TY - CONF A1 - Blind, K. A1 - Krüger, M. A1 - Kinne, J. A1 - Mirtsch, Mona ED - Jacobs, K. T1 - Organisation Innovation in the Digital Layer: Exploring the Adoption of the Management System Standard ISO/IEC 27001 T2 - Joint Proceedings EURAS 2021 - Standardisation and Innovation SIIT 2021 The Past, Present and Future of ICT Standardisation N2 - Despite the increasing relevance of cybersecurity for companies’ performance, there is limited research on the adoption of ISO/IEC 27001, an international information security management standard. The aim of our study is to expand this limited body of literature. First, we analyse the influence of companies’ networks on the adoption of ISO/IEC 27001 as an organisational innovation based on firm website data and their hyperlinks, using the entire population of ISO/IEC 27001 certified firms identified via web mining. Second, we validate the method of constructing and analysing companies’ “digital layer” following the call for new methodological approaches to study the organisational adoption of innovations. Our findings reveal that companies' decision to adopt ISO/IEC 27001 increases significantly with their number of linkages to other companies and to those having the same certificate. Finally, their cognitive and organisational distances to linked partners have the expected inverted u-shaped influence on their own adoption decision. T2 - 11th International Conference on Standardisation and Innovation in Information Technology (SIIT 2021) CY - Aachen, Germany DA - 06.09.2021 KW - Information Security KW - Hyperlinks KW - Management system standard KW - Digital Layer PY - 2021 SN - 978-3-95886-421-4 SP - 95 PB - Verlagshaus Mainz GmbH Aachen CY - Mainz AN - OPUS4-54411 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Kinne, J. A1 - Blind, K. T1 - Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis JF - IEEE Transactions on Engineering Management N2 - In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards. KW - Adoption KW - Information security KW - Management system standards KW - Standards KW - Web mining PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-513284 DO - https://doi.org/10.1109/TEM.2020.2977815 VL - 68 IS - 1 SP - 87 EP - 100 AN - OPUS4-51328 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -