TY - CONF A1 - Mirtsch, Mona A1 - Pohlisch, Jakob A1 - Blind, K. T1 - International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the role of culture N2 - In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research. T2 - Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference CY - Online meeting DA - 15.06.2020 KW - Information security KW - International diffusion KW - Standards KW - Management system standards KW - ISO/IEC 27001 KW - Preventive innovations KW - Culture KW - GLOBE KW - ICT development index PY - 2020 AN - OPUS4-50921 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. T1 - Exploring the Diffusion of the ISMS Standard ISO/IEC 27001 N2 - We presented and discussed the applicability of Web Mining to explore the Diffusion of Management System Standards, in particular in regards to Information Security T2 - EURAS Conference CY - Rome, Italy DA - 14.06.2019 KW - Diffusion KW - Management system standard KW - Information security KW - Web Mining PY - 2019 AN - OPUS4-49029 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. T1 - Introducing web mining of firm websites to explore innovation indicators using the example of management system standards N2 - Traditional innovation indicators often lack coverage, granularity as well as timeliness and involve high data collection costs, especially when conducted at a large scale. Based on the assumption that firms publish information about their products and services on their own websites, the Centre for European Economic Research in Mannheim (ZEW) has developed a framework to extract information from German firm websites applying Web Mining using a free-to-use web-scraping tool. Categorized as an intraorganizational procedural innovation, management system standards often lack research especially during the early stages of their diffusion mainly due to low data availability. Therefore, we introduce Web Mining to study the diffusion of the international management system standard ISO/IEC 27001 in Germany. Using the Mannheim Enterprise panel dataset, we first apply Web Mining to identify firms that refer to these and other common management system standards, followed by manual categorization. Second, we estimate a probit model to identify drivers for its implementation. Finally, we derive recommendations for policy makers. T2 - Collaborative research seminar series autumn 2019 CY - Linköping, Schweden DA - 26.11.2019 KW - Management System Standard KW - ISO/IEC 27001 KW - Information security KW - Web Mining PY - 2019 AN - OPUS4-49821 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER - TY - CONF A1 - Mirtsch, Mona A1 - Blind, K. T1 - Presentation at AVIC-Workshop: Exploring the diffusion of the information security management system standard ISO/IEC 27001 N2 - We explore the adoption and diffusion of the international information security management system standard ISO/IEC 27001 with Web Mining of German firm websites using the Mannheim Enterprise Panel dataset (MUP). T2 - Visit & Workshop of NQI Lab SAMR/AVIC and TU-Berlin CY - Berlin, Germany DA - 31.10.2019 KW - ISO/IEC 27001 KW - Web Mining KW - Information security PY - 2019 AN - OPUS4-49478 LA - eng AD - Bundesanstalt fuer Materialforschung und -pruefung (BAM), Berlin, Germany ER -