TY - JOUR A1 - Mirtsch, Mona A1 - Blind, K. A1 - Koch, Claudia A1 - Dudek, Gabriele T1 - Information security management in ICT and non-ICT sector companies: A preventive innovation perspective JF - Computers & Security N2 - Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion. KW - Information Security KW - ISO/IEC 27001 KW - Management system standard KW - Certification KW - Information security management system (ISMS) KW - Preventive Innovation KW - Resource-based-view KW - Institutional theory PY - 2021 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-531037 DO - https://doi.org/10.1016/j.cose.2021.102383 SN - 0167-4048 VL - 109 IS - 10 SP - 1 EP - 23 PB - Elsevier Ltd. AN - OPUS4-53103 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Mirtsch, Mona A1 - Blind, K. A1 - Castka, P. T1 - National Quality Infrastructures in the COVID-19 Pandemic: Insights from a Multinational Study on Impacts and Institutional Responses of Conformity Assessment Bodies N2 - The COVID-19 pandemic has posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, which are a key part of the Quality Infrastructure and constitute central pillars for trade, health and the innovation system, are also affected by the associated disruptions. However, their services matter more than ever. We present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand to highlight and compare economic impacts, the resilience of this industry as well as issues of digitalization. T2 - Eu-SPRI 2021 Conference: Science and innovation - an uneasy relationship? CY - Online meeting DA - 09.06.2021 KW - Konformitätsbewertung KW - COVID-19 KW - Corona KW - Qualitätsinfrastruktur KW - Conformity Assessment KW - Certification KW - Testing KW - Resilience PY - 2021 AN - OPUS4-52789 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Koch, Claudia A1 - Asna Ashari, Parsa A1 - Mirtsch, Mona A1 - Blind, K. A1 - Castka, P. T1 - Impact of the COVID-19 pandemic on accredited conformity assessment bodies: insights from a multinational study JF - Accreditation and Quality Assurance N2 - The COVID-19 pandemic posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, were also affected by the associated disruptions. Their role in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. The question arises of how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported, on average, a reduction in demand for their services during the pandemic, facing restrictions in all countries. In addition, the pandemic had an overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as a countermeasure, with CABs reporting a higher need for digitalization. The paper highlights and discusses results from in-depth analyses relevant to policymakers and industry alike. KW - Quality Infrastructure KW - Digitalization KW - Testing laboratories KW - Conformity assessment KW - Certification KW - Conformity assessment body KW - Corona KW - Covid-19 KW - Resilience PY - 2022 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-556396 DO - https://doi.org/10.1007/s00769-022-01514-x SP - 1 EP - 14 PB - Springer AN - OPUS4-55639 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona ED - Jakobs, K. ED - O'Connor, R.V. T1 - The Role of Conformity Assessment in the Digital Transformation: Focusing on Cybersecurity T2 - EURAS Proceedings 2018 - Standards for a Smarter Future N2 - Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation. T2 - 23rd EURAS Annual Standardisation Conference "Standards for a Smarter Future" CY - Dublin, Irland DA - 13.06.2018 KW - Conformity Assessment KW - Cybersecurity KW - Certification KW - IT-Security PY - 2018 SN - 978-3-95886-229-6 VL - 2018 SP - 183 EP - 202 PB - Verlagshaus Mainz GmbH Aachen CY - Aachen AN - OPUS4-45686 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Dudek, Gabriele A1 - Mirtsch, Mona T1 - The German Conformity Assessment Panel N2 - The presentation summarizes the economic research activities at Department S concerning Quality Infrastructure. It introduces the new tool "QI-FoKuS" - an annual company survey in Germany, seeking to provide data on conformity assessment and accreditation in Germany. The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies. T2 - Visit & Workshop at CCAI CY - Beijing, China DA - 10.01.2019 KW - Confromity Assessment KW - Konformitätsbewertung KW - Umfrage KW - Certification KW - Zertifizierung KW - Qualitätsinfrastruktur KW - QI-FoKuS PY - 2019 AN - OPUS4-50089 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Hahn, Marc Benjamin T1 - Reference Materials at BAM N2 - A introduction into reference materials, the certification process and brief over current reference projects at BAM is given. T2 - AK-Postdoc seminar CY - BAM Berlin, Germany DA - 02.02.2021 KW - Referenzmaterialien KW - Reference material KW - Homogeneity KW - Stability KW - Quality testing KW - Analytic KW - DNA KW - Dosimetry KW - Certification PY - 2021 AN - OPUS4-52060 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele T1 - Presentation at AVIC-Workshop: BAM initiative QI-FoKuS N2 - QI-FoKuS stands for „Quality Infrastructure – Research for Conformity Assessment and Safety“. Supported by the BMWi, a new recurring survey of companies was launched under this name in end-September 2019 in a joint project between the TU Berlin and the Federal Institute for Materials Research and Testing (BAM). The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies. T2 - Visit & Workshop of NQI Lab SAMR/AVIC and BAM CY - Berlin, Germany DA - 29.10.2019 KW - Conformity Assessment KW - Information Security KW - Accreditation KW - Certification KW - QI-FoKuS PY - 2019 AN - OPUS4-49477 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Hahn, Marc Benjamin T1 - DNA based Reference Materials: In Biodosimetry and Pharmaceutical Quality Control N2 - Applications of plasmid DNA base reference materials in dosimetry and pharmaceutical research. T2 - Physical and Chemical Analysis of Polymers seminar CY - Online meeting DA - 29.03.2021 KW - Analytic KW - Certification KW - DNA KW - Dosimetry KW - Homogeneity KW - Quality testing KW - Reference material KW - Referenzmaterialien KW - Stability KW - Dose KW - Radiation KW - Pharmacy KW - Electrohpresis PY - 2021 AN - OPUS4-52361 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona T1 - The Role of Conformity Assessment in the Digital Transformation: Focusing on Cybersecurity N2 - Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation. T2 - 23rd EURAS Annual Standardisation Conference "Standards for a Smarter Future" CY - Dublin, Irland DA - 13.06.2018 KW - Cybersecurity KW - Certification KW - Conformity Assessment KW - IT-Security PY - 2018 AN - OPUS4-45687 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Heinrich, Hans-Joachim A1 - Richter, Silke A1 - Recknagel, Sebastian T1 - Certification of the mass fractions of trace elements in a medium purity graphite reference material N2 - The increasing application of graphite materials in various fields of technology and science enhances the demand for strictly controlled properties which are often directly correlated to the contents of trace element impurities. Therefore, the availability of powerful, rapid and reliable analytical methods for the determination of trace impurities is essential for process and quality control. Certified reference materials, indispensable for the development and validation of appropriate trace analytical methods for the characterization of special purity graphite materials are still lacking. Therefore, BAM in co-operation with the working group “Special Materials” of the committee of chemists of GDMB (Gesellschaft der Metallurgen und Bergleute e.V.) certified an industrially sourced graphite material with genuine elemental impurities. The candidate material was a commercial product (NBG 18) taken from the customary production line of the producer SGL CARBON, Chedde (France). The homogeneity of the powdered material was assessed by means of ETV-ICP OES and DC Arc-OES. Certification of the candidate reference material was based on an inter-laboratory comparison involving 17 expert laboratories from Germany, France, Slovenia, USA, South Africa. A variety of different mineralization, digestion, leaching, fusion and combustion techniques prior to ICP OES and photometry, methods without sample preparation (INAA, k0-INAA) as well as typical solid sampling methods (ETV-ICP OES, ETV-ICP-MS, SS-ET AAS, DC Arc-OES, MF-DC Arc-OES) were used to characterise the material. Certified mass fractions and their expanded uncertainties (k = 2) were assigned for 27 elements (Al, B, Ba, Be, Ca, Co, Cr, Cu, Fe, K, Li, Mg, Mn, Mo, Na, Ni, P, Pb, S, Si, Sr, Ti, V, W, Y, Zn, Zr), ranging from (0.00050 ± 0.00027) mg/kg for Be to (41 ± 6) mg/kg for Si. Additionally, informative values are given for the: trace element contents of Ag, As, Au, Bi, Cd, Cs, Dy, Eu, Ga, Gd, Hg, In, La, Nb, Rb, Re, Rh, Sb, Sc, Se, Sm, Sn, Ta, Tb, Te, Th, U; method specific values obtained by ETV-ICP OES (BETV and SiETV) and the ash content of the material. The certified material “BAM-S009 Medium Purity Graphite Powder” is available for purchase from BAM. T2 - ESAS & CANAS 2018 CY - Berlin, Germany DA - 20.03.2018 KW - Graphite KW - Certification KW - Trace elements KW - Reference material PY - 2018 AN - OPUS4-44775 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -