A Systematic Approach to Define the Domain of Information System Security Risk Management - Intentional Perspectives on Information Systems Engineering - page 285

literature by means of a concept alignment table. The latter is further consolidated
into a domain model for ISSRM presented in Sect. 5. Section 6 finishes our work
with conclusions.

2 Research Method

Our overall research method (see Fig. 1) consists of four steps:
Step 1 - Concept alignment. We start by investigating the state of the art in
ISSRM. Our goal is to identify the core concepts of the domain and harmonise
the terminology. The main outcomes are:

• A concept alignment table that highlights the core concepts of the surveyed

approaches and indicates synonymy or other semantic relationships when
approaches use different terms;

• A glossary of the terms as found in the sources.

An excerpt of the table is shown in Table 1 (the complete table can be found
in [ 38] ). To obtain a comprehensive view of ISSRM approaches, we consider four

Fig. 1 Research method