Filtern
Dokumenttyp
- Beitrag zu einem Tagungsband (5) (entfernen)
Sprache
- Englisch (5)
Referierte Publikation
- nein (5)
Schlagworte
- Information Security (2)
- COVID-19 (1)
- Certification (1)
- Conformity Assessment (1)
- Conformity assessment (1)
- Corona (1)
- Crisis (1)
- Culture (1)
- Cybersecurity (1)
- Digital Layer (1)
Organisationseinheit der BAM
- S.2 Digitalisierung der Qualitätsinfrastruktur (5) (entfernen)
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
Despite the increasing relevance of cybersecurity for companies’ performance, there is limited research on the adoption of ISO/IEC 27001, an international information security management standard. The aim of our study is to expand this limited body of literature. First, we analyse the influence of companies’ networks on the adoption of ISO/IEC 27001 as an organisational innovation based on firm website data and their hyperlinks, using the entire population of ISO/IEC 27001 certified firms identified via web mining. Second, we validate the method of constructing and analysing companies’ “digital layer” following the call for new methodological approaches to study the organisational adoption of innovations. Our findings reveal that companies' decision to adopt ISO/IEC 27001 increases significantly with their number of linkages to other companies and to those having the same certificate. Finally, their cognitive and organisational distances to linked partners have the expected inverted u-shaped influence on their own adoption decision.
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
Impact of the COVID-19 Pandemic on Conformity Assessment: Insights from a Multinational Study
(2021)
The COVID-19 pandemic has posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, are also affected by the associated disruptions. Their situation in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: Their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. Considering the roles and functions of CABs in economy, health, and innovation, the question arises how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported on average a negative development of demand during the pandemic, facing restrictions in all countries. In addition, the pandemic had overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as countermeasure, with CABs reporting an increased need for digitalization. Resources relevant to organizational resilience were available to different extents, affecting the speed of response to the challenges of the pandemic. The paper highlights and discusses results from in-depth analyses, which are relevant for policy makers and industry alike.