TY - CONF A1 - Blind, K. A1 - Krüger, M. A1 - Kinne, J. A1 - Mirtsch, Mona ED - Jacobs, K. T1 - Organisation Innovation in the Digital Layer: Exploring the Adoption of the Management System Standard ISO/IEC 27001 N2 - Despite the increasing relevance of cybersecurity for companies’ performance, there is limited research on the adoption of ISO/IEC 27001, an international information security management standard. The aim of our study is to expand this limited body of literature. First, we analyse the influence of companies’ networks on the adoption of ISO/IEC 27001 as an organisational innovation based on firm website data and their hyperlinks, using the entire population of ISO/IEC 27001 certified firms identified via web mining. Second, we validate the method of constructing and analysing companies’ “digital layer” following the call for new methodological approaches to study the organisational adoption of innovations. Our findings reveal that companies' decision to adopt ISO/IEC 27001 increases significantly with their number of linkages to other companies and to those having the same certificate. Finally, their cognitive and organisational distances to linked partners have the expected inverted u-shaped influence on their own adoption decision. T2 - 11th International Conference on Standardisation and Innovation in Information Technology (SIIT 2021) CY - Aachen, Germany DA - 06.09.2021 KW - Information Security KW - Hyperlinks KW - Management system standard KW - Digital Layer PY - 2021 SN - 978-3-95886-421-4 SP - 95 PB - Verlagshaus Mainz GmbH Aachen CY - Mainz AN - OPUS4-54411 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Mirtsch, Mona A1 - Blind, K. A1 - Castka, P. T1 - Impact of the COVID-19 pandemic on accredited conformity assessment bodies: insights from a multinational study N2 - The COVID-19 pandemic posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, were also affected by the associated disruptions. Their role in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. The question arises of how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported, on average, a reduction in demand for their services during the pandemic, facing restrictions in all countries. In addition, the pandemic had an overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as a countermeasure, with CABs reporting a higher need for digitalization. The paper highlights and discusses results from in-depth analyses relevant to policymakers and industry alike. KW - Quality Infrastructure KW - Digitalization KW - Testing laboratories KW - Conformity assessment KW - Certification KW - Conformity assessment body KW - Corona KW - Covid-19 KW - Resilience PY - 2022 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-556396 DO - https://doi.org/10.1007/s00769-022-01514-x SP - 1 EP - 14 PB - Springer AN - OPUS4-55639 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Mirtsch, Mona A1 - Blind, K. A1 - Castka, P. ED - Jakobs, K. T1 - Impact of the COVID-19 Pandemic on Conformity Assessment: Insights from a Multinational Study N2 - The COVID-19 pandemic has posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, are also affected by the associated disruptions. Their situation in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: Their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. Considering the roles and functions of CABs in economy, health, and innovation, the question arises how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported on average a negative development of demand during the pandemic, facing restrictions in all countries. In addition, the pandemic had overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as countermeasure, with CABs reporting an increased need for digitalization. Resources relevant to organizational resilience were available to different extents, affecting the speed of response to the challenges of the pandemic. The paper highlights and discusses results from in-depth analyses, which are relevant for policy makers and industry alike. T2 - 25th EURAS Annual Standardisation Conference – Standardisation and Innovation CY - Aachen, Germany DA - 05.09.2021 KW - COVID-19 KW - Corona KW - Crisis KW - Digitalization KW - Laboratory KW - Pandemic KW - Quality infrastructure KW - Conformity assessment KW - Resilience PY - 2021 SN - 978-3-95886-421-4 SP - 379 EP - 398 PB - Verlag Mainz AN - OPUS4-53815 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Mirtsch, Mona T1 - Corona-Monitor - Auswirkungen der Corona-Pandemie auf Konformitätsbewertung und Konformitätsbewertungsstellen in Deutschland: Ergebnispräsentation zur Befragung im Juni 2020 N2 - Im Vortrag wurden die Ergebnisse der von BAM gemeinsam mit der TU Berlin und Fraunhofer ISI durchgeführten Befragung zur Lage der Konformitätsbewertungsstellen während der Corona-Pandemie vorgestellt und mit den Teilnehmer*innen diskutiert. Schwerpunkte lagen auf den wirtschaftlichen Auswirkungen (Aufträge, Arbeitsfähigkeit, Existenz), der Resilienz der Branche sowie den Wirkungen auf die Digitalisierung. Mehr Informationen unter www.qi-fokus.de. T2 - QI-FoKuS - Forschung für Konformitätsbewertung und Sicherheit CY - Online meeting DA - 08.10.2020 KW - Konformitätsbewertung KW - Konformitätsbewertungsstellen KW - Corona KW - COVID-19 KW - Prüfung KW - Zertifizierung KW - Resilienz KW - Digitalisierung KW - QI-FoKuS PY - 2020 UR - http://www.qi-fokus.de AN - OPUS4-51407 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - GEN A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - Resilient gegen Corona? Auswirkungen der Corona-Pandemie auf Konformitätsbewertungsstellen N2 - Covid 19 stellt Gesellschaft und Wirtschaft vor immense Herausforderungen – auch die Konformitätsbewertungsbranche ist betroffen. Die Bundesanstalt für Materialforschung und -prüfung (BAM) hat gemeinsam mit der TU Berlin und dem Fraunhofer ISI die Auswirkungen der Pandemie auf die wirtschaftliche und operative Lage von Konformitätsbewertungsstellen in Deutschland untersucht. Dabei standen auch die Digitalisierung sowie die Resilienz der Branche im Fokus. KW - Corona KW - Konformitätsbewertungsstellen KW - Resilienz KW - Qualitätssicherung KW - Qualitätsinfrastruktur KW - COVID-19 KW - Zertifizierung KW - Digitalisierung KW - Konformitätsbewertung PY - 2021 VL - 66 IS - 01/2021 SP - 36 EP - 39 PB - Carl Hanser CY - München AN - OPUS4-51974 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - CORONA-MONITOR - Auswirkungen der Corona-Pandemie auf Konformitätsbewertung und Konformitätsbewertungsstellen in Deutschland N2 - Die Studie fasst Ergebnisse einer Befragung von Konformitätsbewertungsstellen zu deren Lage und den Aussichten während der Corona-Pandemie zusammen. Besondere Schwerpunkte wurden auf die wirtschaftlichen Auswirkungen und die Arbeitsfähigkeit, aber auch auf die Resilienz und die Wirkungen auf die Digitalisierung gelegt. KW - Corona KW - COVID-19 KW - Resilienz KW - Qualitätsinfrastruktur KW - Prüfung KW - Zertifizierung KW - Kalibrierung KW - Inspektion KW - Labor KW - Laboratorium KW - Studie KW - Befragung KW - Digitalisierung PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-518276 UR - www.qi-fokus.de DO - https://doi.org/10.26272/opus4-51827 VL - 3 SP - 1 EP - 26 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51827 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the role of culture N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 AN - OPUS4-50921 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona T1 - Adoption of the information security management system standard ISO/IEC 27001 - A study among German organizations N2 - Against the backdrop of numerous security breaches and cyber-attacks, organizations need to take measures to secure their data and information. However, the well-known management system standard ISO/IEC 27001 for information security has shown a lower adoption rate – in terms of annual ISO survey data – than was previously expected by scholars and practitioners. Through the lens of Rogers' diffusion of innovation theory, we consider the adoption of ISO/IEC 27001 as a 'preventive innovation' and aim to identify factors that help gain a better understanding of its adoption. Therefore, we conducted a survey among German organizations on the use and impact of management system standards, explicitly distinguishing between organizations that implement ISO/IEC 27001 and those that are additionally certified against this standard. This study provides insights and contributes to an advanced understanding of motives, impacts, barriers, and useful measures to increase adoption of ISO/IEC 27001. Our findings may be useful to organizations considering the adoption of this management system standard, to certification bodies providing certification services, and to policymakers seeking means to improve information security in organizations. KW - Management science and operations research KW - ISO/IEC 27001 KW - Management system standard KW - Information security KW - QI-FoKuS KW - Certification PY - 2023 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-594704 UR - http://ijqr.net/paper.php?id=1098 DO - https://doi.org/10.24874/ijqr17.03-08 SN - 1800-6450 SN - 1800-7473 VL - 17 IS - 3 SP - 747 EP - 768 PB - Center for Quality, University of Montenegro CY - Podgorica AN - OPUS4-59470 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Blind, K. A1 - Koch, Claudia A1 - Dudek, Gabriele T1 - Information security management in ICT and non-ICT sector companies: A preventive innovation perspective N2 - Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion. KW - Information Security KW - ISO/IEC 27001 KW - Management system standard KW - Certification KW - Information security management system (ISMS) KW - Preventive Innovation KW - Resource-based-view KW - Institutional theory PY - 2021 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-531037 DO - https://doi.org/10.1016/j.cose.2021.102383 SN - 0167-4048 VL - 109 IS - 10 SP - 1 EP - 23 PB - Elsevier Ltd. AN - OPUS4-53103 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Kinne, J. A1 - Blind, K. T1 - Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis N2 - In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards. KW - Adoption KW - Information security KW - Management system standards KW - Standards KW - Web mining PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-513284 DO - https://doi.org/10.1109/TEM.2020.2977815 VL - 68 IS - 1 SP - 87 EP - 100 AN - OPUS4-51328 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -