News

ZOIS Opinion paper – “Ontology enhanced multi-compliance capability” by Antal Futó

This paper proposes the development of ontology as the next evolution of the ESARIS-based security framework. An ontology extends a taxonomy by introducing machine-readable definitions and explicit relationships between concepts such as controls, assets, risks, services, suppliers, business processes, and regulatory requirements. The result is a connected knowledge model that can be used by both humans and machines.

The primary value of such a model lies in its ability to support multi-compliance. Rather than interpreting each regulation or standard independently, organizations can describe their architecture and security environment once, then map that reality to multiple compliance frameworks simultaneously. This creates traceability, improves consistency, and reduces duplication of effort.

To read the full WP, please download the PDF.