TY - JOUR A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Blind, K. A1 - Castka, P. T1 - Quality assurance in supply chains during the COVID-19 pandemic: Empirical evidence on organisational resilience of conformity assessment bodies N2 - Global supply chains rely on the compliance and safety of their products, processes, and facilities. These vital services (often referred to as ‘quality assurance’ or ‘conformity assessment’ services) are provided by Conformity Assessment Bodies (CABs). This empirical study explores the impact of the COVID-19 pandemic on CABs as well as their response to the resulting challenges. Data was gathered through an online survey among all accredited CABs in Germany, which resulted in 555 valid responses. Taking a resilience perspective, we reveal that CABs were hit hard by the disruptions caused by the pandemic, albeit to different degrees, in part due to their type of services, size, and sectors served. Furthermore, we find that contingency plans do not directly cushion order declines (as the main indicator of the economic impact of the pandemic) but rather indirectly through helping CABs respond more quickly, which in turn mitigates their order declines. However, our results show that contingency plans can also have adverse effects if they hinder flexible reaction to the crisis. The findings of our study help managers and policymakers learn from the COVID-19 pandemic and improve the resilience of the conformity assessment sector and quality assurance in the event of future crises. KW - Quality Infrastructure KW - Digitalization KW - Testing laboratories KW - Organizational resilience KW - COVID-19 KW - Conformity assessment PY - 2022 U6 - https://doi.org/10.1080/14783363.2022.2078189 SP - 1 EP - 23 PB - Taylor & Francis AN - OPUS4-55066 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Blind, K. A1 - Krüger, M. A1 - Kinne, J. A1 - Mirtsch, Mona ED - Jacobs, K. T1 - Organisation Innovation in the Digital Layer: Exploring the Adoption of the Management System Standard ISO/IEC 27001 N2 - Despite the increasing relevance of cybersecurity for companies’ performance, there is limited research on the adoption of ISO/IEC 27001, an international information security management standard. The aim of our study is to expand this limited body of literature. First, we analyse the influence of companies’ networks on the adoption of ISO/IEC 27001 as an organisational innovation based on firm website data and their hyperlinks, using the entire population of ISO/IEC 27001 certified firms identified via web mining. Second, we validate the method of constructing and analysing companies’ “digital layer” following the call for new methodological approaches to study the organisational adoption of innovations. Our findings reveal that companies' decision to adopt ISO/IEC 27001 increases significantly with their number of linkages to other companies and to those having the same certificate. Finally, their cognitive and organisational distances to linked partners have the expected inverted u-shaped influence on their own adoption decision. T2 - 11th International Conference on Standardisation and Innovation in Information Technology (SIIT 2021) CY - Aachen, Germany DA - 06.09.2021 KW - Information Security KW - Hyperlinks KW - Management system standard KW - Digital Layer PY - 2021 SN - 978-3-95886-421-4 SP - 95 PB - Verlagshaus Mainz GmbH Aachen CY - Mainz AN - OPUS4-54411 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Mirtsch, Mona A1 - Blind, K. A1 - Castka, P. ED - Jakobs, K. T1 - Impact of the COVID-19 Pandemic on Conformity Assessment: Insights from a Multinational Study N2 - The COVID-19 pandemic has posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, are also affected by the associated disruptions. Their situation in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: Their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. Considering the roles and functions of CABs in economy, health, and innovation, the question arises how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported on average a negative development of demand during the pandemic, facing restrictions in all countries. In addition, the pandemic had overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as countermeasure, with CABs reporting an increased need for digitalization. Resources relevant to organizational resilience were available to different extents, affecting the speed of response to the challenges of the pandemic. The paper highlights and discusses results from in-depth analyses, which are relevant for policy makers and industry alike. T2 - 25th EURAS Annual Standardisation Conference – Standardisation and Innovation CY - Aachen, Germany DA - 05.09.2021 KW - COVID-19 KW - Corona KW - Crisis KW - Digitalization KW - Laboratory KW - Pandemic KW - Quality infrastructure KW - Conformity assessment KW - Resilience PY - 2021 SN - 978-3-95886-421-4 SP - 379 EP - 398 PB - Verlag Mainz AN - OPUS4-53815 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Blind, K. A1 - Koch, Claudia A1 - Dudek, Gabriele T1 - Information security management in ICT and non-ICT sector companies: A preventive innovation perspective N2 - Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion. KW - Information Security KW - ISO/IEC 27001 KW - Management system standard KW - Certification KW - Information security management system (ISMS) KW - Preventive Innovation KW - Resource-based-view KW - Institutional theory PY - 2021 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-531037 SN - 0167-4048 VL - 109 IS - 10 SP - 1 EP - 23 PB - Elsevier Ltd. AN - OPUS4-53103 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Mirtsch, Mona A1 - Blind, K. A1 - Castka, P. T1 - Impact of the COVID-19 pandemic on accredited conformity assessment bodies: insights from a multinational study N2 - The COVID-19 pandemic posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, were also affected by the associated disruptions. Their role in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. The question arises of how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported, on average, a reduction in demand for their services during the pandemic, facing restrictions in all countries. In addition, the pandemic had an overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as a countermeasure, with CABs reporting a higher need for digitalization. The paper highlights and discusses results from in-depth analyses relevant to policymakers and industry alike. KW - Quality Infrastructure KW - Digitalization KW - Testing laboratories KW - Conformity assessment KW - Certification KW - Conformity assessment body KW - Corona KW - Covid-19 KW - Resilience PY - 2022 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-556396 SP - 1 EP - 14 PB - Springer AN - OPUS4-55639 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona ED - Jakobs, K. ED - O'Connor, R.V. T1 - The Role of Conformity Assessment in the Digital Transformation: Focusing on Cybersecurity N2 - Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation. T2 - 23rd EURAS Annual Standardisation Conference "Standards for a Smarter Future" CY - Dublin, Irland DA - 13.06.2018 KW - Conformity Assessment KW - Cybersecurity KW - Certification KW - IT-Security PY - 2018 SN - 978-3-95886-229-6 VL - 2018 SP - 183 EP - 202 PB - Verlagshaus Mainz GmbH Aachen CY - Aachen AN - OPUS4-45686 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Kinne, J. A1 - Blind, K. T1 - Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis N2 - In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards. KW - Adoption KW - Information security KW - Management system standards KW - Standards KW - Web mining PY - 2020 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-513284 VL - 68 IS - 1 SP - 87 EP - 100 AN - OPUS4-51328 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Dudek, Gabriele T1 - Vorstellung BAM Initiative: QI-FoKuS N2 - Mit QI-FoKuS / Forschung für Konformitätsbewertung und Sicherheit streben wir auf Basis einer wiederkehrenden Befragung von Unternehmen und Konformitätsbewertungsstellen in Deutschland die Schaffung einer besseren Datengrundlage für die Forschung an. Diese soll es erleichtern, wichtige Zusammenhänge evidenzbasiert zu analysieren, um das systemische Zusammenwirken der Elemente der Qualitätsinfrastruktur besser zu verstehen. Dabei sollen zunächst die Elemente Konformitätsbewertung und Akkreditierung besonders im Vordergrund stehen. T2 - Erfahrungsaustausch des VAZ e.V. CY - Berlin, Germany DA - 07.05.2019 KW - Managementsysteme KW - Unternehmensbefragung KW - QI-FoKuS KW - Konformitätsbewertung KW - Zertifizierung PY - 2019 AN - OPUS4-47971 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Koch, Claudia T1 - Vorstellung BAM-Initiative QI-FoKuS N2 - Vorstellung der BAM und der Initiative QI-FoKuS bei dem VDA mit einem Schwerpunkt auf die am 30.09.2019 startende Unternehmensbefragung zu Nutzung und Wirkung von Managementsystemen T2 - VDA: Sitzung III / 2019 des Ausschusses Qualitätsmanagement (QMA) CY - Berlin, Germany DA - 25.09.2019 KW - Konformitätsbewertung KW - Managementsysteme KW - ISO/IEC 27001 PY - 2019 AN - OPUS4-49116 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona T1 - Web Mining zur Erforschung von Nutzung von Standards und Zertifikaten N2 - Anhand eines Anwendungsbeispiels im Bereich Informationssicherheit wird das Web Mining von Unternehmenswebseiten vorgestellt und diskutiert. T2 - Abteilungsseminar CY - BAM, Berlin DA - 28.01.2019 KW - Management Systeme KW - Web Mining KW - Informationssicherheit PY - 2019 AN - OPUS4-49028 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. T1 - Exploring the Diffusion of the ISMS Standard ISO/IEC 27001 N2 - We presented and discussed the applicability of Web Mining to explore the Diffusion of Management System Standards, in particular in regards to Information Security T2 - EURAS Conference CY - Rome, Italy DA - 14.06.2019 KW - Diffusion KW - Management system standard KW - Information security KW - Web Mining PY - 2019 AN - OPUS4-49029 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. ED - Jacobs, K. ED - Morone, P. T1 - Exploring the Diffusion of an ISMS Standard N2 - This paper introduces and discusses the applicability of Web Mining of Firm Websites to explore the Diffusion of Management System Standards using the example of an ISMS Standard. T2 - EURAS Conference CY - Rome, Italy DA - 13.06.2019 KW - Management System Standard KW - Information Security KW - Web Mining PY - 2019 SN - 978-3-95886-282-1 VL - 24 SP - 329 EP - 348 PB - Verlagshaus Mainz GmbH CY - Aachen, Germany AN - OPUS4-49031 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Pohlisch, Jakob A1 - Blind, K. T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the Role of Culture N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 SP - RP 88 AN - OPUS4-50919 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Pohlisch, Jakob A1 - Blind, K. T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the role of culture N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 AN - OPUS4-50921 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele A1 - Blind, K. T1 - Die Nutzung und Wirkung genormter Managementsysteme N2 - Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen. Ende 2019 wurden in einer ersten Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung von Managementsystemen und ihren Wirkungen befragt. Diese umfasste weit verbreitete genormte Managementsysteme wie ISO 9001 und ISO 14001 genauso wie bisher wenig untersuchte Systeme wie die ISO 50001 oder ISO/IEC 27001. Es konnten 180 Fragebögen für die vorliegende Studie ausgewertet werden. KW - QI-FoKuS KW - Managementsysteme KW - ISO 9001 KW - ISO/IEC 27001 KW - ISO 50001 KW - ISO 14001 KW - Zertifizierung KW - Konformitätsbewertung KW - Akkreditierung PY - 2020 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-510831 SN - 978-3-9818564-3-9 VL - 1 SP - 1 EP - 44 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51083 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Mirtsch, Mona T1 - Corona-Monitor - Auswirkungen der Corona-Pandemie auf Konformitätsbewertung und Konformitätsbewertungsstellen in Deutschland: Ergebnispräsentation zur Befragung im Juni 2020 N2 - Im Vortrag wurden die Ergebnisse der von BAM gemeinsam mit der TU Berlin und Fraunhofer ISI durchgeführten Befragung zur Lage der Konformitätsbewertungsstellen während der Corona-Pandemie vorgestellt und mit den Teilnehmer*innen diskutiert. Schwerpunkte lagen auf den wirtschaftlichen Auswirkungen (Aufträge, Arbeitsfähigkeit, Existenz), der Resilienz der Branche sowie den Wirkungen auf die Digitalisierung. Mehr Informationen unter www.qi-fokus.de. T2 - QI-FoKuS - Forschung für Konformitätsbewertung und Sicherheit CY - Online meeting DA - 08.10.2020 KW - Konformitätsbewertung KW - Konformitätsbewertungsstellen KW - Corona KW - COVID-19 KW - Prüfung KW - Zertifizierung KW - Resilienz KW - Digitalisierung KW - QI-FoKuS PY - 2020 UR - http://www.qi-fokus.de AN - OPUS4-51407 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - CORONA-MONITOR - Auswirkungen der Corona-Pandemie auf Konformitätsbewertung und Konformitätsbewertungsstellen in Deutschland N2 - Die Studie fasst Ergebnisse einer Befragung von Konformitätsbewertungsstellen zu deren Lage und den Aussichten während der Corona-Pandemie zusammen. Besondere Schwerpunkte wurden auf die wirtschaftlichen Auswirkungen und die Arbeitsfähigkeit, aber auch auf die Resilienz und die Wirkungen auf die Digitalisierung gelegt. KW - Corona KW - COVID-19 KW - Resilienz KW - Qualitätsinfrastruktur KW - Prüfung KW - Zertifizierung KW - Kalibrierung KW - Inspektion KW - Labor KW - Laboratorium KW - Studie KW - Befragung KW - Digitalisierung PY - 2020 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-518276 UR - www.qi-fokus.de VL - 3 SP - 1 EP - 26 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51827 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele A1 - Blind, K. T1 - Die Nutzung und Wirkung der Norm ISO/IEC 27001 für Informationssicherheit in Unternehmen in Deutschland N2 - Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen und hierbei insbesondere auch auf aktuelle Trends und Entwicklungen einzugehen. Von Januar bis März 2020 wurden in einer Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung und den Wirkungen ihres zertifizierten Managementsystems für Informationssicherheit nach ISO/IEC 27001 befragt. Es konnten 125 vollständig ausgefüllte Fragebögen für die vorliegende Studie ausgewertet werden. KW - Managementsysteme KW - ISO/IEC 27001 KW - Informationssicherheit KW - Zertifizierung KW - Konformitätsbewertung KW - Akkreditierung KW - QI-FoKuS PY - 2020 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-517922 VL - 2 SP - 1 EP - 28 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51792 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Koch, Claudia T1 - Nutzung und Wirkung von (zertifizierten) Managementsystemen – aktuelle Erkenntnisse N2 - Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität - DGQ zur Nutzung und Wirkung von genormten Managementsystemen als die erste Erhebung im Rahmen von QI-FoKuS. Neben der Motivation hinsichtlich der Anwendung verschiedener Normen, die Anforderungen an Managementsysteme darlegen, sowie den Wirkungen werden insbesondere die Zertifizierung für diese Normen sowie daran anknüpfend die Rolle und Funktion der Akkreditierung – und somit verschiedene Bausteine der QI – adressiert. T2 - Mitgliederexklusives Webinar CY - Online meeting DA - 15.10.2020 KW - Management Systeme KW - QI-FoKuS KW - ISO 9001 KW - ISO/IEC 27001 KW - Zertifizierung KW - Kundenaudit KW - Konformitätsbewertung KW - Akkreditierung PY - 2020 AN - OPUS4-51431 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. T1 - Introducing web mining of firm websites to explore innovation indicators using the example of management system standards N2 - Traditional innovation indicators often lack coverage, granularity as well as timeliness and involve high data collection costs, especially when conducted at a large scale. Based on the assumption that firms publish information about their products and services on their own websites, the Centre for European Economic Research in Mannheim (ZEW) has developed a framework to extract information from German firm websites applying Web Mining using a free-to-use web-scraping tool. Categorized as an intraorganizational procedural innovation, management system standards often lack research especially during the early stages of their diffusion mainly due to low data availability. Therefore, we introduce Web Mining to study the diffusion of the international management system standard ISO/IEC 27001 in Germany. Using the Mannheim Enterprise panel dataset, we first apply Web Mining to identify firms that refer to these and other common management system standards, followed by manual categorization. Second, we estimate a probit model to identify drivers for its implementation. Finally, we derive recommendations for policy makers. T2 - Collaborative research seminar series autumn 2019 CY - Linköping, Schweden DA - 26.11.2019 KW - Management System Standard KW - ISO/IEC 27001 KW - Information security KW - Web Mining PY - 2019 AN - OPUS4-49821 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele T1 - Presentation at AVIC-Workshop: BAM initiative QI-FoKuS N2 - QI-FoKuS stands for „Quality Infrastructure – Research for Conformity Assessment and Safety“. Supported by the BMWi, a new recurring survey of companies was launched under this name in end-September 2019 in a joint project between the TU Berlin and the Federal Institute for Materials Research and Testing (BAM). The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies. T2 - Visit & Workshop of NQI Lab SAMR/AVIC and BAM CY - Berlin, Germany DA - 29.10.2019 KW - Conformity Assessment KW - Information Security KW - Accreditation KW - Certification KW - QI-FoKuS PY - 2019 AN - OPUS4-49477 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. T1 - Presentation at AVIC-Workshop: Exploring the diffusion of the information security management system standard ISO/IEC 27001 N2 - We explore the adoption and diffusion of the international information security management system standard ISO/IEC 27001 with Web Mining of German firm websites using the Mannheim Enterprise Panel dataset (MUP). T2 - Visit & Workshop of NQI Lab SAMR/AVIC and TU-Berlin CY - Berlin, Germany DA - 31.10.2019 KW - ISO/IEC 27001 KW - Web Mining KW - Information security PY - 2019 AN - OPUS4-49478 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - GEN A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - Resilient gegen Corona? Auswirkungen der Corona-Pandemie auf Konformitätsbewertungsstellen N2 - Covid 19 stellt Gesellschaft und Wirtschaft vor immense Herausforderungen – auch die Konformitätsbewertungsbranche ist betroffen. Die Bundesanstalt für Materialforschung und -prüfung (BAM) hat gemeinsam mit der TU Berlin und dem Fraunhofer ISI die Auswirkungen der Pandemie auf die wirtschaftliche und operative Lage von Konformitätsbewertungsstellen in Deutschland untersucht. Dabei standen auch die Digitalisierung sowie die Resilienz der Branche im Fokus. KW - Corona KW - Konformitätsbewertungsstellen KW - Resilienz KW - Qualitätssicherung KW - Qualitätsinfrastruktur KW - COVID-19 KW - Zertifizierung KW - Digitalisierung KW - Konformitätsbewertung PY - 2021 VL - 66 IS - 01/2021 SP - 36 EP - 39 PB - Carl Hanser CY - München AN - OPUS4-51974 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - GEN A1 - Nisi, A. A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - Effetti della pandemia COVID-19 sulle attività di valutazione della conformità svolte da organismi e laboratori accreditati in Italia N2 - Die Studie fasst Ergebnisse einer Befragung von Konformitätsbewertungsstellen in Italien zu deren Lage und den Aussichten während der Corona-Pandemie zusammen. Besondere Schwerpunkte wurden auf die wirtschaftlichen Auswirkungen und die Arbeitsfähigkeit, aber auch auf die Resilienz und die Wirkungen auf die Digitalisierung gelegt. N2 - Lo scoppio della pandemia da Covid-19 ha travolto Italia a inizio anno e i suoi effetti sull’economia sono stati particolarmente pesanti. Proprio per analizzare gli effetti della pandemia sul mercato della valutazione della conformità, lo scorso settembre Accredia, in collaborazione con l’Istituto Federale tedesco della Ricerca e del Collaudo dei Materiali (BAM), la Technische Universität di Berlino e l’Istituto Fraunhofer ISI, ha condotto un’indagine presso gli organismi e i laboratori accreditati in Italia. KW - Corona KW - Konformitätsbewertungsstellen KW - Resilienz KW - COVID-19 KW - Qualitätsinfrastruktur KW - Zertifizierung KW - Kalibrierung KW - Digitalisierung KW - Konformitätsbewertung KW - Laboratorium KW - Prüfung PY - 2020 UR - https://www.accredia.it/pubblicazione/corona-monitor-effetti-della-pandemia-da-covid-19-sulle-attivita-accreditate/ SP - 1 EP - 22 CY - Rom, Italien AN - OPUS4-51975 LA - ita AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Koch, Claudia T1 - Informationssicherheit in deutschen Unternehmen: Ergebnisse der QI-FoKuS Umfrage zur ISO/IEC 27001 N2 - Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität (DGQ) zur Studie: "Nutzung und Wirkung von einem ISMS nach ISO/IEC 27001". Neben Zweck und Design der Studie werden sowohl Hürden bei der Implementierung, fördernde Maßnahmen, die Anwender nützlich finden und die Frage, warum Firmen diese Norm nicht nutzen, erörtert. T2 - Nutzung und Wirkung von einem ISMS nach ISO/IEC 27001 CY - Online meeting DA - 15.04.2021 KW - Zertifizierung KW - Informationssicherheit KW - ISO/IEC 27001 KW - Managementsysteme PY - 2021 AN - OPUS4-52485 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Schlegel, Moritz-Caspar A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Harrer, Andrea T1 - Smart Products Enable Smart Regulations—Optimal Durability Requirements Facilitated by the IoT N2 - The challenges and opportunities linked with IoT have been intensively discussed in recent years. The connectivity of things over their entire life cycle and the smart properties associated with it provide new functionalities and unprecedented availability of (usage) data. This offers huge opportunities for manufacturers, service providers, users, and also policymakers. The latter May impact policy areas such as the regulations on resource and materials efficiency under the Ecodesign Directive 2009/125/EC. With the general approach as it is practiced today, legal requirements are usually set for entire product groups without considering the products individually, including user behavior and environmental conditions. The increasing number of smart products and the growing availability of product data are sparking a discussion on whether these requirements could be more product and application-specific. This paper presents a method for calculating the economically and ecologically optimal durability of a product. It allows determining the point in time when a product should be replaced by combining consumer data with product design data. This novel Approach could contribute to making product regulation more flexible and possibly more efficient. In this context, fundamental challenges associated with smart products in policymaking are also discussed. KW - Ecodesign KW - Internet of Things KW - Connectivity KW - Resource efficiency KW - Policy making PY - 2021 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-524924 VL - 13 IS - 8 SP - 4395 PB - MDPI CY - Basel AN - OPUS4-52492 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona T1 - The Role of Conformity Assessment in the Digital Transformation: Focusing on Cybersecurity N2 - Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation. T2 - 23rd EURAS Annual Standardisation Conference "Standards for a Smarter Future" CY - Dublin, Irland DA - 13.06.2018 KW - Cybersecurity KW - Certification KW - Conformity Assessment KW - IT-Security PY - 2018 AN - OPUS4-45687 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CHAP A1 - Mirtsch, Mona ED - Mangelsdorf, Axel ED - Weiler, Petra T1 - Konformitätsbewertung im Bereich Cybersicherheit N2 - Das Ziel dieses Kapitels besteht darin, die Rolle von Konformitätsbewertung für die Erhöhung der Cybersicherheit von Produkten, Dienstleistungen und Prozessen zu betrachten. Dazu wird der Begriff Cybersicherheit beleuchtet sowie ausgewählte Cybersicherheitsnormen kurz vorgestellt. Im Folgenden wird der regulative europäische Rahmen für die Konformitätsbewertung aus ordnungspolitischer Sicht sowie der aktuelle Verordnungsentwurf zum Cybersecurity Act dargestellt und kritsch beleuchtet. KW - Cybersicherheit KW - Konformitätsbewertung KW - Cybersecurity Act KW - Normen PY - 2019 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-473829 UR - https://www.degruyter.com/downloadpdf/books/9783110629057/9783110629057-009/9783110629057-009.pdf SN - 978-3-11062-905-7 SP - 141 EP - 164 PB - De Gruyter CY - Berlin, Boston ET - 1 AN - OPUS4-47382 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - de Vries, H. A1 - Jacobs, K. A1 - Egyedi, T. A1 - Eto, M. A1 - Fertig, S. A1 - Kanevskaia, O. A1 - Klintner, L. A1 - Koch, Claudia A1 - Mijatovic, I. A1 - Mirtsch, Mona A1 - Morone, P. A1 - Orviska, M. A1 - Riillo, C. A1 - Scaramuzzino, G. ED - Jacobs, K. T1 - Standardization: Towards an agenda for research N2 - Standardization research is a fairly new and is a still-evolving field of research, with possibly major practical ramifications. This article presents a summary of the authors’ subjective views of the most pressing research topics in the field. These include, among others, standards (e.g. incorporation of ethical issues), the potential impact of standards, the corporate management of standardization and legal issues like Intellectual Property Rights (IPR). In addition, gaps have been identified with a respect to a basic understanding of standardization, suggesting a need for better education in the field. KW - EURAS KW - Impact of standards KW - Intellectual property rights (IPR) KW - Research agenda KW - Standardization research PY - 2018 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-467873 SN - 2470-8542 VL - 16 IS - 1 SP - 52 EP - 59 PB - IGI Global AN - OPUS4-46787 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona T1 - Cybersicherheit als eine Voraussetzung für sichere Produkte, Dienstleistungen und Prozesse: Der neue europäische Rechtsakt zur Cybersicherheit N2 - Bedeutung von Cybersicherheit für die Konformitätsbewertung Vorstellung Rechtsakt zur Cybersicherheit [COM(2017)477] vom 13.9.2017 bzw. letzter Entwurf vom 12.3.2019 Ergebnisse einer Analyse der Reaktionen von interessierten Kreisen Kurzvorstellung ausgewählter Normen im Bereich Cybersicherheit T2 - EUROLAB-D Kolloquium CY - BAM, Berlin, Germany DA - 09.04.2019 KW - Cybersicherheit KW - Zertifizierung KW - Cybersecurity Act KW - Cybersecurity PY - 2019 AN - OPUS4-47771 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona T1 - Adoption of the information security management system standard ISO/IEC 27001 - A study among German organizations N2 - Against the backdrop of numerous security breaches and cyber-attacks, organizations need to take measures to secure their data and information. However, the well-known management system standard ISO/IEC 27001 for information security has shown a lower adoption rate – in terms of annual ISO survey data – than was previously expected by scholars and practitioners. Through the lens of Rogers' diffusion of innovation theory, we consider the adoption of ISO/IEC 27001 as a 'preventive innovation' and aim to identify factors that help gain a better understanding of its adoption. Therefore, we conducted a survey among German organizations on the use and impact of management system standards, explicitly distinguishing between organizations that implement ISO/IEC 27001 and those that are additionally certified against this standard. This study provides insights and contributes to an advanced understanding of motives, impacts, barriers, and useful measures to increase adoption of ISO/IEC 27001. Our findings may be useful to organizations considering the adoption of this management system standard, to certification bodies providing certification services, and to policymakers seeking means to improve information security in organizations. KW - Management science and operations research KW - ISO/IEC 27001 KW - Management system standard KW - Information security KW - QI-FoKuS KW - Certification PY - 2023 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:kobv:b43-594704 UR - http://ijqr.net/paper.php?id=1098 SN - 1800-6450 SN - 1800-7473 VL - 17 IS - 3 SP - 747 EP - 768 PB - Center for Quality, University of Montenegro CY - Podgorica AN - OPUS4-59470 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -