Context of ISO/IEC 27001
| Main themes/research results | Relevant papers (evidence: C = conceptual; E = empirical) |
|---|---|
| Country | |
| Adoption driven by regulatory/promotion activities | Cots and Casadesús (2015) (E), Dionysiou (2011) (C), Everett (2011) (C), Gillies (2011) (E), Khajouei et al. (2017) (E), Ku et al. (2009) (E), Lomas (2010) (C), Ozkan and Karabacak (2010) (C), Serrado et al. (2020) (E), Smith et al. (2010) (E), Ţigănoaia (2015) (C), Van Wessel et al. (2011) (E) |
| Higher adoption in export-driven countries | Dionysiou (2011) (C), Gillies (2011) (E), Ku et al. (2009) (E), Van Wessel et al. (2011) (E) |
| Implementation/compliance affected by cultural factors | Asai and Hakizabera (2010) (E), Ku et al. (2009) (E), Topa and Karyda (2019) (C), Van Wessel et al. (2011) (E) |
| MNEs pursue formal implementation only in selected countries | Heston and Phifer (2011) (E) |
| Size | |
| SMEs have lower ISS awareness | Dionysiou (2011) (E), Gillies (2011) (E), Mirtsch et al. (2021) (E) |
| Different implementation issues related to organizations' size | Al-Karaki et al. (2020) (C), Deane et al. (2019) (E), Dionysiou (2011) (E), Gillies (2011) (E), Mirtsch et al. (2021) (E), Smith et al. (2010) (E), Stewart (2018) (C) |
| Greater increase in market value in small public companies upon certification announcement | Deane et al. (2019) (E) |
| Industry | |
| Higher adoption rates in regulated/information-intensive industries | Akowuah et al. (2013) (C), Deane et al. (2019) (E), Dionysiou (2011) (C), Everett (2011) (C), Heston and Phifer (2011) (C), Itradat et al. (2014) (C), Mirtsch et al. (2021) (E), Mukhtar and Ahmad (2014) (C), Serrado et al. (2020) (E) |
| Standard seen applicable only to highly digitalized organizations | Crowder (2013) (E), Liao and Chueh (2012a) (C), Liao and Chueh (2012b) (C), Lomas (2010) (E) |
| Certification perceived as a source of competitive differentiation in some industries | Crowder (2013) (E), Ku et al. (2009) (E) |
| Other | |
| Emerging technological trajectories need more specific approaches | Beckers et al. (2013) (C), Beckers et al. (2016) (C), Bounagui et al. (2019) (C), Culot et al. (2019) (E), Leszczyna (2019) (C), Lomas (2010) (C), Park and Lee (2014) (C), Raabi et al. (2020) (C) |
| Characteristics of the organizational culture | Al-Karaki et al. (2020) (C), Asai and Hakizabera (2010) (E), Broderick (2006) (C), Dionysiou (2011) (E), Dos Santos Ferreira et al. (2018) (E), Everett (2011) (C), Gillies (2011) (E), Itradat et al. (2014) (E), Kossyva et al. (2014) (C), Ku et al. (2009) (E), Liao and Chueh (2012a) (E), Mirtsch et al. (2021) (E), Simić-Draws et al. (2013) (C), Smith et al. (2010) (E), Stewart (2018) (C), Ţigănoaia (2015) (C), van Wessel et al. (2011) (E) |
| Main themes/research results | Relevant papers |
|---|---|
| Adoption driven by regulatory/promotion activities | |
| Higher adoption in export-driven countries | |
| Implementation/compliance affected by cultural factors | |
| MNEs pursue formal implementation only in selected countries | |
| SMEs have lower ISS awareness | |
| Different implementation issues related to organizations' size | |
| Greater increase in market value in small public companies upon certification announcement | |
| Higher adoption rates in regulated/information-intensive industries | |
| Standard seen applicable only to highly digitalized organizations | |
| Certification perceived as a source of competitive differentiation in some industries | |
| Emerging technological trajectories need more specific approaches | |
| Characteristics of the organizational culture | |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.