Zitieren Sie bitte immer diesen URN: urn:nbn:de:kobv:b43-513284

Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis

  • In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards.zeige mehrzeige weniger

Volltext Dateien herunterladen

Metadaten exportieren

Weitere Dienste

Teilen auf Twitter Suche bei Google Scholar Anzahl der Zugriffe auf dieses Dokument
Metadaten
Autor*innen:Mona MirtschORCiD, J. Kinne, K. Blind
Dokumenttyp:Zeitschriftenartikel
Veröffentlichungsform:Verlagsliteratur
Sprache:Englisch
Titel des übergeordneten Werkes (Englisch):IEEE Transactions on Engineering Management
Jahr der Erstveröffentlichung:2020
Organisationseinheit der BAM:S Qualitätsinfrastruktur
S Qualitätsinfrastruktur / S.2 Digitalisierung der Qualitätsinfrastruktur
Veröffentlichende Institution:Bundesanstalt für Materialforschung und -prüfung (BAM)
Jahrgang/Band:68
Ausgabe/Heft:1
Erste Seite:87
Letzte Seite:100
DDC-Klassifikation:Naturwissenschaften und Mathematik / Chemie / Analytische Chemie
Freie Schlagwörter:Adoption; Information security; Management system standards; Standards; Web mining
Themenfelder/Aktivitätsfelder der BAM:Chemie und Prozesstechnik
DOI:10.1109/TEM.2020.2977815
URN:urn:nbn:de:kobv:b43-513284
Verfügbarkeit des Dokuments:Datei für die Öffentlichkeit verfügbar ("Open Access")
Lizenz (Deutsch):License LogoCreative Commons - CC BY - Namensnennung 4.0 International
Datum der Freischaltung:30.09.2020
Referierte Publikation:Ja
Datum der Eintragung als referierte Publikation:04.01.2021
Schriftenreihen ohne Nummerierung:Wissenschaftliche Artikel der BAM
Einverstanden
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.