TY - GEN A1 - Nisi, A. A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - Effetti della pandemia COVID-19 sulle attività di valutazione della conformità svolte da organismi e laboratori accreditati in Italia N2 - Die Studie fasst Ergebnisse einer Befragung von Konformitätsbewertungsstellen in Italien zu deren Lage und den Aussichten während der Corona-Pandemie zusammen. Besondere Schwerpunkte wurden auf die wirtschaftlichen Auswirkungen und die Arbeitsfähigkeit, aber auch auf die Resilienz und die Wirkungen auf die Digitalisierung gelegt. N2 - Lo scoppio della pandemia da Covid-19 ha travolto Italia a inizio anno e i suoi effetti sull’economia sono stati particolarmente pesanti. Proprio per analizzare gli effetti della pandemia sul mercato della valutazione della conformità, lo scorso settembre Accredia, in collaborazione con l’Istituto Federale tedesco della Ricerca e del Collaudo dei Materiali (BAM), la Technische Universität di Berlino e l’Istituto Fraunhofer ISI, ha condotto un’indagine presso gli organismi e i laboratori accreditati in Italia. KW - Corona KW - Konformitätsbewertungsstellen KW - Resilienz KW - COVID-19 KW - Qualitätsinfrastruktur KW - Zertifizierung KW - Kalibrierung KW - Digitalisierung KW - Konformitätsbewertung KW - Laboratorium KW - Prüfung PY - 2020 UR - https://www.accredia.it/pubblicazione/corona-monitor-effetti-della-pandemia-da-covid-19-sulle-attivita-accreditate/ SP - 1 EP - 22 CY - Rom, Italien AN - OPUS4-51975 LA - ita AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Pohlisch, Jakob A1 - Blind, K. T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the Role of Culture T2 - AIS Electronic Library (AISeL) N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 SP - RP 88 AN - OPUS4-50919 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele A1 - Blind, K. T1 - Die Nutzung und Wirkung genormter Managementsysteme T2 - Eine Studie im Rahmen der Initiative QI-FoKuS N2 - Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen. Ende 2019 wurden in einer ersten Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung von Managementsystemen und ihren Wirkungen befragt. Diese umfasste weit verbreitete genormte Managementsysteme wie ISO 9001 und ISO 14001 genauso wie bisher wenig untersuchte Systeme wie die ISO 50001 oder ISO/IEC 27001. Es konnten 180 Fragebögen für die vorliegende Studie ausgewertet werden. KW - QI-FoKuS KW - Managementsysteme KW - ISO 9001 KW - ISO/IEC 27001 KW - ISO 50001 KW - ISO 14001 KW - Zertifizierung KW - Konformitätsbewertung KW - Akkreditierung PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-510831 SN - 978-3-9818564-3-9 DO - https://doi.org/10.26272/opus4-51083 VL - 1 SP - 1 EP - 44 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51083 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele A1 - Blind, K. T1 - Die Nutzung und Wirkung der Norm ISO/IEC 27001 für Informationssicherheit in Unternehmen in Deutschland T2 - Eine Studie im Rahmen der Initiative QI-FoKuS N2 - Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen und hierbei insbesondere auch auf aktuelle Trends und Entwicklungen einzugehen. Von Januar bis März 2020 wurden in einer Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung und den Wirkungen ihres zertifizierten Managementsystems für Informationssicherheit nach ISO/IEC 27001 befragt. Es konnten 125 vollständig ausgefüllte Fragebögen für die vorliegende Studie ausgewertet werden. KW - Managementsysteme KW - ISO/IEC 27001 KW - Informationssicherheit KW - Zertifizierung KW - Konformitätsbewertung KW - Akkreditierung KW - QI-FoKuS PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-517922 DO - https://doi.org/10.26272/opus4-51792 VL - 2 SP - 1 EP - 28 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51792 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Blind, K. A1 - Castka, P. T1 - Quality assurance in supply chains during the COVID-19 pandemic: Empirical evidence on organisational resilience of conformity assessment bodies JF - Total quality management & business excellence N2 - Global supply chains rely on the compliance and safety of their products, processes, and facilities. These vital services (often referred to as ‘quality assurance’ or ‘conformity assessment’ services) are provided by Conformity Assessment Bodies (CABs). This empirical study explores the impact of the COVID-19 pandemic on CABs as well as their response to the resulting challenges. Data was gathered through an online survey among all accredited CABs in Germany, which resulted in 555 valid responses. Taking a resilience perspective, we reveal that CABs were hit hard by the disruptions caused by the pandemic, albeit to different degrees, in part due to their type of services, size, and sectors served. Furthermore, we find that contingency plans do not directly cushion order declines (as the main indicator of the economic impact of the pandemic) but rather indirectly through helping CABs respond more quickly, which in turn mitigates their order declines. However, our results show that contingency plans can also have adverse effects if they hinder flexible reaction to the crisis. The findings of our study help managers and policymakers learn from the COVID-19 pandemic and improve the resilience of the conformity assessment sector and quality assurance in the event of future crises. KW - Quality Infrastructure KW - Digitalization KW - Testing laboratories KW - Organizational resilience KW - COVID-19 KW - Conformity assessment PY - 2022 DO - https://doi.org/10.1080/14783363.2022.2078189 SP - 1 EP - 23 PB - Taylor & Francis AN - OPUS4-55066 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Kinne, J. A1 - Blind, K. T1 - Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis JF - IEEE Transactions on Engineering Management N2 - In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards. KW - Adoption KW - Information security KW - Management system standards KW - Standards KW - Web mining PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-513284 DO - https://doi.org/10.1109/TEM.2020.2977815 VL - 68 IS - 1 SP - 87 EP - 100 AN - OPUS4-51328 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Blind, K. A1 - Koch, Claudia A1 - Dudek, Gabriele T1 - Information security management in ICT and non-ICT sector companies: A preventive innovation perspective JF - Computers & Security N2 - Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion. KW - Information Security KW - ISO/IEC 27001 KW - Management system standard KW - Certification KW - Information security management system (ISMS) KW - Preventive Innovation KW - Resource-based-view KW - Institutional theory PY - 2021 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-531037 DO - https://doi.org/10.1016/j.cose.2021.102383 SN - 0167-4048 VL - 109 IS - 10 SP - 1 EP - 23 PB - Elsevier Ltd. AN - OPUS4-53103 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. ED - Jacobs, K. ED - Morone, P. T1 - Exploring the Diffusion of an ISMS Standard T2 - EURAS Proceedings 2019 N2 - This paper introduces and discusses the applicability of Web Mining of Firm Websites to explore the Diffusion of Management System Standards using the example of an ISMS Standard. T2 - EURAS Conference CY - Rome, Italy DA - 13.06.2019 KW - Management System Standard KW - Information Security KW - Web Mining PY - 2019 SN - 978-3-95886-282-1 VL - 24 SP - 329 EP - 348 PB - Verlagshaus Mainz GmbH CY - Aachen, Germany AN - OPUS4-49031 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Ladu, Luana A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Blind, K. A1 - Castka, P. T1 - Digitalization in conformity assessment in Mexico - A QI-FoKuS study T2 - Digitalization in conformity assessment worldwide N2 - This report summarizes findings from the first comprehensive study on digitalization in conformity assessment in Mexico. The reults are based on data from a survey among conformity assessment bodies (CABs) conducted in 2022. It highlights the digital maturity of the organizations, the motives, benefits and obstacles of digital transformation as well as the actual technology trends. This study is part of a global project that covers various other countries (see www.qi-fokus.de). KW - COVID-19 KW - Calibration KW - Certification KW - Conformity assessment KW - Conformity assessment body KW - Digital transformation KW - Digitalization KW - Laboratory KW - Quality infrastructure KW - TIC KW - Testing PY - 2022 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-563645 UR - https://www.qi-fokus.de SP - 1 EP - 44 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-56364 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Ladu, Luana A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Blind, K. A1 - Castka, P. T1 - Digitalization in conformity assessment in the United Kingdom - A QI-FoKuS study T2 - Digitalization in conformity assessment worldwide N2 - This report summarizes findings from the first comprehensive study on digitalization in conformity assessment in the United Kingdom. The reults are based on data from a survey among conformity assessment bodies (CABs) conducted in 2022. It highlights the digital maturity of the organizations, the motives, benefits and obstacles of digital transformation as well as the actual technology trends. This study is part of a global project that covers various other countries (see www.qi-fokus.de). KW - COVID-19 KW - Calibration KW - Certification KW - Conformity assessment KW - Conformity assessment body KW - Digital transformation KW - Digitalization KW - Laboratory KW - Quality infrastructure KW - TIC KW - Testing PY - 2022 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-565346 UR - https://www.qi-fokus.de SP - 1 EP - 44 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-56534 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -