Filtern
Dokumenttyp
- Vortrag (13)
- Zeitschriftenartikel (7)
- Beitrag zu einem Tagungsband (5)
- Forschungsbericht (3)
- Sonstiges (2)
- Buchkapitel (1)
Sprache
- Englisch (18)
- Deutsch (12)
- Italienisch (1)
Schlagworte
- ISO/IEC 27001 (11)
- Zertifizierung (10)
- Konformitätsbewertung (9)
- Information security (7)
- QI-FoKuS (7)
- COVID-19 (6)
- Certification (6)
- Corona (6)
- Managementsysteme (5)
- Web Mining (5)
- Digitalisierung (4)
- Information Security (4)
- Management system standard (4)
- Resilienz (4)
- Akkreditierung (3)
- Conformity Assessment (3)
- Conformity assessment (3)
- Cybersecurity (3)
- Digitalization (3)
- Informationssicherheit (3)
- Konformitätsbewertungsstellen (3)
- Management system standards (3)
- Prüfung (3)
- Qualitätsinfrastruktur (3)
- Standards (3)
- Culture (2)
- Cybersecurity Act (2)
- Cybersicherheit (2)
- GLOBE (2)
- ICT development index (2)
- ISO 9001 (2)
- IT-Security (2)
- International diffusion (2)
- Kalibrierung (2)
- Laboratorium (2)
- Management System Standard (2)
- Management Systeme (2)
- Preventive innovations (2)
- Quality Infrastructure (2)
- Resilience (2)
- Testing laboratories (2)
- Accreditation (1)
- Adoption (1)
- Befragung (1)
- Conformity assessment body (1)
- Connectivity (1)
- Covid-19 (1)
- Crisis (1)
- Diffusion (1)
- Digital Layer (1)
- EURAS (1)
- Ecodesign (1)
- Hyperlinks (1)
- ISO 14001 (1)
- ISO 50001 (1)
- Impact of standards (1)
- Information security management system (ISMS) (1)
- Inspektion (1)
- Institutional theory (1)
- Intellectual property rights (IPR) (1)
- Internet of Things (1)
- Kundenaudit (1)
- Labor (1)
- Laboratory (1)
- Management science and operations research (1)
- Normen (1)
- Organizational resilience (1)
- Pandemic (1)
- Policy making (1)
- Preventive Innovation (1)
- Quality infrastructure (1)
- Qualitätssicherung (1)
- Research agenda (1)
- Resource efficiency (1)
- Resource-based-view (1)
- Standardization research (1)
- Studie (1)
- Unternehmensbefragung (1)
- Web mining (1)
Organisationseinheit der BAM
Eingeladener Vortrag
- nein (13)
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
Standardization research is a fairly new and is a still-evolving field of research, with possibly major practical ramifications. This article presents a summary of the authors’ subjective views of the most pressing research topics in the field. These include, among others, standards (e.g. incorporation of ethical issues), the potential impact of standards, the corporate management of standardization and legal issues like Intellectual Property Rights (IPR). In addition, gaps have been identified with a respect to a basic understanding of standardization, suggesting a need for better education in the field.
Das Ziel dieses Kapitels besteht darin, die Rolle von Konformitätsbewertung für die Erhöhung der Cybersicherheit von Produkten, Dienstleistungen und Prozessen zu betrachten. Dazu wird der Begriff Cybersicherheit beleuchtet sowie ausgewählte Cybersicherheitsnormen kurz vorgestellt. Im Folgenden wird der regulative europäische Rahmen für die Konformitätsbewertung aus ordnungspolitischer Sicht sowie der aktuelle Verordnungsentwurf zum Cybersecurity Act dargestellt und kritsch beleuchtet.
Mit QI-FoKuS / Forschung für Konformitätsbewertung und Sicherheit streben wir auf Basis einer wiederkehrenden Befragung von Unternehmen und Konformitätsbewertungsstellen in Deutschland die Schaffung einer besseren Datengrundlage für die Forschung an. Diese soll es erleichtern, wichtige Zusammenhänge evidenzbasiert zu analysieren, um das systemische Zusammenwirken der Elemente der Qualitätsinfrastruktur besser zu verstehen. Dabei sollen zunächst die Elemente Konformitätsbewertung und Akkreditierung besonders im Vordergrund stehen.
QI-FoKuS stands for „Quality Infrastructure – Research for Conformity Assessment and Safety“. Supported by the BMWi, a new recurring survey of companies was launched under this name in end-September 2019 in a joint project between the TU Berlin and the Federal Institute for Materials Research and Testing (BAM). The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies.