Wissenschaftliche Artikel der BAM
Filtern
Dokumenttyp
Sprache
- Englisch (2)
Referierte Publikation
- ja (2)
Schlagworte
- Certification (2) (entfernen)
Organisationseinheit der BAM
Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125 ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion.
The COVID-19 pandemic posed new and manifold challenges to organizations and their operations worldwide. Conformity assessment bodies (CABs), such as testing or medical laboratories, certification, and inspection bodies, were also affected by the associated disruptions. Their role in this crisis is highly relevant, as CABs are essential pillars of the quality infrastructure: their activities ensure that products and services meet requirements as defined in standards and regulations, thereby contributing to their safety and reliability. The question arises of how CABs and their operations were affected by the pandemic and how they responded. To this end, we present the results of an international survey of 986 CABs of all types in Germany, the UK, Italy, and New Zealand. Overall, CABs reported, on average, a reduction in demand for their services during the pandemic, facing restrictions in all countries. In addition, the pandemic had an overall negative impact on the CABs’ investment and innovation activities. However, investments in digital infrastructure were increased as a countermeasure, with CABs reporting a higher need for digitalization. The paper highlights and discusses results from in-depth analyses relevant to policymakers and industry alike.