S Qualitätsinfrastruktur
Filtern
Dokumenttyp
Sprache
- Englisch (2)
Schlagworte
- Adoption (1)
- Digital Layer (1)
- Hyperlinks (1)
- Information Security (1)
- Information security (1)
- Management system standard (1)
- Management system standards (1)
- Standards (1)
- Web mining (1)
Organisationseinheit der BAM
In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards.
Despite the increasing relevance of cybersecurity for companies’ performance, there is limited research on the adoption of ISO/IEC 27001, an international information security management standard. The aim of our study is to expand this limited body of literature. First, we analyse the influence of companies’ networks on the adoption of ISO/IEC 27001 as an organisational innovation based on firm website data and their hyperlinks, using the entire population of ISO/IEC 27001 certified firms identified via web mining. Second, we validate the method of constructing and analysing companies’ “digital layer” following the call for new methodological approaches to study the organisational adoption of innovations. Our findings reveal that companies' decision to adopt ISO/IEC 27001 increases significantly with their number of linkages to other companies and to those having the same certificate. Finally, their cognitive and organisational distances to linked partners have the expected inverted u-shaped influence on their own adoption decision.