S.2 Digitalisierung der Qualitätsinfrastruktur
Filtern
Dokumenttyp
- Vortrag (63)
- Forschungsbericht (24)
- Zeitschriftenartikel (14)
- Beitrag zu einem Tagungsband (11)
- Sonstiges (3)
- Buchkapitel (2)
- Posterpräsentation (2)
Sprache
- Englisch (91)
- Deutsch (26)
- Italienisch (1)
- Mehrsprachig (1)
Schlagworte
- Digitalization (30)
- Certification (29)
- COVID-19 (26)
- Conformity assessment (26)
- Konformitätsbewertung (25)
- Quality infrastructure (24)
- Digital transformation (21)
- Laboratory (21)
- Standards (21)
- Conformity assessment body (20)
Organisationseinheit der BAM
- S Qualitätsinfrastruktur (119)
- S.2 Digitalisierung der Qualitätsinfrastruktur (119)
- 7 Bauwerkssicherheit (2)
- 7.0 Abteilungsleitung und andere (2)
- 1 Analytische Chemie; Referenzmaterialien (1)
- 1.2 Biophotonik (1)
- 6 Materialchemie (1)
- 6.1 Oberflächen- und Dünnschichtanalyse (1)
- 6.2 Material- und Oberflächentechnologien (1)
- 9 Komponentensicherheit (1)
Eingeladener Vortrag
- nein (63)
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
In the wake of digitalization, organizations are increasingly exposed to risks associated with security breaches and must take measures to preserve the confidentiality, integrity, and availability of information, and to ensure business continuity. The international standard ISO/IEC 27001 assists organizations in setting up, maintaining and continuously improving their information security management systems. However, despite high growth rates, its international diffusion rates are quite heterogeneous. This paper explores why the diffusion of the international management system standard ISO/IEC 27001 differs across countries. We classify the adoption of ISO/IEC 27001 as a ‘preventive organizational innovation’ and draw from diffusion studies of other management system standards and information security research to develop a set of hypotheses. These relate to the impact of cultural dimensions and national ICT development. We use a negative binomial regression model with panel data covering 57 countries over a 12-year period from 2006 to 2017 to test our hypotheses. We find that the cultural dimensions future orientation, power distance, and institutional collectivism as well as high ICT development are driving factors for the diffusion of ISO/IEC 27001. We derive policy recommendations and avenues for future research.
The presentation summarizes the economic research activities at Department S concerning Quality Infrastructure. It introduces the new tool "QI-FoKuS" - an annual company survey in Germany, seeking to provide data on conformity assessment and accreditation in Germany. The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies.
Traditional innovation indicators often lack coverage, granularity as well as timeliness and involve high data collection costs, especially when conducted at a large scale. Based on the assumption that firms publish information about their products and services on their own websites, the Centre for European Economic Research in Mannheim (ZEW) has developed a framework to extract information from German firm websites applying Web Mining using a free-to-use web-scraping tool.
Categorized as an intraorganizational procedural innovation, management system standards often lack research especially during the early stages of their diffusion mainly due to low data availability. Therefore, we introduce Web Mining to study the diffusion of the international management system standard ISO/IEC 27001 in Germany. Using the Mannheim Enterprise panel dataset, we first apply Web Mining to identify firms that refer to these and other common management system standards, followed by manual categorization. Second, we estimate a probit model to identify drivers for its implementation. Finally, we derive recommendations for policy makers.
QI-FoKuS stands for „Quality Infrastructure – Research for Conformity Assessment and Safety“. Supported by the BMWi, a new recurring survey of companies was launched under this name in end-September 2019 in a joint project between the TU Berlin and the Federal Institute for Materials Research and Testing (BAM). The first company survey deals with the use and certification of management systems with a special focus on information security and the criteria for the selection of certification bodies.
Accreditation is one of the relevant tasks in a modern Quality Infrastructure, as the competence of conformity assessment bodies is assured through accreditation performed by accreditation bodies. To compare the operation of accreditation bodies in Europe and identify best practices a management tool was elaborated and validated by applying it to eight accreditation bodies. The tool made a comparison of the operations of the accreditation bodies possible, despite different sizes, operational processes and organizational forms.
The benchmarking project comprised three stages. In the first stage, the processes of accreditation bodies were systematically analyzed. A process map was developed and processes of special relevance for the performance of accreditation bodies were identified and underpinned by indicators. In the second stage, the processes of the German accreditation body Deutsche Akkreditierungsstelle GmbH (DAkkS) were assigned to the tool. This validation stage was used to check and modify the indicators when necessary. In the third stage, the transferability of the model was analyzed by extension to seven other accreditation bodies operating in Europe. The third stage of the project resulted in a workshop attended by experts from the participating ABs, which was used to discuss the results of the comparison and to identify best practices.