ZOIS Opinion paper – “Ontology enhanced multi-compliance capability” by Antal Futó This paper proposes the development of ontology as the next evolution of the ESARIS-based security framework. An ontology extends a taxonomy by introducing machine-readable definitions and explicit relationships between concepts such as controls, assets, risks, services, suppliers, business processes, and regulatory requirements. The result…