Zitieren Sie bitte immer diesen URN: urn:nbn:de:kobv:b43-594704
Adoption of the information security management system standard ISO/IEC 27001 - A study among German organizations
- Against the backdrop of numerous security breaches and cyber-attacks, organizations need to take measures to secure their data and information. However, the well-known management system standard ISO/IEC 27001 for information security has shown a lower adoption rate – in terms of annual ISO survey data – than was previously expected by scholars and practitioners. Through the lens of Rogers' diffusion of innovation theory, we consider the adoption of ISO/IEC 27001 as a 'preventive innovation' and aim to identify factors that help gain a better understanding of its adoption. Therefore, we conducted a survey among German organizations on the use and impact of management system standards, explicitly distinguishing between organizations that implement ISO/IEC 27001 and those that are additionally certified against this standard. This study provides insights and contributes to an advanced understanding of motives, impacts, barriers, and useful measures to increase adoption of ISO/IEC 27001.Against the backdrop of numerous security breaches and cyber-attacks, organizations need to take measures to secure their data and information. However, the well-known management system standard ISO/IEC 27001 for information security has shown a lower adoption rate – in terms of annual ISO survey data – than was previously expected by scholars and practitioners. Through the lens of Rogers' diffusion of innovation theory, we consider the adoption of ISO/IEC 27001 as a 'preventive innovation' and aim to identify factors that help gain a better understanding of its adoption. Therefore, we conducted a survey among German organizations on the use and impact of management system standards, explicitly distinguishing between organizations that implement ISO/IEC 27001 and those that are additionally certified against this standard. This study provides insights and contributes to an advanced understanding of motives, impacts, barriers, and useful measures to increase adoption of ISO/IEC 27001. Our findings may be useful to organizations considering the adoption of this management system standard, to certification bodies providing certification services, and to policymakers seeking means to improve information security in organizations.…
Autor*innen: | Mona MirtschORCiD |
---|---|
Dokumenttyp: | Zeitschriftenartikel |
Veröffentlichungsform: | Verlagsliteratur |
Sprache: | Englisch |
Titel des übergeordneten Werkes (Englisch): | International Journal for Quality Research |
Jahr der Erstveröffentlichung: | 2023 |
Organisationseinheit der BAM: | S Qualitätsinfrastruktur |
S Qualitätsinfrastruktur / S.2 Digitalisierung der Qualitätsinfrastruktur | |
Veröffentlichende Institution: | Bundesanstalt für Materialforschung und -prüfung (BAM) |
Verlag: | Center for Quality, University of Montenegro |
Verlagsort: | Podgorica |
Jahrgang/Band: | 17 |
Ausgabe/Heft: | 3 |
Erste Seite: | 747 |
Letzte Seite: | 768 |
DDC-Klassifikation: | Naturwissenschaften und Mathematik / Chemie / Analytische Chemie |
Freie Schlagwörter: | Certification; ISO/IEC 27001; Information security; Management science and operations research; Management system standard; QI-FoKuS |
Themenfelder/Aktivitätsfelder der BAM: | Chemie und Prozesstechnik |
DOI: | 10.24874/ijqr17.03-08 |
URN: | urn:nbn:de:kobv:b43-594704 |
URL: | http://ijqr.net/paper.php?id=1098 |
ISSN: | 1800-6450 |
ISSN: | 1800-7473 |
Verfügbarkeit des Dokuments: | Datei für die Öffentlichkeit verfügbar ("Open Access") |
Lizenz (Deutsch): | Creative Commons - CC BY-NC - Namensnennung - Nicht kommerziell 4.0 International |
Datum der Freischaltung: | 02.02.2024 |
Referierte Publikation: | Ja |
Datum der Eintragung als referierte Publikation: | 02.02.2024 |
Schriftenreihen ohne Nummerierung: | Wissenschaftliche Artikel der BAM |