Filtern
Dokumenttyp
- Vortrag (13)
- Zeitschriftenartikel (7)
- Beitrag zu einem Tagungsband (5)
- Forschungsbericht (3)
- Sonstiges (2)
- Buchkapitel (1)
Sprache
- Englisch (18)
- Deutsch (12)
- Italienisch (1)
Schlagworte
- ISO/IEC 27001 (11)
- Zertifizierung (10)
- Konformitätsbewertung (9)
- Information security (7)
- QI-FoKuS (7)
- COVID-19 (6)
- Certification (6)
- Corona (6)
- Managementsysteme (5)
- Web Mining (5)
Organisationseinheit der BAM
Eingeladener Vortrag
- nein (13)
Against the backdrop of numerous security breaches and cyber-attacks, organizations need to take measures to secure their data and information. However, the well-known management system standard ISO/IEC 27001 for information security has shown a lower adoption rate – in terms of annual ISO survey data – than was previously expected by scholars and practitioners. Through the lens of Rogers' diffusion of innovation theory, we consider the adoption of ISO/IEC 27001 as a 'preventive innovation' and aim to identify factors that help gain a better understanding of its adoption. Therefore, we conducted a survey among German organizations on the use and impact of management system standards, explicitly distinguishing between organizations that implement ISO/IEC 27001 and those that are additionally certified against this standard. This study provides insights and contributes to an advanced understanding of motives, impacts, barriers, and useful measures to increase adoption of ISO/IEC 27001. Our findings may be useful to organizations considering the adoption of this management system standard, to certification bodies providing certification services, and to policymakers seeking means to improve information security in organizations.
The COVID-19 pandemic posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, were also affected by the associated disruptions. Their role in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. The question arises of how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported, on average, a reduction in demand for their services during the pandemic, facing restrictions in all countries. In addition, the pandemic had an overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as a countermeasure, with CABs reporting a higher need for digitalization. The paper highlights and discusses results from in-depth analyses relevant to policymakers and industry alike.
Global supply chains rely on the compliance and safety of their products, processes, and facilities. These vital services (often referred to as ‘quality assurance’ or ‘conformity assessment’ services) are provided by Conformity Assessment Bodies (CABs). This empirical study explores the impact of the COVID-19 pandemic on CABs as well as their response to the resulting challenges. Data was gathered through an online survey among all accredited CABs in Germany, which resulted in 555 valid responses. Taking a resilience perspective, we reveal that CABs were hit hard by the disruptions caused by the pandemic, albeit to different degrees, in part due to their type of services, size, and sectors served. Furthermore, we find that contingency plans do not directly cushion order declines (as the main indicator of the economic impact of the pandemic) but rather indirectly through helping CABs respond more quickly, which in turn mitigates their order declines. However, our results show that contingency plans can also have adverse effects if they hinder flexible reaction to the crisis. The findings of our study help managers and policymakers learn from the COVID-19 pandemic and improve the resilience of the conformity assessment sector and quality assurance in the event of future crises.
Despite the increasing relevance of cybersecurity for companies’ performance, there is limited research on the adoption of ISO/IEC 27001, an international information security management standard. The aim of our study is to expand this limited body of literature. First, we analyse the influence of companies’ networks on the adoption of ISO/IEC 27001 as an organisational innovation based on firm website data and their hyperlinks, using the entire population of ISO/IEC 27001 certified firms identified via web mining. Second, we validate the method of constructing and analysing companies’ “digital layer” following the call for new methodological approaches to study the organisational adoption of innovations. Our findings reveal that companies' decision to adopt ISO/IEC 27001 increases significantly with their number of linkages to other companies and to those having the same certificate. Finally, their cognitive and organisational distances to linked partners have the expected inverted u-shaped influence on their own adoption decision.
Covid 19 stellt Gesellschaft und Wirtschaft vor immense Herausforderungen – auch die Konformitätsbewertungsbranche ist betroffen. Die Bundesanstalt für Materialforschung und -prüfung (BAM) hat gemeinsam mit der TU Berlin und
dem Fraunhofer ISI die Auswirkungen der Pandemie auf die wirtschaftliche und operative Lage von Konformitätsbewertungsstellen in Deutschland untersucht. Dabei standen auch die Digitalisierung sowie die Resilienz der Branche im
Fokus.
Informationssicherheit in deutschen Unternehmen: Ergebnisse der QI-FoKuS Umfrage zur ISO/IEC 27001
(2021)
Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität (DGQ) zur Studie: "Nutzung und Wirkung von einem ISMS nach ISO/IEC 27001". Neben Zweck und Design der Studie werden sowohl Hürden bei der Implementierung, fördernde Maßnahmen, die Anwender nützlich finden und die Frage, warum Firmen diese Norm nicht nutzen, erörtert.
Smart Products Enable Smart Regulations—Optimal Durability Requirements Facilitated by the IoT
(2021)
The challenges and opportunities linked with IoT have been intensively discussed in recent years. The connectivity of things over their entire life cycle and the smart properties associated with it provide new functionalities and unprecedented availability of (usage) data. This offers huge opportunities for manufacturers, service providers, users, and also policymakers. The latter May impact policy areas such as the regulations on resource and materials efficiency under the Ecodesign Directive 2009/125/EC. With the general approach as it is practiced today, legal requirements are usually set for entire product groups without considering the products individually, including user behavior and environmental conditions. The increasing number of smart products and the growing availability of product data are sparking a discussion on whether these requirements could be more product and application-specific. This paper presents a method for calculating the economically and ecologically optimal durability of a product. It allows determining the point in time when a product should be replaced by combining consumer data with product design data. This novel Approach could contribute to making product regulation more flexible and possibly more efficient. In this context, fundamental challenges associated with smart products in policymaking are also discussed.
Impact of the COVID-19 Pandemic on Conformity Assessment: Insights from a Multinational Study
(2021)
The COVID-19 pandemic has posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, are also affected by the associated disruptions. Their situation in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: Their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. Considering the roles and functions of CABs in economy, health, and innovation, the question arises how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported on average a negative development of demand during the pandemic, facing restrictions in all countries. In addition, the pandemic had overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as countermeasure, with CABs reporting an increased need for digitalization. Resources relevant to organizational resilience were available to different extents, affecting the speed of response to the challenges of the pandemic. The paper highlights and discusses results from in-depth analyses, which are relevant for policy makers and industry alike.
Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion.
Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität - DGQ zur Nutzung und Wirkung von genormten Managementsystemen als die erste Erhebung im Rahmen von QI-FoKuS. Neben der Motivation hinsichtlich der Anwendung verschiedener Normen, die Anforderungen an Managementsysteme darlegen, sowie den Wirkungen werden insbesondere die Zertifizierung für diese Normen sowie daran anknüpfend die Rolle und Funktion der Akkreditierung – und somit verschiedene Bausteine der QI – adressiert.