S Qualitätsinfrastruktur
Filtern
Dokumenttyp
- Vortrag (134)
- Zeitschriftenartikel (36)
- Forschungsbericht (25)
- Beitrag zu einem Tagungsband (24)
- Posterpräsentation (7)
- Sonstiges (6)
- Buchkapitel (2)
- Dissertation (1)
- Zeitschriftenheft (Herausgeberschaft für das komplette Heft) (1)
Sprache
- Englisch (156)
- Deutsch (77)
- Mehrsprachig (2)
- Italienisch (1)
Schlagworte
- Digitalization (30)
- Certification (29)
- Konformitätsbewertung (27)
- COVID-19 (26)
- Conformity assessment (26)
- Quality infrastructure (24)
- Qualitätsinfrastruktur (24)
- Testing (22)
- Digital transformation (21)
- Laboratory (21)
Organisationseinheit der BAM
- S Qualitätsinfrastruktur (236)
- S.2 Digitalisierung der Qualitätsinfrastruktur (129)
- S.3 Ökodesign und Energieverbrauchskennzeichnung (83)
- S.1 Qualität im Prüfwesen (20)
- 1 Analytische Chemie; Referenzmaterialien (14)
- 1.6 Anorganische Referenzmaterialien (9)
- 1.1 Anorganische Spurenanalytik (5)
- 1.3 Instrumentelle Analytik (5)
- P Präsident (5)
- P.0 Präsident und andere (5)
Paper des Monats
- ja (1)
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
Mit QI-FoKuS / Forschung für Konformitätsbewertung und Sicherheit streben wir auf Basis einer wiederkehrenden Befragung von Unternehmen und Konformitätsbewertungsstellen in Deutschland die Schaffung einer besseren Datengrundlage für die Forschung an. Diese soll es erleichtern, wichtige Zusammenhänge evidenzbasiert zu analysieren, um das systemische Zusammenwirken der Elemente der Qualitätsinfrastruktur besser zu verstehen. Dabei sollen zunächst die Elemente Konformitätsbewertung und Akkreditierung besonders im Vordergrund stehen.
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
Traditional innovation indicators often lack coverage, granularity as well as timeliness and involve high data collection costs, especially when conducted at a large scale. Based on the assumption that firms publish information about their products and services on their own websites, the Centre for European Economic Research in Mannheim (ZEW) has developed a framework to extract information from German firm websites applying Web Mining using a free-to-use web-scraping tool.
Categorized as an intraorganizational procedural innovation, management system standards often lack research especially during the early stages of their diffusion mainly due to low data availability. Therefore, we introduce Web Mining to study the diffusion of the international management system standard ISO/IEC 27001 in Germany. Using the Mannheim Enterprise panel dataset, we first apply Web Mining to identify firms that refer to these and other common management system standards, followed by manual categorization. Second, we estimate a probit model to identify drivers for its implementation. Finally, we derive recommendations for policy makers.
QI-FoKuS stands for „Quality Infrastructure – Research for Conformity Assessment and Safety“. Supported by the BMWi, a new recurring survey of companies was launched under this name in end-September 2019 in a joint project between the TU Berlin and the Federal Institute for Materials Research and Testing (BAM). The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies.
Digital transformation and especially the dramatic rise of products and services connected to the Internet of Things raise the questions on how to deal with the increasing risks related to Privacy and Cybersecurity. Presumably, these risks seem to be insufficiently reflected in the European Union’s current regulative system – by being neither part of the traditional definition of a safe product nor part of product-specific vertical or horizontal directives. Certification based on standards as underlying requirements has been identified by policymakers as an instrument to address this issue. The latest European draft regulation aims at increasing security and trust in ICT products and services, and reducing current European market fragmentation with a new Cybersecurity Certification Framework. Based on the results of a qualitative analysis of stakeholder statements on the current proposal on the Cybersecurity Act, this paper discusses elements of the proposed Cybersecurity Certification Framework. As a theoretical background, this paper provides definitions of the terms Safety, IT-security, and Cybersecurity, presents selected Cybersecurity-related standards and provides an outlook on future challenges to Conformity Assessment in the digital transformation.
Das Ziel dieses Kapitels besteht darin, die Rolle von Konformitätsbewertung für die Erhöhung der Cybersicherheit von Produkten, Dienstleistungen und Prozessen zu betrachten. Dazu wird der Begriff Cybersicherheit beleuchtet sowie ausgewählte Cybersicherheitsnormen kurz vorgestellt. Im Folgenden wird der regulative europäische Rahmen für die Konformitätsbewertung aus ordnungspolitischer Sicht sowie der aktuelle Verordnungsentwurf zum Cybersecurity Act dargestellt und kritsch beleuchtet.
Against the backdrop of numerous security breaches and cyber-attacks, organizations need to take measures to secure their data and information. However, the well-known management system standard ISO/IEC 27001 for information security has shown a lower adoption rate – in terms of annual ISO survey data – than was previously expected by scholars and practitioners. Through the lens of Rogers' diffusion of innovation theory, we consider the adoption of ISO/IEC 27001 as a 'preventive innovation' and aim to identify factors that help gain a better understanding of its adoption. Therefore, we conducted a survey among German organizations on the use and impact of management system standards, explicitly distinguishing between organizations that implement ISO/IEC 27001 and those that are additionally certified against this standard. This study provides insights and contributes to an advanced understanding of motives, impacts, barriers, and useful measures to increase adoption of ISO/IEC 27001. Our findings may be useful to organizations considering the adoption of this management system standard, to certification bodies providing certification services, and to policymakers seeking means to improve information security in organizations.
Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion.
In the light of digitalization and recent EU policy initiatives, information is an important asset that organizations of all sizes and from all sectors should secure. However, in order to provide common requirements for the implementation of an information security management system, the internationally well-accepted ISO/IEC 27001 standard has not shown the expected growth rate since its publication more than a decade ago.In this article, we apply web mining to explore the adoption of ISO/IEC 27001 through a series of 2664 out of more than 900 000 German firms from the Mannheim Enterprise Panel dataset that refers to this standard on their websites. As a result, we present a “landscape” of ISO/IEC 27001 in Germany, which shows that firms not only seek certifications themselves but often refer on their websites to partners who are certified instead. Consequently, we estimate a probit model and find that larger and more innovative firms are more likely to be certified to ISO/IEC 27001 and that almost half of all certified firms belong to the information and communications technology (ICT) service sector. Based on our findings, we derive implications for policymakers and management and critically assess the suitability of web mining to explore the adoption of management system standards.
Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität - DGQ zur Nutzung und Wirkung von genormten Managementsystemen als die erste Erhebung im Rahmen von QI-FoKuS. Neben der Motivation hinsichtlich der Anwendung verschiedener Normen, die Anforderungen an Managementsysteme darlegen, sowie den Wirkungen werden insbesondere die Zertifizierung für diese Normen sowie daran anknüpfend die Rolle und Funktion der Akkreditierung – und somit verschiedene Bausteine der QI – adressiert.
Informationssicherheit in deutschen Unternehmen: Ergebnisse der QI-FoKuS Umfrage zur ISO/IEC 27001
(2021)
Ergebnisvorstellung im mitgliederexklusiven Webinar der Deutschen Gesellschaft für Qualität (DGQ) zur Studie: "Nutzung und Wirkung von einem ISMS nach ISO/IEC 27001". Neben Zweck und Design der Studie werden sowohl Hürden bei der Implementierung, fördernde Maßnahmen, die Anwender nützlich finden und die Frage, warum Firmen diese Norm nicht nutzen, erörtert.
Global supply chains rely on the compliance and safety of their products, processes, and facilities. These vital services (often referred to as ‘quality assurance’ or ‘conformity assessment’ services) are provided by Conformity Assessment Bodies (CABs). This empirical study explores the impact of the COVID-19 pandemic on CABs as well as their response to the resulting challenges. Data was gathered through an online survey among all accredited CABs in Germany, which resulted in 555 valid responses. Taking a resilience perspective, we reveal that CABs were hit hard by the disruptions caused by the pandemic, albeit to different degrees, in part due to their type of services, size, and sectors served. Furthermore, we find that contingency plans do not directly cushion order declines (as the main indicator of the economic impact of the pandemic) but rather indirectly through helping CABs respond more quickly, which in turn mitigates their order declines. However, our results show that contingency plans can also have adverse effects if they hinder flexible reaction to the crisis. The findings of our study help managers and policymakers learn from the COVID-19 pandemic and improve the resilience of the conformity assessment sector and quality assurance in the event of future crises.
Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen. Ende 2019 wurden in einer ersten Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung von Managementsystemen und ihren Wirkungen befragt. Diese umfasste weit verbreitete genormte Managementsysteme wie ISO 9001 und ISO 14001 genauso wie bisher wenig untersuchte Systeme wie die ISO 50001 oder ISO/IEC 27001. Es konnten 180 Fragebögen für die vorliegende Studie ausgewertet werden.
Das Ziel der Initiative QI-FoKuS ist es, eine Datenbasis für neue wissenschaftliche Erkenntnisse zu Einflussfaktoren und Effekten in der Konformitätsbewertung und Akkreditierung zu schaffen und hierbei insbesondere auch auf aktuelle Trends und Entwicklungen einzugehen. Von Januar bis März 2020 wurden in einer Online-Erhebung Unternehmen verschiedener Branchen und Größenklassen in Deutschland zur Nutzung und den Wirkungen ihres zertifizierten Managementsystems für Informationssicherheit nach ISO/IEC 27001 befragt. Es konnten 125 vollständig ausgefüllte Fragebögen für die vorliegende Studie ausgewertet werden.
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
Harmonized and interoperable national Quality Infrastructure (QI) systems are essential for fostering cooperation, promoting mutual trust, and facilitating trade. The true potential of the QI is realized when its elements and actors are seamlessly integrated into a cohesive digital QI ecosystem. Recent developments towards industrial international data spaces enable such an ecosystem but require the integration of QI principles. Recognizing the lack of such a platform, Quality-X aims at setting the stage for the implementation of a QI ecosystem in international data spaces (IDS), GAIA-X and related German and European projects dedicated to secure data sharing. Quality-X is not about the construction of a platform; it is the creation of an inclusive QI ecosystem with harmonized interfaces. Instead of imposing rigid data structures, it prioritizes interoperability. Through the utilization of Decentralized Identifiers (DIDs), Verifiable Credentials, and Identity Hubs, Quality-X seeks seamless interactions across diverse service provider systems.
This white paper introduces the concept and vision of Quality-X and discusses the general prerequisites for integrating QI processes within data spaces. Further on, we introduce existing testbeds, which will serve as an experimental proving ground for exploring various use cases related to the implementation of the vision of a QI-Digital.
+++
Harmonisierte und interoperable nationale Qualitätsinfrastrukturen (QI) sind für die Förderung der Zusammenarbeit, des gegenseitigen Vertrauens und der Erleichterung des Handels unerlässlich. Das wahre Potenzial der QI kommt zum Tragen, wenn ihre Elemente und Akteure nahtlos in ein kohärentes digitales QI-Ökosystem integriert werden. Die jüngsten Entwicklungen hin zu industriellen internationalen Datenräumen ermöglichen ein solches Ökosystem, erfordern jedoch die Integration von QI-Prinzipien. Angesichts des Fehlens einer solchen Plattform zielt Quality-X darauf ab, die Voraussetzungen für die Umsetzung eines QI-Ökosystems in internationalen Datenräumen (IDS), GAIA-X und verwandten deutschen und europäischen Projekten zum sicheren Datenaustausch zu schaffen. Bei Quality-X geht es nicht um den Aufbau einer Plattform, sondern um die Schaffung eines umfassenden QI-Ökosystems mit harmonisierten Schnittstellen. Anstatt starre Datenstrukturen aufzuerlegen, steht die Interoperabilität im Vordergrund. Durch die Verwendung von dezentralen Identifikatoren (DIDs), überprüfbaren Berechtigungsnachweisen und Identitäts-Hubs strebt Quality-X eine nahtlose Interaktion zwischen verschiedenen Systemen von Dienstleistern an.
Dieses Whitepaper stellt das Konzept und die Vision von Quality-X vor und erörtert die allgemeinen Voraussetzungen für die Integration von QI-Prozessen in Datenräumen. Darüber hinaus stellen wir bestehende Testbeds vor, die als experimentelles Versuchsfeld für die Erforschung verschiedener Anwendungsfälle im Zusammenhang mit der Umsetzung der Vision einer QI-Digital dienen sollen.
In this poster for the SCIX Conference, we apply an analytical procedure based on the monitoring of the lithium isotope through the partially resolved isotope shift in the electronic transition 22P<-22S around wavelength 670.80 nm using high-resolution continuum source atomic absorption spectrometer (HR-CS-AAS) in combination with machine learning (ML) for the determination of Li Isotope ratio analysis.
Lo scoppio della pandemia da Covid-19 ha travolto Italia a inizio anno e i suoi effetti sull’economia sono stati particolarmente pesanti.
Proprio per analizzare gli effetti della pandemia sul mercato della valutazione della conformità, lo scorso settembre Accredia, in collaborazione con l’Istituto Federale tedesco della Ricerca e del Collaudo dei Materiali (BAM), la Technische Universität di Berlino e l’Istituto Fraunhofer ISI, ha condotto un’indagine presso gli organismi e i laboratori accreditati in Italia.
To determine the seasonal performance of heat pumps for energy labelling this study proposes a two-point-method that could conceivably be an alternative to the European standard EN 14825 and similar test standards such as ISO 13256. Heat pumps were tested in line with the EN 14825. The reduction of measurement points, from between five to seven (EN 14825) to only two (two-point-method), leads to 60 % savings in cost and time. It is shown that the shortened method can be used to determine the seasonal energy efficiency of heat pumps with the same degree of precision compared to EN 14825.
Test methods for heat pumps
(2020)
In this contribution, a dynamic test method to determine the seasonal performance of invertertype air conditioners has been developed and verified. In comparison to current test standards, where test modes for fixing the compressor speed are required, a dynamic approach is applied with unfixed compressor speed and thus better reflects the performance of air conditioners under real operating conditions. The dynamic tests are conducted in two calorimeter chambers. The indoor chamber is kept at a constant temperature whereas the outdoor chamber is subjected to a temperature profile based on the climate BIN-distribution, representing the reference cooling demand. The proposed dynamic test considers the dynamic control of an air conditioner and delivers results which could indicate the units’ performance in the field.
In this study, the test method EN 14825 for testing air conditioners is validated by verifying the sensitivity of the seasonal energy efficiency ratio SEER (declared on the energy efficiency label) in relation to the nominal cooling capacity Pdesign. Therefore, the two major parts of the test method, the measurement part and the calculation part, were investigated. Measurements were conducted on several single-split units. The calculation part was subjected to a sensitivity analysis in order to identify the properties of an air conditioner which have a strong influence on the SEER. The analysis revealed that the measurement procedure delivers reproducible results. However, the energy consumption in special operating states, the duration in active-mode and seasonal performance values in active mode (SEERon) significantly affect the sensitivity of the SEER. Especially assumption of short operating times for a cooling active mode leads to large changes in the SEER with varying Pdesign. In addition, the range of power of Pdesign turned out to have an increasing impact on the SEER with decreasing Pdesign. For Pdesign values ≤10 kW, which is the most popular type of ACs in the EU, the sensitivity of the SEER increases tremendously.
Especially the determination of the SEER for devices with short operating times in cooling active-mode (350 h) and low values for Pdesign (≤10 kW) cannot be reproduced anymore. In consequence, manufacturer could use the sensitivity of the SEER on Pdesign to artificially “increase” the energy efficiency of their air conditioner for the Energy label about 10 %.
Minimum energy performance standards and labels are commonly used tools to reduce the household energy use thus mitigating greenhouse gas emissions. However, the technical foundation for minimum energy performance standards and labels are test procedures for rating and testing of appliances. To de- termine the seasonal cooling performance of air conditioners, the current test standards require fixing of the compressor speed of the units to achieve steady-state conditions; this way of operation, how- ever, differs from real-life use. To make the seasonal cooling performance testing better reflect the real use conditions, this study proposes a compensation method which can be conducted independently from manufacturer data and still allows modulation of the tested units. Our results show that the tested units behave differently under part-load conditions, which results in a lower energy efficiency rating for some of the tested devices.
To determine the seasonal performance of heat pumps for energy labelling this study proposes a two-point-method that could conceivably be an alternative to the European standard EN 14825 and similar test standards such as ISO 13256. Heat pumps were tested in line with the EN 14825. The reduction of measurement points, from between five to seven (EN 14825) to only two (two-point-method), leads to 60 % savings in cost and time. It is shown that the shortened method can be used to determine the seasonal energy efficiency of heat pumps with the same degree of precision compared to EN 14825.
In this contribution, a dynamic test method to determine the seasonal performance of invertertype air conditioners has been developed and verified. In comparison to current test standards, where test modes for fixing the compressor speed are required, a dynamic approach is applied with unfixed compressor speed and thus better reflects the performance of air conditioners under real operating conditions. The dynamic tests are conducted in two calorimeter chambers. The indoor chamber is kept at a constant temperature whereas the outdoor chamber is subjected to a temperature profile based on the climate BIN-distribution, representing the reference cooling demand. The proposed dynamic test considers the dynamic control of an air conditioner and delivers results which could indicate the units' performance in the field.
The growing market penetration of heat pumps indicates the need for a performance test method that better reflects the dynamic behavior of heat pumps. In this contribution, we developed and implemented a dynamic test method for the evaluation of the seasonal performance of heat pumps by means of laboratory testing. Current standards force the heat pump control inactive by fixing the compressor speed. In contrast, during dynamic testing, the compressor runs unfixed while the heat pump is subjected to a temperature profile. The profile consists of the different outdoor temperatures of a typical heating season based on the average European climate and also includes temperature changes to reflect the dynamic behavior of the heat pump. The seasonal performance can be directly obtained from the measured heating energy and electricity consumption making subsequent data interpolation and recalculation with correction factors obsolete. The method delivers results with high precision and high reproducibility and could be an appropriate method for a fair rating of heat pumps.
Warfarin als ein Vertreter der NSO-Hetereozyklen, ist seit den 1950er Jahren einer der bekanntesten Gerinnungshemmer. Beim Menschen wird es bis heute zur Vorbeugung von Thrombose und der Behandlung von Vorhofflimmern und Arrhythmie eingesetzt. Doch schon einige Jahre vor der FDA Zulassung als Medikament wurde es zur Bekämpfung von Nagetieren eingesetzt. Bis heute wurde es nur teilweise durch weitaus wirksamere antikoagulante Rodentizide (ARs) der zweiten Generation, sogenannte Superwarfarine, ersetzt. In der Fachliteratur finden sich zahlreiche Beispiele für sekundäre und tertiäre Vergiftung mit ARs bei Wildtieren und anderen Nichtzieltieren. Bisher ist relativ wenig über die Bioakkumulation, Persistenz und Toxizität von ARs und deren Transformationsprodukten (TPs) in der terrestrischen und aquatischen Umwelt, sowie der Nahrungskette bekannt.
Um Einblicke in mögliche Transformations- und Abbauprozesse von Warfarin zu erhalten und um Umwelteinflüsse zu simulieren, wurde es in einer elektrochemischen Reaktorzelle oxidativ umgesetzt und mittels Massenspektrometrie analysiert. Hinsichtlich der Wasseraufbereitung in Kläranlagen wurden technisch relevante Simulationsverfahren wie Chlorung, UV-Bestrahlung und Ozonung angewendet um potentielle Eliminierungswege aufzuklären. Gebildete Transformationsprodukte wurden daher mittels unterschiedlicher chromatografischer Verfahren getrennt, massenspektrometrisch analysiert und verglichen.
High spatially resolved quantitative bioimaging of CdSe/ZnS Quantum Dots uptake in two kinds of cells is investigated combining laser ablation inductively coupled plasma mass spectrometry and the spatially resolved analysis of dried pL-droplets from a solution with a known concentration of Quantum Dots. Single cells and dried pL-droplets are morphologically characterized by Atomic Force Microscopy. A number concentration of CdSe/ZnS QDs between 3.5 104 and 48 104 is estimated to be uptaken by several selected single cells, after being incubated in the presence of a QDs suspension added to a standard cell culture medium. Mono-elemental bioimaging at subcellular resolution seems to show a higher number concentration of the CdSe/ZnS QDs in the cytosol around the cell nucleus.
Seit dem 1. Januar 2019 müssen Hersteller alle ihre energieverbrauchrelevanten Produkte in der Europäischen Produktdatenbank für die Energieverbrauchskennzeichnung EPREL registrieren, bevor sie auf dem EU-Markt verkauft werden können. Nutzung, Aufbau und Admin-Struktur der Datenbank werden vorgestellt.