• English
  • Deutsch
  • Log In
    Password Login
    Research Outputs
    Fundings & Projects
    Researchers
    Institutes
    Statistics
Repository logo
Fraunhofer-Gesellschaft
  1. Home
  2. Fraunhofer-Gesellschaft
  3. Artikel
  4. Information security management in ICT and non-ICT sector companies: A preventive innovation perspective
 
  • Details
  • Full
Options
2021
Journal Article
Title

Information security management in ICT and non-ICT sector companies: A preventive innovation perspective

Abstract
Despite the growing dependence of companies on information technology and the increasingly negative impact of security incidents worldwide, there is little research on the management of information security at the company level. This paper seeks to expand knowledge on the implementation of an information security management system based on the widely used international standard ISO/IEC 27001. We present motives, experienced impacts, and obstacles related to ISO/IEC 27001 implementation using data from a survey of 125ISO/IEC 27001 certified companies in Germany. Since adoption rates vary between ICT and non-ICT sector companies, we highlight sector-related variations. We classify the adoption of this standard as a preventive organizational innovation and apply Structural Equation Modeling to unearth explanations for the comparatively low adoption of this management system standard among companies outside the ICT sector. We, therefore, derive recommendations for policymakers, standardization, and certification bodies to foster its diffusion.
Author(s)
Mirtsch, Mona
BAM Berlin; TU Berlin
Blind, Knut  orcid-logo
Fraunhofer-Institut für System- und Innovationsforschung ISI  
Koch, Claudia
BAM Berlin; TU Berlin
Dudek, Gabriele
BAM Berlin
Journal
Computers & security  
Open Access
File(s)
Download (1.53 MB)
Rights
CC BY 4.0: Creative Commons Attribution
DOI
10.24406/publica-r-268928
10.1016/j.cose.2021.102383
Language
English
Fraunhofer-Institut für System- und Innovationsforschung ISI  
Keyword(s)
  • information security

  • ISO / IEC 27001

  • management system standard

  • certification

  • information security management system

  • preventive innovation

  • resource-based-view

  • institutional theory

  • Cookie settings
  • Imprint
  • Privacy policy
  • Api
  • Contact
© 2024