International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the Role of Culture

  • In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel dataIn the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.zeige mehrzeige weniger

Volltext Dateien herunterladen

  • ECIS_27001_Role_of_Culture.pdf
    eng

Metadaten exportieren

Weitere Dienste

Teilen auf Twitter Suche bei Google Scholar
Metadaten
Autoren/innen:Mona Mirtsch, Jakob Pohlisch, Knut Blind
Dokumenttyp:Beitrag zu einem Tagungsband
Veröffentlichungsform:Graue Literatur
Sprache:Englisch
Titel des übergeordneten Werkes (Englisch):AIS Electronic Library (AISeL)
Jahr der Erstveröffentlichung:2020
Organisationseinheit der BAM:S Qualitätsinfrastruktur
S Qualitätsinfrastruktur / S.2 Akkreditierung und Konformitätsbewertung
Herausgeber (Institution):Association for Information Systems
Erste Seite:RP 88
DDC-Klassifikation:Naturwissenschaften und Mathematik / Chemie / Analytische Chemie
Freie Schlagwörter:Culture; GLOBE; ICT development index; ISO/IEC 27001; Information security; International diffusion; Management system standards; Preventive innovations; Standards
Themenfelder/Aktivitätsfelder der BAM:Analytical Sciences
Analytical Sciences / Qualitätssicherung
Veranstaltung:Twenty-Eighth European Conference on Information Systems (ECIS2020) – A Virtual AIS Conference
Veranstaltungsort:Online meeting
Beginndatum der Veranstaltung:15.06.2020
Enddatum der Veranstaltung:17.06.2020
Verfügbarkeit des Dokuments:Datei im Netzwerk der BAM verfügbar ("Closed Access")
Datum der Freischaltung:22.06.2020
Referierte Publikation:Nein