ISO/IEC 27001 and other standards/frameworks
| Main themes/research results | Relevant papers (evidence: C = conceptual; E = empirical) |
|---|---|
| Comparison/integration with other standards with similar scope (ISS) | |
| ISO/IEC 27001 complemented by standards with stronger technological scope | Akowuah et al. (2013) (C), Almeida and Respício (2018) (C), Broderick (2006) (C), Fuentes et al. (2011) (C), Leszczyna (2019) (C), Rezakhani et al. (2011) (C), Stewart (2018) (C) |
| ISO/IEC 27001 complemented by standards for information/document management | Lomas (2010) (C), Stewart (2018) (C), Topa and Karyda (2019) (C) |
| Presence of issues related to the integration of ISO/IEC 27001 and other ISS standards | Beckers et al. (2016) (C), Bettaieb et al. (2019) (C), Bounagui et al. (2019) (C), Faruq et al. (2020) (C), Leszczyna (2019) (C), Mesquida et al. (2014) (C), Montesino et al. (2012) (C), Mukhtar and Ahmad (2014) (C), Pardo et al. (2012) (C), Pardo et al. (2013) (C), Pardo et al. (2016) (C), Tsohou et al. (2010) (C), Tarn et al. (2009) (C), Simić-Draws et al. (2013) (C), Sheikhpour and Modiri (2012a) (C), Sheikhpour and Modiri (2012b) (C) |
| Comparison/integration with other management system standards | |
| Better outcomes through the implementation of ISO/IEC 27001 in combination with other management standards | Bakar et al. (2015) (C), Barafort et al. (2017) (C), Barafort et al. (2018) (C), Barafort et al. (2019) (C), Hannigan et al. (2019) (E) |
| Time and cost synergies through the implementation of multiple management system standards (as opposed to a single one) | Crowder (2013) (E), Hoy and Foley (2015) (E), Majerník et al. (2017) (C) |
| Presence of issues related to the integration of ISO/IEC 27001 and other management systems standards | Barafort et al. (2017) (C), Barafort et al. (2018) (C), Barafort et al. (2019) (C), Heston and Phifer (2011) (C), Hoy and Foley (2015) (E), Majerník et al. (2017) (C) |
| Higher organizational complexity because of multiple standards | Heston and Phifer (2011) (C) |
| ISO/IEC 27001 often implemented after ISO 9001 | Cots and Casadesús (2015) (E), Gillies (2011) (E), Mirtsch et al. (2021) (E) |
| International diffusion of ISO/IEC 27001 and ISO/IEC 20000 correlated | Cots and Casadesús (2015) (E) |
| ISO/IEC 27001 more/less strongly correlated to country-level indicators than other ISO management system standards | Armeanu et al. (2017) (E), Başaran (2016) (E) |
| Main themes/research results | Relevant papers |
|---|---|
| ISO/IEC 27001 complemented by standards with stronger technological scope | |
| ISO/IEC 27001 complemented by standards for information/document management | |
| Presence of issues related to the integration of ISO/IEC 27001 and other ISS standards | |
| Better outcomes through the implementation of ISO/IEC 27001 in combination with other management standards | |
| Time and cost synergies through the implementation of multiple management system standards (as opposed to a single one) | |
| Presence of issues related to the integration of ISO/IEC 27001 and other management systems standards | |
| Higher organizational complexity because of multiple standards | |
| ISO/IEC 27001 often implemented after ISO 9001 | |
| International diffusion of ISO/IEC 27001 and ISO/IEC 20000 correlated | |
| ISO/IEC 27001 more/less strongly correlated to country-level indicators than other ISO management system standards | |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.