Anmelden

Open Access

  • Startseite
  • Suchen
  • Browsen
  • Veröffentlichen
  • Hilfe

Filtern

Autor*in

  • Mirtsch, Mona (23)
  • Koch, Claudia (8)
  • Blind, K. (6)
  • Blind, Knut (2)
  • Dudek, Gabriele (2)
  • Egyedi, T. (1)
  • Eto, M. (1)
  • Fertig, S. (1)
  • Jacobs, K. (1)
  • Kanevskaia, O. (1)
+ weitere

Erscheinungsjahr

  • 2021 (1)
  • 2020 (9)
  • 2019 (10)
  • 2018 (3)

Dokumenttyp

  • Vortrag (12)
  • Beitrag zu einem Tagungsband (3)
  • Forschungsbericht (3)
  • Zeitschriftenartikel (2)
  • Sonstiges (2)
  • Buchkapitel (1)

Sprache

  • Deutsch (11)
  • Englisch (11)
  • Italienisch (1)

Referierte Publikation

  • nein (22)
  • ja (1)

Schlagworte

  • Konformitätsbewertung (9)
  • Zertifizierung (9)
  • ISO/IEC 27001 (8)
  • Information security (6)
  • QI-FoKuS (6)
  • Web Mining (5)
  • COVID-19 (4)
  • Corona (4)
  • Digitalisierung (4)
  • Managementsysteme (4)
+ weitere

Organisationseinheit der BAM

  • S Qualitätsinfrastruktur (23)
  • S.2 Akkreditierung und Konformitätsbewertung (23)

23 Treffer

  • 1 bis 10
  • CSV
  • RIS
  • 10
  • 20
  • 50
  • 100

Sortieren nach

  • Jahr
  • Jahr
  • Titel
  • Titel
  • Autor*in
  • Autor*in
The Role of Conformity Assessment in the Digital Transformation: Focusing on Cybersecurity (2018)
Mirtsch, Mona
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
The Role of Conformity Assessment in the Digital Transformation: Focusing on Cybersecurity (2018)
Mirtsch, Mona
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
Standardization: Towards an agenda for research (2018)
de Vries, H. ; Jacobs, K. ; Egyedi, T. ; Eto, M. ; Fertig, S. ; Kanevskaia, O. ; Klintner, L. ; Koch, Claudia ; Mijatovic, I. ; Mirtsch, Mona ; Morone, P. ; Orviska, M. ; Riillo, C. ; Scaramuzzino, G.
Standardization research is a fairly new and is a still-evolving field of research, with possibly major practical ramifications. This article presents a summary of the authors’ subjective views of the most pressing research topics in the field. These include, among others, standards (e.g. incorporation of ethical issues), the potential impact of standards, the corporate management of standardization and legal issues like Intellectual Property Rights (IPR). In addition, gaps have been identified with a respect to a basic understanding of standardization, suggesting a need for better education in the field.
Die Nutzung und Wirkung genormter Managementsysteme (2020)
Mirtsch, Mona ; Koch, Claudia ; Dudek, Gabriele ; Blind, K.
Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen. Ende 2019 wurden in einer ersten Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung von Managementsystemen und ihren Wirkungen befragt. Diese umfasste weit verbreitete genormte Managementsysteme wie ISO 9001 und ISO 14001 genauso wie bisher wenig untersuchte Systeme wie die ISO 50001 oder ISO/IEC 27001. Es konnten 180 Fragebögen für die vorliegende Studie ausgewertet werden.
International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the role of culture (2020)
Mirtsch, Mona
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
International Diffusion of the Information Security Management System Standard ISO/IEC 27001: Exploring the Role of Culture (2020)
Mirtsch, Mona ; Pohlisch, Jakob ; Blind, Knut
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
Exploring the Adoption of the International Information Security Management System Standard ISO/IEC 27001: A Web Mining-Based Analysis (2020)
Mirtsch, Mona ; Kinne, Jan ; Blind, Knut
In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards.
Nutzung und Wirkung von (zertifizierten) Managementsystemen – aktuelle Erkenntnisse (2020)
Mirtsch, Mona ; Koch, Claudia
Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität - DGQ zur Nutzung und Wirkung von genormten Managementsystemen als die erste Erhebung im Rahmen von QI-FoKuS. Neben der Motivation hinsichtlich der Anwendung verschiedener Normen, die Anforderungen an Managementsysteme darlegen, sowie den Wirkungen werden insbesondere die Zertifizierung für diese Normen sowie daran anknüpfend die Rolle und Funktion der Akkreditierung – und somit verschiedene Bausteine der QI – adressiert.
Corona-Monitor - Auswirkungen der Corona-Pandemie auf Konformitätsbewertung und Konformitätsbewertungsstellen in Deutschland: Ergebnispräsentation zur Befragung im Juni 2020 (2020)
Koch, Claudia ; Mirtsch, Mona
Im Vortrag wurden die Ergebnisse der von BAM gemeinsam mit der TU Berlin und Fraunhofer ISI durchgeführten Befragung zur Lage der Konformitätsbewertungsstellen während der Corona-Pandemie vorgestellt und mit den Teilnehmer*innen diskutiert. Schwerpunkte lagen auf den wirtschaftlichen Auswirkungen (Aufträge, Arbeitsfähigkeit, Existenz), der Resilienz der Branche sowie den Wirkungen auf die Digitalisierung. Mehr Informationen unter www.qi-fokus.de.
Vorstellung BAM Initiative: QI-FoKuS (2019)
Mirtsch, Mona
Mit QI-FoKuS / Forschung für Konformitätsbewertung und Sicherheit streben wir auf Basis einer wiederkehrenden Befragung von Unternehmen und Konformitätsbewertungsstellen in Deutschland die Schaffung einer besseren Datengrundlage für die Forschung an. Diese soll es erleichtern, wichtige Zusammenhänge evidenzbasiert zu analysieren, um das systemische Zusammenwirken der Elemente der Qualitätsinfrastruktur besser zu verstehen. Dabei sollen zunächst die Elemente Konformitätsbewertung und Akkreditierung besonders im Vordergrund stehen.
  • 1 bis 10

OPUS4 Logo

  • Kontakt
  • Impressum
  • Sitelinks