TY - CONF A1 - Mirtsch, Mona A1 - Pohlisch, Jakob A1 - Blind, K. T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the Role of Culture N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 SP - RP 88 AN - OPUS4-50919 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the role of culture N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 AN - OPUS4-50921 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Denkler, Tilman T1 - EA-HHC - Analysis of the operation of accreditation bodies - Results of the 2nd round N2 - In 2019 the German federal institute Bundesanstalt für Materialforschung und –prüfung (BAM) conducted a benchmarking to compare the operations of European accreditation bodies and to identify best practices, with the aim of improving key processes in accreditation. Ten European accreditation bodies attended the comparison, four of which had already taken part in the pilot phase of the benchmarking project, which was conducted in 2017 by the German accreditation body Deutsche Akkreditierungsstelle GmbH (DAkkS) and the BAM. The study, designed to examine and compare the operation of accreditation bodies in Europe, used a management tool called Process Maturity Benchmarking Tool, which was especially elaborated and validated for this purpose in the pilot phase, in order to determine the values of indicators, thus enabling a comparison of the accreditation bodies despite different operational processes and organizational forms. The management tool is based on the analysis of selected processes with high relevance for the operation of accreditation bodies. The processes are derived from a process map designed for accreditation bodies in a universally applicable way. The indicators used to characterize the processes come from two sources: The first source relates to data already available from internal databases, reports, financial audits, and others. The second source is derived from the self-evaluation of process maturity performed by the accreditation bodies. The criteria for evaluating process maturities were designed by applying the criteria of the EFQM excellence model 2013 of the European Foundation for Quality Management (EFQM) to the processes identified in the process map. The results of the analysis were presented to and discussed with representatives of the ten accreditation bodies at a Results-Workshop that took place at BAM on 21/22 January 2020. In this presentation a wrap-up of the results was given to the HHC of EA T2 - Tagung des HHC (horizontal harmonization committee) der EA (European co-operation for accreditation) (virtuelles Meeting per MS-Teams, ca. 55 Teilnehmer) CY - Online meeting DA - 15.09.2020 KW - Accreditation KW - Benchmarking PY - 2020 AN - OPUS4-51251 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Mirtsch, Mona A1 - Kinne, J. A1 - Blind, K. T1 - Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis N2 - In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards. KW - Adoption KW - Information security KW - Management system standards KW - Standards KW - Web mining PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-513284 DO - https://doi.org/10.1109/TEM.2020.2977815 VL - 68 IS - 1 SP - 87 EP - 100 AN - OPUS4-51328 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Koch, Claudia T1 - Nutzung und Wirkung von (zertifizierten) Managementsystemen – aktuelle Erkenntnisse N2 - Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität - DGQ zur Nutzung und Wirkung von genormten Managementsystemen als die erste Erhebung im Rahmen von QI-FoKuS. Neben der Motivation hinsichtlich der Anwendung verschiedener Normen, die Anforderungen an Managementsysteme darlegen, sowie den Wirkungen werden insbesondere die Zertifizierung für diese Normen sowie daran anknüpfend die Rolle und Funktion der Akkreditierung – und somit verschiedene Bausteine der QI – adressiert. T2 - Mitgliederexklusives Webinar CY - Online meeting DA - 15.10.2020 KW - Management Systeme KW - QI-FoKuS KW - ISO 9001 KW - ISO/IEC 27001 KW - Zertifizierung KW - Kundenaudit KW - Konformitätsbewertung KW - Akkreditierung PY - 2020 AN - OPUS4-51431 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - GEN A1 - Nisi, A. A1 - Koch, Claudia A1 - Mirtsch, Mona A1 - Blind, K. T1 - Effetti della pandemia COVID-19 sulle attività di valutazione della conformità svolte da organismi e laboratori accreditati in Italia N2 - Die Studie fasst Ergebnisse einer Befragung von Konformitätsbewertungsstellen in Italien zu deren Lage und den Aussichten während der Corona-Pandemie zusammen. Besondere Schwerpunkte wurden auf die wirtschaftlichen Auswirkungen und die Arbeitsfähigkeit, aber auch auf die Resilienz und die Wirkungen auf die Digitalisierung gelegt. N2 - Lo scoppio della pandemia da Covid-19 ha travolto Italia a inizio anno e i suoi effetti sull’economia sono stati particolarmente pesanti. Proprio per analizzare gli effetti della pandemia sul mercato della valutazione della conformità, lo scorso settembre Accredia, in collaborazione con l’Istituto Federale tedesco della Ricerca e del Collaudo dei Materiali (BAM), la Technische Universität di Berlino e l’Istituto Fraunhofer ISI, ha condotto un’indagine presso gli organismi e i laboratori accreditati in Italia. KW - Corona KW - Konformitätsbewertungsstellen KW - Resilienz KW - COVID-19 KW - Qualitätsinfrastruktur KW - Zertifizierung KW - Kalibrierung KW - Digitalisierung KW - Konformitätsbewertung KW - Laboratorium KW - Prüfung PY - 2020 UR - https://www.accredia.it/pubblicazione/corona-monitor-effetti-della-pandemia-da-covid-19-sulle-attivita-accreditate/ SP - 1 EP - 22 CY - Rom, Italien AN - OPUS4-51975 LA - ita AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Denkler, Tilman T1 - Comparison of the Operation of Accreditation Bodies in Europe - Final Report 2nd Round N2 - In 2019 the Bundesanstalt für Materialforschung und –prüfung (BAM) conducted a benchmarking to compare the operations of European accreditation bodies and to identify best practices, with the aim of improving key processes in accreditation. Ten European accreditation bodies attended the comparison, four of which had already taken part in the pilot phase of the benchmarking project, which was conducted in 2017 by the German accreditation body Deutsche Akkreditierungsstelle GmbH (DAkkS) and BAM. The study, designed to examine and compare the operation of accreditation bodies in Europe, used a management tool called Process Maturity Benchmarking Tool, which was especially elaborated and validated for this purpose in the pilot phase, in order to determine the values of indicators, thus enabling a comparison of the accreditation bodies despite different operational processes and organizational forms. The management tool is based on the analysis of selected processes with high relevance for the operation of accreditation bodies. The processes are derived from a process map designed for accreditation bodies in a universally applicable way. The indicators used to characterize the processes come from two sources: The first source relates to data already available from internal databases, reports, financial audits, and others. The second source is derived from the self-evaluation of process maturity performed by the accreditation bodies. The criteria for evaluating process maturities were designed by applying the criteria of the EFQM excellence model 2013 of the European Foundation for Quality Management (EFQM) to the processes identified in the process map. The results of the analysis were presented to and discussed with representatives of the ten accreditation bodies at a Results-Workshop that took place at BAM on 21/22 January 2020. KW - Akkreditierung KW - Accreditation KW - Benchmarking KW - EFQM Excellence Modell KW - Quality Infrastructure KW - Total Quality Management PY - 2020 SP - 1 EP - 70 AN - OPUS4-54712 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - JOUR A1 - Koch, Claudia A1 - Blind, K. T1 - Towards Agile Standardization: Testbeds in Support of Standardization for the IIoT N2 - The Industrial Internet of Things (IIoT) poses multiple challenges to traditional standardization, due to the complexity, dynamics, and accelerating speed of technological progress. The need for a timely availability of standards calls for new approaches and tools to enhance standardization processes for smart manufacturing. Industry and standards development organizations worldwide are seeking new solutions. Testbeds have been acknowledged in innovation policy as a powerful tool for knowledge transfer and the further development of emerging technologies. Lately, they have also attracted increasing attention from the standardization perspective as a promising tool for a more agile standards development process. Proponents of such testbeds expect them to support standardization by providing validated solutions and accelerating the processes to meet the growing demands for faster standardization without any detriment to quality. In an explorative, qualitative approach this article is the first to investigate the operation and impact of testbeds in standardization processes based on a multiple case study on testbeds implemented worldwide in the context of the IIoT. KW - Testumgebung KW - Reallabor KW - Normung KW - Standards KW - Standardization KW - Industrie 4.0 KW - Smart manufacturing KW - Industrial internet of things KW - Agility KW - Agile PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-513300 DO - https://doi.org/10.1109/TEM.2020.2979697 VL - 68 IS - 1 SP - 59 EP - 74 AN - OPUS4-51330 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Koch, Claudia A1 - Mirtsch, Mona T1 - Corona-Monitor - Auswirkungen der Corona-Pandemie auf Konformitätsbewertung und Konformitätsbewertungsstellen in Deutschland: Ergebnispräsentation zur Befragung im Juni 2020 N2 - Im Vortrag wurden die Ergebnisse der von BAM gemeinsam mit der TU Berlin und Fraunhofer ISI durchgeführten Befragung zur Lage der Konformitätsbewertungsstellen während der Corona-Pandemie vorgestellt und mit den Teilnehmer*innen diskutiert. Schwerpunkte lagen auf den wirtschaftlichen Auswirkungen (Aufträge, Arbeitsfähigkeit, Existenz), der Resilienz der Branche sowie den Wirkungen auf die Digitalisierung. Mehr Informationen unter www.qi-fokus.de. T2 - QI-FoKuS - Forschung für Konformitätsbewertung und Sicherheit CY - Online meeting DA - 08.10.2020 KW - Konformitätsbewertung KW - Konformitätsbewertungsstellen KW - Corona KW - COVID-19 KW - Prüfung KW - Zertifizierung KW - Resilienz KW - Digitalisierung KW - QI-FoKuS PY - 2020 UR - http://www.qi-fokus.de AN - OPUS4-51407 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - RPRT A1 - Mirtsch, Mona A1 - Koch, Claudia A1 - Dudek, Gabriele A1 - Blind, K. T1 - Die Nutzung und Wirkung genormter Managementsysteme N2 - Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen. Ende 2019 wurden in einer ersten Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung von Managementsystemen und ihren Wirkungen befragt. Diese umfasste weit verbreitete genormte Managementsysteme wie ISO 9001 und ISO 14001 genauso wie bisher wenig untersuchte Systeme wie die ISO 50001 oder ISO/IEC 27001. Es konnten 180 Fragebögen für die vorliegende Studie ausgewertet werden. KW - QI-FoKuS KW - Managementsysteme KW - ISO 9001 KW - ISO/IEC 27001 KW - ISO 50001 KW - ISO 14001 KW - Zertifizierung KW - Konformitätsbewertung KW - Akkreditierung PY - 2020 UR - https://nbn-resolving.org/urn:nbn:de:kobv:b43-510831 SN - 978-3-9818564-3-9 DO - https://doi.org/10.26272/opus4-51083 VL - 1 SP - 1 EP - 44 PB - Bundesanstalt für Materialforschung und -prüfung (BAM) CY - Berlin AN - OPUS4-51083 LA - deu AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -