	9	systems	system	NOUN
ajis02-5323	464	10	slapnicar	slapnicar	NOUN
ajis02-5323	464	11	,	,	PUNCT
ajis02-5323	464	12	vidmar	vidmar	NOUN
ajis02-5323	464	13	&	&	CCONJ
ajis02-5323	464	14	tsen	tsen	ADJ
ajis02-5323	464	15	2025	2025	NUM
ajis02-5323	464	16	,	,	PUNCT
ajis02-5323	464	17	vol	vol	NOUN
ajis02-5323	464	18	29	29	NUM
ajis02-5323	464	19	,	,	PUNCT
ajis02-5323	464	20	research	research	NOUN
ajis02-5323	464	21	article	article	NOUN
ajis02-5323	464	22	process	process	NOUN
ajis02-5323	464	23	theory	theory	NOUN
ajis02-5323	464	24	of	of	ADP
ajis02-5323	464	25	supplier	supplier	NOUN
ajis02-5323	464	26	cyber	cyber	NOUN
ajis02-5323	464	27	risk	risk	NOUN
ajis02-5323	464	28	assessment	assessment	NOUN
ajis02-5323	464	29	26	26	NUM
ajis02-5323	464	30	the	the	DET
ajis02-5323	464	31	failure	failure	NOUN
ajis02-5323	464	32	of	of	ADP
ajis02-5323	464	33	other	other	ADJ
ajis02-5323	464	34	controls	control	NOUN
ajis02-5323	464	35	in	in	ADP
ajis02-5323	464	36	the	the	DET
ajis02-5323	464	37	focal	focal	ADJ
ajis02-5323	464	38	organization	organization	NOUN
ajis02-5323	464	39	and	and	CCONJ
ajis02-5323	464	40	what	what	PRON
ajis02-5323	464	41	processes	process	VERB
ajis02-5323	464	42	a	a	DET
ajis02-5323	464	43	supplier	supplier	NOUN
ajis02-5323	464	44	is	be	AUX
ajis02-5323	464	45	involved	involve	VERB
ajis02-5323	464	46	in	in	ADP
ajis02-5323	464	47	.	.	PUNCT
ajis02-5323	465	1	this	this	PRON
ajis02-5323	465	2	calls	call	VERB
ajis02-5323	465	3	for	for	ADP
ajis02-5323	465	4	better	well	ADJ
ajis02-5323	465	5	integration	integration	NOUN
ajis02-5323	465	6	of	of	ADP
ajis02-5323	465	7	supplier	supplier	NOUN
ajis02-5323	465	8	cyber	cyber	NOUN
ajis02-5323	465	9	risk	risk	NOUN
ajis02-5323	465	10	assessment	assessment	NOUN
ajis02-5323	465	11	with	with	ADP
ajis02-5323	465	12	the	the	DET
ajis02-5323	465	13	overall	overall	ADJ
ajis02-5323	465	14	cyber	cyber	ADJ
ajis02-5323	465	15	risk	risk	NOUN
ajis02-5323	465	16	assessment	assessment	NOUN
ajis02-5323	465	17	process	process	NOUN
ajis02-5323	465	18	in	in	ADP
ajis02-5323	465	19	the	the	DET
ajis02-5323	465	20	focal	focal	ADJ
ajis02-5323	465	21	organization	organization	NOUN
ajis02-5323	465	22	in	in	ADP
ajis02-5323	465	23	the	the	DET
ajis02-5323	465	24	light	light	NOUN
ajis02-5323	465	25	of	of	ADP
ajis02-5323	465	26	iso	iso	NOUN
ajis02-5323	465	27	/	/	SYM
ajis02-5323	465	28	iec	iec	PROPN
ajis02-5323	465	29	27005	27005	NUM
ajis02-5323	465	30	or	or	CCONJ
ajis02-5323	465	31	nist	nist	NOUN
ajis02-5323	465	32	special	special	ADJ
ajis02-5323	465	33	publication	publication	NOUN
ajis02-5323	465	34	800	800	NUM
ajis02-5323	465	35	-	-	SYM
ajis02-5323	465	36	30	30	NUM
ajis02-5323	465	37	(	(	PUNCT
ajis02-5323	465	38	monev	monev	NOUN
ajis02-5323	465	39	,	,	PUNCT
ajis02-5323	465	40	2021	2021	NUM
ajis02-5323	465	41	)	)	PUNCT
ajis02-5323	465	42	.	.	PUNCT
ajis02-5323	466	1	our	our	PRON
ajis02-5323	466	2	model	model	NOUN
ajis02-5323	466	3	in	in	ADP
ajis02-5323	466	4	figure	figure	NOUN
ajis02-5323	466	5	1	1	NUM
ajis02-5323	466	6	illustrates	illustrate	VERB
ajis02-5323	466	7	how	how	SCONJ
ajis02-5323	466	8	different	different	ADJ
ajis02-5323	466	9	steps	step	NOUN
ajis02-5323	466	10	in	in	ADP
ajis02-5323	466	11	the	the	DET
ajis02-5323	466	12	supplier	supplier	NOUN
ajis02-5323	466	13	cyber	cyber	NOUN
ajis02-5323	466	14	risk	risk	NOUN
ajis02-5323	466	15	assessment	assessment	NOUN
ajis02-5323	466	16	process	process	NOUN
ajis02-5323	466	17	can	can	AUX
ajis02-5323	466	18	be	be	AUX
ajis02-5323	466	19	integrated	integrate	VERB
ajis02-5323	466	20	with	with	ADP
ajis02-5323	466	21	the	the	DET
ajis02-5323	466	22	steps	step	NOUN
ajis02-5323	466	23	laid	lay	VERB
ajis02-5323	466	24	out	out	ADP
ajis02-5323	466	25	in	in	ADP
ajis02-5323	466	26	iso	iso	PROPN
ajis02-5323	466	27	/	/	SYM
ajis02-5323	466	28	iec	iec	PROPN
ajis02-5323	466	29	27005	27005	NUM
ajis02-5323	466	30	or	or	CCONJ
ajis02-5323	466	31	nist	nist	NOUN
ajis02-5323	466	32	sp	sp	ADP
ajis02-5323	466	33	800	800	NUM
ajis02-5323	466	34	-	-	SYM
ajis02-5323	466	35	30	30	NUM
ajis02-5323	466	36	for	for	ADP
ajis02-5323	466	37	organizational	organizational	ADJ
ajis02-5323	466	38	cyber	cyber	ADJ
ajis02-5323	466	39	risk	risk	NOUN
ajis02-5323	466	40	assessment	assessment	NOUN
ajis02-5323	466	41	–	–	PUNCT
ajis02-5323	466	42	risk	risk	NOUN
ajis02-5323	466	43	assessment	assessment	NOUN
ajis02-5323	466	44	(	(	PUNCT
ajis02-5323	466	45	identification	identification	NOUN
ajis02-5323	466	46	,	,	PUNCT
ajis02-5323	466	47	analysis	analysis	NOUN
ajis02-5323	466	48	,	,	PUNCT
ajis02-5323	466	49	evaluation	evaluation	NOUN
ajis02-5323	466	50	)	)	PUNCT
ajis02-5323	466	51	,	,	PUNCT
ajis02-5323	466	52	risk	risk	NOUN
ajis02-5323	466	53	mitigation	mitigation	NOUN
ajis02-5323	466	54	and	and	CCONJ
ajis02-5323	466	55	monitoring	monitoring	NOUN
ajis02-5323	466	56	.	.	PUNCT
ajis02-5323	467	1	fifth	fifth	ADJ
ajis02-5323	467	2	,	,	PUNCT
ajis02-5323	467	3	currently	currently	ADV
ajis02-5323	467	4	,	,	PUNCT
ajis02-5323	467	5	international	international	ADJ
ajis02-5323	467	6	cybersecurity	cybersecurity	NOUN
ajis02-5323	467	7	certifications	certification	NOUN
ajis02-5323	467	8	are	be	AUX
ajis02-5323	467	9	not	not	PART
ajis02-5323	467	10	fit	fit	ADJ
ajis02-5323	467	11	for	for	ADP
ajis02-5323	467	12	purpose	purpose	NOUN
ajis02-5323	467	13	for	for	ADP
ajis02-5323	467	14	smes	sme	NOUN
ajis02-5323	467	15	,	,	PUNCT
ajis02-5323	467	16	and	and	CCONJ
ajis02-5323	467	17	the	the	DET
ajis02-5323	467	18	assessments	assessment	NOUN
ajis02-5323	467	19	are	be	AUX
ajis02-5323	467	20	tailored	tailor	VERB
ajis02-5323	467	21	towards	towards	ADP
ajis02-5323	467	22	the	the	DET
ajis02-5323	467	23	ict	ict	PROPN
ajis02-5323	467	24	technology	technology	NOUN
ajis02-5323	467	25	providers	provider	NOUN
ajis02-5323	467	26	.	.	PUNCT
ajis02-5323	468	1	to	to	PART
ajis02-5323	468	2	get	get	VERB
ajis02-5323	468	3	visibility	visibility	NOUN
ajis02-5323	468	4	across	across	ADP
ajis02-5323	468	5	the	the	DET
ajis02-5323	468	6	entire	entire	ADJ
ajis02-5323	468	7	sc	sc	NOUN
ajis02-5323	468	8	,	,	PUNCT
ajis02-5323	468	9	as	as	SCONJ
ajis02-5323	468	10	suggested	suggest	VERB
ajis02-5323	468	11	by	by	ADP
ajis02-5323	468	12	one	one	NUM
ajis02-5323	468	13	of	of	ADP
ajis02-5323	468	14	our	our	PRON
ajis02-5323	468	15	interviewees	interviewee	NOUN
ajis02-5323	468	16	(	(	PUNCT
ajis02-5323	468	17	p15	p15	PROPN
ajis02-5323	468	18	)	)	PUNCT
ajis02-5323	468	19	,	,	PUNCT
ajis02-5323	468	20	organizations	organization	NOUN
ajis02-5323	468	21	could	could	AUX
ajis02-5323	468	22	consider	consider	VERB
ajis02-5323	468	23	making	make	VERB
ajis02-5323	468	24	suppliers	supplier	NOUN
ajis02-5323	468	25	accountable	accountable	ADJ
ajis02-5323	468	26	for	for	ADP
ajis02-5323	468	27	their	their	PRON
ajis02-5323	468	28	cyber	cyber	ADJ
ajis02-5323	468	29	security	security	NOUN
ajis02-5323	468	30	by	by	ADP
ajis02-5323	468	31	getting	get	VERB
ajis02-5323	468	32	self	self	NOUN
ajis02-5323	468	33	-	-	PUNCT
ajis02-5323	468	34	attestation	attestation	NOUN
ajis02-5323	468	35	and	and	CCONJ
ajis02-5323	468	36	acquiring	acquire	VERB
ajis02-5323	468	37	a	a	DET
ajis02-5323	468	38	multitiered	multitiered	ADJ
ajis02-5323	468	39	cybersecurity	cybersecurity	NOUN
ajis02-5323	468	40	certification	certification	NOUN
ajis02-5323	468	41	.	.	PUNCT
ajis02-5323	469	1	instead	instead	ADV
ajis02-5323	469	2	of	of	ADP
ajis02-5323	469	3	each	each	DET
ajis02-5323	469	4	organization	organization	NOUN
ajis02-5323	469	5	assessing	assess	VERB
ajis02-5323	469	6	the	the	DET
ajis02-5323	469	7	risk	risk	NOUN
ajis02-5323	469	8	,	,	PUNCT
ajis02-5323	469	9	providing	provide	VERB
ajis02-5323	469	10	smes	sme	NOUN
ajis02-5323	469	11	with	with	ADP
ajis02-5323	469	12	the	the	DET
ajis02-5323	469	13	standards	standard	NOUN
ajis02-5323	469	14	they	they	PRON
ajis02-5323	469	15	can	can	AUX
ajis02-5323	469	16	attest	attest	VERB
ajis02-5323	469	17	to	to	PART
ajis02-5323	469	18	would	would	AUX
ajis02-5323	469	19	shift	shift	VERB
ajis02-5323	469	20	the	the	DET
ajis02-5323	469	21	accountability	accountability	NOUN
ajis02-5323	469	22	for	for	ADP
ajis02-5323	469	23	cyber	cyber	ADJ
ajis02-5323	469	24	security	security	NOUN
ajis02-5323	469	25	to	to	ADP
ajis02-5323	469	26	suppliers	supplier	NOUN
ajis02-5323	469	27	.	.	PUNCT
ajis02-5323	470	1	currently	currently	ADV
ajis02-5323	470	2	,	,	PUNCT
ajis02-5323	470	3	self	self	NOUN
ajis02-5323	470	4	-	-	PUNCT
ajis02-5323	470	5	attestation	attestation	NOUN
ajis02-5323	470	6	services	service	NOUN
ajis02-5323	470	7	are	be	AUX
ajis02-5323	470	8	only	only	ADV
ajis02-5323	470	9	just	just	ADV
ajis02-5323	470	10	developing	develop	VERB
ajis02-5323	470	11	.	.	PUNCT
ajis02-5323	471	1	if	if	SCONJ
ajis02-5323	471	2	such	such	ADJ
ajis02-5323	471	3	optimizations	optimization	NOUN
ajis02-5323	471	4	do	do	AUX
ajis02-5323	471	5	not	not	PART
ajis02-5323	471	6	occur	occur	VERB
ajis02-5323	471	7	,	,	PUNCT
ajis02-5323	471	8	a	a	DET
ajis02-5323	471	9	threat	threat	NOUN
ajis02-5323	471	10	exists	exist	VERB
ajis02-5323	471	11	that	that	SCONJ
ajis02-5323	471	12	the	the	DET
ajis02-5323	471	13	regulated	regulated	ADJ
ajis02-5323	471	14	industries	industry	NOUN
ajis02-5323	471	15	subject	subject	ADJ
ajis02-5323	471	16	to	to	ADP
ajis02-5323	471	17	stringent	stringent	ADJ
ajis02-5323	471	18	assessment	assessment	NOUN
ajis02-5323	471	19	requirements	requirement	NOUN
ajis02-5323	471	20	will	will	AUX
ajis02-5323	471	21	not	not	PART
ajis02-5323	471	22	be	be	AUX
ajis02-5323	471	23	able	able	ADJ
ajis02-5323	471	24	to	to	PART
ajis02-5323	471	25	engage	engage	VERB
ajis02-5323	471	26	small	small	ADJ
ajis02-5323	471	27	and	and	CCONJ
ajis02-5323	471	28	micro	micro	ADJ
ajis02-5323	471	29	suppliers	supplier	NOUN
ajis02-5323	471	30	,	,	PUNCT
ajis02-5323	471	31	who	who	PRON
ajis02-5323	471	32	are	be	AUX
ajis02-5323	471	33	unable	unable	ADJ
ajis02-5323	471	34	to	to	PART
ajis02-5323	471	35	adhere	adhere	VERB
ajis02-5323	471	36	to	to	ADP
ajis02-5323	471	37	ever	ever	ADV
ajis02-5323	471	38	-	-	PUNCT
ajis02-5323	471	39	increasing	increase	VERB
ajis02-5323	471	40	requirements	requirement	NOUN
ajis02-5323	471	41	.	.	PUNCT
ajis02-5323	472	1	such	such	DET
ajis02-5323	472	2	an	an	DET
ajis02-5323	472	3	approach	approach	NOUN
ajis02-5323	472	4	would	would	AUX
ajis02-5323	472	5	provide	provide	VERB
ajis02-5323	472	6	better	well	ADJ
ajis02-5323	472	7	protection	protection	NOUN
ajis02-5323	472	8	to	to	ADP
ajis02-5323	472	9	a	a	DET
ajis02-5323	472	10	focal	focal	ADJ
ajis02-5323	472	11	organization	organization	NOUN
ajis02-5323	472	12	which	which	PRON
ajis02-5323	472	13	could	could	AUX
ajis02-5323	472	14	adopt	adopt	VERB
ajis02-5323	472	15	a	a	DET
ajis02-5323	472	16	policy	policy	NOUN
ajis02-5323	472	17	that	that	PRON
ajis02-5323	472	18	all	all	DET
ajis02-5323	472	19	suppliers	supplier	NOUN
ajis02-5323	472	20	in	in	ADP
ajis02-5323	472	21	its	its	PRON
ajis02-5323	472	22	sc	sc	NOUN
ajis02-5323	472	23	need	need	VERB
ajis02-5323	472	24	some	some	DET
ajis02-5323	472	25	sort	sort	NOUN
ajis02-5323	472	26	of	of	ADP
ajis02-5323	472	27	certification	certification	NOUN
ajis02-5323	472	28	,	,	PUNCT
ajis02-5323	472	29	be	be	AUX
ajis02-5323	472	30	it	it	PRON
ajis02-5323	472	31	iso	iso	NOUN
ajis02-5323	472	32	for	for	ADP
ajis02-5323	472	33	the	the	DET
ajis02-5323	472	34	critical	critical	ADJ
ajis02-5323	472	35	suppliers	supplier	NOUN
ajis02-5323	472	36	or	or	CCONJ
ajis02-5323	472	37	anything	anything	PRON
ajis02-5323	472	38	else	else	ADV
ajis02-5323	472	39	at	at	ADP
ajis02-5323	472	40	some	some	DET
ajis02-5323	472	41	minimum	minimum	ADJ
ajis02-5323	472	42	level	level	NOUN
ajis02-5323	472	43	(	(	PUNCT
ajis02-5323	472	44	p15	p15	NOUN
ajis02-5323	472	45	:	:	PUNCT
ajis02-5323	472	46	“	"	PUNCT
ajis02-5323	472	47	black	black	ADJ
ajis02-5323	472	48	,	,	PUNCT
ajis02-5323	472	49	brown	brown	ADJ
ajis02-5323	472	50	and	and	CCONJ
ajis02-5323	472	51	white	white	ADJ
ajis02-5323	472	52	belts	belt	NOUN
ajis02-5323	472	53	,	,	PUNCT
ajis02-5323	472	54	in	in	ADP
ajis02-5323	472	55	the	the	DET
ajis02-5323	472	56	parlance	parlance	NOUN
ajis02-5323	472	57	of	of	ADP
ajis02-5323	472	58	karate	karate	NOUN
ajis02-5323	472	59	”	"	PUNCT
ajis02-5323	472	60	)	)	PUNCT
ajis02-5323	472	61	.	.	PUNCT
ajis02-5323	473	1	sixth	sixth	ADV
ajis02-5323	473	2	,	,	PUNCT
ajis02-5323	473	3	outsourcing	outsourcing	NOUN
ajis02-5323	473	4	cyber	cyber	NOUN
ajis02-5323	473	5	risk	risk	NOUN
ajis02-5323	473	6	assessment	assessment	NOUN
ajis02-5323	473	7	would	would	AUX
ajis02-5323	473	8	be	be	AUX
ajis02-5323	473	9	another	another	DET
ajis02-5323	473	10	move	move	NOUN
ajis02-5323	473	11	towards	towards	ADP
ajis02-5323	473	12	optimizing	optimize	VERB
ajis02-5323	473	13	resources	resource	NOUN
ajis02-5323	473	14	and	and	CCONJ
ajis02-5323	473	15	increasing	increase	VERB
ajis02-5323	473	16	the	the	DET
ajis02-5323	473	17	effectiveness	effectiveness	NOUN
ajis02-5323	473	18	of	of	ADP
ajis02-5323	473	19	assessments	assessment	NOUN
ajis02-5323	473	20	.	.	PUNCT
ajis02-5323	474	1	5.3	5.3	NUM
ajis02-5323	474	2	limitations	limitation	NOUN
ajis02-5323	474	3	our	our	PRON
ajis02-5323	474	4	findings	finding	NOUN
ajis02-5323	474	5	are	be	AUX
ajis02-5323	474	6	subject	subject	ADJ
ajis02-5323	474	7	to	to	ADP
ajis02-5323	474	8	some	some	DET
ajis02-5323	474	9	limitations	limitation	NOUN
ajis02-5323	474	10	:	:	PUNCT
ajis02-5323	474	11	despite	despite	SCONJ
ajis02-5323	474	12	investing	invest	VERB
ajis02-5323	474	13	a	a	DET
ajis02-5323	474	14	great	great	ADJ
ajis02-5323	474	15	effort	effort	NOUN
ajis02-5323	474	16	in	in	ADP
ajis02-5323	474	17	attracting	attract	VERB
ajis02-5323	474	18	participants	participant	NOUN
ajis02-5323	474	19	to	to	ADP
ajis02-5323	474	20	the	the	DET
ajis02-5323	474	21	survey	survey	NOUN
ajis02-5323	474	22	,	,	PUNCT
ajis02-5323	474	23	we	we	PRON
ajis02-5323	474	24	ended	end	VERB
ajis02-5323	474	25	up	up	ADP
ajis02-5323	474	26	with	with	ADP
ajis02-5323	474	27	only	only	ADV
ajis02-5323	474	28	53	53	NUM
ajis02-5323	474	29	usable	usable	ADJ
ajis02-5323	474	30	observations	observation	NOUN
ajis02-5323	474	31	–	–	PUNCT
ajis02-5323	474	32	some	some	PRON
ajis02-5323	474	33	being	be	AUX
ajis02-5323	474	34	excluded	exclude	VERB
ajis02-5323	474	35	due	due	ADP
ajis02-5323	474	36	to	to	ADP
ajis02-5323	474	37	non	non	NOUN
ajis02-5323	474	38	-	-	NOUN
ajis02-5323	474	39	suitability	suitability	NOUN
ajis02-5323	474	40	.	.	PUNCT
ajis02-5323	475	1	this	this	PRON
ajis02-5323	475	2	has	have	AUX
ajis02-5323	475	3	severely	severely	ADV
ajis02-5323	475	4	limited	limit	VERB
ajis02-5323	475	5	our	our	PRON
ajis02-5323	475	6	analyses	analysis	NOUN
ajis02-5323	475	7	and	and	CCONJ
ajis02-5323	475	8	the	the	DET
ajis02-5323	475	9	generalizability	generalizability	NOUN
ajis02-5323	475	10	of	of	ADP
ajis02-5323	475	11	the	the	DET
ajis02-5323	475	12	results	result	NOUN
ajis02-5323	475	13	.	.	PUNCT
ajis02-5323	476	1	because	because	SCONJ
ajis02-5323	476	2	of	of	ADP
ajis02-5323	476	3	the	the	DET
ajis02-5323	476	4	niche	niche	NOUN
ajis02-5323	476	5	expertise	expertise	NOUN
ajis02-5323	476	6	needed	need	VERB
ajis02-5323	476	7	to	to	PART
ajis02-5323	476	8	participate	participate	VERB
ajis02-5323	476	9	in	in	ADP
ajis02-5323	476	10	the	the	DET
ajis02-5323	476	11	study	study	NOUN
ajis02-5323	476	12	and	and	CCONJ
ajis02-5323	476	13	the	the	DET
ajis02-5323	476	14	young	young	ADJ
ajis02-5323	476	15	phenomenon	phenomenon	NOUN
ajis02-5323	476	16	under	under	ADP
ajis02-5323	476	17	investigation	investigation	NOUN
ajis02-5323	476	18	,	,	PUNCT
ajis02-5323	476	19	the	the	DET
ajis02-5323	476	20	participants	participant	NOUN
ajis02-5323	476	21	who	who	PRON
ajis02-5323	476	22	were	be	AUX
ajis02-5323	476	23	prepared	prepared	ADJ
ajis02-5323	476	24	to	to	PART
ajis02-5323	476	25	participate	participate	VERB
ajis02-5323	476	26	might	might	AUX
ajis02-5323	476	27	have	have	AUX
ajis02-5323	476	28	come	come	VERB
ajis02-5323	476	29	from	from	ADP
ajis02-5323	476	30	more	more	ADV
ajis02-5323	476	31	mature	mature	ADJ
ajis02-5323	476	32	organizations	organization	NOUN
ajis02-5323	476	33	,	,	PUNCT
ajis02-5323	476	34	and	and	CCONJ
ajis02-5323	476	35	this	this	PRON
ajis02-5323	476	36	relates	relate	VERB
ajis02-5323	476	37	to	to	ADP
ajis02-5323	476	38	both	both	CCONJ
ajis02-5323	476	39	survey	survey	VERB
ajis02-5323	476	40	and	and	CCONJ
ajis02-5323	476	41	interview	interview	NOUN
ajis02-5323	476	42	participants	participant	NOUN
ajis02-5323	476	43	who	who	PRON
ajis02-5323	476	44	were	be	AUX
ajis02-5323	476	45	mostly	mostly	ADV
ajis02-5323	476	46	from	from	ADP
ajis02-5323	476	47	large	large	ADJ
ajis02-5323	476	48	,	,	PUNCT
ajis02-5323	476	49	regulated	regulated	ADJ
ajis02-5323	476	50	,	,	PUNCT
ajis02-5323	476	51	and	and	CCONJ
ajis02-5323	476	52	resourceful	resourceful	ADJ
ajis02-5323	476	53	organizations	organization	NOUN
ajis02-5323	476	54	or	or	CCONJ
ajis02-5323	476	55	consultants	consultant	NOUN
ajis02-5323	476	56	.	.	PUNCT
ajis02-5323	477	1	the	the	DET
ajis02-5323	477	2	findings	finding	NOUN
ajis02-5323	477	3	can	can	AUX
ajis02-5323	477	4	thus	thus	ADV
ajis02-5323	477	5	not	not	PART
ajis02-5323	477	6	be	be	AUX
ajis02-5323	477	7	generalized	generalize	VERB
ajis02-5323	477	8	:	:	PUNCT
ajis02-5323	477	9	while	while	SCONJ
ajis02-5323	477	10	our	our	PRON
ajis02-5323	477	11	participants	participant	NOUN
ajis02-5323	477	12	already	already	ADV
ajis02-5323	477	13	acknowledged	acknowledge	VERB
ajis02-5323	477	14	the	the	DET
ajis02-5323	477	15	early	early	ADJ
ajis02-5323	477	16	stage	stage	NOUN
ajis02-5323	477	17	of	of	ADP
ajis02-5323	477	18	the	the	DET
ajis02-5323	477	19	development	development	NOUN
ajis02-5323	477	20	of	of	ADP
ajis02-5323	477	21	the	the	DET
ajis02-5323	477	22	process	process	NOUN
ajis02-5323	477	23	,	,	PUNCT
ajis02-5323	477	24	the	the	DET
ajis02-5323	477	25	findings	finding	NOUN
ajis02-5323	477	26	might	might	AUX
ajis02-5323	477	27	,	,	PUNCT
ajis02-5323	477	28	in	in	ADP
ajis02-5323	477	29	fact	fact	NOUN
ajis02-5323	477	30	,	,	PUNCT
ajis02-5323	477	31	show	show	VERB
ajis02-5323	477	32	a	a	DET
ajis02-5323	477	33	better	well	ADJ
ajis02-5323	477	34	picture	picture	NOUN
ajis02-5323	477	35	than	than	SCONJ
ajis02-5323	477	36	it	it	PRON
ajis02-5323	477	37	is	be	AUX
ajis02-5323	477	38	on	on	ADP
ajis02-5323	477	39	average	average	ADJ
ajis02-5323	477	40	.	.	PUNCT
ajis02-5323	478	1	however	however	ADV
ajis02-5323	478	2	,	,	PUNCT
ajis02-5323	478	3	despite	despite	SCONJ
ajis02-5323	478	4	the	the	DET
ajis02-5323	478	5	limitations	limitation	NOUN
ajis02-5323	478	6	in	in	ADP
ajis02-5323	478	7	data	datum	NOUN
ajis02-5323	478	8	collection	collection	NOUN
ajis02-5323	478	9	,	,	PUNCT
ajis02-5323	478	10	we	we	PRON
ajis02-5323	478	11	followed	follow	VERB
ajis02-5323	478	12	rigorous	rigorous	ADJ
ajis02-5323	478	13	research	research	NOUN
ajis02-5323	478	14	methods	method	NOUN
ajis02-5323	478	15	to	to	PART
ajis02-5323	478	16	analyze	analyze	VERB
ajis02-5323	478	17	the	the	DET
ajis02-5323	478	18	findings	finding	NOUN
ajis02-5323	478	19	.	.	PUNCT
ajis02-5323	479	1	6	6	NUM
ajis02-5323	479	2	conclusion	conclusion	NOUN
ajis02-5323	479	3	c	c	NOUN
ajis02-5323	479	4	-	-	PUNCT
ajis02-5323	479	5	scrm	scrm	NOUN
ajis02-5323	479	6	and	and	CCONJ
ajis02-5323	479	7	supplier	supplier	NOUN
ajis02-5323	479	8	cyber	cyber	NOUN
ajis02-5323	479	9	risk	risk	NOUN
ajis02-5323	479	10	assessment	assessment	NOUN
ajis02-5323	479	11	offer	offer	VERB
ajis02-5323	479	12	ample	ample	ADJ
ajis02-5323	479	13	opportunities	opportunity	NOUN
ajis02-5323	479	14	for	for	ADP
ajis02-5323	479	15	future	future	ADJ
ajis02-5323	479	16	research	research	NOUN
ajis02-5323	479	17	.	.	PUNCT
ajis02-5323	480	1	qualitative	qualitative	ADJ
ajis02-5323	480	2	and	and	CCONJ
ajis02-5323	480	3	quantitative	quantitative	ADJ
ajis02-5323	480	4	analyses	analysis	NOUN
ajis02-5323	480	5	could	could	AUX
ajis02-5323	480	6	further	far	ADV
ajis02-5323	480	7	examine	examine	VERB
ajis02-5323	480	8	the	the	DET
ajis02-5323	480	9	process	process	NOUN
ajis02-5323	480	10	and	and	CCONJ
ajis02-5323	480	11	its	its	PRON
ajis02-5323	480	12	determinants	determinant	NOUN
ajis02-5323	480	13	for	for	ADP
ajis02-5323	480	14	the	the	DET
ajis02-5323	480	15	optimal	optimal	ADJ
ajis02-5323	480	16	development	development	NOUN
ajis02-5323	480	17	of	of	ADP
ajis02-5323	480	18	cyber	cyber	ADJ
ajis02-5323	480	19	risk	risk	NOUN
ajis02-5323	480	20	assessment	assessment	NOUN
ajis02-5323	480	21	given	give	VERB
ajis02-5323	480	22	the	the	DET
ajis02-5323	480	23	context	context	NOUN
ajis02-5323	480	24	of	of	ADP
ajis02-5323	480	25	an	an	DET
ajis02-5323	480	26	organization	organization	NOUN
ajis02-5323	480	27	.	.	PUNCT
ajis02-5323	481	1	a	a	DET
ajis02-5323	481	2	couple	couple	NOUN
ajis02-5323	481	3	of	of	ADP
ajis02-5323	481	4	ideas	idea	NOUN
ajis02-5323	481	5	for	for	ADP
ajis02-5323	481	6	future	future	ADJ
ajis02-5323	481	7	research	research	NOUN
ajis02-5323	481	8	are	be	AUX
ajis02-5323	481	9	to	to	PART
ajis02-5323	481	10	validate	validate	VERB
ajis02-5323	481	11	the	the	DET
ajis02-5323	481	12	process	process	NOUN
ajis02-5323	481	13	framework	framework	NOUN
ajis02-5323	481	14	and	and	CCONJ
ajis02-5323	481	15	its	its	PRON
ajis02-5323	481	16	contextual	contextual	ADJ
ajis02-5323	481	17	variables	variable	NOUN
ajis02-5323	481	18	on	on	ADP
ajis02-5323	481	19	a	a	DET
ajis02-5323	481	20	large	large	ADJ
ajis02-5323	481	21	sample	sample	NOUN
ajis02-5323	481	22	,	,	PUNCT
ajis02-5323	481	23	to	to	PART
ajis02-5323	481	24	further	far	ADV
ajis02-5323	481	25	explore	explore	VERB
ajis02-5323	481	26	the	the	DET
ajis02-5323	481	27	role	role	NOUN
ajis02-5323	481	28	of	of	ADP
ajis02-5323	481	29	processes	process	NOUN
ajis02-5323	481	30	and	and	CCONJ
ajis02-5323	481	31	people	people	NOUN
ajis02-5323	481	32	characteristics	characteristic	NOUN
ajis02-5323	481	33	,	,	PUNCT
ajis02-5323	481	34	how	how	SCONJ
ajis02-5323	481	35	they	they	PRON
ajis02-5323	481	36	could	could	AUX
ajis02-5323	481	37	be	be	AUX
ajis02-5323	481	38	defined	define	VERB
ajis02-5323	481	39	and	and	CCONJ
ajis02-5323	481	40	measured	measure	VERB
ajis02-5323	481	41	to	to	PART
ajis02-5323	481	42	better	well	ADV
ajis02-5323	481	43	differentiate	differentiate	VERB
ajis02-5323	481	44	between	between	ADP
ajis02-5323	481	45	risky	risky	ADJ
ajis02-5323	481	46	and	and	CCONJ
ajis02-5323	481	47	less	less	ADV
ajis02-5323	481	48	risky	risky	ADJ
ajis02-5323	481	49	suppliers	supplier	NOUN
ajis02-5323	481	50	;	;	PUNCT
ajis02-5323	481	51	to	to	PART
ajis02-5323	481	52	assess	assess	VERB
ajis02-5323	481	53	a	a	DET
ajis02-5323	481	54	predictive	predictive	ADJ
ajis02-5323	481	55	model	model	NOUN
ajis02-5323	481	56	of	of	ADP
ajis02-5323	481	57	a	a	DET
ajis02-5323	481	58	supplier	supplier	NOUN
ajis02-5323	481	59	cyber	cyber	NOUN
ajis02-5323	481	60	risk	risk	NOUN
ajis02-5323	481	61	;	;	PUNCT
ajis02-5323	481	62	or	or	CCONJ
ajis02-5323	481	63	to	to	PART
ajis02-5323	481	64	study	study	VERB
ajis02-5323	481	65	the	the	DET
ajis02-5323	481	66	role	role	NOUN
ajis02-5323	481	67	and	and	CCONJ
ajis02-5323	481	68	importance	importance	NOUN
ajis02-5323	481	69	of	of	ADP
ajis02-5323	481	70	supplier	supplier	NOUN
ajis02-5323	481	71	cyber	cyber	NOUN
ajis02-5323	481	72	risk	risk	NOUN
ajis02-5323	481	73	assessment	assessment	NOUN
ajis02-5323	481	74	in	in	ADP
ajis02-5323	481	75	the	the	DET
ajis02-5323	481	76	overall	overall	ADJ
ajis02-5323	481	77	supplier	supplier	NOUN
ajis02-5323	481	78	assessment	assessment	NOUN
ajis02-5323	481	79	.	.	PUNCT
ajis02-5323	482	1	australasian	australasian	ADJ
ajis02-5323	482	2	journal	journal	NOUN
ajis02-5323	482	3	of	of	ADP
ajis02-5323	482	4	information	information	NOUN
ajis02-5323	482	5	systems	system	NOUN
ajis02-5323	482	6	slapnicar	slapnicar	NOUN
ajis02-5323	482	7	,	,	PUNCT
ajis02-5323	482	8	vidmar	vidmar	NOUN
ajis02-5323	482	9	&	&	CCONJ
ajis02-5323	482	10	tsen	tsen	ADJ
ajis02-5323	482	11	2025	2025	NUM
ajis02-5323	482	12	,	,	PUNCT
ajis02-5323	482	13	vol	vol	NOUN
ajis02-5323	482	14	29	29	NUM
ajis02-5323	482	15	,	,	PUNCT
ajis02-5323	482	16	research	research	NOUN
ajis02-5323	482	17	article	article	NOUN
ajis02-5323	482	18	process	process	NOUN
ajis02-5323	482	19	theory	theory	NOUN
ajis02-5323	482	20	of	of	ADP
ajis02-5323	482	21	supplier	supplier	NOUN
ajis02-5323	482	22	cyber	cyber	NOUN
ajis02-5323	482	23	risk	risk	NOUN
ajis02-5323	482	24	assessment	assessment	NOUN
ajis02-5323	482	25	27	27	NUM
ajis02-5323	482	26	references	reference	NOUN
ajis02-5323	482	27	adams	adam	NOUN
ajis02-5323	482	28	,	,	PUNCT
ajis02-5323	482	29	m.	m.	NOUN
ajis02-5323	482	30	,	,	PUNCT
ajis02-5323	482	31	&	&	CCONJ
ajis02-5323	482	32	makramalla	makramalla	NOUN
ajis02-5323	482	33	,	,	PUNCT
ajis02-5323	482	34	m.	m.	NOUN
ajis02-5323	482	35	(	(	PUNCT
ajis02-5323	482	36	2015	2015	NUM
ajis02-5323	482	37	)	)	PUNCT
ajis02-5323	482	38	.	.	PUNCT
ajis02-5323	483	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	483	2	skills	skill	NOUN
ajis02-5323	483	3	training	training	NOUN
ajis02-5323	483	4	:	:	PUNCT
ajis02-5323	483	5	an	an	DET
ajis02-5323	483	6	attacker	attacker	ADJ
ajis02-5323	483	7	-	-	PUNCT
ajis02-5323	483	8	centric	centric	ADJ
ajis02-5323	483	9	gamified	gamifie	VERB
ajis02-5323	483	10	approach	approach	NOUN
ajis02-5323	483	11	.	.	PUNCT
ajis02-5323	484	1	technology	technology	NOUN
ajis02-5323	484	2	innovation	innovation	NOUN
ajis02-5323	484	3	management	management	NOUN
ajis02-5323	484	4	review	review	NOUN
ajis02-5323	484	5	,	,	PUNCT
ajis02-5323	484	6	5(5	5(5	NUM
ajis02-5323	484	7	)	)	PUNCT
ajis02-5323	484	8	,	,	PUNCT
ajis02-5323	484	9	5–14	5–14	PROPN
ajis02-5323	484	10	.	.	PUNCT
ajis02-5323	485	1	doi.org/10.22215/timreview/861	doi.org/10.22215/timreview/861	PROPN
ajis02-5323	485	2	akinrolabu	akinrolabu	PROPN
ajis02-5323	485	3	,	,	PUNCT
ajis02-5323	485	4	o.	o.	PROPN
ajis02-5323	485	5	,	,	PUNCT
ajis02-5323	485	6	nurse	nurse	PROPN
ajis02-5323	485	7	,	,	PUNCT
ajis02-5323	485	8	j.	j.	PROPN
ajis02-5323	485	9	,	,	PUNCT
ajis02-5323	485	10	martin	martin	PROPN
ajis02-5323	485	11	,	,	PUNCT
ajis02-5323	485	12	a.	a.	PROPN
ajis02-5323	485	13	,	,	PUNCT
ajis02-5323	485	14	&	&	CCONJ
ajis02-5323	485	15	new	new	PROPN
ajis02-5323	485	16	,	,	PUNCT
ajis02-5323	485	17	s.	s.	PROPN
ajis02-5323	485	18	(	(	PUNCT
ajis02-5323	485	19	2019	2019	NUM
ajis02-5323	485	20	)	)	PUNCT
ajis02-5323	485	21	.	.	PUNCT
ajis02-5323	486	1	cyber	cyber	ADJ
ajis02-5323	486	2	risk	risk	NOUN
ajis02-5323	486	3	assessment	assessment	NOUN
ajis02-5323	486	4	in	in	ADP
ajis02-5323	486	5	cloud	cloud	ADJ
ajis02-5323	486	6	provider	provider	NOUN
ajis02-5323	486	7	environments	environment	NOUN
ajis02-5323	486	8	:	:	PUNCT
ajis02-5323	486	9	current	current	ADJ
ajis02-5323	486	10	models	model	NOUN
ajis02-5323	486	11	and	and	CCONJ
ajis02-5323	486	12	future	future	ADJ
ajis02-5323	486	13	needs	need	NOUN
ajis02-5323	486	14	.	.	PUNCT
ajis02-5323	487	1	computers	computer	NOUN
ajis02-5323	487	2	&	&	CCONJ
ajis02-5323	487	3	security	security	NOUN
ajis02-5323	487	4	,	,	PUNCT
ajis02-5323	487	5	87	87	NUM
ajis02-5323	487	6	.	.	PUNCT
ajis02-5323	488	1	doi.org/10.1016/j.cose.2019.101600	doi.org/10.1016/j.cose.2019.101600	PROPN
ajis02-5323	488	2	al	al	PROPN
ajis02-5323	488	3	-	-	PUNCT
ajis02-5323	488	4	ansari	ansari	PROPN
ajis02-5323	488	5	,	,	PUNCT
ajis02-5323	488	6	a.	a.	NOUN
ajis02-5323	488	7	o.	o.	PROPN
ajis02-5323	488	8	,	,	PUNCT
ajis02-5323	488	9	&	&	CCONJ
ajis02-5323	488	10	alsubait	alsubait	PROPN
ajis02-5323	488	11	,	,	PUNCT
ajis02-5323	488	12	t.	t.	NOUN
ajis02-5323	488	13	m.	m.	NOUN
ajis02-5323	488	14	(	(	PUNCT
ajis02-5323	488	15	2022	2022	NUM
ajis02-5323	488	16	)	)	PUNCT
ajis02-5323	488	17	.	.	PUNCT
ajis02-5323	489	1	predicting	predict	VERB
ajis02-5323	489	2	cyber	cyber	NOUN
ajis02-5323	489	3	threats	threat	NOUN
ajis02-5323	489	4	using	use	VERB
ajis02-5323	489	5	machine	machine	NOUN
ajis02-5323	489	6	learning	learning	NOUN
ajis02-5323	489	7	for	for	ADP
ajis02-5323	489	8	improving	improve	VERB
ajis02-5323	489	9	cyber	cyber	NOUN
ajis02-5323	489	10	supply	supply	NOUN
ajis02-5323	489	11	chain	chain	NOUN
ajis02-5323	489	12	security	security	NOUN
ajis02-5323	489	13	.	.	PUNCT
ajis02-5323	490	1	in	in	ADP
ajis02-5323	490	2	2022	2022	NUM
ajis02-5323	490	3	national	national	ADJ
ajis02-5323	490	4	computing	computing	NOUN
ajis02-5323	490	5	colleges	college	NOUN
ajis02-5323	490	6	conference	conference	NOUN
ajis02-5323	490	7	(	(	PUNCT
ajis02-5323	490	8	nccc	nccc	NOUN
ajis02-5323	490	9	)	)	PUNCT
ajis02-5323	490	10	(	(	PUNCT
ajis02-5323	490	11	pp	pp	ADP
ajis02-5323	490	12	.	.	PUNCT
ajis02-5323	490	13	123–130	123–130	NUM
ajis02-5323	490	14	)	)	PUNCT
ajis02-5323	490	15	.	.	PUNCT
ajis02-5323	491	1	ieee	ieee	PROPN
ajis02-5323	491	2	.	.	PUNCT
ajis02-5323	492	1	doi.org/10.1109/nccc57165.2022.10067692	doi.org/10.1109/nccc57165.2022.10067692	PROPN
ajis02-5323	492	2	alkhadra	alkhadra	PROPN
ajis02-5323	492	3	,	,	PUNCT
ajis02-5323	492	4	r.	r.	PROPN
ajis02-5323	492	5	,	,	PUNCT
ajis02-5323	492	6	abuzaid	abuzaid	PROPN
ajis02-5323	492	7	,	,	PUNCT
ajis02-5323	492	8	j.	j.	PROPN
ajis02-5323	492	9	,	,	PUNCT
ajis02-5323	492	10	alshammari	alshammari	NOUN
ajis02-5323	492	11	,	,	PUNCT
ajis02-5323	492	12	m.	m.	NOUN
ajis02-5323	492	13	,	,	PUNCT
ajis02-5323	492	14	&	&	CCONJ
ajis02-5323	492	15	mohammad	mohammad	PROPN
ajis02-5323	492	16	,	,	PUNCT
ajis02-5323	492	17	n.	n.	NOUN
ajis02-5323	492	18	(	(	PUNCT
ajis02-5323	492	19	2021	2021	NUM
ajis02-5323	492	20	)	)	PUNCT
ajis02-5323	492	21	.	.	PUNCT
ajis02-5323	493	1	solarwinds	solarwinds	PROPN
ajis02-5323	493	2	hack	hack	NOUN
ajis02-5323	493	3	:	:	PUNCT
ajis02-5323	493	4	indepth	indepth	VERB
ajis02-5323	493	5	analysis	analysis	NOUN
ajis02-5323	493	6	and	and	CCONJ
ajis02-5323	493	7	countermeasures	countermeasure	NOUN
ajis02-5323	493	8	.	.	PUNCT
ajis02-5323	494	1	in	in	ADP
ajis02-5323	494	2	2021	2021	NUM
ajis02-5323	494	3	international	international	ADJ
ajis02-5323	494	4	conference	conference	NOUN
ajis02-5323	494	5	on	on	ADP
ajis02-5323	494	6	computing	computing	NOUN
ajis02-5323	494	7	,	,	PUNCT
ajis02-5323	494	8	networking	networking	NOUN
ajis02-5323	494	9	and	and	CCONJ
ajis02-5323	494	10	communications	communication	NOUN
ajis02-5323	494	11	(	(	PUNCT
ajis02-5323	494	12	icccnt	icccnt	ADJ
ajis02-5323	494	13	)	)	PUNCT
ajis02-5323	494	14	.	.	PUNCT
ajis02-5323	495	1	ieee	ieee	NOUN
ajis02-5323	495	2	.	.	PUNCT
ajis02-5323	496	1	doi.org/10.1109/icccnt51525.2021.9579611	doi.org/10.1109/icccnt51525.2021.9579611	NOUN
ajis02-5323	496	2	angst	angst	NOUN
ajis02-5323	496	3	,	,	PUNCT
ajis02-5323	496	4	c.	c.	NOUN
ajis02-5323	496	5	,	,	PUNCT
ajis02-5323	496	6	block	block	NOUN
ajis02-5323	496	7	,	,	PUNCT
ajis02-5323	496	8	e.	e.	PROPN
ajis02-5323	496	9	,	,	PUNCT
ajis02-5323	496	10	d’arcy	d’arcy	PROPN
ajis02-5323	496	11	,	,	PUNCT
ajis02-5323	496	12	j.	j.	PROPN
ajis02-5323	496	13	,	,	PUNCT
ajis02-5323	496	14	&	&	CCONJ
ajis02-5323	496	15	kelley	kelley	PROPN
ajis02-5323	496	16	,	,	PUNCT
ajis02-5323	496	17	k.	k.	PROPN
ajis02-5323	496	18	(	(	PUNCT
ajis02-5323	496	19	2017	2017	NUM
ajis02-5323	496	20	)	)	PUNCT
ajis02-5323	496	21	.	.	PUNCT
ajis02-5323	497	1	when	when	SCONJ
ajis02-5323	497	2	do	do	AUX
ajis02-5323	497	3	it	it	PRON
ajis02-5323	497	4	security	security	NOUN
ajis02-5323	497	5	investments	investment	NOUN
ajis02-5323	497	6	matter	matter	ADV
ajis02-5323	497	7	?	?	PUNCT
ajis02-5323	498	1	accounting	account	VERB
ajis02-5323	498	2	for	for	ADP
ajis02-5323	498	3	the	the	DET
ajis02-5323	498	4	influence	influence	NOUN
ajis02-5323	498	5	of	of	ADP
ajis02-5323	498	6	institutional	institutional	ADJ
ajis02-5323	498	7	factors	factor	NOUN
ajis02-5323	498	8	in	in	ADP
ajis02-5323	498	9	the	the	DET
ajis02-5323	498	10	context	context	NOUN
ajis02-5323	498	11	of	of	ADP
ajis02-5323	498	12	healthcare	healthcare	PROPN
ajis02-5323	498	13	data	datum	NOUN
ajis02-5323	498	14	breaches	breach	NOUN
ajis02-5323	498	15	.	.	PUNCT
ajis02-5323	499	1	mis	mis	PROPN
ajis02-5323	499	2	quarterly	quarterly	PROPN
ajis02-5323	499	3	,	,	PUNCT
ajis02-5323	499	4	41(3	41(3	NUM
ajis02-5323	499	5	)	)	PUNCT
ajis02-5323	499	6	,	,	PUNCT
ajis02-5323	499	7	893–916	893–916	NUM
ajis02-5323	499	8	.	.	PUNCT
ajis02-5323	500	1	doi.org/10.25300/misq/2017/41.3.10	doi.org/10.25300/misq/2017/41.3.10	PROPN
ajis02-5323	500	2	bandyopadhyay	bandyopadhyay	NOUN
ajis02-5323	500	3	,	,	PUNCT
ajis02-5323	500	4	t.	t.	PROPN
ajis02-5323	500	5	,	,	PUNCT
ajis02-5323	500	6	jacob	jacob	PROPN
ajis02-5323	500	7	,	,	PUNCT
ajis02-5323	500	8	v.	v.	PROPN
ajis02-5323	500	9	,	,	PUNCT
ajis02-5323	500	10	&	&	CCONJ
ajis02-5323	500	11	raghunathan	raghunathan	PROPN
ajis02-5323	500	12	,	,	PUNCT
ajis02-5323	500	13	s.	s.	PROPN
ajis02-5323	500	14	(	(	PUNCT
ajis02-5323	500	15	2010	2010	NUM
ajis02-5323	500	16	)	)	PUNCT
ajis02-5323	500	17	.	.	PUNCT
ajis02-5323	501	1	information	information	NOUN
ajis02-5323	501	2	security	security	NOUN
ajis02-5323	501	3	in	in	ADP
ajis02-5323	501	4	networked	networked	ADJ
ajis02-5323	501	5	supply	supply	NOUN
ajis02-5323	501	6	chains	chain	NOUN
ajis02-5323	501	7	:	:	PUNCT
ajis02-5323	501	8	impact	impact	NOUN
ajis02-5323	501	9	of	of	ADP
ajis02-5323	501	10	network	network	NOUN
ajis02-5323	501	11	vulnerability	vulnerability	NOUN
ajis02-5323	501	12	and	and	CCONJ
ajis02-5323	501	13	supply	supply	NOUN
ajis02-5323	501	14	chain	chain	NOUN
ajis02-5323	501	15	integration	integration	NOUN
ajis02-5323	501	16	on	on	ADP
ajis02-5323	501	17	incentives	incentive	NOUN
ajis02-5323	501	18	to	to	PART
ajis02-5323	501	19	invest	invest	VERB
ajis02-5323	501	20	.	.	PUNCT
ajis02-5323	502	1	information	information	NOUN
ajis02-5323	502	2	technology	technology	PROPN
ajis02-5323	502	3	&	&	CCONJ
ajis02-5323	502	4	management	management	NOUN
ajis02-5323	502	5	,	,	PUNCT
ajis02-5323	502	6	11(1	11(1	NUM
ajis02-5323	502	7	)	)	PUNCT
ajis02-5323	502	8	,	,	PUNCT
ajis02-5323	502	9	7–23	7–23	PROPN
ajis02-5323	502	10	.	.	PUNCT
ajis02-5323	503	1	doi.org/10.1007/s10799-010-0066-1	doi.org/10.1007/s10799-010-0066-1	PROPN
ajis02-5323	503	2	bartol	bartol	PROPN
ajis02-5323	503	3	,	,	PUNCT
ajis02-5323	503	4	n.	n.	PROPN
ajis02-5323	503	5	(	(	PUNCT
ajis02-5323	503	6	2014	2014	NUM
ajis02-5323	503	7	)	)	PUNCT
ajis02-5323	503	8	.	.	PUNCT
ajis02-5323	504	1	cyber	cyber	PROPN
ajis02-5323	504	2	supply	supply	NOUN
ajis02-5323	504	3	chain	chain	NOUN
ajis02-5323	504	4	security	security	NOUN
ajis02-5323	504	5	practices	practice	NOUN
ajis02-5323	504	6	dna	dna	NOUN
ajis02-5323	504	7	:	:	PUNCT
ajis02-5323	504	8	filling	fill	VERB
ajis02-5323	504	9	in	in	ADP
ajis02-5323	504	10	the	the	DET
ajis02-5323	504	11	puzzle	puzzle	NOUN
ajis02-5323	504	12	using	use	VERB
ajis02-5323	504	13	a	a	DET
ajis02-5323	504	14	diverse	diverse	ADJ
ajis02-5323	504	15	set	set	NOUN
ajis02-5323	504	16	of	of	ADP
ajis02-5323	504	17	disciplines	discipline	NOUN
ajis02-5323	504	18	.	.	PUNCT
ajis02-5323	505	1	technovation	technovation	NOUN
ajis02-5323	505	2	,	,	PUNCT
ajis02-5323	505	3	34(7	34(7	NUM
ajis02-5323	505	4	)	)	PUNCT
ajis02-5323	505	5	,	,	PUNCT
ajis02-5323	505	6	354–361	354–361	PROPN
ajis02-5323	505	7	.	.	PUNCT
ajis02-5323	506	1	doi.org/10.1016/j.technovation.2014.01.005	doi.org/10.1016/j.technovation.2014.01.005	PROPN
ajis02-5323	506	2	baskerville	baskerville	PROPN
ajis02-5323	506	3	,	,	PUNCT
ajis02-5323	506	4	r.	r.	PROPN
ajis02-5323	506	5	(	(	PUNCT
ajis02-5323	506	6	2005	2005	NUM
ajis02-5323	506	7	)	)	PUNCT
ajis02-5323	506	8	.	.	PUNCT
ajis02-5323	507	1	information	information	NOUN
ajis02-5323	507	2	warfare	warfare	PROPN
ajis02-5323	507	3	:	:	PUNCT
ajis02-5323	507	4	a	a	DET
ajis02-5323	507	5	comparative	comparative	ADJ
ajis02-5323	507	6	framework	framework	NOUN
ajis02-5323	507	7	for	for	ADP
ajis02-5323	507	8	business	business	NOUN
ajis02-5323	507	9	information	information	NOUN
ajis02-5323	507	10	security	security	NOUN
ajis02-5323	507	11	.	.	PUNCT
ajis02-5323	508	1	journal	journal	PROPN
ajis02-5323	508	2	of	of	ADP
ajis02-5323	508	3	information	information	NOUN
ajis02-5323	508	4	system	system	NOUN
ajis02-5323	508	5	security	security	NOUN
ajis02-5323	508	6	,	,	PUNCT
ajis02-5323	508	7	1(1	1(1	NUM
ajis02-5323	508	8	)	)	PUNCT
ajis02-5323	508	9	,	,	PUNCT
ajis02-5323	508	10	23–50	23–50	NUM
ajis02-5323	508	11	.	.	PUNCT
ajis02-5323	509	1	benaroch	benaroch	NOUN
ajis02-5323	509	2	,	,	PUNCT
ajis02-5323	509	3	m.	m.	NOUN
ajis02-5323	509	4	(	(	PUNCT
ajis02-5323	509	5	2021	2021	NUM
ajis02-5323	509	6	)	)	PUNCT
ajis02-5323	509	7	.	.	PUNCT
ajis02-5323	510	1	third	third	ADJ
ajis02-5323	510	2	-	-	PUNCT
ajis02-5323	510	3	party	party	NOUN
ajis02-5323	510	4	induced	induce	VERB
ajis02-5323	510	5	cyber	cyber	NOUN
ajis02-5323	510	6	incidents	incident	NOUN
ajis02-5323	510	7	—	—	PUNCT
ajis02-5323	510	8	much	much	ADJ
ajis02-5323	510	9	ado	ado	NOUN
ajis02-5323	510	10	about	about	ADP
ajis02-5323	510	11	nothing	nothing	PRON
ajis02-5323	510	12	?	?	PUNCT
ajis02-5323	511	1	journal	journal	NOUN
ajis02-5323	511	2	of	of	ADP
ajis02-5323	511	3	cybersecurity	cybersecurity	NOUN
ajis02-5323	511	4	,	,	PUNCT
ajis02-5323	511	5	7(1	7(1	NUM
ajis02-5323	511	6	)	)	PUNCT
ajis02-5323	511	7	.	.	PUNCT
ajis02-5323	512	1	doi.org/10.1093/cybsec/tyab020	doi.org/10.1093/cybsec/tyab020	PROPN
ajis02-5323	512	2	benthall	benthall	NOUN
ajis02-5323	512	3	,	,	PUNCT
ajis02-5323	512	4	s.	s.	PROPN
ajis02-5323	512	5	(	(	PUNCT
ajis02-5323	512	6	2017	2017	NUM
ajis02-5323	512	7	)	)	PUNCT
ajis02-5323	512	8	.	.	PUNCT
ajis02-5323	513	1	assessing	assess	VERB
ajis02-5323	513	2	software	software	NOUN
ajis02-5323	513	3	supply	supply	NOUN
ajis02-5323	513	4	chain	chain	NOUN
ajis02-5323	513	5	risk	risk	NOUN
ajis02-5323	513	6	using	use	VERB
ajis02-5323	513	7	public	public	ADJ
ajis02-5323	513	8	data	datum	NOUN
ajis02-5323	513	9	.	.	PUNCT
ajis02-5323	514	1	in	in	ADP
ajis02-5323	514	2	2017	2017	NUM
ajis02-5323	514	3	ieee	ieee	NOUN
ajis02-5323	514	4	28th	28th	ADJ
ajis02-5323	514	5	annual	annual	ADJ
ajis02-5323	514	6	software	software	NOUN
ajis02-5323	514	7	technology	technology	NOUN
ajis02-5323	514	8	conference	conference	NOUN
ajis02-5323	514	9	(	(	PUNCT
ajis02-5323	514	10	stc	stc	NOUN
ajis02-5323	514	11	)	)	PUNCT
ajis02-5323	514	12	(	(	PUNCT
ajis02-5323	514	13	pp	pp	ADV
ajis02-5323	514	14	.	.	PUNCT
ajis02-5323	514	15	1–5	1–5	NUM
ajis02-5323	514	16	)	)	PUNCT
ajis02-5323	514	17	.	.	PUNCT
ajis02-5323	515	1	ieee	ieee	NOUN
ajis02-5323	515	2	.	.	PUNCT
ajis02-5323	516	1	doi.org/10.1109/stc.2017.8234461	doi.org/10.1109/stc.2017.8234461	PRON
ajis02-5323	516	2	bekmeier	bekmeier	NOUN
ajis02-5323	516	3	-	-	PUNCT
ajis02-5323	516	4	feuerhahn	feuerhahn	NOUN
ajis02-5323	516	5	,	,	PUNCT
ajis02-5323	516	6	s.	s.	PROPN
ajis02-5323	516	7	(	(	PUNCT
ajis02-5323	516	8	2009	2009	NUM
ajis02-5323	516	9	)	)	PUNCT
ajis02-5323	516	10	.	.	PUNCT
ajis02-5323	517	1	mechanisms	mechanism	NOUN
ajis02-5323	517	2	of	of	ADP
ajis02-5323	517	3	teleological	teleological	ADJ
ajis02-5323	517	4	change	change	NOUN
ajis02-5323	517	5	.	.	PUNCT
ajis02-5323	518	1	management	management	NOUN
ajis02-5323	518	2	revue	revue	NOUN
ajis02-5323	518	3	,	,	PUNCT
ajis02-5323	518	4	20(2	20(2	NUM
ajis02-5323	518	5	)	)	PUNCT
ajis02-5323	518	6	,	,	PUNCT
ajis02-5323	518	7	126–137	126–137	NUM
ajis02-5323	518	8	.	.	PUNCT
ajis02-5323	519	1	bode	bode	PROPN
ajis02-5323	519	2	,	,	PUNCT
ajis02-5323	519	3	c.	c.	PROPN
ajis02-5323	519	4	,	,	PUNCT
ajis02-5323	519	5	&	&	CCONJ
ajis02-5323	519	6	wagner	wagner	PROPN
ajis02-5323	519	7	,	,	PUNCT
ajis02-5323	519	8	s.	s.	PROPN
ajis02-5323	519	9	m.	m.	PROPN
ajis02-5323	519	10	(	(	PUNCT
ajis02-5323	519	11	2015	2015	NUM
ajis02-5323	519	12	)	)	PUNCT
ajis02-5323	519	13	.	.	PUNCT
ajis02-5323	520	1	structural	structural	ADJ
ajis02-5323	520	2	drivers	driver	NOUN
ajis02-5323	520	3	of	of	ADP
ajis02-5323	520	4	upstream	upstream	ADJ
ajis02-5323	520	5	supply	supply	NOUN
ajis02-5323	520	6	chain	chain	NOUN
ajis02-5323	520	7	complexity	complexity	NOUN
ajis02-5323	520	8	and	and	CCONJ
ajis02-5323	520	9	the	the	DET
ajis02-5323	520	10	frequency	frequency	NOUN
ajis02-5323	520	11	of	of	ADP
ajis02-5323	520	12	supply	supply	NOUN
ajis02-5323	520	13	chain	chain	NOUN
ajis02-5323	520	14	disruptions	disruption	NOUN
ajis02-5323	520	15	.	.	PUNCT
ajis02-5323	521	1	journal	journal	NOUN
ajis02-5323	521	2	of	of	ADP
ajis02-5323	521	3	operations	operation	NOUN
ajis02-5323	521	4	management	management	NOUN
ajis02-5323	521	5	,	,	PUNCT
ajis02-5323	521	6	36	36	NUM
ajis02-5323	521	7	,	,	PUNCT
ajis02-5323	521	8	215–228	215–228	NUM
ajis02-5323	521	9	.	.	PUNCT
ajis02-5323	522	1	doi.org/10.1016/j.jom.2014.12.004	doi.org/10.1016/j.jom.2014.12.004	NOUN
ajis02-5323	522	2	boyens	boyen	NOUN
ajis02-5323	522	3	,	,	PUNCT
ajis02-5323	522	4	j.	j.	PROPN
ajis02-5323	522	5	,	,	PUNCT
ajis02-5323	522	6	paulsen	paulsen	PROPN
ajis02-5323	522	7	,	,	PUNCT
ajis02-5323	522	8	c.	c.	PROPN
ajis02-5323	522	9	,	,	PUNCT
ajis02-5323	522	10	bartol	bartol	NOUN
ajis02-5323	522	11	,	,	PUNCT
ajis02-5323	522	12	n.	n.	NOUN
ajis02-5323	522	13	,	,	PUNCT
ajis02-5323	522	14	winkler	winkler	NOUN
ajis02-5323	522	15	,	,	PUNCT
ajis02-5323	522	16	k.	k.	PROPN
ajis02-5323	522	17	,	,	PUNCT
ajis02-5323	522	18	&	&	CCONJ
ajis02-5323	522	19	gimbi	gimbi	PROPN
ajis02-5323	522	20	,	,	PUNCT
ajis02-5323	522	21	j.	j.	PROPN
ajis02-5323	522	22	(	(	PUNCT
ajis02-5323	522	23	2021	2021	NUM
ajis02-5323	522	24	)	)	PUNCT
ajis02-5323	522	25	.	.	PUNCT
ajis02-5323	523	1	key	key	ADJ
ajis02-5323	523	2	practices	practice	NOUN
ajis02-5323	523	3	in	in	ADP
ajis02-5323	523	4	cyber	cyber	ADJ
ajis02-5323	523	5	supply	supply	NOUN
ajis02-5323	523	6	chain	chain	NOUN
ajis02-5323	523	7	risk	risk	NOUN
ajis02-5323	523	8	management	management	NOUN
ajis02-5323	523	9	:	:	PUNCT
ajis02-5323	523	10	observations	observation	NOUN
ajis02-5323	523	11	from	from	ADP
ajis02-5323	523	12	industry	industry	NOUN
ajis02-5323	523	13	.	.	PUNCT
ajis02-5323	524	1	national	national	PROPN
ajis02-5323	524	2	institute	institute	PROPN
ajis02-5323	524	3	of	of	ADP
ajis02-5323	524	4	standards	standard	NOUN
ajis02-5323	524	5	and	and	CCONJ
ajis02-5323	524	6	technology	technology	NOUN
ajis02-5323	524	7	.	.	PUNCT
ajis02-5323	525	1	doi.org/10.6028/nist.ir.8276	doi.org/10.6028/nist.ir.8276	PROPN
ajis02-5323	525	2	boyens	boyens	PROPN
ajis02-5323	525	3	,	,	PUNCT
ajis02-5323	525	4	j.	j.	PROPN
ajis02-5323	525	5	,	,	PUNCT
ajis02-5323	525	6	paulsen	paulsen	PROPN
ajis02-5323	525	7	,	,	PUNCT
ajis02-5323	525	8	c.	c.	PROPN
ajis02-5323	525	9	,	,	PUNCT
ajis02-5323	525	10	bartol	bartol	NOUN
ajis02-5323	525	11	,	,	PUNCT
ajis02-5323	525	12	n.	n.	NOUN
ajis02-5323	525	13	,	,	PUNCT
ajis02-5323	525	14	winkler	winkler	NOUN
ajis02-5323	525	15	,	,	PUNCT
ajis02-5323	525	16	k.	k.	PROPN
ajis02-5323	525	17	,	,	PUNCT
ajis02-5323	525	18	&	&	CCONJ
ajis02-5323	525	19	gimbi	gimbi	PROPN
ajis02-5323	525	20	,	,	PUNCT
ajis02-5323	525	21	j.	j.	PROPN
ajis02-5323	525	22	(	(	PUNCT
ajis02-5323	525	23	2020	2020	NUM
ajis02-5323	525	24	)	)	PUNCT
ajis02-5323	525	25	.	.	PUNCT
ajis02-5323	526	1	case	case	NOUN
ajis02-5323	526	2	studies	study	NOUN
ajis02-5323	526	3	in	in	ADP
ajis02-5323	526	4	cyber	cyber	NOUN
ajis02-5323	526	5	supply	supply	NOUN
ajis02-5323	526	6	chain	chain	NOUN
ajis02-5323	526	7	risk	risk	NOUN
ajis02-5323	526	8	management	management	NOUN
ajis02-5323	526	9	:	:	PUNCT
ajis02-5323	526	10	summary	summary	NOUN
ajis02-5323	526	11	of	of	ADP
ajis02-5323	526	12	findings	finding	NOUN
ajis02-5323	526	13	and	and	CCONJ
ajis02-5323	526	14	recommendations	recommendation	NOUN
ajis02-5323	526	15	.	.	PUNCT
ajis02-5323	527	1	national	national	PROPN
ajis02-5323	527	2	institute	institute	PROPN
ajis02-5323	527	3	of	of	ADP
ajis02-5323	527	4	australasian	australasian	ADJ
ajis02-5323	527	5	journal	journal	NOUN
ajis02-5323	527	6	of	of	ADP
ajis02-5323	527	7	information	information	NOUN
ajis02-5323	527	8	systems	system	NOUN
ajis02-5323	527	9	slapnicar	slapnicar	NOUN
ajis02-5323	527	10	,	,	PUNCT
ajis02-5323	527	11	vidmar	vidmar	NOUN
ajis02-5323	527	12	&	&	CCONJ
ajis02-5323	527	13	tsen	tsen	ADJ
ajis02-5323	527	14	2025	2025	NUM
ajis02-5323	527	15	,	,	PUNCT
ajis02-5323	527	16	vol	vol	NOUN
ajis02-5323	527	17	29	29	NUM
ajis02-5323	527	18	,	,	PUNCT
ajis02-5323	527	19	research	research	NOUN
ajis02-5323	527	20	article	article	NOUN
ajis02-5323	527	21	process	process	NOUN
ajis02-5323	527	22	theory	theory	NOUN
ajis02-5323	527	23	of	of	ADP
ajis02-5323	527	24	supplier	supplier	NOUN
ajis02-5323	527	25	cyber	cyber	NOUN
ajis02-5323	527	26	risk	risk	NOUN
ajis02-5323	527	27	assessment	assessment	NOUN
ajis02-5323	527	28	28	28	NUM
ajis02-5323	527	29	standards	standard	NOUN
ajis02-5323	527	30	and	and	CCONJ
ajis02-5323	527	31	technology	technology	NOUN
ajis02-5323	527	32	.	.	PUNCT
ajis02-5323	528	1	https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-161r1.pdf	https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-161r1.pdf	PROPN
ajis02-5323	528	2	boyens	boyens	PROPN
ajis02-5323	528	3	,	,	PUNCT
ajis02-5323	528	4	j.	j.	PROPN
ajis02-5323	528	5	,	,	PUNCT
ajis02-5323	528	6	smith	smith	PROPN
ajis02-5323	528	7	,	,	PUNCT
ajis02-5323	528	8	a.	a.	NOUN
ajis02-5323	528	9	,	,	PUNCT
ajis02-5323	528	10	bartol	bartol	NOUN
ajis02-5323	528	11	,	,	PUNCT
ajis02-5323	528	12	n.	n.	NOUN
ajis02-5323	528	13	,	,	PUNCT
ajis02-5323	528	14	winkler	winkler	NOUN
ajis02-5323	528	15	,	,	PUNCT
ajis02-5323	528	16	k.	k.	PROPN
ajis02-5323	528	17	,	,	PUNCT
ajis02-5323	528	18	holbrook	holbrook	PROPN
ajis02-5323	528	19	,	,	PUNCT
ajis02-5323	528	20	a.	a.	PROPN
ajis02-5323	528	21	,	,	PUNCT
ajis02-5323	528	22	&	&	CCONJ
ajis02-5323	528	23	fallon	fallon	PROPN
ajis02-5323	528	24	,	,	PUNCT
ajis02-5323	528	25	m.	m.	NOUN
ajis02-5323	528	26	(	(	PUNCT
ajis02-5323	528	27	2021	2021	NUM
ajis02-5323	528	28	)	)	PUNCT
ajis02-5323	528	29	.	.	PUNCT
ajis02-5323	529	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	529	2	supply	supply	NOUN
ajis02-5323	529	3	chain	chain	NOUN
ajis02-5323	529	4	risk	risk	NOUN
ajis02-5323	529	5	management	management	NOUN
ajis02-5323	529	6	practices	practice	NOUN
ajis02-5323	529	7	for	for	ADP
ajis02-5323	529	8	systems	system	NOUN
ajis02-5323	529	9	and	and	CCONJ
ajis02-5323	529	10	organizations	organization	NOUN
ajis02-5323	529	11	.	.	PUNCT
ajis02-5323	530	1	national	national	PROPN
ajis02-5323	530	2	institute	institute	PROPN
ajis02-5323	530	3	of	of	ADP
ajis02-5323	530	4	standards	standard	NOUN
ajis02-5323	530	5	and	and	CCONJ
ajis02-5323	530	6	technology	technology	NOUN
ajis02-5323	530	7	.	.	PUNCT
ajis02-5323	531	1	doi.org/10.6028/nist.cswp.02042020-1	doi.org/10.6028/nist.cswp.02042020-1	PROPN
ajis02-5323	531	2	boyes	boyes	PROPN
ajis02-5323	531	3	,	,	PUNCT
ajis02-5323	531	4	h.	h.	PROPN
ajis02-5323	531	5	(	(	PUNCT
ajis02-5323	531	6	2015	2015	NUM
ajis02-5323	531	7	)	)	PUNCT
ajis02-5323	531	8	.	.	PUNCT
ajis02-5323	532	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	532	2	and	and	CCONJ
ajis02-5323	532	3	cyber	cyber	NOUN
ajis02-5323	532	4	-	-	PUNCT
ajis02-5323	532	5	resilient	resilient	ADJ
ajis02-5323	532	6	supply	supply	NOUN
ajis02-5323	532	7	chains	chain	NOUN
ajis02-5323	532	8	.	.	PUNCT
ajis02-5323	533	1	technology	technology	NOUN
ajis02-5323	533	2	innovation	innovation	NOUN
ajis02-5323	533	3	management	management	NOUN
ajis02-5323	533	4	review	review	NOUN
ajis02-5323	533	5	,	,	PUNCT
ajis02-5323	533	6	5(4	5(4	NUM
ajis02-5323	533	7	)	)	PUNCT
ajis02-5323	533	8	,	,	PUNCT
ajis02-5323	533	9	28–34	28–34	NUM
ajis02-5323	533	10	.	.	PUNCT
ajis02-5323	534	1	doi.org/10.22215/timreview/888	doi.org/10.22215/timreview/888	PROPN
ajis02-5323	534	2	boyson	boyson	NOUN
ajis02-5323	534	3	,	,	PUNCT
ajis02-5323	534	4	s.	s.	PROPN
ajis02-5323	534	5	(	(	PUNCT
ajis02-5323	534	6	2014	2014	NUM
ajis02-5323	534	7	)	)	PUNCT
ajis02-5323	534	8	.	.	PUNCT
ajis02-5323	535	1	cyber	cyber	PROPN
ajis02-5323	535	2	supply	supply	NOUN
ajis02-5323	535	3	chain	chain	NOUN
ajis02-5323	535	4	risk	risk	NOUN
ajis02-5323	535	5	management	management	NOUN
ajis02-5323	535	6	:	:	PUNCT
ajis02-5323	535	7	revolutionizing	revolutionize	VERB
ajis02-5323	535	8	the	the	DET
ajis02-5323	535	9	strategic	strategic	ADJ
ajis02-5323	535	10	control	control	NOUN
ajis02-5323	535	11	of	of	ADP
ajis02-5323	535	12	critical	critical	ADJ
ajis02-5323	535	13	it	it	PRON
ajis02-5323	535	14	systems	system	NOUN
ajis02-5323	535	15	.	.	PUNCT
ajis02-5323	536	1	technovation	technovation	NOUN
ajis02-5323	536	2	,	,	PUNCT
ajis02-5323	536	3	34(7	34(7	NUM
ajis02-5323	536	4	)	)	PUNCT
ajis02-5323	536	5	,	,	PUNCT
ajis02-5323	536	6	342–353	342–353	NUM
ajis02-5323	536	7	.	.	PUNCT
ajis02-5323	536	8	doi.org/10.1016/j.technovation.2014.02.001	doi.org/10.1016/j.technovation.2014.02.001	PROPN
ajis02-5323	536	9	boyson	boyson	PROPN
ajis02-5323	536	10	,	,	PUNCT
ajis02-5323	536	11	s.	s.	PROPN
ajis02-5323	536	12	,	,	PUNCT
ajis02-5323	536	13	corsi	corsi	NOUN
ajis02-5323	536	14	,	,	PUNCT
ajis02-5323	536	15	t.	t.	PROPN
ajis02-5323	536	16	,	,	PUNCT
ajis02-5323	536	17	&	&	CCONJ
ajis02-5323	536	18	paraskevas	paraskevas	PROPN
ajis02-5323	536	19	,	,	PUNCT
ajis02-5323	536	20	j.	j.	PROPN
ajis02-5323	536	21	(	(	PUNCT
ajis02-5323	536	22	2022	2022	NUM
ajis02-5323	536	23	)	)	PUNCT
ajis02-5323	536	24	.	.	PUNCT
ajis02-5323	537	1	defending	defend	VERB
ajis02-5323	537	2	digital	digital	ADJ
ajis02-5323	537	3	supply	supply	NOUN
ajis02-5323	537	4	chains	chain	NOUN
ajis02-5323	537	5	:	:	PUNCT
ajis02-5323	537	6	evidence	evidence	NOUN
ajis02-5323	537	7	from	from	ADP
ajis02-5323	537	8	a	a	DET
ajis02-5323	537	9	decade	decade	NOUN
ajis02-5323	537	10	-	-	PUNCT
ajis02-5323	537	11	long	long	ADJ
ajis02-5323	537	12	research	research	NOUN
ajis02-5323	537	13	program	program	NOUN
ajis02-5323	537	14	.	.	PUNCT
ajis02-5323	538	1	technovation	technovation	NOUN
ajis02-5323	538	2	,	,	PUNCT
ajis02-5323	538	3	118	118	NUM
ajis02-5323	538	4	.	.	PUNCT
ajis02-5323	539	1	doi.org/10.1016/j.technovation.2021.102380	doi.org/10.1016/j.technovation.2021.102380	PROPN
ajis02-5323	539	2	boyson	boyson	NOUN
ajis02-5323	539	3	,	,	PUNCT
ajis02-5323	539	4	s.	s.	PROPN
ajis02-5323	539	5	,	,	PUNCT
ajis02-5323	539	6	corsi	corsi	NOUN
ajis02-5323	539	7	,	,	PUNCT
ajis02-5323	539	8	t.	t.	PROPN
ajis02-5323	539	9	,	,	PUNCT
ajis02-5323	539	10	&	&	CCONJ
ajis02-5323	539	11	rossman	rossman	PROPN
ajis02-5323	539	12	,	,	PUNCT
ajis02-5323	539	13	h.	h.	PROPN
ajis02-5323	539	14	(	(	PUNCT
ajis02-5323	539	15	2009	2009	NUM
ajis02-5323	539	16	)	)	PUNCT
ajis02-5323	539	17	.	.	PUNCT
ajis02-5323	540	1	building	build	VERB
ajis02-5323	540	2	a	a	DET
ajis02-5323	540	3	cyber	cyber	NOUN
ajis02-5323	540	4	supply	supply	NOUN
ajis02-5323	540	5	chain	chain	NOUN
ajis02-5323	540	6	assurance	assurance	NOUN
ajis02-5323	540	7	reference	reference	NOUN
ajis02-5323	540	8	model	model	NOUN
ajis02-5323	540	9	.	.	PUNCT
ajis02-5323	541	1	science	science	NOUN
ajis02-5323	541	2	applications	application	NOUN
ajis02-5323	541	3	international	international	PROPN
ajis02-5323	541	4	corporation	corporation	PROPN
ajis02-5323	541	5	(	(	PUNCT
ajis02-5323	541	6	saic	saic	PROPN
ajis02-5323	541	7	)	)	PUNCT
ajis02-5323	541	8	.	.	PUNCT
ajis02-5323	542	1	boyson	boyson	PROPN
ajis02-5323	542	2	,	,	PUNCT
ajis02-5323	542	3	s.	s.	PROPN
ajis02-5323	542	4	,	,	PUNCT
ajis02-5323	542	5	corsi	corsi	ADJ
ajis02-5323	542	6	,	,	PUNCT
ajis02-5323	542	7	t.	t.	PROPN
ajis02-5323	542	8	,	,	PUNCT
ajis02-5323	542	9	rossman	rossman	PROPN
ajis02-5323	542	10	,	,	PUNCT
ajis02-5323	542	11	h.	h.	PROPN
ajis02-5323	542	12	,	,	PUNCT
ajis02-5323	542	13	&	&	CCONJ
ajis02-5323	542	14	dorin	dorin	PROPN
ajis02-5323	542	15	,	,	PUNCT
ajis02-5323	542	16	m.	m.	NOUN
ajis02-5323	542	17	(	(	PUNCT
ajis02-5323	542	18	2011	2011	NUM
ajis02-5323	542	19	)	)	PUNCT
ajis02-5323	542	20	.	.	PUNCT
ajis02-5323	543	1	assessing	assess	VERB
ajis02-5323	543	2	scrm	scrm	NOUN
ajis02-5323	543	3	capabilities	capability	NOUN
ajis02-5323	543	4	and	and	CCONJ
ajis02-5323	543	5	perspectives	perspective	NOUN
ajis02-5323	543	6	of	of	ADP
ajis02-5323	543	7	the	the	DET
ajis02-5323	543	8	it	it	PROPN
ajis02-5323	543	9	vendor	vendor	NOUN
ajis02-5323	543	10	community	community	NOUN
ajis02-5323	543	11	:	:	PUNCT
ajis02-5323	543	12	toward	toward	ADP
ajis02-5323	543	13	a	a	DET
ajis02-5323	543	14	cyber	cyber	NOUN
ajis02-5323	543	15	supply	supply	NOUN
ajis02-5323	543	16	chain	chain	NOUN
ajis02-5323	543	17	code	code	NOUN
ajis02-5323	543	18	of	of	ADP
ajis02-5323	543	19	practice	practice	NOUN
ajis02-5323	543	20	.	.	PUNCT
ajis02-5323	544	1	university	university	NOUN
ajis02-5323	544	2	of	of	ADP
ajis02-5323	544	3	maryland	maryland	PROPN
ajis02-5323	544	4	robert	robert	PROPN
ajis02-5323	544	5	h.	h.	PROPN
ajis02-5323	544	6	smith	smith	PROPN
ajis02-5323	544	7	school	school	PROPN
ajis02-5323	544	8	of	of	ADP
ajis02-5323	544	9	business	business	NOUN
ajis02-5323	544	10	and	and	CCONJ
ajis02-5323	544	11	national	national	PROPN
ajis02-5323	544	12	institute	institute	PROPN
ajis02-5323	544	13	of	of	ADP
ajis02-5323	544	14	standards	standard	NOUN
ajis02-5323	544	15	and	and	CCONJ
ajis02-5323	544	16	technology	technology	NOUN
ajis02-5323	544	17	.	.	PUNCT
ajis02-5323	545	1	caldwell	caldwell	PROPN
ajis02-5323	545	2	,	,	PUNCT
ajis02-5323	545	3	t.	t.	PROPN
ajis02-5323	545	4	(	(	PUNCT
ajis02-5323	545	5	2015	2015	NUM
ajis02-5323	545	6	)	)	PUNCT
ajis02-5323	545	7	.	.	PUNCT
ajis02-5323	546	1	securing	secure	VERB
ajis02-5323	546	2	small	small	ADJ
ajis02-5323	546	3	businesses	business	NOUN
ajis02-5323	546	4	–	–	PUNCT
ajis02-5323	546	5	the	the	DET
ajis02-5323	546	6	weakest	weak	ADJ
ajis02-5323	546	7	link	link	NOUN
ajis02-5323	546	8	in	in	ADP
ajis02-5323	546	9	a	a	DET
ajis02-5323	546	10	supply	supply	NOUN
ajis02-5323	546	11	chain	chain	NOUN
ajis02-5323	546	12	?	?	PUNCT
ajis02-5323	547	1	computer	computer	NOUN
ajis02-5323	547	2	fraud	fraud	NOUN
ajis02-5323	547	3	&	&	CCONJ
ajis02-5323	547	4	security	security	NOUN
ajis02-5323	547	5	,	,	PUNCT
ajis02-5323	547	6	2015(9	2015(9	NUM
ajis02-5323	547	7	)	)	PUNCT
ajis02-5323	547	8	,	,	PUNCT
ajis02-5323	547	9	5–10	5–10	PROPN
ajis02-5323	547	10	.	.	PUNCT
ajis02-5323	548	1	doi.org/10.1016/s1361-3723(15)30083-x	doi.org/10.1016/s1361-3723(15)30083-x	PROPN
ajis02-5323	548	2	chakravarthy	chakravarthy	PROPN
ajis02-5323	548	3	,	,	PUNCT
ajis02-5323	548	4	b.	b.	PROPN
ajis02-5323	548	5	s./lorange	s./lorange	PROPN
ajis02-5323	548	6	,	,	PUNCT
ajis02-5323	548	7	p.	p.	NOUN
ajis02-5323	548	8	(	(	PUNCT
ajis02-5323	548	9	1991	1991	NUM
ajis02-5323	548	10	):	):	PUNCT
ajis02-5323	548	11	managing	manage	VERB
ajis02-5323	548	12	the	the	DET
ajis02-5323	548	13	strategy	strategy	NOUN
ajis02-5323	548	14	process	process	NOUN
ajis02-5323	548	15	.	.	PUNCT
ajis02-5323	549	1	englewood	englewood	PROPN
ajis02-5323	549	2	cliffs	cliffs	PROPN
ajis02-5323	549	3	.	.	PUNCT
ajis02-5323	550	1	chowdhury	chowdhury	PROPN
ajis02-5323	550	2	,	,	PUNCT
ajis02-5323	550	3	n.	n.	PROPN
ajis02-5323	550	4	h.	h.	PROPN
ajis02-5323	550	5	,	,	PUNCT
ajis02-5323	550	6	adam	adam	PROPN
ajis02-5323	550	7	,	,	PUNCT
ajis02-5323	550	8	m.	m.	NOUN
ajis02-5323	550	9	t.	t.	PROPN
ajis02-5323	550	10	,	,	PUNCT
ajis02-5323	550	11	&	&	CCONJ
ajis02-5323	550	12	skinner	skinner	PROPN
ajis02-5323	550	13	,	,	PUNCT
ajis02-5323	550	14	g.	g.	PROPN
ajis02-5323	550	15	(	(	PUNCT
ajis02-5323	550	16	2019	2019	NUM
ajis02-5323	550	17	)	)	PUNCT
ajis02-5323	550	18	.	.	PUNCT
ajis02-5323	551	1	the	the	DET
ajis02-5323	551	2	impact	impact	NOUN
ajis02-5323	551	3	of	of	ADP
ajis02-5323	551	4	time	time	NOUN
ajis02-5323	551	5	pressure	pressure	NOUN
ajis02-5323	551	6	on	on	ADP
ajis02-5323	551	7	cybersecurity	cybersecurity	NOUN
ajis02-5323	551	8	behaviour	behaviour	NOUN
ajis02-5323	551	9	:	:	PUNCT
ajis02-5323	551	10	a	a	DET
ajis02-5323	551	11	systematic	systematic	ADJ
ajis02-5323	551	12	literature	literature	NOUN
ajis02-5323	551	13	review	review	NOUN
ajis02-5323	551	14	.	.	PUNCT
ajis02-5323	552	1	behaviour	behaviour	NOUN
ajis02-5323	552	2	&	&	CCONJ
ajis02-5323	552	3	information	information	NOUN
ajis02-5323	552	4	technology	technology	NOUN
ajis02-5323	552	5	,	,	PUNCT
ajis02-5323	552	6	38(12	38(12	NUM
ajis02-5323	552	7	)	)	PUNCT
ajis02-5323	552	8	,	,	PUNCT
ajis02-5323	552	9	1290–1308	1290–1308	NUM
ajis02-5323	552	10	.	.	PUNCT
ajis02-5323	553	1	doi.org/10.1080/0144929x.2019.1583769	doi.org/10.1080/0144929x.2019.1583769	PROPN
ajis02-5323	553	2	colicchia	colicchia	PROPN
ajis02-5323	553	3	,	,	PUNCT
ajis02-5323	553	4	c.	c.	NOUN
ajis02-5323	553	5	,	,	PUNCT
ajis02-5323	553	6	creazza	creazza	NOUN
ajis02-5323	553	7	,	,	PUNCT
ajis02-5323	553	8	a.	a.	NOUN
ajis02-5323	553	9	,	,	PUNCT
ajis02-5323	553	10	&	&	CCONJ
ajis02-5323	553	11	menachof	menachof	PROPN
ajis02-5323	553	12	,	,	PUNCT
ajis02-5323	553	13	d.	d.	PROPN
ajis02-5323	553	14	a.	a.	PROPN
ajis02-5323	553	15	(	(	PUNCT
ajis02-5323	553	16	2018	2018	NUM
ajis02-5323	553	17	)	)	PUNCT
ajis02-5323	553	18	.	.	PUNCT
ajis02-5323	554	1	managing	manage	VERB
ajis02-5323	554	2	cyber	cyber	NOUN
ajis02-5323	554	3	and	and	CCONJ
ajis02-5323	554	4	information	information	NOUN
ajis02-5323	554	5	risks	risk	NOUN
ajis02-5323	554	6	in	in	ADP
ajis02-5323	554	7	supply	supply	NOUN
ajis02-5323	554	8	chains	chain	NOUN
ajis02-5323	554	9	:	:	PUNCT
ajis02-5323	554	10	insights	insight	NOUN
ajis02-5323	554	11	from	from	ADP
ajis02-5323	554	12	an	an	DET
ajis02-5323	554	13	exploratory	exploratory	ADJ
ajis02-5323	554	14	analysis	analysis	NOUN
ajis02-5323	554	15	.	.	PUNCT
ajis02-5323	555	1	supply	supply	NOUN
ajis02-5323	555	2	chain	chain	NOUN
ajis02-5323	555	3	management	management	NOUN
ajis02-5323	555	4	:	:	PUNCT
ajis02-5323	555	5	an	an	DET
ajis02-5323	555	6	international	international	ADJ
ajis02-5323	555	7	journal	journal	NOUN
ajis02-5323	555	8	,	,	PUNCT
ajis02-5323	555	9	24(2	24(2	NUM
ajis02-5323	555	10	)	)	PUNCT
ajis02-5323	555	11	,	,	PUNCT
ajis02-5323	555	12	215–240	215–240	NUM
ajis02-5323	555	13	.	.	PUNCT
ajis02-5323	556	1	doi.org/10.1108/scm-09-2017-0289	doi.org/10.1108/scm-09-2017-0289	PROPN
ajis02-5323	556	2	corbin	corbin	PROPN
ajis02-5323	556	3	,	,	PUNCT
ajis02-5323	556	4	j.	j.	PROPN
ajis02-5323	556	5	m.	m.	PROPN
ajis02-5323	556	6	,	,	PUNCT
ajis02-5323	556	7	&	&	CCONJ
ajis02-5323	556	8	strauss	strauss	PROPN
ajis02-5323	556	9	,	,	PUNCT
ajis02-5323	556	10	a.	a.	NOUN
ajis02-5323	556	11	(	(	PUNCT
ajis02-5323	556	12	1990	1990	NUM
ajis02-5323	556	13	)	)	PUNCT
ajis02-5323	556	14	.	.	PUNCT
ajis02-5323	557	1	grounded	ground	VERB
ajis02-5323	557	2	theory	theory	NOUN
ajis02-5323	557	3	research	research	NOUN
ajis02-5323	557	4	:	:	PUNCT
ajis02-5323	557	5	procedures	procedure	NOUN
ajis02-5323	557	6	,	,	PUNCT
ajis02-5323	557	7	canons	canon	NOUN
ajis02-5323	557	8	,	,	PUNCT
ajis02-5323	557	9	and	and	CCONJ
ajis02-5323	557	10	evaluative	evaluative	ADJ
ajis02-5323	557	11	criteria	criterion	NOUN
ajis02-5323	557	12	.	.	PUNCT
ajis02-5323	558	1	qualitative	qualitative	ADJ
ajis02-5323	558	2	sociology	sociology	NOUN
ajis02-5323	558	3	,	,	PUNCT
ajis02-5323	558	4	13(1	13(1	NUM
ajis02-5323	558	5	)	)	PUNCT
ajis02-5323	558	6	,	,	PUNCT
ajis02-5323	558	7	3–21	3–21	NOUN
ajis02-5323	558	8	.	.	PUNCT
ajis02-5323	559	1	doi.org/10.1007/bf00988593	doi.org/10.1007/bf00988593	ADJ
ajis02-5323	559	2	creazza	creazza	NOUN
ajis02-5323	559	3	,	,	PUNCT
ajis02-5323	559	4	a.	a.	NOUN
ajis02-5323	559	5	,	,	PUNCT
ajis02-5323	559	6	colicchia	colicchia	NOUN
ajis02-5323	559	7	,	,	PUNCT
ajis02-5323	559	8	c.	c.	NOUN
ajis02-5323	559	9	,	,	PUNCT
ajis02-5323	559	10	spiezia	spiezia	PROPN
ajis02-5323	559	11	,	,	PUNCT
ajis02-5323	559	12	s.	s.	PROPN
ajis02-5323	559	13	,	,	PUNCT
ajis02-5323	559	14	&	&	CCONJ
ajis02-5323	559	15	dallari	dallari	PROPN
ajis02-5323	559	16	,	,	PUNCT
ajis02-5323	559	17	f.	f.	PROPN
ajis02-5323	559	18	(	(	PUNCT
ajis02-5323	559	19	2021	2021	NUM
ajis02-5323	559	20	)	)	PUNCT
ajis02-5323	559	21	.	.	PUNCT
ajis02-5323	560	1	who	who	PRON
ajis02-5323	560	2	cares	care	VERB
ajis02-5323	560	3	?	?	PUNCT
ajis02-5323	561	1	supply	supply	NOUN
ajis02-5323	561	2	chain	chain	NOUN
ajis02-5323	561	3	managers	manager	NOUN
ajis02-5323	561	4	’	’	PART
ajis02-5323	561	5	perceptions	perception	NOUN
ajis02-5323	561	6	regarding	regard	VERB
ajis02-5323	561	7	cyber	cyber	NOUN
ajis02-5323	561	8	supply	supply	NOUN
ajis02-5323	561	9	chain	chain	NOUN
ajis02-5323	561	10	risk	risk	NOUN
ajis02-5323	561	11	management	management	NOUN
ajis02-5323	561	12	in	in	ADP
ajis02-5323	561	13	the	the	DET
ajis02-5323	561	14	digital	digital	ADJ
ajis02-5323	561	15	transformation	transformation	NOUN
ajis02-5323	561	16	era	era	NOUN
ajis02-5323	561	17	.	.	PUNCT
ajis02-5323	562	1	supply	supply	NOUN
ajis02-5323	562	2	chain	chain	NOUN
ajis02-5323	562	3	management	management	NOUN
ajis02-5323	562	4	:	:	PUNCT
ajis02-5323	562	5	an	an	DET
ajis02-5323	562	6	international	international	ADJ
ajis02-5323	562	7	journal	journal	NOUN
ajis02-5323	562	8	,	,	PUNCT
ajis02-5323	562	9	27(1	27(1	NUM
ajis02-5323	562	10	)	)	PUNCT
ajis02-5323	562	11	,	,	PUNCT
ajis02-5323	562	12	30–53	30–53	NUM
ajis02-5323	562	13	.	.	PUNCT
ajis02-5323	563	1	doi.org/10.1108/scm-02-2020-0073	doi.org/10.1108/scm-02-2020-0073	NOUN
ajis02-5323	563	2	crosignani	crosignani	PROPN
ajis02-5323	563	3	,	,	PUNCT
ajis02-5323	563	4	m.	m.	NOUN
ajis02-5323	563	5	,	,	PUNCT
ajis02-5323	563	6	macchiavelli	macchiavelli	NOUN
ajis02-5323	563	7	,	,	PUNCT
ajis02-5323	563	8	m.	m.	NOUN
ajis02-5323	563	9	,	,	PUNCT
ajis02-5323	563	10	&	&	CCONJ
ajis02-5323	563	11	silva	silva	PROPN
ajis02-5323	563	12	,	,	PUNCT
ajis02-5323	563	13	a.	a.	NOUN
ajis02-5323	563	14	(	(	PUNCT
ajis02-5323	563	15	2023	2023	NUM
ajis02-5323	563	16	)	)	PUNCT
ajis02-5323	563	17	.	.	PUNCT
ajis02-5323	564	1	pirates	pirate	NOUN
ajis02-5323	564	2	without	without	ADP
ajis02-5323	564	3	borders	border	NOUN
ajis02-5323	564	4	:	:	PUNCT
ajis02-5323	564	5	the	the	DET
ajis02-5323	564	6	propagation	propagation	NOUN
ajis02-5323	564	7	of	of	ADP
ajis02-5323	564	8	cyberattacks	cyberattack	NOUN
ajis02-5323	564	9	through	through	ADP
ajis02-5323	564	10	firms	firm	NOUN
ajis02-5323	564	11	’	’	PART
ajis02-5323	564	12	supply	supply	NOUN
ajis02-5323	564	13	chains	chain	NOUN
ajis02-5323	564	14	.	.	PUNCT
ajis02-5323	565	1	journal	journal	NOUN
ajis02-5323	565	2	of	of	ADP
ajis02-5323	565	3	financial	financial	ADJ
ajis02-5323	565	4	economics	economic	NOUN
ajis02-5323	565	5	,	,	PUNCT
ajis02-5323	565	6	147(2	147(2	NUM
ajis02-5323	565	7	)	)	PUNCT
ajis02-5323	565	8	,	,	PUNCT
ajis02-5323	565	9	432	432	NUM
ajis02-5323	565	10	–	–	PUNCT
ajis02-5323	565	11	448	448	NUM
ajis02-5323	565	12	.	.	PUNCT
ajis02-5323	565	13	doi.org/10.1016/j.jfineco.2022.12.002	doi.org/10.1016/j.jfineco.2022.12.002	PROPN
ajis02-5323	565	14	davis	davis	PROPN
ajis02-5323	565	15	,	,	PUNCT
ajis02-5323	565	16	a.	a.	NOUN
ajis02-5323	565	17	(	(	PUNCT
ajis02-5323	565	18	2015	2015	NUM
ajis02-5323	565	19	)	)	PUNCT
ajis02-5323	565	20	.	.	PUNCT
ajis02-5323	566	1	building	build	VERB
ajis02-5323	566	2	cyber	cyber	NOUN
ajis02-5323	566	3	-	-	PUNCT
ajis02-5323	566	4	resilience	resilience	NOUN
ajis02-5323	566	5	into	into	ADP
ajis02-5323	566	6	supply	supply	NOUN
ajis02-5323	566	7	chains	chain	NOUN
ajis02-5323	566	8	.	.	PUNCT
ajis02-5323	567	1	technology	technology	NOUN
ajis02-5323	567	2	innovation	innovation	NOUN
ajis02-5323	567	3	management	management	NOUN
ajis02-5323	567	4	review	review	NOUN
ajis02-5323	567	5	,	,	PUNCT
ajis02-5323	567	6	5(4	5(4	NUM
ajis02-5323	567	7	)	)	PUNCT
ajis02-5323	567	8	,	,	PUNCT
ajis02-5323	567	9	19–27	19–27	NUM
ajis02-5323	567	10	.	.	PUNCT
ajis02-5323	568	1	australasian	australasian	ADJ
ajis02-5323	568	2	journal	journal	NOUN
ajis02-5323	568	3	of	of	ADP
ajis02-5323	568	4	information	information	NOUN
ajis02-5323	568	5	systems	system	NOUN
ajis02-5323	568	6	slapnicar	slapnicar	NOUN
ajis02-5323	568	7	,	,	PUNCT
ajis02-5323	568	8	vidmar	vidmar	NOUN
ajis02-5323	568	9	&	&	CCONJ
ajis02-5323	568	10	tsen	tsen	ADJ
ajis02-5323	568	11	2025	2025	NUM
ajis02-5323	568	12	,	,	PUNCT
ajis02-5323	568	13	vol	vol	NOUN
ajis02-5323	568	14	29	29	NUM
ajis02-5323	568	15	,	,	PUNCT
ajis02-5323	568	16	research	research	NOUN
ajis02-5323	568	17	article	article	NOUN
ajis02-5323	568	18	process	process	NOUN
ajis02-5323	568	19	theory	theory	NOUN
ajis02-5323	568	20	of	of	ADP
ajis02-5323	568	21	supplier	supplier	NOUN
ajis02-5323	568	22	cyber	cyber	NOUN
ajis02-5323	568	23	risk	risk	NOUN
ajis02-5323	568	24	assessment	assessment	NOUN
ajis02-5323	568	25	29	29	NUM
ajis02-5323	568	26	deane	deane	PROPN
ajis02-5323	568	27	,	,	PUNCT
ajis02-5323	568	28	j.	j.	PROPN
ajis02-5323	568	29	,	,	PUNCT
ajis02-5323	568	30	baker	baker	PROPN
ajis02-5323	568	31	,	,	PUNCT
ajis02-5323	568	32	w.	w.	PROPN
ajis02-5323	568	33	,	,	PUNCT
ajis02-5323	568	34	&	&	CCONJ
ajis02-5323	568	35	rees	rees	PROPN
ajis02-5323	568	36	,	,	PUNCT
ajis02-5323	568	37	l.	l.	PROPN
ajis02-5323	568	38	(	(	PUNCT
ajis02-5323	568	39	2023	2023	NUM
ajis02-5323	568	40	)	)	PUNCT
ajis02-5323	568	41	.	.	PUNCT
ajis02-5323	569	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	569	2	in	in	ADP
ajis02-5323	569	3	supply	supply	NOUN
ajis02-5323	569	4	chains	chain	NOUN
ajis02-5323	569	5	:	:	PUNCT
ajis02-5323	569	6	quantifying	quantify	VERB
ajis02-5323	569	7	risk	risk	NOUN
ajis02-5323	569	8	.	.	PUNCT
ajis02-5323	570	1	journal	journal	NOUN
ajis02-5323	570	2	of	of	ADP
ajis02-5323	570	3	computer	computer	NOUN
ajis02-5323	570	4	information	information	NOUN
ajis02-5323	570	5	systems	system	NOUN
ajis02-5323	570	6	,	,	PUNCT
ajis02-5323	570	7	63(3	63(3	NUM
ajis02-5323	570	8	)	)	PUNCT
ajis02-5323	570	9	,	,	PUNCT
ajis02-5323	570	10	507–521	507–521	NUM
ajis02-5323	570	11	.	.	PUNCT
ajis02-5323	571	1	doi.org/10.1080/08874417.2022.2081882	doi.org/10.1080/08874417.2022.2081882	PROPN
ajis02-5323	571	2	do	do	VERB
ajis02-5323	571	3	amaral	amaral	NOUN
ajis02-5323	571	4	,	,	PUNCT
ajis02-5323	571	5	t.	t.	PROPN
ajis02-5323	571	6	m.	m.	PROPN
ajis02-5323	571	7	s.	s.	PROPN
ajis02-5323	571	8	,	,	PUNCT
ajis02-5323	571	9	&	&	CCONJ
ajis02-5323	571	10	gondim	gondim	PROPN
ajis02-5323	571	11	,	,	PUNCT
ajis02-5323	571	12	j.	j.	PROPN
ajis02-5323	571	13	j.	j.	PROPN
ajis02-5323	571	14	c.	c.	PROPN
ajis02-5323	571	15	(	(	PUNCT
ajis02-5323	571	16	2021	2021	NUM
ajis02-5323	571	17	,	,	PUNCT
ajis02-5323	571	18	november	november	PROPN
ajis02-5323	571	19	)	)	PUNCT
ajis02-5323	571	20	.	.	PUNCT
ajis02-5323	572	1	integrating	integrate	VERB
ajis02-5323	572	2	zero	zero	NUM
ajis02-5323	572	3	trust	trust	NOUN
ajis02-5323	572	4	in	in	ADP
ajis02-5323	572	5	the	the	DET
ajis02-5323	572	6	cyber	cyber	NOUN
ajis02-5323	572	7	supply	supply	NOUN
ajis02-5323	572	8	chain	chain	NOUN
ajis02-5323	572	9	security	security	NOUN
ajis02-5323	572	10	.	.	PUNCT
ajis02-5323	573	1	in	in	ADP
ajis02-5323	573	2	2021	2021	NUM
ajis02-5323	573	3	workshop	workshop	NOUN
ajis02-5323	573	4	on	on	ADP
ajis02-5323	573	5	communication	communication	NOUN
ajis02-5323	573	6	networks	network	NOUN
ajis02-5323	573	7	and	and	CCONJ
ajis02-5323	573	8	power	power	NOUN
ajis02-5323	573	9	systems	system	NOUN
ajis02-5323	573	10	(	(	PUNCT
ajis02-5323	573	11	wcnps	wcnps	PROPN
ajis02-5323	573	12	)	)	PUNCT
ajis02-5323	573	13	(	(	PUNCT
ajis02-5323	573	14	pp	pp	X
ajis02-5323	573	15	.	.	PUNCT
ajis02-5323	574	1	1	1	NUM
ajis02-5323	574	2	-	-	SYM
ajis02-5323	574	3	6	6	NUM
ajis02-5323	574	4	)	)	PUNCT
ajis02-5323	574	5	.	.	PUNCT
ajis02-5323	575	1	ieee	ieee	PROPN
ajis02-5323	575	2	.	.	PUNCT
ajis02-5323	576	1	european	european	PROPN
ajis02-5323	576	2	banking	banking	PROPN
ajis02-5323	576	3	authority	authority	PROPN
ajis02-5323	576	4	(	(	PUNCT
ajis02-5323	576	5	eba	eba	NOUN
ajis02-5323	576	6	)	)	PUNCT
ajis02-5323	576	7	.	.	PUNCT
ajis02-5323	577	1	(	(	PUNCT
ajis02-5323	577	2	2019	2019	NUM
ajis02-5323	577	3	)	)	PUNCT
ajis02-5323	577	4	.	.	PUNCT
ajis02-5323	578	1	guidelines	guideline	NOUN
ajis02-5323	578	2	on	on	ADP
ajis02-5323	578	3	outsourcing	outsourcing	NOUN
ajis02-5323	578	4	arrangements	arrangement	NOUN
ajis02-5323	578	5	.	.	PUNCT
ajis02-5323	579	1	retrieved	retrieve	VERB
ajis02-5323	579	2	october	october	PROPN
ajis02-5323	579	3	3	3	NUM
ajis02-5323	579	4	,	,	PUNCT
ajis02-5323	579	5	2023	2023	NUM
ajis02-5323	579	6	,	,	PUNCT
ajis02-5323	579	7	from	from	ADP
ajis02-5323	579	8	https://www.eba.europa.eu/sites/default/documents/files/documents/10180/2551996/38	https://www.eba.europa.eu/sites/default/documents/files/documents/10180/2551996/38	NOUN
ajis02-5323	579	9	c80601	c80601	ADJ
ajis02-5323	579	10	-	-	PUNCT
ajis02-5323	579	11	f5d7	f5d7	ADJ
ajis02-5323	579	12	-	-	ADJ
ajis02-5323	579	13	4855	4855	NUM
ajis02-5323	579	14	-	-	PUNCT
ajis02-5323	579	15	8ba3	8ba3	NUM
ajis02-5323	579	16	-	-	PUNCT
ajis02-5323	579	17	702423665479	702423665479	NUM
ajis02-5323	579	18	/	/	SYM
ajis02-5323	579	19	eba%20revised%20guidelines%20on%20	eba%20revised%20guidelines%20on%20	PROPN
ajis02-5323	579	20	outsourcing%20arrangements.pdf	outsourcing%20arrangements.pdf	PROPN
ajis02-5323	579	21	gale	gale	PROPN
ajis02-5323	579	22	,	,	PUNCT
ajis02-5323	579	23	m.	m.	NOUN
ajis02-5323	579	24	,	,	PUNCT
ajis02-5323	579	25	bongiovanni	bongiovanni	PROPN
ajis02-5323	579	26	,	,	PUNCT
ajis02-5323	579	27	i.	i.	PROPN
ajis02-5323	579	28	,	,	PUNCT
ajis02-5323	579	29	&	&	CCONJ
ajis02-5323	579	30	slapničar	slapničar	PROPN
ajis02-5323	579	31	,	,	PUNCT
ajis02-5323	579	32	s.	s.	PROPN
ajis02-5323	579	33	(	(	PUNCT
ajis02-5323	579	34	2022	2022	NUM
ajis02-5323	579	35	)	)	PUNCT
ajis02-5323	579	36	.	.	PUNCT
ajis02-5323	580	1	governing	govern	VERB
ajis02-5323	580	2	cybersecurity	cybersecurity	NOUN
ajis02-5323	580	3	from	from	ADP
ajis02-5323	580	4	the	the	DET
ajis02-5323	580	5	boardroom	boardroom	NOUN
ajis02-5323	580	6	:	:	PUNCT
ajis02-5323	580	7	challenges	challenge	NOUN
ajis02-5323	580	8	,	,	PUNCT
ajis02-5323	580	9	drivers	driver	NOUN
ajis02-5323	580	10	,	,	PUNCT
ajis02-5323	580	11	and	and	CCONJ
ajis02-5323	580	12	ways	way	NOUN
ajis02-5323	580	13	ahead	ahead	ADV
ajis02-5323	580	14	.	.	PUNCT
ajis02-5323	581	1	computers	computer	NOUN
ajis02-5323	581	2	&	&	CCONJ
ajis02-5323	581	3	security	security	NOUN
ajis02-5323	581	4	,	,	PUNCT
ajis02-5323	581	5	121	121	NUM
ajis02-5323	581	6	,	,	PUNCT
ajis02-5323	581	7	102840	102840	NUM
ajis02-5323	581	8	.	.	PUNCT
ajis02-5323	582	1	doi.org/10.1016/j.cose.2022.102840	doi.org/10.1016/j.cose.2022.102840	PROPN
ajis02-5323	582	2	gani	gani	PROPN
ajis02-5323	582	3	,	,	PUNCT
ajis02-5323	582	4	a.	a.	NOUN
ajis02-5323	582	5	,	,	PUNCT
ajis02-5323	582	6	fernando	fernando	PROPN
ajis02-5323	582	7	,	,	PUNCT
ajis02-5323	582	8	y.	y.	PROPN
ajis02-5323	582	9	,	,	PUNCT
ajis02-5323	582	10	lan	lan	PROPN
ajis02-5323	582	11	,	,	PUNCT
ajis02-5323	582	12	s.	s.	PROPN
ajis02-5323	582	13	,	,	PUNCT
ajis02-5323	582	14	lim	lim	PROPN
ajis02-5323	582	15	,	,	PUNCT
ajis02-5323	582	16	m.	m.	NOUN
ajis02-5323	582	17	,	,	PUNCT
ajis02-5323	582	18	&	&	CCONJ
ajis02-5323	582	19	tseng	tseng	PROPN
ajis02-5323	582	20	,	,	PUNCT
ajis02-5323	582	21	m.	m.	NOUN
ajis02-5323	582	22	(	(	PUNCT
ajis02-5323	582	23	2023	2023	NUM
ajis02-5323	582	24	)	)	PUNCT
ajis02-5323	582	25	.	.	PUNCT
ajis02-5323	583	1	interplay	interplay	NOUN
ajis02-5323	583	2	between	between	ADP
ajis02-5323	583	3	cyber	cyber	NOUN
ajis02-5323	583	4	supply	supply	NOUN
ajis02-5323	583	5	chain	chain	NOUN
ajis02-5323	583	6	risk	risk	NOUN
ajis02-5323	583	7	management	management	NOUN
ajis02-5323	583	8	practices	practice	NOUN
ajis02-5323	583	9	and	and	CCONJ
ajis02-5323	583	10	cybersecurity	cybersecurity	NOUN
ajis02-5323	583	11	performance	performance	NOUN
ajis02-5323	583	12	.	.	PUNCT
ajis02-5323	584	1	industrial	industrial	ADJ
ajis02-5323	584	2	management	management	PROPN
ajis02-5323	584	3	&	&	CCONJ
ajis02-5323	584	4	data	datum	NOUN
ajis02-5323	584	5	systems	system	NOUN
ajis02-5323	584	6	,	,	PUNCT
ajis02-5323	584	7	123(3	123(3	NUM
ajis02-5323	584	8	)	)	PUNCT
ajis02-5323	584	9	,	,	PUNCT
ajis02-5323	584	10	843–861	843–861	NUM
ajis02-5323	584	11	.	.	PUNCT
ajis02-5323	585	1	doi.org/10.1108/imds-05-2022-0313	doi.org/10.1108/imds-05-2022-0313	PROPN
ajis02-5323	585	2	gaudenzi	gaudenzi	PROPN
ajis02-5323	585	3	,	,	PUNCT
ajis02-5323	585	4	b.	b.	PROPN
ajis02-5323	585	5	,	,	PUNCT
ajis02-5323	585	6	&	&	CCONJ
ajis02-5323	585	7	siciliano	siciliano	PROPN
ajis02-5323	585	8	,	,	PUNCT
ajis02-5323	585	9	g.	g.	PROPN
ajis02-5323	585	10	(	(	PUNCT
ajis02-5323	585	11	2017	2017	NUM
ajis02-5323	585	12	)	)	PUNCT
ajis02-5323	585	13	.	.	PUNCT
ajis02-5323	586	1	just	just	ADV
ajis02-5323	586	2	do	do	VERB
ajis02-5323	586	3	it	it	PRON
ajis02-5323	586	4	:	:	PUNCT
ajis02-5323	586	5	managing	manage	VERB
ajis02-5323	586	6	it	it	PRON
ajis02-5323	586	7	and	and	CCONJ
ajis02-5323	586	8	cyber	cyber	ADJ
ajis02-5323	586	9	risks	risk	NOUN
ajis02-5323	586	10	to	to	PART
ajis02-5323	586	11	protect	protect	VERB
ajis02-5323	586	12	the	the	DET
ajis02-5323	586	13	value	value	NOUN
ajis02-5323	586	14	creation	creation	NOUN
ajis02-5323	586	15	.	.	PUNCT
ajis02-5323	587	1	journal	journal	PROPN
ajis02-5323	587	2	of	of	ADP
ajis02-5323	587	3	promotion	promotion	NOUN
ajis02-5323	587	4	management	management	NOUN
ajis02-5323	587	5	,	,	PUNCT
ajis02-5323	587	6	23(3	23(3	NUM
ajis02-5323	587	7	)	)	PUNCT
ajis02-5323	587	8	,	,	PUNCT
ajis02-5323	587	9	372–385	372–385	NUM
ajis02-5323	587	10	.	.	PUNCT
ajis02-5323	588	1	doi.org/10.1080/10496491.2017.1294875	doi.org/10.1080/10496491.2017.1294875	PROPN
ajis02-5323	588	2	gaudenzi	gaudenzi	PROPN
ajis02-5323	588	3	,	,	PUNCT
ajis02-5323	588	4	b.	b.	PROPN
ajis02-5323	588	5	,	,	PUNCT
ajis02-5323	588	6	&	&	CCONJ
ajis02-5323	588	7	siciliano	siciliano	PROPN
ajis02-5323	588	8	,	,	PUNCT
ajis02-5323	588	9	g.	g.	PROPN
ajis02-5323	588	10	(	(	PUNCT
ajis02-5323	588	11	2018	2018	NUM
ajis02-5323	588	12	)	)	PUNCT
ajis02-5323	588	13	.	.	PUNCT
ajis02-5323	589	1	managing	manage	VERB
ajis02-5323	589	2	it	it	PRON
ajis02-5323	589	3	and	and	CCONJ
ajis02-5323	589	4	cyber	cyber	ADJ
ajis02-5323	589	5	risks	risk	NOUN
ajis02-5323	589	6	in	in	ADP
ajis02-5323	589	7	supply	supply	NOUN
ajis02-5323	589	8	chains	chain	NOUN
ajis02-5323	589	9	.	.	PUNCT
ajis02-5323	590	1	in	in	ADP
ajis02-5323	590	2	y.	y.	PROPN
ajis02-5323	590	3	khojasteh	khojasteh	PROPN
ajis02-5323	590	4	(	(	PUNCT
ajis02-5323	590	5	ed	ed	NOUN
ajis02-5323	590	6	.	.	PUNCT
ajis02-5323	590	7	)	)	PUNCT
ajis02-5323	590	8	,	,	PUNCT
ajis02-5323	590	9	supply	supply	NOUN
ajis02-5323	590	10	chain	chain	NOUN
ajis02-5323	590	11	risk	risk	NOUN
ajis02-5323	590	12	management	management	NOUN
ajis02-5323	590	13	:	:	PUNCT
ajis02-5323	590	14	advanced	advanced	ADJ
ajis02-5323	590	15	tools	tool	NOUN
ajis02-5323	590	16	,	,	PUNCT
ajis02-5323	590	17	models	model	NOUN
ajis02-5323	590	18	,	,	PUNCT
ajis02-5323	590	19	and	and	CCONJ
ajis02-5323	590	20	developments	development	NOUN
ajis02-5323	590	21	(	(	PUNCT
ajis02-5323	590	22	pp	pp	ADJ
ajis02-5323	590	23	.	.	PUNCT
ajis02-5323	590	24	85–96	85–96	NUM
ajis02-5323	590	25	)	)	PUNCT
ajis02-5323	590	26	.	.	PUNCT
ajis02-5323	591	1	springer	springer	NOUN
ajis02-5323	591	2	.	.	PUNCT
ajis02-5323	592	1	doi.org/10.1007/978-981-10-4106-8_5	doi.org/10.1007/978-981-10-4106-8_5	PROPN
ajis02-5323	592	2	ghadge	ghadge	PROPN
ajis02-5323	592	3	,	,	PUNCT
ajis02-5323	592	4	a.	a.	PROPN
ajis02-5323	592	5	,	,	PUNCT
ajis02-5323	592	6	weiß	weiß	PROPN
ajis02-5323	592	7	,	,	PUNCT
ajis02-5323	592	8	m.	m.	NOUN
ajis02-5323	592	9	,	,	PUNCT
ajis02-5323	592	10	caldwell	caldwell	PROPN
ajis02-5323	592	11	,	,	PUNCT
ajis02-5323	592	12	n.	n.	PROPN
ajis02-5323	592	13	d.	d.	PROPN
ajis02-5323	592	14	,	,	PUNCT
ajis02-5323	592	15	&	&	CCONJ
ajis02-5323	592	16	wilding	wilding	PROPN
ajis02-5323	592	17	,	,	PUNCT
ajis02-5323	592	18	r.	r.	PROPN
ajis02-5323	592	19	(	(	PUNCT
ajis02-5323	592	20	2019	2019	NUM
ajis02-5323	592	21	)	)	PUNCT
ajis02-5323	592	22	.	.	PUNCT
ajis02-5323	593	1	managing	manage	VERB
ajis02-5323	593	2	cyber	cyber	NOUN
ajis02-5323	593	3	risk	risk	NOUN
ajis02-5323	593	4	in	in	ADP
ajis02-5323	593	5	supply	supply	NOUN
ajis02-5323	593	6	chains	chain	NOUN
ajis02-5323	593	7	:	:	PUNCT
ajis02-5323	593	8	a	a	DET
ajis02-5323	593	9	review	review	NOUN
ajis02-5323	593	10	and	and	CCONJ
ajis02-5323	593	11	research	research	NOUN
ajis02-5323	593	12	agenda	agenda	NOUN
ajis02-5323	593	13	.	.	PUNCT
ajis02-5323	594	1	supply	supply	NOUN
ajis02-5323	594	2	chain	chain	NOUN
ajis02-5323	594	3	management	management	NOUN
ajis02-5323	594	4	:	:	PUNCT
ajis02-5323	594	5	an	an	DET
ajis02-5323	594	6	international	international	ADJ
ajis02-5323	594	7	journal	journal	NOUN
ajis02-5323	594	8	,	,	PUNCT
ajis02-5323	594	9	25(2	25(2	NUM
ajis02-5323	594	10	)	)	PUNCT
ajis02-5323	594	11	,	,	PUNCT
ajis02-5323	594	12	223–240	223–240	NUM
ajis02-5323	594	13	.	.	PUNCT
ajis02-5323	595	1	doi.org/10.1108/scm-10-2018-0357	doi.org/10.1108/scm-10-2018-0357	PROPN
ajis02-5323	595	2	gioia	gioia	PROPN
ajis02-5323	595	3	,	,	PUNCT
ajis02-5323	595	4	d.	d.	PROPN
ajis02-5323	595	5	a.	a.	PROPN
ajis02-5323	595	6	,	,	PUNCT
ajis02-5323	595	7	corley	corley	PROPN
ajis02-5323	595	8	,	,	PUNCT
ajis02-5323	595	9	k.	k.	PROPN
ajis02-5323	595	10	g.	g.	PROPN
ajis02-5323	595	11	,	,	PUNCT
ajis02-5323	595	12	&	&	CCONJ
ajis02-5323	595	13	hamilton	hamilton	PROPN
ajis02-5323	595	14	,	,	PUNCT
ajis02-5323	595	15	a.	a.	PROPN
ajis02-5323	595	16	l.	l.	PROPN
ajis02-5323	595	17	(	(	PUNCT
ajis02-5323	595	18	2013	2013	NUM
ajis02-5323	595	19	)	)	PUNCT
ajis02-5323	595	20	.	.	PUNCT
ajis02-5323	596	1	seeking	seek	VERB
ajis02-5323	596	2	qualitative	qualitative	ADJ
ajis02-5323	596	3	rigor	rigor	NOUN
ajis02-5323	596	4	in	in	ADP
ajis02-5323	596	5	inductive	inductive	ADJ
ajis02-5323	596	6	research	research	NOUN
ajis02-5323	596	7	:	:	PUNCT
ajis02-5323	596	8	notes	note	NOUN
ajis02-5323	596	9	on	on	ADP
ajis02-5323	596	10	the	the	DET
ajis02-5323	596	11	gioia	gioia	PROPN
ajis02-5323	596	12	methodology	methodology	NOUN
ajis02-5323	596	13	.	.	PUNCT
ajis02-5323	597	1	organizational	organizational	ADJ
ajis02-5323	597	2	research	research	NOUN
ajis02-5323	597	3	methods	method	NOUN
ajis02-5323	597	4	,	,	PUNCT
ajis02-5323	597	5	16(1	16(1	NUM
ajis02-5323	597	6	)	)	PUNCT
ajis02-5323	597	7	,	,	PUNCT
ajis02-5323	597	8	15–31	15–31	NUM
ajis02-5323	597	9	.	.	PUNCT
ajis02-5323	598	1	doi.org/10.1177/1094428112452151	doi.org/10.1177/1094428112452151	NOUN
ajis02-5323	598	2	giunipero	giunipero	NOUN
ajis02-5323	598	3	,	,	PUNCT
ajis02-5323	598	4	l.	l.	PROPN
ajis02-5323	598	5	,	,	PUNCT
ajis02-5323	598	6	&	&	CCONJ
ajis02-5323	598	7	eltantawy	eltantawy	PROPN
ajis02-5323	598	8	,	,	PUNCT
ajis02-5323	598	9	r.	r.	PROPN
ajis02-5323	598	10	(	(	PUNCT
ajis02-5323	598	11	2004	2004	NUM
ajis02-5323	598	12	)	)	PUNCT
ajis02-5323	598	13	.	.	PUNCT
ajis02-5323	599	1	securing	secure	VERB
ajis02-5323	599	2	the	the	DET
ajis02-5323	599	3	upstream	upstream	ADJ
ajis02-5323	599	4	supply	supply	NOUN
ajis02-5323	599	5	chain	chain	NOUN
ajis02-5323	599	6	:	:	PUNCT
ajis02-5323	599	7	a	a	DET
ajis02-5323	599	8	risk	risk	NOUN
ajis02-5323	599	9	management	management	NOUN
ajis02-5323	599	10	approach	approach	NOUN
ajis02-5323	599	11	.	.	PUNCT
ajis02-5323	600	1	international	international	ADJ
ajis02-5323	600	2	journal	journal	PROPN
ajis02-5323	600	3	of	of	ADP
ajis02-5323	600	4	physical	physical	ADJ
ajis02-5323	600	5	distribution	distribution	NOUN
ajis02-5323	600	6	&	&	CCONJ
ajis02-5323	600	7	logistics	logistic	NOUN
ajis02-5323	600	8	management	management	NOUN
ajis02-5323	600	9	,	,	PUNCT
ajis02-5323	600	10	34	34	NUM
ajis02-5323	600	11	,	,	PUNCT
ajis02-5323	600	12	698	698	NUM
ajis02-5323	600	13	–	–	PUNCT
ajis02-5323	600	14	713	713	NUM
ajis02-5323	600	15	.	.	PUNCT
ajis02-5323	601	1	doi.org/10.1108/09600030410567478	doi.org/10.1108/09600030410567478	PROPN
ajis02-5323	601	2	glaser	glaser	PROPN
ajis02-5323	601	3	,	,	PUNCT
ajis02-5323	601	4	b.	b.	PROPN
ajis02-5323	601	5	,	,	PUNCT
ajis02-5323	601	6	&	&	CCONJ
ajis02-5323	601	7	strauss	strauss	PROPN
ajis02-5323	601	8	,	,	PUNCT
ajis02-5323	601	9	a.	a.	NOUN
ajis02-5323	601	10	(	(	PUNCT
ajis02-5323	601	11	2017	2017	NUM
ajis02-5323	601	12	)	)	PUNCT
ajis02-5323	601	13	.	.	PUNCT
ajis02-5323	602	1	discovery	discovery	NOUN
ajis02-5323	602	2	of	of	ADP
ajis02-5323	602	3	grounded	ground	VERB
ajis02-5323	602	4	theory	theory	NOUN
ajis02-5323	602	5	:	:	PUNCT
ajis02-5323	602	6	strategies	strategy	NOUN
ajis02-5323	602	7	for	for	ADP
ajis02-5323	602	8	qualitative	qualitative	ADJ
ajis02-5323	602	9	research	research	NOUN
ajis02-5323	602	10	.	.	PUNCT
ajis02-5323	603	1	routledge	routledge	PROPN
ajis02-5323	603	2	.	.	PUNCT
ajis02-5323	604	1	gregor	gregor	PROPN
ajis02-5323	604	2	,	,	PUNCT
ajis02-5323	604	3	s.	s.	PROPN
ajis02-5323	604	4	(	(	PUNCT
ajis02-5323	604	5	2006	2006	NUM
ajis02-5323	604	6	)	)	PUNCT
ajis02-5323	604	7	.	.	PUNCT
ajis02-5323	605	1	the	the	DET
ajis02-5323	605	2	nature	nature	NOUN
ajis02-5323	605	3	of	of	ADP
ajis02-5323	605	4	theory	theory	NOUN
ajis02-5323	605	5	in	in	ADP
ajis02-5323	605	6	information	information	NOUN
ajis02-5323	605	7	systems	system	NOUN
ajis02-5323	605	8	.	.	PUNCT
ajis02-5323	606	1	mis	mis	PROPN
ajis02-5323	606	2	quarterly	quarterly	PROPN
ajis02-5323	606	3	,	,	PUNCT
ajis02-5323	606	4	30(3	30(3	NUM
ajis02-5323	606	5	)	)	PUNCT
ajis02-5323	606	6	,	,	PUNCT
ajis02-5323	606	7	611–642	611–642	NUM
ajis02-5323	606	8	.	.	PUNCT
ajis02-5323	607	1	doi.org/10.2307/25148742	doi.org/10.2307/25148742	PROPN
ajis02-5323	607	2	hao	hao	PROPN
ajis02-5323	607	3	,	,	PUNCT
ajis02-5323	607	4	j.	j.	PROPN
ajis02-5323	607	5	,	,	PUNCT
ajis02-5323	607	6	&	&	CCONJ
ajis02-5323	607	7	cai	cai	PROPN
ajis02-5323	607	8	,	,	PUNCT
ajis02-5323	607	9	w.	w.	PROPN
ajis02-5323	607	10	(	(	PUNCT
ajis02-5323	607	11	2011	2011	NUM
ajis02-5323	607	12	)	)	PUNCT
ajis02-5323	607	13	.	.	PUNCT
ajis02-5323	607	14	trusted	trust	VERB
ajis02-5323	607	15	block	block	NOUN
ajis02-5323	607	16	as	as	ADP
ajis02-5323	607	17	a	a	DET
ajis02-5323	607	18	service	service	NOUN
ajis02-5323	607	19	:	:	PUNCT
ajis02-5323	607	20	towards	towards	ADP
ajis02-5323	607	21	sensitive	sensitive	ADJ
ajis02-5323	607	22	applications	application	NOUN
ajis02-5323	607	23	on	on	ADP
ajis02-5323	607	24	the	the	DET
ajis02-5323	607	25	cloud	cloud	NOUN
ajis02-5323	607	26	.	.	PUNCT
ajis02-5323	608	1	in	in	ADP
ajis02-5323	608	2	2011	2011	NUM
ajis02-5323	608	3	ieee	ieee	NOUN
ajis02-5323	608	4	10th	10th	ADJ
ajis02-5323	608	5	international	international	ADJ
ajis02-5323	608	6	conference	conference	NOUN
ajis02-5323	608	7	on	on	ADP
ajis02-5323	608	8	trust	trust	NOUN
ajis02-5323	608	9	,	,	PUNCT
ajis02-5323	608	10	security	security	NOUN
ajis02-5323	608	11	and	and	CCONJ
ajis02-5323	608	12	privacy	privacy	NOUN
ajis02-5323	608	13	in	in	ADP
ajis02-5323	608	14	computing	computing	NOUN
ajis02-5323	608	15	and	and	CCONJ
ajis02-5323	608	16	communications	communication	NOUN
ajis02-5323	608	17	(	(	PUNCT
ajis02-5323	608	18	pp	pp	ADJ
ajis02-5323	608	19	.	.	PUNCT
ajis02-5323	609	1	73–82	73–82	NUM
ajis02-5323	609	2	)	)	PUNCT
ajis02-5323	609	3	.	.	PUNCT
ajis02-5323	610	1	ieee	ieee	PROPN
ajis02-5323	610	2	.	.	PUNCT
ajis02-5323	610	3	doi.org/10.1109/trustcom.2011.13	doi.org/10.1109/trustcom.2011.13	PROPN
ajis02-5323	610	4	healthcare	healthcare	PROPN
ajis02-5323	610	5	&	&	CCONJ
ajis02-5323	610	6	public	public	ADJ
ajis02-5323	610	7	health	health	NOUN
ajis02-5323	610	8	sector	sector	NOUN
ajis02-5323	610	9	coordinating	coordinate	VERB
ajis02-5323	610	10	councils	council	NOUN
ajis02-5323	610	11	.	.	PUNCT
ajis02-5323	611	1	(	(	PUNCT
ajis02-5323	611	2	2019	2019	NUM
ajis02-5323	611	3	,	,	PUNCT
ajis02-5323	611	4	october	october	PROPN
ajis02-5323	611	5	)	)	PUNCT
ajis02-5323	611	6	.	.	PUNCT
ajis02-5323	612	1	healthcare	healthcare	PROPN
ajis02-5323	612	2	industry	industry	NOUN
ajis02-5323	612	3	cybersecurity	cybersecurity	NOUN
ajis02-5323	612	4	supply	supply	NOUN
ajis02-5323	612	5	chain	chain	NOUN
ajis02-5323	612	6	risk	risk	NOUN
ajis02-5323	612	7	management	management	NOUN
ajis02-5323	612	8	guide	guide	NOUN
ajis02-5323	612	9	.	.	PUNCT
ajis02-5323	613	1	private	private	ADJ
ajis02-5323	613	2	public	public	ADJ
ajis02-5323	613	3	partnership	partnership	NOUN
ajis02-5323	613	4	.	.	PUNCT
ajis02-5323	614	1	retrieved	retrieve	VERB
ajis02-5323	614	2	from	from	ADP
ajis02-5323	614	3	https://healthsectorcouncil.org/hic-scrim-v2/	https://healthsectorcouncil.org/hic-scrim-v2/	PROPN
ajis02-5323	614	4	australasian	australasian	ADJ
ajis02-5323	614	5	journal	journal	NOUN
ajis02-5323	614	6	of	of	ADP
ajis02-5323	614	7	information	information	NOUN
ajis02-5323	614	8	systems	system	NOUN
ajis02-5323	614	9	slapnicar	slapnicar	NOUN
ajis02-5323	614	10	,	,	PUNCT
ajis02-5323	614	11	vidmar	vidmar	NOUN
ajis02-5323	614	12	&	&	CCONJ
ajis02-5323	614	13	tsen	tsen	ADJ
ajis02-5323	614	14	2025	2025	NUM
ajis02-5323	614	15	,	,	PUNCT
ajis02-5323	614	16	vol	vol	NOUN
ajis02-5323	614	17	29	29	NUM
ajis02-5323	614	18	,	,	PUNCT
ajis02-5323	614	19	research	research	NOUN
ajis02-5323	614	20	article	article	NOUN
ajis02-5323	614	21	process	process	NOUN
ajis02-5323	614	22	theory	theory	NOUN
ajis02-5323	614	23	of	of	ADP
ajis02-5323	614	24	supplier	supplier	NOUN
ajis02-5323	614	25	cyber	cyber	NOUN
ajis02-5323	614	26	risk	risk	NOUN
ajis02-5323	614	27	assessment	assessment	NOUN
ajis02-5323	614	28	30	30	NUM
ajis02-5323	614	29	international	international	ADJ
ajis02-5323	614	30	organization	organization	NOUN
ajis02-5323	614	31	for	for	ADP
ajis02-5323	614	32	standardization	standardization	NOUN
ajis02-5323	614	33	&	&	CCONJ
ajis02-5323	614	34	international	international	ADJ
ajis02-5323	614	35	electrotechnical	electrotechnical	ADJ
ajis02-5323	614	36	commission	commission	NOUN
ajis02-5323	614	37	.	.	PUNCT
ajis02-5323	615	1	(	(	PUNCT
ajis02-5323	615	2	2021	2021	NUM
ajis02-5323	615	3	)	)	PUNCT
ajis02-5323	615	4	.	.	PUNCT
ajis02-5323	616	1	iso	iso	PROPN
ajis02-5323	616	2	/	/	SYM
ajis02-5323	616	3	iec	iec	PROPN
ajis02-5323	616	4	27036	27036	NUM
ajis02-5323	616	5	-	-	SYM
ajis02-5323	616	6	1	1	NUM
ajis02-5323	616	7	:	:	PUNCT
ajis02-5323	616	8	cybersecurity	cybersecurity	NOUN
ajis02-5323	616	9	—	—	PUNCT
ajis02-5323	616	10	supplier	supplier	NOUN
ajis02-5323	616	11	relationships	relationship	NOUN
ajis02-5323	616	12	part	part	NOUN
ajis02-5323	616	13	1	1	NUM
ajis02-5323	616	14	:	:	PUNCT
ajis02-5323	616	15	overview	overview	NOUN
ajis02-5323	616	16	and	and	CCONJ
ajis02-5323	616	17	concepts	concept	NOUN
ajis02-5323	616	18	.	.	PUNCT
ajis02-5323	617	1	international	international	ADJ
ajis02-5323	617	2	organization	organization	NOUN
ajis02-5323	617	3	for	for	ADP
ajis02-5323	617	4	standardization	standardization	NOUN
ajis02-5323	617	5	&	&	CCONJ
ajis02-5323	617	6	international	international	ADJ
ajis02-5323	617	7	electrotechnical	electrotechnical	ADJ
ajis02-5323	617	8	commission	commission	NOUN
ajis02-5323	617	9	.	.	PUNCT
ajis02-5323	618	1	(	(	PUNCT
ajis02-5323	618	2	2022	2022	NUM
ajis02-5323	618	3	)	)	PUNCT
ajis02-5323	618	4	.	.	PUNCT
ajis02-5323	619	1	iso	iso	PROPN
ajis02-5323	619	2	/	/	SYM
ajis02-5323	619	3	iec	iec	PROPN
ajis02-5323	619	4	27036	27036	NUM
ajis02-5323	619	5	-	-	SYM
ajis02-5323	619	6	2	2	NUM
ajis02-5323	619	7	:	:	PUNCT
ajis02-5323	619	8	cybersecurity	cybersecurity	NOUN
ajis02-5323	619	9	—	—	PUNCT
ajis02-5323	619	10	supplier	supplier	NOUN
ajis02-5323	619	11	relationships	relationship	NOUN
ajis02-5323	619	12	part	part	NOUN
ajis02-5323	619	13	2	2	NUM
ajis02-5323	619	14	:	:	PUNCT
ajis02-5323	619	15	requirements	requirement	NOUN
ajis02-5323	619	16	.	.	PUNCT
ajis02-5323	620	1	international	international	ADJ
ajis02-5323	620	2	organization	organization	NOUN
ajis02-5323	620	3	for	for	ADP
ajis02-5323	620	4	standardization	standardization	NOUN
ajis02-5323	620	5	&	&	CCONJ
ajis02-5323	620	6	international	international	ADJ
ajis02-5323	620	7	electrotechnical	electrotechnical	ADJ
ajis02-5323	620	8	commission	commission	NOUN
ajis02-5323	620	9	.	.	PUNCT
ajis02-5323	621	1	(	(	PUNCT
ajis02-5323	621	2	2023	2023	NUM
ajis02-5323	621	3	)	)	PUNCT
ajis02-5323	621	4	.	.	PUNCT
ajis02-5323	622	1	iso	iso	PROPN
ajis02-5323	622	2	/	/	SYM
ajis02-5323	622	3	iec	iec	PROPN
ajis02-5323	622	4	27036	27036	NUM
ajis02-5323	622	5	-	-	SYM
ajis02-5323	622	6	3	3	NUM
ajis02-5323	622	7	:	:	PUNCT
ajis02-5323	622	8	cybersecurity	cybersecurity	NOUN
ajis02-5323	622	9	—	—	PUNCT
ajis02-5323	622	10	supplier	supplier	NOUN
ajis02-5323	622	11	relationships	relationship	NOUN
ajis02-5323	622	12	part	part	NOUN
ajis02-5323	622	13	3	3	NUM
ajis02-5323	622	14	:	:	PUNCT
ajis02-5323	622	15	guidelines	guideline	NOUN
ajis02-5323	622	16	for	for	ADP
ajis02-5323	622	17	information	information	NOUN
ajis02-5323	622	18	and	and	CCONJ
ajis02-5323	622	19	communication	communication	NOUN
ajis02-5323	622	20	technology	technology	NOUN
ajis02-5323	622	21	supply	supply	NOUN
ajis02-5323	622	22	chain	chain	NOUN
ajis02-5323	622	23	security	security	NOUN
ajis02-5323	622	24	.	.	PUNCT
ajis02-5323	623	1	iovan	iovan	PROPN
ajis02-5323	623	2	,	,	PUNCT
ajis02-5323	623	3	ş	ş	X
ajis02-5323	623	4	.	.	PROPN
ajis02-5323	623	5	,	,	PUNCT
ajis02-5323	623	6	&	&	CCONJ
ajis02-5323	623	7	iovan	iovan	PROPN
ajis02-5323	623	8	,	,	PUNCT
ajis02-5323	623	9	a.	a.	NOUN
ajis02-5323	623	10	a.	a.	NOUN
ajis02-5323	623	11	(	(	PUNCT
ajis02-5323	623	12	2016	2016	NUM
ajis02-5323	623	13	)	)	PUNCT
ajis02-5323	623	14	.	.	PUNCT
ajis02-5323	624	1	cloud	cloud	NOUN
ajis02-5323	624	2	computing	compute	VERB
ajis02-5323	624	3	security	security	NOUN
ajis02-5323	624	4	.	.	PUNCT
ajis02-5323	624	5	fiability	fiability	NOUN
ajis02-5323	624	6	&	&	CCONJ
ajis02-5323	624	7	durability	durability	NOUN
ajis02-5323	624	8	/	/	SYM
ajis02-5323	624	9	fiabilitate	fiabilitate	ADJ
ajis02-5323	624	10	si	si	NOUN
ajis02-5323	624	11	durabilitate	durabilitate	NOUN
ajis02-5323	624	12	,	,	PUNCT
ajis02-5323	624	13	(	(	PUNCT
ajis02-5323	624	14	1	1	NUM
ajis02-5323	624	15	)	)	PUNCT
ajis02-5323	624	16	,	,	PUNCT
ajis02-5323	624	17	1(suppl.1	1(suppl.1	NUM
ajis02-5323	624	18	)	)	PUNCT
ajis02-5323	624	19	,	,	PUNCT
ajis02-5323	624	20	206	206	NUM
ajis02-5323	624	21	-	-	SYM
ajis02-5323	624	22	212	212	NUM
ajis02-5323	624	23	.	.	PUNCT
ajis02-5323	624	24	isaca	isaca	PROPN
ajis02-5323	624	25	.	.	PUNCT
ajis02-5323	625	1	(	(	PUNCT
ajis02-5323	625	2	2018	2018	NUM
ajis02-5323	625	3	)	)	PUNCT
ajis02-5323	625	4	.	.	PUNCT
ajis02-5323	626	1	control	control	NOUN
ajis02-5323	626	2	objectives	objective	NOUN
ajis02-5323	626	3	for	for	ADP
ajis02-5323	626	4	information	information	NOUN
ajis02-5323	626	5	and	and	CCONJ
ajis02-5323	626	6	related	related	ADJ
ajis02-5323	626	7	technologies	technology	NOUN
ajis02-5323	626	8	cobit	cobit	VERB
ajis02-5323	626	9	2019	2019	NUM
ajis02-5323	626	10	.	.	PUNCT
ajis02-5323	627	1	retrieved	retrieve	VERB
ajis02-5323	627	2	from	from	ADP
ajis02-5323	627	3	https://netmarket.oss.aliyuncs.com/df5c71cb-f91a-4bf8-85a6-991e1c2c0a3e.pdf	https://netmarket.oss.aliyuncs.com/df5c71cb-f91a-4bf8-85a6-991e1c2c0a3e.pdf	PROPN
ajis02-5323	627	4	khan	khan	PROPN
ajis02-5323	627	5	o	o	PROPN
ajis02-5323	627	6	,	,	PUNCT
ajis02-5323	627	7	estay	estay	PROPN
ajis02-5323	627	8	s.	s.	PROPN
ajis02-5323	627	9	d.	d.	PROPN
ajis02-5323	627	10	(	(	PUNCT
ajis02-5323	627	11	2015	2015	NUM
ajis02-5323	627	12	)	)	PUNCT
ajis02-5323	627	13	.	.	PUNCT
ajis02-5323	628	1	supply	supply	NOUN
ajis02-5323	628	2	chain	chain	NOUN
ajis02-5323	628	3	cyber	cyber	NOUN
ajis02-5323	628	4	-	-	PUNCT
ajis02-5323	628	5	resilience	resilience	NOUN
ajis02-5323	628	6	:	:	PUNCT
ajis02-5323	628	7	creating	create	VERB
ajis02-5323	628	8	an	an	DET
ajis02-5323	628	9	agenda	agenda	NOUN
ajis02-5323	628	10	for	for	ADP
ajis02-5323	628	11	future	future	ADJ
ajis02-5323	628	12	research	research	NOUN
ajis02-5323	628	13	.	.	PUNCT
ajis02-5323	629	1	technology	technology	NOUN
ajis02-5323	629	2	innovation	innovation	NOUN
ajis02-5323	629	3	management	management	NOUN
ajis02-5323	629	4	review	review	NOUN
ajis02-5323	629	5	.	.	PUNCT
ajis02-5323	630	1	5,6–12	5,6–12	NUM
ajis02-5323	630	2	.	.	PUNCT
ajis02-5323	631	1	doi.org/10.22215/timreview/885	doi.org/10.22215/timreview/885	PROPN
ajis02-5323	631	2	keskin	keskin	PROPN
ajis02-5323	631	3	,	,	PUNCT
ajis02-5323	631	4	o.	o.	PROPN
ajis02-5323	631	5	f.	f.	PROPN
ajis02-5323	631	6	,	,	PUNCT
ajis02-5323	631	7	caramancion	caramancion	PROPN
ajis02-5323	631	8	,	,	PUNCT
ajis02-5323	631	9	k.	k.	PROPN
ajis02-5323	631	10	m.	m.	PROPN
ajis02-5323	631	11	,	,	PUNCT
ajis02-5323	631	12	tatar	tatar	NOUN
ajis02-5323	631	13	,	,	PUNCT
ajis02-5323	631	14	i.	i.	PROPN
ajis02-5323	631	15	,	,	PUNCT
ajis02-5323	631	16	raza	raza	PROPN
ajis02-5323	631	17	,	,	PUNCT
ajis02-5323	631	18	o.	o.	PROPN
ajis02-5323	631	19	,	,	PUNCT
ajis02-5323	631	20	&	&	CCONJ
ajis02-5323	631	21	tatar	tatar	PROPN
ajis02-5323	631	22	,	,	PUNCT
ajis02-5323	631	23	u.	u.	NOUN
ajis02-5323	631	24	(	(	PUNCT
ajis02-5323	631	25	2021	2021	NUM
ajis02-5323	631	26	)	)	PUNCT
ajis02-5323	631	27	.	.	PUNCT
ajis02-5323	632	1	cyber	cyber	PROPN
ajis02-5323	632	2	third	third	ADJ
ajis02-5323	632	3	-	-	PUNCT
ajis02-5323	632	4	party	party	NOUN
ajis02-5323	632	5	risk	risk	NOUN
ajis02-5323	632	6	management	management	NOUN
ajis02-5323	632	7	:	:	PUNCT
ajis02-5323	632	8	a	a	DET
ajis02-5323	632	9	comparison	comparison	NOUN
ajis02-5323	632	10	of	of	ADP
ajis02-5323	632	11	non	non	ADJ
ajis02-5323	632	12	-	-	ADJ
ajis02-5323	632	13	intrusive	intrusive	ADJ
ajis02-5323	632	14	risk	risk	NOUN
ajis02-5323	632	15	scoring	scoring	NOUN
ajis02-5323	632	16	reports	report	NOUN
ajis02-5323	632	17	.	.	PUNCT
ajis02-5323	633	1	electronics	electronic	NOUN
ajis02-5323	633	2	,	,	PUNCT
ajis02-5323	633	3	10(10	10(10	NUM
ajis02-5323	633	4	)	)	PUNCT
ajis02-5323	633	5	,	,	PUNCT
ajis02-5323	633	6	1168	1168	NUM
ajis02-5323	633	7	.	.	PUNCT
ajis02-5323	634	1	doi.org/10.3390/electronics10101168	doi.org/10.3390/electronics10101168	PROPN
ajis02-5323	634	2	kweon	kweon	PROPN
ajis02-5323	634	3	,	,	PUNCT
ajis02-5323	634	4	e.	e.	PROPN
ajis02-5323	634	5	,	,	PUNCT
ajis02-5323	634	6	lee	lee	PROPN
ajis02-5323	634	7	,	,	PUNCT
ajis02-5323	634	8	h.	h.	PROPN
ajis02-5323	634	9	,	,	PUNCT
ajis02-5323	634	10	chai	chai	NOUN
ajis02-5323	634	11	,	,	PUNCT
ajis02-5323	634	12	s.	s.	PROPN
ajis02-5323	634	13	,	,	PUNCT
ajis02-5323	634	14	&	&	CCONJ
ajis02-5323	634	15	yoo	yoo	PROPN
ajis02-5323	634	16	,	,	PUNCT
ajis02-5323	634	17	k.	k.	PROPN
ajis02-5323	634	18	(	(	PUNCT
ajis02-5323	634	19	2021	2021	NUM
ajis02-5323	634	20	)	)	PUNCT
ajis02-5323	634	21	.	.	PUNCT
ajis02-5323	635	1	the	the	DET
ajis02-5323	635	2	utility	utility	NOUN
ajis02-5323	635	3	of	of	ADP
ajis02-5323	635	4	information	information	NOUN
ajis02-5323	635	5	security	security	NOUN
ajis02-5323	635	6	training	training	NOUN
ajis02-5323	635	7	and	and	CCONJ
ajis02-5323	635	8	education	education	NOUN
ajis02-5323	635	9	on	on	ADP
ajis02-5323	635	10	cybersecurity	cybersecurity	NOUN
ajis02-5323	635	11	incidents	incident	NOUN
ajis02-5323	635	12	:	:	PUNCT
ajis02-5323	635	13	an	an	DET
ajis02-5323	635	14	empirical	empirical	ADJ
ajis02-5323	635	15	evidence	evidence	NOUN
ajis02-5323	635	16	.	.	PUNCT
ajis02-5323	636	1	information	information	NOUN
ajis02-5323	636	2	systems	system	NOUN
ajis02-5323	636	3	frontiers	frontier	NOUN
ajis02-5323	636	4	,	,	PUNCT
ajis02-5323	636	5	23	23	NUM
ajis02-5323	636	6	,	,	PUNCT
ajis02-5323	636	7	1–13	1–13	NOUN
ajis02-5323	636	8	.	.	PUNCT
ajis02-5323	637	1	doi.org/10.1007/s10796-019-09977-z	doi.org/10.1007/s10796-019-09977-z	X
ajis02-5323	637	2	langley	langley	PROPN
ajis02-5323	637	3	,	,	PUNCT
ajis02-5323	637	4	a.	a.	NOUN
ajis02-5323	637	5	(	(	PUNCT
ajis02-5323	637	6	1999	1999	NUM
ajis02-5323	637	7	)	)	PUNCT
ajis02-5323	637	8	.	.	PUNCT
ajis02-5323	638	1	strategies	strategy	NOUN
ajis02-5323	638	2	for	for	ADP
ajis02-5323	638	3	theorizing	theorize	VERB
ajis02-5323	638	4	from	from	ADP
ajis02-5323	638	5	process	process	NOUN
ajis02-5323	638	6	data	datum	NOUN
ajis02-5323	638	7	.	.	PUNCT
ajis02-5323	639	1	academy	academy	PROPN
ajis02-5323	639	2	of	of	ADP
ajis02-5323	639	3	management	management	PROPN
ajis02-5323	639	4	review	review	PROPN
ajis02-5323	639	5	,	,	PUNCT
ajis02-5323	639	6	24(4	24(4	NUM
ajis02-5323	639	7	)	)	PUNCT
ajis02-5323	639	8	,	,	PUNCT
ajis02-5323	639	9	691–710	691–710	NUM
ajis02-5323	639	10	.	.	PUNCT
ajis02-5323	640	1	doi.org/10.5465/amr.1999.2553248	doi.org/10.5465/amr.1999.2553248	PROPN
ajis02-5323	640	2	lewis	lewis	PROPN
ajis02-5323	640	3	,	,	PUNCT
ajis02-5323	640	4	r.	r.	PROPN
ajis02-5323	640	5	,	,	PUNCT
ajis02-5323	640	6	louvieris	louvieris	NOUN
ajis02-5323	640	7	,	,	PUNCT
ajis02-5323	640	8	p.	p.	PROPN
ajis02-5323	640	9	,	,	PUNCT
ajis02-5323	640	10	abbott	abbott	PROPN
ajis02-5323	640	11	,	,	PUNCT
ajis02-5323	640	12	p.	p.	PROPN
ajis02-5323	640	13	,	,	PUNCT
ajis02-5323	640	14	clewley	clewley	PROPN
ajis02-5323	640	15	,	,	PUNCT
ajis02-5323	640	16	n.	n.	NOUN
ajis02-5323	640	17	,	,	PUNCT
ajis02-5323	640	18	&	&	CCONJ
ajis02-5323	640	19	jones	jones	PROPN
ajis02-5323	640	20	,	,	PUNCT
ajis02-5323	640	21	k.	k.	PROPN
ajis02-5323	640	22	(	(	PUNCT
ajis02-5323	640	23	2014	2014	NUM
ajis02-5323	640	24	)	)	PUNCT
ajis02-5323	640	25	.	.	PUNCT
ajis02-5323	641	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	641	2	information	information	NOUN
ajis02-5323	641	3	sharing	sharing	NOUN
ajis02-5323	641	4	:	:	PUNCT
ajis02-5323	641	5	a	a	DET
ajis02-5323	641	6	framework	framework	NOUN
ajis02-5323	641	7	for	for	ADP
ajis02-5323	641	8	information	information	NOUN
ajis02-5323	641	9	security	security	NOUN
ajis02-5323	641	10	management	management	NOUN
ajis02-5323	641	11	in	in	ADP
ajis02-5323	641	12	uk	uk	PROPN
ajis02-5323	641	13	sme	sme	PROPN
ajis02-5323	641	14	supply	supply	NOUN
ajis02-5323	641	15	chains	chain	NOUN
ajis02-5323	641	16	.	.	PUNCT
ajis02-5323	642	1	li	li	PROPN
ajis02-5323	642	2	,	,	PUNCT
ajis02-5323	642	3	f.	f.	PROPN
ajis02-5323	642	4	(	(	PUNCT
ajis02-5323	642	5	2024	2024	NUM
ajis02-5323	642	6	,	,	PUNCT
ajis02-5323	642	7	july	july	PROPN
ajis02-5323	642	8	24	24	NUM
ajis02-5323	642	9	)	)	PUNCT
ajis02-5323	642	10	.	.	PUNCT
ajis02-5323	643	1	microsoft	microsoft	PROPN
ajis02-5323	643	2	-	-	PUNCT
ajis02-5323	643	3	crowdstrike	crowdstrike	PROPN
ajis02-5323	643	4	outage	outage	NOUN
ajis02-5323	643	5	:	:	PUNCT
ajis02-5323	643	6	how	how	SCONJ
ajis02-5323	643	7	a	a	DET
ajis02-5323	643	8	single	single	ADJ
ajis02-5323	643	9	software	software	NOUN
ajis02-5323	643	10	update	update	NOUN
ajis02-5323	643	11	was	be	AUX
ajis02-5323	643	12	able	able	ADJ
ajis02-5323	643	13	to	to	PART
ajis02-5323	643	14	cause	cause	VERB
ajis02-5323	643	15	it	it	PRON
ajis02-5323	643	16	chaos	chaos	VERB
ajis02-5323	643	17	across	across	ADP
ajis02-5323	643	18	the	the	DET
ajis02-5323	643	19	globe	globe	NOUN
ajis02-5323	643	20	.	.	PUNCT
ajis02-5323	644	1	the	the	DET
ajis02-5323	644	2	conversation	conversation	NOUN
ajis02-5323	644	3	.	.	PUNCT
ajis02-5323	645	1	retrieved	retrieve	VERB
ajis02-5323	645	2	from	from	ADP
ajis02-5323	645	3	https://theconversation.com/microsoft-crowdstrike-outage-how-a-single-softwareupdate-was-able-to-cause-it-chaos-across-the-globe-235165	https://theconversation.com/microsoft-crowdstrike-outage-how-a-single-softwareupdate-was-able-to-cause-it-chaos-across-the-globe-235165	PROPN
ajis02-5323	645	4	lin	lin	PROPN
ajis02-5323	645	5	,	,	PUNCT
ajis02-5323	645	6	w.	w.	PROPN
ajis02-5323	645	7	c.	c.	PROPN
ajis02-5323	645	8	,	,	PUNCT
ajis02-5323	645	9	and	and	CCONJ
ajis02-5323	645	10	saebeler	saebeler	NOUN
ajis02-5323	645	11	,	,	PUNCT
ajis02-5323	645	12	d.	d.	PROPN
ajis02-5323	645	13	(	(	PUNCT
ajis02-5323	645	14	2019	2019	NUM
ajis02-5323	645	15	)	)	PUNCT
ajis02-5323	645	16	.	.	PUNCT
ajis02-5323	646	1	risk	risk	NOUN
ajis02-5323	646	2	-	-	PUNCT
ajis02-5323	646	3	based	base	VERB
ajis02-5323	646	4	v.	v.	ADP
ajis02-5323	646	5	compliance	compliance	NOUN
ajis02-5323	646	6	-	-	PUNCT
ajis02-5323	646	7	based	base	VERB
ajis02-5323	646	8	utility	utility	NOUN
ajis02-5323	646	9	cybersecurity	cybersecurity	NOUN
ajis02-5323	646	10	a	a	DET
ajis02-5323	646	11	false	false	ADJ
ajis02-5323	646	12	dichotomy	dichotomy	NOUN
ajis02-5323	646	13	?	?	PUNCT
ajis02-5323	647	1	energy	energy	NOUN
ajis02-5323	647	2	law	law	NOUN
ajis02-5323	647	3	journal	journal	NOUN
ajis02-5323	647	4	,	,	PUNCT
ajis02-5323	647	5	40(2	40(2	NUM
ajis02-5323	647	6	)	)	PUNCT
ajis02-5323	647	7	,	,	PUNCT
ajis02-5323	647	8	243–282	243–282	NUM
ajis02-5323	647	9	.	.	PUNCT
ajis02-5323	648	1	linton	linton	PROPN
ajis02-5323	648	2	,	,	PUNCT
ajis02-5323	648	3	j.	j.	PROPN
ajis02-5323	648	4	d.	d.	PROPN
ajis02-5323	648	5	,	,	PUNCT
ajis02-5323	648	6	boyson	boyson	PROPN
ajis02-5323	648	7	,	,	PUNCT
ajis02-5323	648	8	s.	s.	PROPN
ajis02-5323	648	9	,	,	PUNCT
ajis02-5323	648	10	&	&	CCONJ
ajis02-5323	648	11	aje	aje	PROPN
ajis02-5323	648	12	,	,	PUNCT
ajis02-5323	648	13	j.	j.	PROPN
ajis02-5323	648	14	(	(	PUNCT
ajis02-5323	648	15	2014	2014	NUM
ajis02-5323	648	16	)	)	PUNCT
ajis02-5323	648	17	.	.	PUNCT
ajis02-5323	649	1	the	the	DET
ajis02-5323	649	2	challenge	challenge	NOUN
ajis02-5323	649	3	of	of	ADP
ajis02-5323	649	4	cyber	cyber	NOUN
ajis02-5323	649	5	supply	supply	NOUN
ajis02-5323	649	6	chain	chain	NOUN
ajis02-5323	649	7	security	security	NOUN
ajis02-5323	649	8	to	to	ADP
ajis02-5323	649	9	research	research	NOUN
ajis02-5323	649	10	and	and	CCONJ
ajis02-5323	649	11	practice	practice	NOUN
ajis02-5323	649	12	–	–	PUNCT
ajis02-5323	649	13	an	an	DET
ajis02-5323	649	14	introduction	introduction	NOUN
ajis02-5323	649	15	.	.	PUNCT
ajis02-5323	650	1	technovation	technovation	NOUN
ajis02-5323	650	2	,	,	PUNCT
ajis02-5323	650	3	34(7	34(7	NUM
ajis02-5323	650	4	)	)	PUNCT
ajis02-5323	650	5	,	,	PUNCT
ajis02-5323	650	6	339–341	339–341	NUM
ajis02-5323	650	7	.	.	PUNCT
ajis02-5323	651	1	doi.org/10.1016/j.technovation.2014.05.001	doi.org/10.1016/j.technovation.2014.05.001	PROPN
ajis02-5323	651	2	liu	liu	PROPN
ajis02-5323	651	3	,	,	PUNCT
ajis02-5323	651	4	c.	c.	PROPN
ajis02-5323	651	5	w.	w.	PROPN
ajis02-5323	651	6	,	,	PUNCT
ajis02-5323	651	7	huang	huang	PROPN
ajis02-5323	651	8	,	,	PUNCT
ajis02-5323	651	9	p.	p.	PROPN
ajis02-5323	651	10	,	,	PUNCT
ajis02-5323	651	11	&	&	CCONJ
ajis02-5323	651	12	lucas	lucas	PROPN
ajis02-5323	651	13	,	,	PUNCT
ajis02-5323	651	14	h.	h.	PROPN
ajis02-5323	651	15	(	(	PUNCT
ajis02-5323	651	16	2020	2020	NUM
ajis02-5323	651	17	)	)	PUNCT
ajis02-5323	651	18	.	.	PUNCT
ajis02-5323	652	1	centralized	centralize	VERB
ajis02-5323	652	2	it	it	PRON
ajis02-5323	652	3	decision	decision	NOUN
ajis02-5323	652	4	making	making	NOUN
ajis02-5323	652	5	and	and	CCONJ
ajis02-5323	652	6	cybersecurity	cybersecurity	NOUN
ajis02-5323	652	7	breaches	breach	NOUN
ajis02-5323	652	8	:	:	PUNCT
ajis02-5323	652	9	evidence	evidence	NOUN
ajis02-5323	652	10	from	from	ADP
ajis02-5323	652	11	u.s	u.s	PROPN
ajis02-5323	652	12	.	.	PROPN
ajis02-5323	652	13	higher	high	ADJ
ajis02-5323	652	14	education	education	NOUN
ajis02-5323	652	15	institutions	institution	NOUN
ajis02-5323	652	16	.	.	PUNCT
ajis02-5323	653	1	journal	journal	PROPN
ajis02-5323	653	2	of	of	ADP
ajis02-5323	653	3	management	management	NOUN
ajis02-5323	653	4	information	information	NOUN
ajis02-5323	653	5	systems	system	NOUN
ajis02-5323	653	6	,	,	PUNCT
ajis02-5323	653	7	37	37	NUM
ajis02-5323	653	8	,	,	PUNCT
ajis02-5323	653	9	758–787	758–787	NUM
ajis02-5323	653	10	.	.	PUNCT
ajis02-5323	654	1	doi.org/10.1080/07421222.2020.1790190	doi.org/10.1080/07421222.2020.1790190	NOUN
ajis02-5323	654	2	markus	marku	NOUN
ajis02-5323	654	3	,	,	PUNCT
ajis02-5323	654	4	m.	m.	NOUN
ajis02-5323	654	5	l.	l.	PROPN
ajis02-5323	654	6	,	,	PUNCT
ajis02-5323	654	7	&	&	CCONJ
ajis02-5323	654	8	robey	robey	PROPN
ajis02-5323	654	9	,	,	PUNCT
ajis02-5323	654	10	d.	d.	PROPN
ajis02-5323	654	11	(	(	PUNCT
ajis02-5323	654	12	1988	1988	NUM
ajis02-5323	654	13	)	)	PUNCT
ajis02-5323	654	14	.	.	PUNCT
ajis02-5323	655	1	information	information	NOUN
ajis02-5323	655	2	technology	technology	NOUN
ajis02-5323	655	3	and	and	CCONJ
ajis02-5323	655	4	organizational	organizational	ADJ
ajis02-5323	655	5	change	change	NOUN
ajis02-5323	655	6	:	:	PUNCT
ajis02-5323	655	7	causal	causal	ADJ
ajis02-5323	655	8	structure	structure	NOUN
ajis02-5323	655	9	in	in	ADP
ajis02-5323	655	10	theory	theory	NOUN
ajis02-5323	655	11	and	and	CCONJ
ajis02-5323	655	12	research	research	NOUN
ajis02-5323	655	13	.	.	PUNCT
ajis02-5323	656	1	management	management	NOUN
ajis02-5323	656	2	science	science	PROPN
ajis02-5323	656	3	,	,	PUNCT
ajis02-5323	656	4	34(5	34(5	PROPN
ajis02-5323	656	5	)	)	PUNCT
ajis02-5323	656	6	,	,	PUNCT
ajis02-5323	656	7	583–598	583–598	NUM
ajis02-5323	656	8	.	.	PUNCT
ajis02-5323	657	1	australasian	australasian	ADJ
ajis02-5323	657	2	journal	journal	NOUN
ajis02-5323	657	3	of	of	ADP
ajis02-5323	657	4	information	information	NOUN
ajis02-5323	657	5	systems	system	NOUN
ajis02-5323	657	6	slapnicar	slapnicar	NOUN
ajis02-5323	657	7	,	,	PUNCT
ajis02-5323	657	8	vidmar	vidmar	NOUN
ajis02-5323	657	9	&	&	CCONJ
ajis02-5323	657	10	tsen	tsen	ADJ
ajis02-5323	657	11	2025	2025	NUM
ajis02-5323	657	12	,	,	PUNCT
ajis02-5323	657	13	vol	vol	NOUN
ajis02-5323	657	14	29	29	NUM
ajis02-5323	657	15	,	,	PUNCT
ajis02-5323	657	16	research	research	NOUN
ajis02-5323	657	17	article	article	NOUN
ajis02-5323	657	18	process	process	NOUN
ajis02-5323	657	19	theory	theory	NOUN
ajis02-5323	657	20	of	of	ADP
ajis02-5323	657	21	supplier	supplier	NOUN
ajis02-5323	657	22	cyber	cyber	NOUN
ajis02-5323	657	23	risk	risk	NOUN
ajis02-5323	657	24	assessment	assessment	NOUN
ajis02-5323	657	25	31	31	NUM
ajis02-5323	657	26	miller	miller	PROPN
ajis02-5323	657	27	,	,	PUNCT
ajis02-5323	657	28	a.	a.	PROPN
ajis02-5323	657	29	r.	r.	PROPN
ajis02-5323	657	30	,	,	PUNCT
ajis02-5323	657	31	&	&	CCONJ
ajis02-5323	657	32	tucker	tucker	PROPN
ajis02-5323	657	33	,	,	PUNCT
ajis02-5323	657	34	c.	c.	PROPN
ajis02-5323	657	35	e.	e.	PROPN
ajis02-5323	657	36	(	(	PUNCT
ajis02-5323	657	37	2011	2011	NUM
ajis02-5323	657	38	)	)	PUNCT
ajis02-5323	657	39	.	.	PUNCT
ajis02-5323	658	1	encryption	encryption	NOUN
ajis02-5323	658	2	and	and	CCONJ
ajis02-5323	658	3	the	the	DET
ajis02-5323	658	4	loss	loss	NOUN
ajis02-5323	658	5	of	of	ADP
ajis02-5323	658	6	patient	patient	ADJ
ajis02-5323	658	7	data	datum	NOUN
ajis02-5323	658	8	.	.	PUNCT
ajis02-5323	659	1	journal	journal	PROPN
ajis02-5323	659	2	of	of	ADP
ajis02-5323	659	3	policy	policy	NOUN
ajis02-5323	659	4	analysis	analysis	NOUN
ajis02-5323	659	5	and	and	CCONJ
ajis02-5323	659	6	management	management	NOUN
ajis02-5323	659	7	,	,	PUNCT
ajis02-5323	659	8	30(3	30(3	NUM
ajis02-5323	659	9	)	)	PUNCT
ajis02-5323	659	10	,	,	PUNCT
ajis02-5323	659	11	534–556	534–556	NUM
ajis02-5323	659	12	.	.	PUNCT
ajis02-5323	659	13	doi.org/10.1002/pam.20590	doi.org/10.1002/pam.20590	PROPN
ajis02-5323	659	14	mohr	mohr	PROPN
ajis02-5323	659	15	,	,	PUNCT
ajis02-5323	659	16	l.	l.	PROPN
ajis02-5323	659	17	b.	b.	PROPN
ajis02-5323	659	18	(	(	PUNCT
ajis02-5323	659	19	1982	1982	NUM
ajis02-5323	659	20	)	)	PUNCT
ajis02-5323	659	21	.	.	PUNCT
ajis02-5323	660	1	explaining	explain	VERB
ajis02-5323	660	2	organizational	organizational	ADJ
ajis02-5323	660	3	behavior	behavior	NOUN
ajis02-5323	660	4	.	.	PUNCT
ajis02-5323	661	1	san	san	PROPN
ajis02-5323	661	2	francisco	francisco	PROPN
ajis02-5323	661	3	,	,	PUNCT
ajis02-5323	661	4	ca	ca	NOUN
ajis02-5323	661	5	:	:	PUNCT
ajis02-5323	661	6	jossey	jossey	NOUN
ajis02-5323	661	7	-	-	PUNCT
ajis02-5323	661	8	bass	bass	NOUN
ajis02-5323	661	9	.	.	PUNCT
ajis02-5323	662	1	monev	monev	PROPN
ajis02-5323	662	2	,	,	PUNCT
ajis02-5323	662	3	v.	v.	PROPN
ajis02-5323	662	4	(	(	PUNCT
ajis02-5323	662	5	2021	2021	NUM
ajis02-5323	662	6	)	)	PUNCT
ajis02-5323	662	7	.	.	PUNCT
ajis02-5323	663	1	the	the	DET
ajis02-5323	663	2	‘	'	PUNCT
ajis02-5323	663	3	self	self	NOUN
ajis02-5323	663	4	-	-	PUNCT
ajis02-5323	663	5	assessment	assessment	NOUN
ajis02-5323	663	6	’	'	PUNCT
ajis02-5323	663	7	method	method	NOUN
ajis02-5323	663	8	within	within	ADP
ajis02-5323	663	9	a	a	DET
ajis02-5323	663	10	mature	mature	ADJ
ajis02-5323	663	11	third	third	ADJ
ajis02-5323	663	12	-	-	PUNCT
ajis02-5323	663	13	party	party	NOUN
ajis02-5323	663	14	risk	risk	NOUN
ajis02-5323	663	15	management	management	NOUN
ajis02-5323	663	16	process	process	NOUN
ajis02-5323	663	17	in	in	ADP
ajis02-5323	663	18	the	the	DET
ajis02-5323	663	19	context	context	NOUN
ajis02-5323	663	20	of	of	ADP
ajis02-5323	663	21	information	information	NOUN
ajis02-5323	663	22	security	security	NOUN
ajis02-5323	663	23	.	.	PUNCT
ajis02-5323	664	1	2021	2021	NUM
ajis02-5323	664	2	ieee	ieee	NOUN
ajis02-5323	664	3	xx	xx	NUM
ajis02-5323	664	4	international	international	ADJ
ajis02-5323	664	5	scientific	scientific	ADJ
ajis02-5323	664	6	and	and	CCONJ
ajis02-5323	664	7	technical	technical	ADJ
ajis02-5323	664	8	conference	conference	NOUN
ajis02-5323	664	9	(	(	PUNCT
ajis02-5323	664	10	infotech	infotech	PROPN
ajis02-5323	664	11	)	)	PUNCT
ajis02-5323	664	12	.	.	PUNCT
ajis02-5323	665	1	doi.org/10.1109/infotech52438.2021.9548373	doi.org/10.1109/infotech52438.2021.9548373	VERB
ajis02-5323	665	2	national	national	PROPN
ajis02-5323	665	3	institute	institute	PROPN
ajis02-5323	665	4	of	of	ADP
ajis02-5323	665	5	standards	standard	NOUN
ajis02-5323	665	6	and	and	CCONJ
ajis02-5323	665	7	technology	technology	NOUN
ajis02-5323	665	8	.	.	PUNCT
ajis02-5323	666	1	(	(	PUNCT
ajis02-5323	666	2	2020	2020	NUM
ajis02-5323	666	3	)	)	PUNCT
ajis02-5323	666	4	.	.	PUNCT
ajis02-5323	667	1	sp-800	sp-800	NOUN
ajis02-5323	667	2	-	-	PUNCT
ajis02-5323	667	3	53r5	53r5	NUM
ajis02-5323	667	4	:	:	PUNCT
ajis02-5323	667	5	security	security	NOUN
ajis02-5323	667	6	and	and	CCONJ
ajis02-5323	667	7	privacy	privacy	NOUN
ajis02-5323	667	8	controls	control	NOUN
ajis02-5323	667	9	for	for	ADP
ajis02-5323	667	10	information	information	NOUN
ajis02-5323	667	11	systems	system	NOUN
ajis02-5323	667	12	and	and	CCONJ
ajis02-5323	667	13	organizations	organization	NOUN
ajis02-5323	667	14	.	.	PUNCT
ajis02-5323	668	1	retrieved	retrieve	VERB
ajis02-5323	668	2	from	from	ADP
ajis02-5323	668	3	https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-53r5.pdf	https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-53r5.pdf	ADJ
ajis02-5323	668	4	nutt	nutt	NOUN
ajis02-5323	668	5	,	,	PUNCT
ajis02-5323	668	6	p.	p.	PROPN
ajis02-5323	668	7	c.	c.	PROPN
ajis02-5323	668	8	(	(	PUNCT
ajis02-5323	668	9	2002	2002	NUM
ajis02-5323	668	10	)	)	PUNCT
ajis02-5323	668	11	.	.	PUNCT
ajis02-5323	669	1	why	why	SCONJ
ajis02-5323	669	2	decisions	decision	NOUN
ajis02-5323	669	3	fail	fail	VERB
ajis02-5323	669	4	:	:	PUNCT
ajis02-5323	669	5	avoiding	avoid	VERB
ajis02-5323	669	6	the	the	DET
ajis02-5323	669	7	blunders	blunder	NOUN
ajis02-5323	669	8	and	and	CCONJ
ajis02-5323	669	9	traps	trap	NOUN
ajis02-5323	669	10	that	that	PRON
ajis02-5323	669	11	lead	lead	VERB
ajis02-5323	669	12	to	to	ADP
ajis02-5323	669	13	debacles	debacle	NOUN
ajis02-5323	669	14	.	.	PUNCT
ajis02-5323	670	1	san	san	PROPN
ajis02-5323	670	2	francisco	francisco	PROPN
ajis02-5323	670	3	,	,	PUNCT
ajis02-5323	670	4	ca	can	AUX
ajis02-5323	670	5	:	:	PUNCT
ajis02-5323	670	6	berrett	berrett	PROPN
ajis02-5323	670	7	-	-	PUNCT
ajis02-5323	670	8	koehler	koehler	PROPN
ajis02-5323	670	9	publishers	publisher	NOUN
ajis02-5323	670	10	.	.	PUNCT
ajis02-5323	671	1	pandey	pandey	PROPN
ajis02-5323	671	2	,	,	PUNCT
ajis02-5323	671	3	s.	s.	PROPN
ajis02-5323	671	4	,	,	PUNCT
ajis02-5323	671	5	singh	singh	PROPN
ajis02-5323	671	6	,	,	PUNCT
ajis02-5323	671	7	r.	r.	PROPN
ajis02-5323	671	8	,	,	PUNCT
ajis02-5323	671	9	gunasekaran	gunasekaran	NOUN
ajis02-5323	671	10	,	,	PUNCT
ajis02-5323	671	11	a.	a.	NOUN
ajis02-5323	671	12	,	,	PUNCT
ajis02-5323	671	13	&	&	CCONJ
ajis02-5323	671	14	kaushik	kaushik	PROPN
ajis02-5323	671	15	,	,	PUNCT
ajis02-5323	671	16	a.	a.	NOUN
ajis02-5323	671	17	(	(	PUNCT
ajis02-5323	671	18	2020	2020	NUM
ajis02-5323	671	19	)	)	PUNCT
ajis02-5323	671	20	.	.	PUNCT
ajis02-5323	672	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	672	2	risks	risk	NOUN
ajis02-5323	672	3	in	in	ADP
ajis02-5323	672	4	globalized	globalized	ADJ
ajis02-5323	672	5	supply	supply	NOUN
ajis02-5323	672	6	chains	chain	NOUN
ajis02-5323	672	7	:	:	PUNCT
ajis02-5323	672	8	conceptual	conceptual	ADJ
ajis02-5323	672	9	framework	framework	NOUN
ajis02-5323	672	10	.	.	PUNCT
ajis02-5323	673	1	journal	journal	NOUN
ajis02-5323	673	2	of	of	ADP
ajis02-5323	673	3	global	global	ADJ
ajis02-5323	673	4	operations	operation	NOUN
ajis02-5323	673	5	and	and	CCONJ
ajis02-5323	673	6	strategic	strategic	ADJ
ajis02-5323	673	7	sourcing	sourcing	NOUN
ajis02-5323	673	8	,	,	PUNCT
ajis02-5323	673	9	13(1	13(1	NUM
ajis02-5323	673	10	)	)	PUNCT
ajis02-5323	673	11	,	,	PUNCT
ajis02-5323	673	12	103–128	103–128	NUM
ajis02-5323	673	13	.	.	PUNCT
ajis02-5323	674	1	doi.org/10.1108/jgoss-05-2019-0042	doi.org/10.1108/jgoss-05-2019-0042	NOUN
ajis02-5323	674	2	pollmeier	pollmeier	NOUN
ajis02-5323	674	3	,	,	PUNCT
ajis02-5323	674	4	s.	s.	PROPN
ajis02-5323	674	5	,	,	PUNCT
ajis02-5323	674	6	bongiovanni	bongiovanni	PROPN
ajis02-5323	674	7	,	,	PUNCT
ajis02-5323	674	8	i.	i.	PROPN
ajis02-5323	674	9	,	,	PUNCT
ajis02-5323	674	10	&	&	CCONJ
ajis02-5323	674	11	slapničar	slapničar	PROPN
ajis02-5323	674	12	,	,	PUNCT
ajis02-5323	674	13	s.	s.	PROPN
ajis02-5323	674	14	(	(	PUNCT
ajis02-5323	674	15	2023	2023	NUM
ajis02-5323	674	16	)	)	PUNCT
ajis02-5323	674	17	.	.	PUNCT
ajis02-5323	675	1	designing	design	VERB
ajis02-5323	675	2	a	a	DET
ajis02-5323	675	3	financial	financial	ADJ
ajis02-5323	675	4	quantification	quantification	NOUN
ajis02-5323	675	5	model	model	NOUN
ajis02-5323	675	6	for	for	ADP
ajis02-5323	675	7	cyber	cyber	ADJ
ajis02-5323	675	8	risk	risk	NOUN
ajis02-5323	675	9	:	:	PUNCT
ajis02-5323	675	10	a	a	DET
ajis02-5323	675	11	case	case	NOUN
ajis02-5323	675	12	study	study	NOUN
ajis02-5323	675	13	in	in	ADP
ajis02-5323	675	14	a	a	DET
ajis02-5323	675	15	bank	bank	NOUN
ajis02-5323	675	16	.	.	PUNCT
ajis02-5323	676	1	safety	safety	NOUN
ajis02-5323	676	2	science	science	NOUN
ajis02-5323	676	3	,	,	PUNCT
ajis02-5323	676	4	159	159	NUM
ajis02-5323	676	5	,	,	PUNCT
ajis02-5323	676	6	106022	106022	NUM
ajis02-5323	676	7	.	.	PUNCT
ajis02-5323	677	1	doi.org/10.1016/j.ssci.2022.106022	doi.org/10.1016/j.ssci.2022.106022	PROPN
ajis02-5323	677	2	ponemon	ponemon	PROPN
ajis02-5323	677	3	institute	institute	PROPN
ajis02-5323	677	4	.	.	PUNCT
ajis02-5323	678	1	(	(	PUNCT
ajis02-5323	678	2	2022	2022	NUM
ajis02-5323	678	3	)	)	PUNCT
ajis02-5323	678	4	.	.	PUNCT
ajis02-5323	679	1	the	the	DET
ajis02-5323	679	2	2022	2022	NUM
ajis02-5323	679	3	data	datum	NOUN
ajis02-5323	679	4	risk	risk	NOUN
ajis02-5323	679	5	in	in	ADP
ajis02-5323	679	6	the	the	DET
ajis02-5323	679	7	third	third	ADJ
ajis02-5323	679	8	-	-	PUNCT
ajis02-5323	679	9	party	party	NOUN
ajis02-5323	679	10	ecosystem	ecosystem	NOUN
ajis02-5323	679	11	study	study	NOUN
ajis02-5323	679	12	.	.	PUNCT
ajis02-5323	680	1	retrieved	retrieve	VERB
ajis02-5323	680	2	from	from	ADP
ajis02-5323	680	3	https://ponemonsullivanreport.com/2022/10/the-2022-data-risk-in-the-third-partyecosystem-study/	https://ponemonsullivanreport.com/2022/10/the-2022-data-risk-in-the-third-partyecosystem-study/	PROPN
ajis02-5323	680	4	siciliano	siciliano	PROPN
ajis02-5323	680	5	,	,	PUNCT
ajis02-5323	680	6	g.	g.	PROPN
ajis02-5323	680	7	,	,	PUNCT
ajis02-5323	680	8	&	&	CCONJ
ajis02-5323	680	9	gaudenzi	gaudenzi	PROPN
ajis02-5323	680	10	,	,	PUNCT
ajis02-5323	680	11	b.	b.	PROPN
ajis02-5323	680	12	(	(	PUNCT
ajis02-5323	680	13	2018	2018	NUM
ajis02-5323	680	14	)	)	PUNCT
ajis02-5323	680	15	.	.	PUNCT
ajis02-5323	681	1	the	the	DET
ajis02-5323	681	2	role	role	NOUN
ajis02-5323	681	3	of	of	ADP
ajis02-5323	681	4	supply	supply	NOUN
ajis02-5323	681	5	chain	chain	NOUN
ajis02-5323	681	6	resilience	resilience	NOUN
ajis02-5323	681	7	on	on	ADP
ajis02-5323	681	8	it	it	PRON
ajis02-5323	681	9	and	and	CCONJ
ajis02-5323	681	10	cyberdisruptions	cyberdisruption	NOUN
ajis02-5323	681	11	.	.	PUNCT
ajis02-5323	682	1	in	in	ADP
ajis02-5323	682	2	lamboglia	lamboglia	PROPN
ajis02-5323	682	3	,	,	PUNCT
ajis02-5323	682	4	r.	r.	PROPN
ajis02-5323	682	5	,	,	PUNCT
ajis02-5323	682	6	cardoni	cardoni	PROPN
ajis02-5323	682	7	,	,	PUNCT
ajis02-5323	682	8	a.	a.	PROPN
ajis02-5323	682	9	,	,	PUNCT
ajis02-5323	682	10	dameri	dameri	PROPN
ajis02-5323	682	11	,	,	PUNCT
ajis02-5323	682	12	r.	r.	PROPN
ajis02-5323	682	13	,	,	PUNCT
ajis02-5323	682	14	&	&	CCONJ
ajis02-5323	682	15	mancini	mancini	PROPN
ajis02-5323	682	16	,	,	PUNCT
ajis02-5323	682	17	d.	d.	PROPN
ajis02-5323	682	18	(	(	PUNCT
ajis02-5323	682	19	eds	eds	PROPN
ajis02-5323	682	20	.	.	PUNCT
ajis02-5323	682	21	)	)	PUNCT
ajis02-5323	682	22	,	,	PUNCT
ajis02-5323	682	23	reshaping	reshape	VERB
ajis02-5323	682	24	accounting	accounting	NOUN
ajis02-5323	682	25	and	and	CCONJ
ajis02-5323	682	26	management	management	NOUN
ajis02-5323	682	27	control	control	NOUN
ajis02-5323	682	28	systems	system	NOUN
ajis02-5323	682	29	(	(	PUNCT
ajis02-5323	682	30	pp	pp	ADJ
ajis02-5323	682	31	.	.	PUNCT
ajis02-5323	683	1	57–69	57–69	NUM
ajis02-5323	683	2	)	)	PUNCT
ajis02-5323	683	3	.	.	PUNCT
ajis02-5323	684	1	doi.org/10.1007/978-3-319-626369_4	doi.org/10.1007/978-3-319-626369_4	PROPN
ajis02-5323	684	2	simon	simon	PROPN
ajis02-5323	684	3	,	,	PUNCT
ajis02-5323	684	4	j.	j.	PROPN
ajis02-5323	684	5	,	,	PUNCT
ajis02-5323	684	6	&	&	CCONJ
ajis02-5323	684	7	omar	omar	PROPN
ajis02-5323	684	8	,	,	PUNCT
ajis02-5323	684	9	a.	a.	NOUN
ajis02-5323	684	10	(	(	PUNCT
ajis02-5323	684	11	2020	2020	NUM
ajis02-5323	684	12	)	)	PUNCT
ajis02-5323	684	13	.	.	PUNCT
ajis02-5323	685	1	cybersecurity	cybersecurity	NOUN
ajis02-5323	685	2	investments	investment	NOUN
ajis02-5323	685	3	in	in	ADP
ajis02-5323	685	4	the	the	DET
ajis02-5323	685	5	supply	supply	NOUN
ajis02-5323	685	6	chain	chain	NOUN
ajis02-5323	685	7	:	:	PUNCT
ajis02-5323	685	8	coordination	coordination	NOUN
ajis02-5323	685	9	and	and	CCONJ
ajis02-5323	685	10	a	a	DET
ajis02-5323	685	11	strategic	strategic	ADJ
ajis02-5323	685	12	attacker	attacker	NOUN
ajis02-5323	685	13	.	.	PUNCT
ajis02-5323	686	1	european	european	PROPN
ajis02-5323	686	2	journal	journal	PROPN
ajis02-5323	686	3	of	of	ADP
ajis02-5323	686	4	operational	operational	ADJ
ajis02-5323	686	5	research	research	NOUN
ajis02-5323	686	6	,	,	PUNCT
ajis02-5323	686	7	282(1	282(1	NUM
ajis02-5323	686	8	)	)	PUNCT
ajis02-5323	686	9	,	,	PUNCT
ajis02-5323	686	10	161–171	161–171	NUM
ajis02-5323	686	11	.	.	PUNCT
ajis02-5323	686	12	doi.org/10.1016/j.ejor.2019.09.017	doi.org/10.1016/j.ejor.2019.09.017	PROPN
ajis02-5323	687	1	sindhuja	sindhuja	PROPN
ajis02-5323	687	2	,	,	PUNCT
ajis02-5323	687	3	p.	p.	PROPN
ajis02-5323	687	4	n.	n.	NOUN
ajis02-5323	687	5	,	,	PUNCT
ajis02-5323	687	6	&	&	CCONJ
ajis02-5323	687	7	kunnathur	kunnathur	PROPN
ajis02-5323	687	8	,	,	PUNCT
ajis02-5323	687	9	a.	a.	PROPN
ajis02-5323	687	10	s.	s.	PROPN
ajis02-5323	687	11	(	(	PUNCT
ajis02-5323	687	12	2015	2015	NUM
ajis02-5323	687	13	)	)	PUNCT
ajis02-5323	687	14	.	.	PUNCT
ajis02-5323	688	1	information	information	NOUN
ajis02-5323	688	2	security	security	NOUN
ajis02-5323	688	3	in	in	ADP
ajis02-5323	688	4	supply	supply	NOUN
ajis02-5323	688	5	chains	chain	NOUN
ajis02-5323	688	6	:	:	PUNCT
ajis02-5323	688	7	a	a	DET
ajis02-5323	688	8	management	management	NOUN
ajis02-5323	688	9	control	control	NOUN
ajis02-5323	688	10	perspective	perspective	NOUN
ajis02-5323	688	11	.	.	PUNCT
ajis02-5323	689	1	information	information	NOUN
ajis02-5323	689	2	&	&	CCONJ
ajis02-5323	689	3	computer	computer	PROPN
ajis02-5323	689	4	security	security	NOUN
ajis02-5323	689	5	,	,	PUNCT
ajis02-5323	689	6	23(5	23(5	NUM
ajis02-5323	689	7	)	)	PUNCT
ajis02-5323	689	8	,	,	PUNCT
ajis02-5323	689	9	476	476	NUM
ajis02-5323	689	10	-	-	SYM
ajis02-5323	689	11	496	496	NUM
ajis02-5323	689	12	.	.	PUNCT
ajis02-5323	690	1	doi.org/10.1108/ics-07-2014-0050	doi.org/10.1108/ics-07-2014-0050	PROPN
ajis02-5323	690	2	slapničar	slapničar	PROPN
ajis02-5323	690	3	,	,	PUNCT
ajis02-5323	690	4	s.	s.	PROPN
ajis02-5323	690	5	,	,	PUNCT
ajis02-5323	690	6	vuko	vuko	NOUN
ajis02-5323	690	7	,	,	PUNCT
ajis02-5323	690	8	t.	t.	PROPN
ajis02-5323	690	9	,	,	PUNCT
ajis02-5323	690	10	čular	čular	ADJ
ajis02-5323	690	11	,	,	PUNCT
ajis02-5323	690	12	m.	m.	NOUN
ajis02-5323	690	13	,	,	PUNCT
ajis02-5323	690	14	&	&	CCONJ
ajis02-5323	690	15	drašček	drašček	PROPN
ajis02-5323	690	16	,	,	PUNCT
ajis02-5323	690	17	m.	m.	NOUN
ajis02-5323	690	18	(	(	PUNCT
ajis02-5323	690	19	2022	2022	NUM
ajis02-5323	690	20	)	)	PUNCT
ajis02-5323	690	21	.	.	PUNCT
ajis02-5323	691	1	effectiveness	effectiveness	NOUN
ajis02-5323	691	2	of	of	ADP
ajis02-5323	691	3	cybersecurity	cybersecurity	NOUN
ajis02-5323	691	4	audit	audit	NOUN
ajis02-5323	691	5	.	.	PUNCT
ajis02-5323	692	1	international	international	ADJ
ajis02-5323	692	2	journal	journal	NOUN
ajis02-5323	692	3	of	of	ADP
ajis02-5323	692	4	accounting	accounting	NOUN
ajis02-5323	692	5	information	information	NOUN
ajis02-5323	692	6	systems	system	NOUN
ajis02-5323	692	7	,	,	PUNCT
ajis02-5323	692	8	44	44	NUM
ajis02-5323	692	9	,	,	PUNCT
ajis02-5323	692	10	100548	100548	NUM
ajis02-5323	692	11	.	.	PUNCT
ajis02-5323	693	1	doi.org/10.1016/j.accinf.2021.100548	doi.org/10.1016/j.accinf.2021.100548	PROPN
ajis02-5323	693	2	slapničar	slapničar	PROPN
ajis02-5323	693	3	,	,	PUNCT
ajis02-5323	693	4	s.	s.	PROPN
ajis02-5323	693	5	,	,	PUNCT
ajis02-5323	693	6	axelsen	axelsen	PROPN
ajis02-5323	693	7	,	,	PUNCT
ajis02-5323	693	8	m.	m.	NOUN
ajis02-5323	693	9	,	,	PUNCT
ajis02-5323	693	10	bongiovanni	bongiovanni	PROPN
ajis02-5323	693	11	,	,	PUNCT
ajis02-5323	693	12	i.	i.	PROPN
ajis02-5323	693	13	,	,	PUNCT
ajis02-5323	693	14	&	&	CCONJ
ajis02-5323	693	15	stockdale	stockdale	PROPN
ajis02-5323	693	16	,	,	PUNCT
ajis02-5323	693	17	d.	d.	PROPN
ajis02-5323	693	18	(	(	PUNCT
ajis02-5323	693	19	2023	2023	NUM
ajis02-5323	693	20	)	)	PUNCT
ajis02-5323	693	21	.	.	PUNCT
ajis02-5323	694	1	a	a	DET
ajis02-5323	694	2	pathway	pathway	NOUN
ajis02-5323	694	3	model	model	NOUN
ajis02-5323	694	4	to	to	ADP
ajis02-5323	694	5	five	five	NUM
ajis02-5323	694	6	lines	line	NOUN
ajis02-5323	694	7	of	of	ADP
ajis02-5323	694	8	accountability	accountability	NOUN
ajis02-5323	694	9	in	in	ADP
ajis02-5323	694	10	cybersecurity	cybersecurity	NOUN
ajis02-5323	694	11	governance	governance	NOUN
ajis02-5323	694	12	.	.	PUNCT
ajis02-5323	695	1	international	international	ADJ
ajis02-5323	695	2	journal	journal	PROPN
ajis02-5323	695	3	of	of	ADP
ajis02-5323	695	4	accounting	accounting	NOUN
ajis02-5323	695	5	information	information	NOUN
ajis02-5323	695	6	systems	system	NOUN
ajis02-5323	695	7	,	,	PUNCT
ajis02-5323	695	8	51	51	NUM
ajis02-5323	695	9	,	,	PUNCT
ajis02-5323	695	10	100642	100642	NUM
ajis02-5323	695	11	.	.	PUNCT
ajis02-5323	696	1	doi.org/10.1016/j.accinf.2023.100642	doi.org/10.1016/j.accinf.2023.100642	PROPN
ajis02-5323	696	2	tender	tender	NOUN
ajis02-5323	696	3	,	,	PUNCT
ajis02-5323	696	4	i.	i.	NOUN
ajis02-5323	696	5	(	(	PUNCT
ajis02-5323	696	6	2023	2023	NUM
ajis02-5323	696	7	)	)	PUNCT
ajis02-5323	696	8	.	.	PUNCT
ajis02-5323	697	1	top	top	ADJ
ajis02-5323	697	2	5	5	NUM
ajis02-5323	697	3	security	security	NOUN
ajis02-5323	697	4	threats	threat	NOUN
ajis02-5323	697	5	from	from	ADP
ajis02-5323	697	6	3rd	3rd	ADJ
ajis02-5323	697	7	parties	party	NOUN
ajis02-5323	697	8	.	.	PUNCT
ajis02-5323	698	1	network	network	NOUN
ajis02-5323	698	2	world	world	NOUN
ajis02-5323	698	3	.	.	PUNCT
ajis02-5323	699	1	retrieved	retrieve	VERB
ajis02-5323	699	2	from	from	ADP
ajis02-5323	699	3	https://www.networkworld.com/article/2991914/top-5-security-threats-from-3rdparties.html	https://www.networkworld.com/article/2991914/top-5-security-threats-from-3rdparties.html	PROPN
ajis02-5323	699	4	australasian	australasian	ADJ
ajis02-5323	699	5	journal	journal	NOUN
ajis02-5323	699	6	of	of	ADP
ajis02-5323	699	7	information	information	NOUN
ajis02-5323	699	8	systems	system	NOUN
ajis02-5323	699	9	slapnicar	slapnicar	NOUN
ajis02-5323	699	10	,	,	PUNCT
ajis02-5323	699	11	vidmar	vidmar	NOUN
ajis02-5323	699	12	&	&	CCONJ
ajis02-5323	699	13	tsen	tsen	ADJ
ajis02-5323	699	14	2025	2025	NUM
ajis02-5323	699	15	,	,	PUNCT
ajis02-5323	699	16	vol	vol	NOUN
ajis02-5323	699	17	29	29	NUM
ajis02-5323	699	18	,	,	PUNCT
ajis02-5323	699	19	research	research	NOUN
ajis02-5323	699	20	article	article	NOUN
ajis02-5323	699	21	process	process	NOUN
ajis02-5323	699	22	theory	theory	NOUN
ajis02-5323	699	23	of	of	ADP
ajis02-5323	699	24	supplier	supplier	NOUN
ajis02-5323	699	25	cyber	cyber	NOUN
ajis02-5323	699	26	risk	risk	NOUN
ajis02-5323	699	27	assessment	assessment	NOUN
ajis02-5323	699	28	32	32	NUM
ajis02-5323	699	29	the	the	DET
ajis02-5323	699	30	european	european	PROPN
ajis02-5323	699	31	union	union	PROPN
ajis02-5323	699	32	digital	digital	PROPN
ajis02-5323	699	33	operational	operational	PROPN
ajis02-5323	699	34	resilience	resilience	PROPN
ajis02-5323	699	35	act	act	NOUN
ajis02-5323	699	36	(	(	PUNCT
ajis02-5323	699	37	dora	dora	PROPN
ajis02-5323	699	38	)	)	PUNCT
ajis02-5323	699	39	,	,	PUNCT
ajis02-5323	699	40	articles	article	VERB
ajis02-5323	699	41	28–30	28–30	PROPN
ajis02-5323	699	42	.	.	PUNCT
ajis02-5323	700	1	(	(	PUNCT
ajis02-5323	700	2	2023	2023	NUM
ajis02-5323	700	3	)	)	PUNCT
ajis02-5323	700	4	.	.	PUNCT
ajis02-5323	701	1	retrieved	retrieve	VERB
ajis02-5323	701	2	from	from	ADP
ajis02-5323	701	3	https://www.digital	https://www.digital	ADJ
ajis02-5323	701	4	-	-	PUNCT
ajis02-5323	701	5	operational	operational	ADJ
ajis02-5323	701	6	-	-	PUNCT
ajis02-5323	701	7	resilience	resilience	NOUN
ajis02-5323	701	8	act.com/dora_articles_(proposal).html	act.com/dora_articles_(proposal).html	PROPN
ajis02-5323	702	1	the	the	DET
ajis02-5323	702	2	ponemon	ponemon	PROPN
ajis02-5323	702	3	institute	institute	PROPN
ajis02-5323	702	4	.	.	PUNCT
ajis02-5323	703	1	(	(	PUNCT
ajis02-5323	703	2	2022	2022	NUM
ajis02-5323	703	3	)	)	PUNCT
ajis02-5323	703	4	.	.	PUNCT
ajis02-5323	704	1	the	the	DET
ajis02-5323	704	2	2022	2022	NUM
ajis02-5323	704	3	data	datum	NOUN
ajis02-5323	704	4	risk	risk	NOUN
ajis02-5323	704	5	in	in	ADP
ajis02-5323	704	6	the	the	DET
ajis02-5323	704	7	third	third	ADJ
ajis02-5323	704	8	-	-	PUNCT
ajis02-5323	704	9	party	party	NOUN
ajis02-5323	704	10	ecosystem	ecosystem	NOUN
ajis02-5323	704	11	study	study	NOUN
ajis02-5323	704	12	.	.	PUNCT
ajis02-5323	705	1	retrieved	retrieve	VERB
ajis02-5323	705	2	from	from	ADP
ajis02-5323	705	3	https://ponemonsullivanreport.com/2022/10/the-2022-data-risk-in-the-third-partyecosystem-study/	https://ponemonsullivanreport.com/2022/10/the-2022-data-risk-in-the-third-partyecosystem-study/	PROPN
ajis02-5323	705	4	topping	topping	NOUN
ajis02-5323	705	5	,	,	PUNCT
ajis02-5323	705	6	c.	c.	PROPN
ajis02-5323	705	7	,	,	PUNCT
ajis02-5323	705	8	dwyer	dwyer	PROPN
ajis02-5323	705	9	,	,	PUNCT
ajis02-5323	705	10	a.	a.	NOUN
ajis02-5323	705	11	,	,	PUNCT
ajis02-5323	705	12	michalec	michalec	NOUN
ajis02-5323	705	13	,	,	PUNCT
ajis02-5323	705	14	o.	o.	INTJ
ajis02-5323	705	15	,	,	PUNCT
ajis02-5323	705	16	craggs	craggs	PROPN
ajis02-5323	705	17	,	,	PUNCT
ajis02-5323	705	18	b.	b.	PROPN
ajis02-5323	705	19	,	,	PUNCT
ajis02-5323	705	20	&	&	CCONJ
ajis02-5323	705	21	rashid	rashid	PROPN
ajis02-5323	705	22	,	,	PUNCT
ajis02-5323	705	23	a.	a.	NOUN
ajis02-5323	705	24	(	(	PUNCT
ajis02-5323	705	25	2021	2021	NUM
ajis02-5323	705	26	)	)	PUNCT
ajis02-5323	705	27	.	.	PUNCT
ajis02-5323	706	1	beware	beware	VERB
ajis02-5323	706	2	suppliers	supplier	NOUN
ajis02-5323	706	3	bearing	bear	VERB
ajis02-5323	706	4	gifts	gift	NOUN
ajis02-5323	706	5	:	:	PUNCT
ajis02-5323	706	6	analyzing	analyze	VERB
ajis02-5323	706	7	coverage	coverage	NOUN
ajis02-5323	706	8	of	of	ADP
ajis02-5323	706	9	supply	supply	NOUN
ajis02-5323	706	10	chain	chain	NOUN
ajis02-5323	706	11	cybersecurity	cybersecurity	NOUN
ajis02-5323	706	12	in	in	ADP
ajis02-5323	706	13	critical	critical	ADJ
ajis02-5323	706	14	national	national	ADJ
ajis02-5323	706	15	infrastructure	infrastructure	NOUN
ajis02-5323	706	16	sectorial	sectorial	ADJ
ajis02-5323	706	17	and	and	CCONJ
ajis02-5323	706	18	cross	cross	ADJ
ajis02-5323	706	19	-	-	ADJ
ajis02-5323	706	20	sectorial	sectorial	ADJ
ajis02-5323	706	21	frameworks	framework	NOUN
ajis02-5323	706	22	.	.	PUNCT
ajis02-5323	707	1	computers	computer	NOUN
ajis02-5323	707	2	&	&	CCONJ
ajis02-5323	707	3	security	security	NOUN
ajis02-5323	707	4	,	,	PUNCT
ajis02-5323	707	5	108	108	NUM
ajis02-5323	707	6	,	,	PUNCT
ajis02-5323	707	7	102324	102324	NUM
ajis02-5323	707	8	.	.	PUNCT
ajis02-5323	708	1	doi.org/10.1016/j.cose.2021.102324	doi.org/10.1016/j.cose.2021.102324	PROPN
ajis02-5323	708	2	urciuoli	urciuoli	NOUN
ajis02-5323	708	3	,	,	PUNCT
ajis02-5323	708	4	l.	l.	PROPN
ajis02-5323	708	5	,	,	PUNCT
ajis02-5323	708	6	männistö	männistö	PROPN
ajis02-5323	708	7	,	,	PUNCT
ajis02-5323	708	8	t.	t.	PROPN
ajis02-5323	708	9	,	,	PUNCT
ajis02-5323	708	10	hintsa	hintsa	PROPN
ajis02-5323	708	11	,	,	PUNCT
ajis02-5323	708	12	j.	j.	PROPN
ajis02-5323	708	13	,	,	PUNCT
ajis02-5323	708	14	&	&	CCONJ
ajis02-5323	708	15	khan	khan	PROPN
ajis02-5323	708	16	,	,	PUNCT
ajis02-5323	708	17	t.	t.	PROPN
ajis02-5323	708	18	(	(	PUNCT
ajis02-5323	708	19	2013	2013	NUM
ajis02-5323	708	20	)	)	PUNCT
ajis02-5323	708	21	.	.	PUNCT
ajis02-5323	709	1	supply	supply	NOUN
ajis02-5323	709	2	chain	chain	NOUN
ajis02-5323	709	3	cybersecurity	cybersecurity	NOUN
ajis02-5323	709	4	–	–	PUNCT
ajis02-5323	709	5	potential	potential	ADJ
ajis02-5323	709	6	threats	threat	NOUN
ajis02-5323	709	7	.	.	PUNCT
ajis02-5323	710	1	information	information	NOUN
ajis02-5323	710	2	&	&	CCONJ
ajis02-5323	710	3	security	security	PROPN
ajis02-5323	710	4	:	:	PUNCT
ajis02-5323	710	5	an	an	DET
ajis02-5323	710	6	international	international	ADJ
ajis02-5323	710	7	journal	journal	NOUN
ajis02-5323	710	8	,	,	PUNCT
ajis02-5323	710	9	29	29	NUM
ajis02-5323	710	10	,	,	PUNCT
ajis02-5323	710	11	51–68	51–68	NUM
ajis02-5323	710	12	.	.	PUNCT
ajis02-5323	711	1	doi.org/10.11610/isij.2904	doi.org/10.11610/isij.2904	VERB
ajis02-5323	711	2	urciuoli	urciuoli	NOUN
ajis02-5323	711	3	,	,	PUNCT
ajis02-5323	711	4	l.	l.	PROPN
ajis02-5323	711	5	,	,	PUNCT
ajis02-5323	711	6	mohanty	mohanty	PROPN
ajis02-5323	711	7	,	,	PUNCT
ajis02-5323	711	8	s.	s.	PROPN
ajis02-5323	711	9	,	,	PUNCT
ajis02-5323	711	10	hintsa	hintsa	PROPN
ajis02-5323	711	11	,	,	PUNCT
ajis02-5323	711	12	j.	j.	PROPN
ajis02-5323	711	13	,	,	PUNCT
ajis02-5323	711	14	&	&	CCONJ
ajis02-5323	711	15	boekesteijn	boekesteijn	PROPN
ajis02-5323	711	16	,	,	PUNCT
ajis02-5323	711	17	e.	e.	PROPN
ajis02-5323	711	18	(	(	PUNCT
ajis02-5323	711	19	2014	2014	NUM
ajis02-5323	711	20	)	)	PUNCT
ajis02-5323	711	21	.	.	PUNCT
ajis02-5323	712	1	the	the	DET
ajis02-5323	712	2	resilience	resilience	NOUN
ajis02-5323	712	3	of	of	ADP
ajis02-5323	712	4	energy	energy	NOUN
ajis02-5323	712	5	supply	supply	NOUN
ajis02-5323	712	6	chains	chain	NOUN
ajis02-5323	712	7	:	:	PUNCT
ajis02-5323	712	8	a	a	DET
ajis02-5323	712	9	multiple	multiple	ADJ
ajis02-5323	712	10	case	case	NOUN
ajis02-5323	712	11	study	study	NOUN
ajis02-5323	712	12	approach	approach	NOUN
ajis02-5323	712	13	on	on	ADP
ajis02-5323	712	14	oil	oil	NOUN
ajis02-5323	712	15	and	and	CCONJ
ajis02-5323	712	16	gas	gas	NOUN
ajis02-5323	712	17	supply	supply	NOUN
ajis02-5323	712	18	chains	chain	NOUN
ajis02-5323	712	19	to	to	ADP
ajis02-5323	712	20	europe	europe	PROPN
ajis02-5323	712	21	.	.	PUNCT
ajis02-5323	713	1	supply	supply	NOUN
ajis02-5323	713	2	chain	chain	NOUN
ajis02-5323	713	3	management	management	NOUN
ajis02-5323	713	4	:	:	PUNCT
ajis02-5323	713	5	an	an	DET
ajis02-5323	713	6	international	international	ADJ
ajis02-5323	713	7	journal	journal	NOUN
ajis02-5323	713	8	,	,	PUNCT
ajis02-5323	713	9	19	19	NUM
ajis02-5323	713	10	.	.	PUNCT
ajis02-5323	713	11	doi.org/10.1108/scm-09-2012-0307	doi.org/10.1108/scm-09-2012-0307	ADJ
ajis02-5323	713	12	vanajakumari	vanajakumari	ADJ
ajis02-5323	713	13	,	,	PUNCT
ajis02-5323	713	14	m.	m.	NOUN
ajis02-5323	713	15	,	,	PUNCT
ajis02-5323	713	16	mittal	mittal	PROPN
ajis02-5323	713	17	,	,	PUNCT
ajis02-5323	713	18	s.	s.	PROPN
ajis02-5323	713	19	,	,	PUNCT
ajis02-5323	713	20	stoker	stoker	NOUN
ajis02-5323	713	21	,	,	PUNCT
ajis02-5323	713	22	g.	g.	PROPN
ajis02-5323	713	23	,	,	PUNCT
ajis02-5323	713	24	clark	clark	PROPN
ajis02-5323	713	25	,	,	PUNCT
ajis02-5323	713	26	u.	u.	PROPN
ajis02-5323	713	27	,	,	PUNCT
ajis02-5323	713	28	&	&	CCONJ
ajis02-5323	713	29	miller	miller	PROPN
ajis02-5323	713	30	,	,	PUNCT
ajis02-5323	713	31	k.	k.	PROPN
ajis02-5323	713	32	(	(	PUNCT
ajis02-5323	713	33	2021	2021	NUM
ajis02-5323	713	34	)	)	PUNCT
ajis02-5323	713	35	.	.	PUNCT
ajis02-5323	714	1	towards	towards	ADP
ajis02-5323	714	2	a	a	DET
ajis02-5323	714	3	leader	leader	NOUN
ajis02-5323	714	4	-	-	PUNCT
ajis02-5323	714	5	driven	drive	VERB
ajis02-5323	714	6	supply	supply	NOUN
ajis02-5323	714	7	chain	chain	NOUN
ajis02-5323	714	8	cybersecurity	cybersecurity	NOUN
ajis02-5323	714	9	framework	framework	NOUN
ajis02-5323	714	10	.	.	PUNCT
ajis02-5323	715	1	computers	computer	NOUN
ajis02-5323	715	2	&	&	CCONJ
ajis02-5323	715	3	security	security	NOUN
ajis02-5323	715	4	,	,	PUNCT
ajis02-5323	715	5	14	14	NUM
ajis02-5323	715	6	,	,	PUNCT
ajis02-5323	715	7	42–52	42–52	NUM
ajis02-5323	715	8	.	.	PUNCT
ajis02-5323	716	1	van	van	PROPN
ajis02-5323	716	2	de	de	X
ajis02-5323	716	3	ven	ven	PROPN
ajis02-5323	716	4	,	,	PUNCT
ajis02-5323	716	5	a.	a.	PROPN
ajis02-5323	716	6	h.	h.	PROPN
ajis02-5323	716	7	,	,	PUNCT
ajis02-5323	716	8	&	&	CCONJ
ajis02-5323	716	9	poole	poole	PROPN
ajis02-5323	716	10	,	,	PUNCT
ajis02-5323	716	11	m.	m.	NOUN
ajis02-5323	716	12	s.	s.	PROPN
ajis02-5323	716	13	(	(	PUNCT
ajis02-5323	716	14	1995	1995	NUM
ajis02-5323	716	15	)	)	PUNCT
ajis02-5323	716	16	.	.	PUNCT
ajis02-5323	717	1	explaining	explain	VERB
ajis02-5323	717	2	development	development	NOUN
ajis02-5323	717	3	and	and	CCONJ
ajis02-5323	717	4	change	change	NOUN
ajis02-5323	717	5	in	in	ADP
ajis02-5323	717	6	organizations	organization	NOUN
ajis02-5323	717	7	.	.	PUNCT
ajis02-5323	718	1	academy	academy	PROPN
ajis02-5323	718	2	of	of	ADP
ajis02-5323	718	3	management	management	PROPN
ajis02-5323	718	4	review	review	PROPN
ajis02-5323	718	5	,	,	PUNCT
ajis02-5323	718	6	20(3	20(3	NOUN
ajis02-5323	718	7	)	)	PUNCT
ajis02-5323	718	8	,	,	PUNCT
ajis02-5323	718	9	510–540	510–540	NUM
ajis02-5323	718	10	.	.	PUNCT
ajis02-5323	719	1	doi.org/10.5465/amr.1995.9508080329	doi.org/10.5465/amr.1995.9508080329	PROPN
ajis02-5323	719	2	wolden	wolden	PROPN
ajis02-5323	719	3	,	,	PUNCT
ajis02-5323	719	4	m.	m.	NOUN
ajis02-5323	719	5	,	,	PUNCT
ajis02-5323	719	6	valverde	valverde	PROPN
ajis02-5323	719	7	,	,	PUNCT
ajis02-5323	719	8	r.	r.	PROPN
ajis02-5323	719	9	,	,	PUNCT
ajis02-5323	719	10	&	&	CCONJ
ajis02-5323	719	11	talla	talla	PROPN
ajis02-5323	719	12	,	,	PUNCT
ajis02-5323	719	13	m.	m.	NOUN
ajis02-5323	719	14	(	(	PUNCT
ajis02-5323	719	15	2015	2015	NUM
ajis02-5323	719	16	)	)	PUNCT
ajis02-5323	719	17	.	.	PUNCT
ajis02-5323	720	1	the	the	DET
ajis02-5323	720	2	effectiveness	effectiveness	NOUN
ajis02-5323	720	3	of	of	ADP
ajis02-5323	720	4	cobit	cobit	ADJ
ajis02-5323	720	5	5	5	NUM
ajis02-5323	720	6	information	information	NOUN
ajis02-5323	720	7	security	security	NOUN
ajis02-5323	720	8	framework	framework	NOUN
ajis02-5323	720	9	for	for	ADP
ajis02-5323	720	10	reducing	reduce	VERB
ajis02-5323	720	11	cyberattacks	cyberattack	NOUN
ajis02-5323	720	12	on	on	ADP
ajis02-5323	720	13	supply	supply	NOUN
ajis02-5323	720	14	chain	chain	NOUN
ajis02-5323	720	15	management	management	NOUN
ajis02-5323	720	16	systems	system	NOUN
ajis02-5323	720	17	.	.	PUNCT
ajis02-5323	721	1	ifac	ifac	NOUN
ajis02-5323	721	2	-	-	PUNCT
ajis02-5323	721	3	papersonline	papersonline	NOUN
ajis02-5323	721	4	,	,	PUNCT
ajis02-5323	721	5	48(3	48(3	NOUN
ajis02-5323	721	6	)	)	PUNCT
ajis02-5323	721	7	,	,	PUNCT
ajis02-5323	721	8	1846–1852	1846–1852	NUM
ajis02-5323	721	9	.	.	PUNCT
ajis02-5323	722	1	doi.org/10.1016/j.ifacol.2015.06.355	doi.org/10.1016/j.ifacol.2015.06.355	PROPN
ajis02-5323	722	2	wolf	wolf	PROPN
ajis02-5323	722	3	,	,	PUNCT
ajis02-5323	722	4	j.	j.	PROPN
ajis02-5323	722	5	(	(	PUNCT
ajis02-5323	722	6	2021	2021	NUM
ajis02-5323	722	7	)	)	PUNCT
ajis02-5323	722	8	.	.	PUNCT
ajis02-5323	723	1	how	how	SCONJ
ajis02-5323	723	2	the	the	DET
ajis02-5323	723	3	notpetya	notpetya	ADJ
ajis02-5323	723	4	attack	attack	NOUN
ajis02-5323	723	5	is	be	AUX
ajis02-5323	723	6	reshaping	reshape	VERB
ajis02-5323	723	7	cyber	cyber	NOUN
ajis02-5323	723	8	insurance	insurance	NOUN
ajis02-5323	723	9	.	.	PUNCT
ajis02-5323	724	1	brookings	brookings	PROPN
ajis02-5323	724	2	.	.	PUNCT
ajis02-5323	725	1	retrieved	retrieve	VERB
ajis02-5323	725	2	from	from	ADP
ajis02-5323	725	3	https://www.brookings.edu/articles/how-the-notpetya-attack-is-reshaping-cyberinsurance/	https://www.brookings.edu/articles/how-the-notpetya-attack-is-reshaping-cyberinsurance/	PROPN
ajis02-5323	725	4	yeo	yeo	PROPN
ajis02-5323	725	5	,	,	PUNCT
ajis02-5323	725	6	m.	m.	NOUN
ajis02-5323	725	7	,	,	PUNCT
ajis02-5323	725	8	rolland	rolland	PROPN
ajis02-5323	725	9	,	,	PUNCT
ajis02-5323	725	10	e.	e.	PROPN
ajis02-5323	725	11	,	,	PUNCT
ajis02-5323	725	12	ulmer	ulmer	PROPN
ajis02-5323	725	13	,	,	PUNCT
ajis02-5323	725	14	j.	j.	PROPN
ajis02-5323	725	15	,	,	PUNCT
ajis02-5323	725	16	&	&	CCONJ
ajis02-5323	725	17	patterson	patterson	PROPN
ajis02-5323	725	18	,	,	PUNCT
ajis02-5323	725	19	r.	r.	PROPN
ajis02-5323	725	20	(	(	PUNCT
ajis02-5323	725	21	2014	2014	NUM
ajis02-5323	725	22	)	)	PUNCT
ajis02-5323	725	23	.	.	PUNCT
ajis02-5323	726	1	risk	risk	NOUN
ajis02-5323	726	2	mitigation	mitigation	NOUN
ajis02-5323	726	3	decisions	decision	NOUN
ajis02-5323	726	4	for	for	ADP
ajis02-5323	726	5	it	it	PRON
ajis02-5323	726	6	security	security	NOUN
ajis02-5323	726	7	.	.	PUNCT
ajis02-5323	727	1	acm	acm	PROPN
ajis02-5323	727	2	transactions	transaction	NOUN
ajis02-5323	727	3	on	on	ADP
ajis02-5323	727	4	management	management	NOUN
ajis02-5323	727	5	information	information	NOUN
ajis02-5323	727	6	systems	system	NOUN
ajis02-5323	727	7	(	(	PUNCT
ajis02-5323	727	8	tmis	tmis	PROPN
ajis02-5323	727	9	)	)	PUNCT
ajis02-5323	727	10	,	,	PUNCT
ajis02-5323	727	11	5	5	X
ajis02-5323	727	12	.	.	PUNCT
ajis02-5323	728	1	doi.org/10.1145/2576757	doi.org/10.1145/2576757	VERB
ajis02-5323	728	2	acknowledgement	acknowledgement	NOUN
ajis02-5323	728	3	we	we	PRON
ajis02-5323	728	4	thank	thank	VERB
ajis02-5323	728	5	our	our	PRON
ajis02-5323	728	6	reviewers	reviewer	NOUN
ajis02-5323	728	7	,	,	PUNCT
ajis02-5323	728	8	editor	editor	NOUN
ajis02-5323	728	9	,	,	PUNCT
ajis02-5323	728	10	and	and	CCONJ
ajis02-5323	728	11	all	all	DET
ajis02-5323	728	12	our	our	PRON
ajis02-5323	728	13	interviewees	interviewee	NOUN
ajis02-5323	728	14	and	and	CCONJ
ajis02-5323	728	15	survey	survey	VERB
ajis02-5323	728	16	participants	participant	NOUN
ajis02-5323	728	17	for	for	ADP
ajis02-5323	728	18	their	their	PRON
ajis02-5323	728	19	time	time	NOUN
ajis02-5323	728	20	.	.	PUNCT
ajis02-5323	729	1	we	we	PRON
ajis02-5323	729	2	thank	thank	VERB
ajis02-5323	729	3	ryan	ryan	PROPN
ajis02-5323	729	4	ko	ko	PROPN
ajis02-5323	729	5	for	for	ADP
ajis02-5323	729	6	providing	provide	VERB
ajis02-5323	729	7	support	support	NOUN
ajis02-5323	729	8	in	in	ADP
ajis02-5323	729	9	terms	term	NOUN
ajis02-5323	729	10	of	of	ADP
ajis02-5323	729	11	contacts	contact	NOUN
ajis02-5323	729	12	and	and	CCONJ
ajis02-5323	729	13	funding	funding	NOUN
ajis02-5323	729	14	,	,	PUNCT
ajis02-5323	729	15	the	the	DET
ajis02-5323	729	16	organizers	organizer	NOUN
ajis02-5323	729	17	of	of	ADP
ajis02-5323	729	18	the	the	DET
ajis02-5323	729	19	auscert	auscert	NOUN
ajis02-5323	729	20	conference	conference	NOUN
ajis02-5323	729	21	,	,	PUNCT
ajis02-5323	729	22	and	and	CCONJ
ajis02-5323	729	23	,	,	PUNCT
ajis02-5323	729	24	in	in	ADP
ajis02-5323	729	25	particular	particular	ADJ
ajis02-5323	729	26	,	,	PUNCT
ajis02-5323	729	27	gary	gary	PROPN
ajis02-5323	729	28	gaskell	gaskell	PROPN
ajis02-5323	729	29	for	for	ADP
ajis02-5323	729	30	promoting	promote	VERB
ajis02-5323	729	31	our	our	PRON
ajis02-5323	729	32	study	study	NOUN
ajis02-5323	729	33	among	among	ADP
ajis02-5323	729	34	the	the	DET
ajis02-5323	729	35	isaca	isaca	PROPN
ajis02-5323	729	36	brisbane	brisbane	NOUN
ajis02-5323	729	37	members	member	NOUN
ajis02-5323	729	38	and	and	CCONJ
ajis02-5323	729	39	at	at	ADP
ajis02-5323	729	40	the	the	DET
ajis02-5323	729	41	auscert	auscert	NOUN
ajis02-5323	729	42	conference	conference	NOUN
ajis02-5323	729	43	2023	2023	NUM
ajis02-5323	729	44	and	and	CCONJ
ajis02-5323	729	45	2024	2024	NUM
ajis02-5323	729	46	.	.	PUNCT
ajis02-5323	730	1	we	we	PRON
ajis02-5323	730	2	also	also	ADV
ajis02-5323	730	3	thank	thank	VERB
ajis02-5323	730	4	uroš	uroš	NOUN
ajis02-5323	730	5	žust	žust	NOUN
ajis02-5323	730	6	for	for	ADP
ajis02-5323	730	7	promoting	promote	VERB
ajis02-5323	730	8	our	our	PRON
ajis02-5323	730	9	study	study	NOUN
ajis02-5323	730	10	to	to	ADP
ajis02-5323	730	11	the	the	DET
ajis02-5323	730	12	isaca	isaca	PROPN
ajis02-5323	730	13	slovenia	slovenia	PROPN
ajis02-5323	730	14	participants	participants	PROPN
ajis02-5323	730	15	and	and	CCONJ
ajis02-5323	730	16	longxiao	longxiao	PROPN
ajis02-5323	730	17	zhang	zhang	PROPN
ajis02-5323	730	18	to	to	PART
ajis02-5323	730	19	distribute	distribute	VERB
ajis02-5323	730	20	our	our	PRON
ajis02-5323	730	21	survey	survey	NOUN
ajis02-5323	730	22	to	to	ADP
ajis02-5323	730	23	participants	participant	NOUN
ajis02-5323	730	24	in	in	ADP
ajis02-5323	730	25	china	china	PROPN
ajis02-5323	730	26	.	.	PUNCT
ajis02-5323	731	1	this	this	DET
ajis02-5323	731	2	work	work	NOUN
ajis02-5323	731	3	is	be	AUX
ajis02-5323	731	4	a	a	DET
ajis02-5323	731	5	part	part	NOUN
ajis02-5323	731	6	of	of	ADP
ajis02-5323	731	7	the	the	DET
ajis02-5323	731	8	research	research	NOUN
ajis02-5323	731	9	project	project	NOUN
ajis02-5323	731	10	entitled	entitle	VERB
ajis02-5323	731	11	“	"	PUNCT
ajis02-5323	731	12	a	a	DET
ajis02-5323	731	13	methodology	methodology	NOUN
ajis02-5323	731	14	and	and	CCONJ
ajis02-5323	731	15	framework	framework	NOUN
ajis02-5323	731	16	to	to	PART
ajis02-5323	731	17	assist	assist	VERB
ajis02-5323	731	18	organizations	organization	NOUN
ajis02-5323	731	19	in	in	ADP
ajis02-5323	731	20	managing	manage	VERB
ajis02-5323	731	21	cyber	cyber	NOUN
ajis02-5323	731	22	security	security	NOUN
ajis02-5323	731	23	requirements	requirement	NOUN
ajis02-5323	731	24	of	of	ADP
ajis02-5323	731	25	their	their	PRON
ajis02-5323	731	26	suppliers	supplier	NOUN
ajis02-5323	731	27	”	"	PUNCT
ajis02-5323	731	28	that	that	PRON
ajis02-5323	731	29	was	be	AUX
ajis02-5323	731	30	supported	support	VERB
ajis02-5323	731	31	by	by	ADP
ajis02-5323	731	32	the	the	DET
ajis02-5323	731	33	university	university	PROPN
ajis02-5323	731	34	of	of	ADP
ajis02-5323	731	35	queensland	queensland	PROPN
ajis02-5323	731	36	’s	’s	PART
ajis02-5323	731	37	2022	2022	NUM
ajis02-5323	731	38	cyber	cyber	NOUN
ajis02-5323	731	39	security	security	NOUN
ajis02-5323	731	40	transdisciplinary	transdisciplinary	ADJ
ajis02-5323	731	41	research	research	NOUN
ajis02-5323	731	42	seed	seed	NOUN
ajis02-5323	731	43	funding	funding	NOUN
ajis02-5323	731	44	,	,	PUNCT
ajis02-5323	731	45	grant	grant	NOUN
ajis02-5323	731	46	number	number	NOUN
ajis02-5323	731	47	:	:	PUNCT
ajis02-5323	731	48	2022	2022	NUM
ajis02-5323	731	49	-	-	PUNCT
ajis02-5323	731	50	r1	r1	PROPN
ajis02-5323	731	51	ko	ko	PROPN
ajis02-5323	731	52	.	.	PUNCT
ajis02-5323	732	1	australasian	australasian	ADJ
ajis02-5323	732	2	journal	journal	NOUN
ajis02-5323	732	3	of	of	ADP
ajis02-5323	732	4	information	information	NOUN
ajis02-5323	732	5	systems	system	NOUN
ajis02-5323	732	6	slapnicar	slapnicar	NOUN
ajis02-5323	732	7	,	,	PUNCT
ajis02-5323	732	8	vidmar	vidmar	NOUN
ajis02-5323	732	9	&	&	CCONJ
ajis02-5323	732	10	tsen	tsen	ADJ
ajis02-5323	732	11	2025	2025	NUM
ajis02-5323	732	12	,	,	PUNCT
ajis02-5323	732	13	vol	vol	NOUN
ajis02-5323	732	14	29	29	NUM
ajis02-5323	732	15	,	,	PUNCT
ajis02-5323	732	16	research	research	NOUN
ajis02-5323	732	17	article	article	NOUN
ajis02-5323	732	18	process	process	NOUN
ajis02-5323	732	19	theory	theory	NOUN
ajis02-5323	732	20	of	of	ADP
ajis02-5323	732	21	supplier	supplier	NOUN
ajis02-5323	732	22	cyber	cyber	NOUN
ajis02-5323	732	23	risk	risk	NOUN
ajis02-5323	732	24	assessment	assessment	NOUN
ajis02-5323	732	25	33	33	NUM
ajis02-5323	732	26	copyright	copyright	NOUN
ajis02-5323	732	27	©	©	PROPN
ajis02-5323	732	28	2025	2025	NUM
ajis02-5323	732	29	slapnicar	slapnicar	NOUN
ajis02-5323	732	30	,	,	PUNCT
ajis02-5323	732	31	vidmar	vidmar	NOUN
ajis02-5323	732	32	&	&	CCONJ
ajis02-5323	732	33	tsen	tsen	PROPN
ajis02-5323	732	34	.	.	PUNCT
ajis02-5323	733	1	this	this	DET
ajis02-5323	733	2	an	an	DET
ajis02-5323	733	3	open	open	ADJ
ajis02-5323	733	4	-	-	PUNCT
ajis02-5323	733	5	access	access	NOUN
ajis02-5323	733	6	article	article	NOUN
ajis02-5323	733	7	licensed	license	VERB
ajis02-5323	733	8	under	under	ADP
ajis02-5323	733	9	a	a	DET
ajis02-5323	733	10	creative	creative	ADJ
ajis02-5323	733	11	commons	common	NOUN
ajis02-5323	733	12	attribution	attribution	NOUN
ajis02-5323	733	13	-	-	PUNCT
ajis02-5323	733	14	non	non	ADJ
ajis02-5323	733	15	-	-	ADJ
ajis02-5323	733	16	commercial	commercial	ADJ
ajis02-5323	733	17	4.0	4.0	NUM
ajis02-5323	733	18	australia	australia	NOUN
ajis02-5323	733	19	license	license	NOUN
ajis02-5323	733	20	,	,	PUNCT
ajis02-5323	733	21	which	which	PRON
ajis02-5323	733	22	permits	permit	VERB
ajis02-5323	733	23	noncommercial	noncommercial	ADJ
ajis02-5323	733	24	use	use	NOUN
ajis02-5323	733	25	,	,	PUNCT
ajis02-5323	733	26	distribution	distribution	NOUN
ajis02-5323	733	27	,	,	PUNCT
ajis02-5323	733	28	and	and	CCONJ
ajis02-5323	733	29	reproduction	reproduction	NOUN
ajis02-5323	733	30	in	in	ADP
ajis02-5323	733	31	any	any	DET
ajis02-5323	733	32	medium	medium	NOUN
ajis02-5323	733	33	,	,	PUNCT
ajis02-5323	733	34	provided	provide	VERB
ajis02-5323	733	35	the	the	DET
ajis02-5323	733	36	original	original	ADJ
ajis02-5323	733	37	author	author	NOUN
ajis02-5323	733	38	and	and	CCONJ
ajis02-5323	733	39	ajis	ajis	ADV
ajis02-5323	733	40	are	be	AUX
ajis02-5323	733	41	credited	credit	VERB
ajis02-5323	733	42	.	.	PUNCT
ajis02-5323	734	1	https://doi.org/10.3127/ajis.v29.5323	https://doi.org/10.3127/ajis.v29.5323	PROPN
ajis02-5323	734	2	https://creativecommons.org/licenses/by-nc/4.0/deed.en	https://creativecommons.org/licenses/by-nc/4.0/deed.en	PROPN
ajis02-5323	734	3	https://doi.org/10.3127/ajis.v29.5323	https://doi.org/10.3127/ajis.v29.5323	PROPN