Prof. Dr. Ali Sunyaev

Prof. Dr. Ali Sunyaev

Address Henschelstraße 4
34127 Kassel
Building: Henschelstraße 4
Room Raum 2108
Telephone +49 561 804-3450
Telefax +49 561 804-3621
E-mail address
Office Hours:

Consultation-hour on appointment

Picture of Prof. Dr. Ali  Sunyaev

With the start of 2018, Ali Sunyaev and his team have moved to the Institute of Applied Informatics and Formal Description Methods (AIFB) at the Karlsruhe Institute of Technology (KIT).

» Ali Sunyaev's KIT webpage

Curriculum Vitae

Academic Career

  • Since January 2018: Full Professor - Critical Information Infrastructures (CII) lab - at the Institute of Applied Informatics and Formal Description Methods, Karlsruhe Institute of Technology (KIT).
  • Mar. 2016 - Jan. 2018: Full Professor - Chair for Information Systems and Systems Engineering - at the Faculty of Economics and Management, University of Kassel.
  • Jun. 2010 - Feb. 2016: Assistant Professor - Information Systems and Information Systems Quality - at the Faculty of Management, Economics and Social Sciences, University of Cologne.
  • full Fall Term 2012: Visiting Faculty - Intelligent Health Lab at the Harvard-MIT Division of Health Sciences and Technology, Harvard University.
  • part-time 2010 - 2012: Visiting Professor - Information Technologies Department, Keldysh Institute of Applied Mathematics (KIAM RAS), Russian Academy of Sciences (RAS).
  • Spring Term 2009: Visiting Researcher - Intelligent Health Lab at the Harvard-MIT Division of Health Sciences and Technology, Harvard University.
  • Nov. 2005 - Mar. 2010: Ph.D. Studies in Information Systems at the Department of Informatics, Technische Universität München (TUM), dissertation about "Design and Application of a Security Analysis Method for Healthcare Telematics in Germany".
  • Oct. 2005: Diploma in Informatics (passed the high distinction), Department of Informatics, Technische Universität München (TUM).
  • Oct. 2000 - Sep. 2005: Studies of computer science (minor field of study: it-security and medical science), Technische Universität München (TUM).


Membership in scientific organisations (selection)

  • Gesellschaft für Informatik (GI)
  • Association for Information Systems (AIS)
  • Deutsche Gesellschaft für Medizinische Informatik, Biometrie und Epidemiologie e.V. (GMDS)

Research Specialisations

Research interests

  • Information Systems
  • Information Systems Development
  • Health IT / eHealth
  • Information Systems Security Management
  • Enterprise Information Management
  • Information Systems Quality
  • Cloud Computing
  • Big Biomedical Data

Contribution to the "Scientific Community" (selection)

Journal Reviewer

  • Wirtschaftsinformatik (WI)
  • European Journal of Information Systems (EJIS)
  • Journal of Systems and Software (JSS)
  • Journal of Management Information Systems (JMIS)
  • ACM Journal of Data and Information Quality (ACM JDIQ)
  • BMC Medicine

Conference Reviewer

  • International Conference on Information Systems (ICIS)
  • Americas Conference on Information Systems (AMCIS)
  • European Conference on Information Systems (ECIS)
  • International Conference on Advanced Information Systems (CAiSE)
  • Hawaiian International Conference on System Sciences (HICCS)
  • Wirtschaftsinformatik (WI)
  • Multi-Konferenz Wirtschaftsinformatik (MKWI)
  • Bled eConference

Current Courses

Lectures, seminars, exercise courses and practical courses for the study courses computer sciences, information systems, business sciences, and business studies at the University of Cologne and the Technical University Munich.

Topics covered (amongst others):

  • Information Systems
  • Design and Development of Information Systems
  • Health IT
  • Information Systems Security Management
  • IT Governance
  • Data and Information Quality


Selected Publications

  • Lansing, J.; Benlian, A.; Sunyaev, A. (2018): Unblackboxing Decision Makers’ Interpretations of IS Certifications in the Context of Cloud Service Certifications. In: Journal of the Association for Information Systems (JAIS). forthcoming
  • Lins, S.; Schneider, S.; Sunyaev, A. (2017): Trust is Good, Control is Better: Creating Secure Clouds by Continuous Auditing. In: IEEE Transactions on Cloud Computing (IEEETCC). DOI: 10.1109/TCC.2016.2522411
  • Schneider, S.; Wollersheim, J.; Krcmar, H.; Sunyaev, A. (2017): How do requirements evolve over time? A case study investigating the role of context and experiences in the evolution of enterprise software requirements. In: Journal of Information Technology (JIT). DOI: 10.1057/s41265-016-0001-y
  • Schneider, S.; Sunyaev, A. (2016): Determinant Factors of Cloud-Sourcing Decisions: Reflecting on the IT Outsourcing Literature in the Era of Cloud Computing. In: Journal of Information Technology (JIT). DOI: 10.1057/jit.2014.25
  • Lansing, J.; Sunyaev, A. (2016): Trust in Cloud Computing: Conceptual Typology and Trust-Building Antecedents. In: ACM SIGMIS Database. DOI: 10.1145/2963175.2963179
  • Sunyaev, A.; Dehling, T.; Taylor P.L.; Mandl, K.D. (2015): Availability and quality of mobile health app privacy policies. In: Journal of the American Medical Informatics Association (JAMIA). DOI: 10.1007/s12525-013-0150-6.
  • Poth, A.; Sunyaev, A. (2014): Efficient Quality Management: Risk- and Value-based Software Quality Management. In: IEEE Software. DOI: 10.1109/MS.2013.138
  • Glowalla, P.; Sunyaev, A. (2013): Process-driven Data Quality Management. In: Business and Information Systems Engineering (BISE). DOI: 10.1007/s12599-013-0297-x
  • Sunyaev, A.; Schneider, S. (2013): Cloud Services Certification. In: Communications of the ACM (CACM). DOI: 10.1145/2408776.2408789
  • Sunyaev, A.; Chornyi, D. (2012): Supporting Chronic Disease Care Quality: Design and Implementation of a Health Service and its Integration with Electronic Health Records. ACM Journal of Data and Information Quality (ACM JDIQ). DOI: 10.1145/2184442.2184443.
  • Duennebeil, S.; Sunyaev, A.; Blohm, I.; Leimeister, J.M.; Krcmar, H. (2012): Determinants of Physicians’ Technology Acceptance for e-Health in Ambulatory Care. In: International Journal of Medical Informatics (IJMI). DOI: 10.1016/j.ijmedinf.2012.02.002.


  • Next Generation Certification (NGCert) - Forschung und Entwicklung einer dynamischen Zertifizierung zum kontinuierlichen Nachweis des Zertifizierungsstatus
  • MILES - Processing sensitive medical information in cloud computing environments while ensuring information security & privacy
  • ePill - ePill - electronic Patient Information Leaflets
  • LitSonar - ilustre Lehre: Innovative Lehrunterstützung bei der systematischen Literaturrecherche
  • Value4Cloud - Marktunterstützende Mehrwertdienste zur Förderung von Vertrauen, Rechtsverträglichkeit, Qualität und Nutzung von Cloud Services für den Mittelstand
  • IKT-Landschaft im Jahr 2020 IKT-Landschaft im Jahr 2020: Untersuchung aktueller IKT-Trends
  • Munich Competence Center eHealth (MCCeH)
  • Health Care Telematics Security (HatSec) - Security Analysis of the German Healthcare Telematics
  • NuSiB Benefit and Security Aspects of the German Healthcare Telematics


Selected Talks

  • Design, Development and Evaluation of Patient-Centered Health IT Applications. Brown Bag Seminar DWI, Department of Information Systems, Technische Universität Darmstadt, Germany, November 5, 2013.
  • German Nationwide Health Information Technology Infrastructure. Princeton Architecture Laboratory for Multimedia and Security (PALMS), Department of Electrical Engineering, Princeton University, NJ, USA, October 18, 2012.
  • Secure Provision of Patient-Centered Health IT in Public Networks. Information Trust Institute (ITI), College of Engineering, University of Illinois at Urbana-Champaign, IL, USA, November 14, 2012.
  • Health Applications in Cloud Computing Environments. Bentley University, Waltham, MA, USA, December 5, 2012.
  • Cloud Computing in Public Administration. Alcatel-Lucent Stiftung for Communications. "Clouds above the State" (in German: Wolken über dem Rechtsstaat? Recht und Technik des Cloud Computing in Verwaltung und Wirtschaft). Ministerium für Finanzen und Wirtschaft Baden-Württemberg. Stuttgart, Germany. May 3, 2012.
  • A business process and data quality management perspective on ERP system development in the financial service sector. German-Russian Innovation Forum (PropelleR 2012), Higher School of Economics, Faculty of Business Informatics, Moscow, Russian Federation, April 24, 2012. Design and Development of Health IT Appliactions. Medical Information Technology, Kyoto University, Kyoto, Japan, November 14, 2011.
  • Management of IT Security. Digital Environments: AGCS Expert Days 2011. Allianz AG. Allianz Global Corporate and Specialty. Munich, Germany, October, 24, 2011.
  • Current Healthcare Information Systems Developments and Trends in Germany. Keldysh Institute of Applied Mathematics, Russian Academy of Sciences, Moscow, Russia, September 15, 2010. Design and Application of a Security Analysis Method for Healthcare Telematics in Germany (HatSec), Technische Universität Dortmund, Fakultät für Informatik, Lehrstuhl für Software Engineering (Prof. Dr. Jakob Rehof, Prof. Dr. Jan Jürjens) & Fraunhofer-Institut für Software- und Systemtechnik ISST, Dortmund, Germany, November 10, 2009.
  • Security Analysis of Google Health API & Microsoft HealthVault API. Harvard University, Harvard-MIT Division of Health Sciences and Technology, Cambrigde, Massachusetts, USA, April 30, 2009.
  • IS Security Analysis Approaches (in German: IT-Sicherheitsanalyseverfahren), Expertenforum IT- und Internetrisiken 2008, Swiss Re Germany, Unterföhring, Germany, April 8, 2008. Managing user-side security analysis and assessment of health care telematics in Germany and giving recommendations for future security trade-offs, Security in a global society - how can technology help in preserving the fine line between public safety and privacy? - Global Security Challenge: Europa-Halbfinale an TUM,Technische Universität München (TUM), Garching, Germany, October 2, 2007.