Filtern
Erscheinungsjahr
- 2021 (2) (entfernen)
Dokumenttyp
Sprache
- Englisch (2) (entfernen)
Schlagworte
- COVID-19 (1)
- Certification (1)
- Conformity assessment (1)
- Corona (1)
- Crisis (1)
- Digitalization (1)
- ISO/IEC 27001 (1)
- Information Security (1)
- Information security management system (ISMS) (1)
- Institutional theory (1)
- Laboratory (1)
- Management system standard (1)
- Pandemic (1)
- Preventive Innovation (1)
- Quality infrastructure (1)
- Resilience (1)
- Resource-based-view (1)
Organisationseinheit der BAM
Impact of the COVID-19 Pandemic on Conformity Assessment: Insights from a Multinational Study
(2021)
The COVID-19 pandemic has posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, are also affected by the associated disruptions. Their situation in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: Their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. Considering the roles and functions of CABs in economy, health, and innovation, the question arises how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported on average a negative development of demand during the pandemic, facing restrictions in all countries. In addition, the pandemic had overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as countermeasure, with CABs reporting an increased need for digitalization. Resources relevant to organizational resilience were available to different extents, affecting the speed of response to the challenges of the pandemic. The paper highlights and discusses results from in-depth analyses, which are relevant for policy makers and industry alike.
Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion.