After 15 years of research, this paper aims to present a review of the academic literature on the ISO/IEC 27001, the most renowned standard for information security and the third most widespread ISO certification. Emerging issues are reframed through the lenses of social systems thinking, deriving a theory-based research agenda to inspire interdisciplinary studies in the field.,The study is structured as a systematic literature review.,Research themes and sub-themes are identified on five broad research foci: relation with other standards, motivations, issues in the implementation, possible outcomes and contextual factors.,The study presents a structured overview of the academic body of knowledge on ISO/IEC 27001, providing solid foundations for future research on the topic. A set of research opportunities is outlined, with the aim to inspire future interdisciplinary studies at the crossroad between information security and quality management. Managers interested in the implementation of the standard and policymakers can find an overview of academic knowledge useful to inform their decisions related to implementation and regulatory activities.

/pdf/the-iso-iec-27001-information-security-management-standard-3et1hp2cy9.pdf

The ISO/IEC 27001 information security management standard: literature review and theory-based research agenda

The authors of this study, who adopted a holistic view of the international organization for standardization (ISO) 9000 series of standards, aimed to evaluate the current status of the standards within the framework of the quality movement. Specifically, the evaluation covered two dimensions, i.e. the significance of the content included in the standards and the quality of the standards’ elaboration, which encompasses such issues as, for instance, their correctness, relevance to current trends in quality management, comprehensibility, etc.,The paper is based on a review of the scientific literature, analysis of the current and all previous versions of the international standards and the results of a survey, through which data were collected from 73 quality management experts from 17 different countries. To evaluate the results, an importance-performance analysis was performed.,As the results of the research demonstrated, experts in quality management have accepted the ISO 9000 standards series. However, this positive view refers mainly to the very idea of developing quality management standards and these standard’s content structure (components included in them). Study participants assigned a low rating to the quality of the standards’ elaboration. Therefore, improving the following aspects of the standards is essential: definitions, guidelines explaining the requirements for a quality management system, self-assessment tools and guidelines concerning quality management concerning chosen forms of activity.,The research described here in has both practical and social implications. First, it delineates the direction needed to improve standardizations, whose use need not be strictly limited to quality management but can be successfully used to improve the standards in other areas of management. Therefore, the conclusions of this research directly contribute to increasing both the effectiveness and the quality of the standard organizations. The significant consequences of this research for managers are the identification of ISO 9000 components which they will find are the most useful.,The research described herein has both practical and social implications. First, it delineates the direction needed to improve standardizations, whose use need not be strictly limited to quality management. However, it can be successfully used to improve the standards in other areas of management. Therefore, the conclusions of this research directly contribute to increasing both the effectiveness and the quality of the standard organizations. The significant consequences of this research for managers are the identification of ISO 9000 components, which they will find are the most useful.,Most research treats ISO 9000 standards as a benchmark for their studies on quality management systems implemented in organizations. The standards themselves are rarely the subject of a study, and so this paper fills a gap in the research and provides insights into desired directions for standards improvement.

/pdf/quality-of-the-iso-9000-series-of-standards-perceptions-of-530vllfuy7.pdf

Quality of the ISO 9000 series of standards-perceptions of quality management experts

Project Manager Strategies to Improve the Delivery of Construction Projects by Luis Gaspar Crespo Vallejo MS, Universidad Latinoamericana de Ciencia y Tecnología, 2006 BS, Universidad Santa María La Antigua, 1994 Doctoral Study Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Business Administration

https://scholarworks.waldenu.edu/cgi/viewcontent.cgi?article=7473&context=dissertations

Project Manager Strategies to Improve the Delivery of Construction Projects

/pdf/automation-of-harmonization-analysis-and-evaluation-of-y1fymmirog.pdf

Automation of harmonization, analysis and evaluation of information security requirements

This paper presents the results of a research study which aimed to evaluate the impact the revised quality management standard ISO9001: 2015 has had, through the introduction of the explicit riskbased thinking approach. Using semi structured interviews four key themes were identified; Impact, Benefits and Limitations, Training and Change Management. The results from this small scale introductory research study have provided an early insight into the impact the revised standard has had on both organisation and customer to date from a quality professional perspective. The results have shown that ISO9001:2015's introduction of explicit risk-based thinking will have a negligibly beneficial effect on the organisation and customer. The study has also identified that the introduction of the revised quality management standard has been considered as low impact /previously established either implicitly through the standards previous edition or as part of research participants pre-existing quality management systems and processes. This paper provides early additional knowledge relating to a risk-based thinking approach and the revised ISO9001:2015 quality management standard. It also points to the need for further review after the revised standard has become fully embedded and the 2008 equivalent has been made fully obsolete. Organisational value is also considered, for organisations looking to introduce an ISO based quality management system or modify existing quality management system to be capable of meeting the revised requirements.

ISO 9001: 2015 introduction of explicit risk-based thinking - benefit or limitation?

Defining Strategic Quality Directions based on Organisational Context Identification; Case Study in a Software Company

Information security in general and personal data security in particular is one of the major challenges in today’s business arena. It implies specific reactions both from the technological point of view and from the management point of view and specific international regulations and standards set the boundaries between which it operates. This paper presents a managerial approach on information security, which combines the GDPR (General Regulation regarding Personal Data Protection) requirements and those of the ISO 27001 standard, validated by a study case on a software development company. It suggests stages, the identification of the critical ones, it defines directions and actions related to information security and it describes the methodology for applying certain support techniques and instruments.

/pdf/integration-of-the-gdpr-requirements-into-the-requirements-4t7awjrb0a.pdf

Integration of the gdpr requirements into the requirements of the sr en iso/iec 27001:2018 standard, integration security management system in a software development company

The organizations that are able to adapt quickly to changes are most competitive in a fast-changing business and industrial environment. In the software development industry, developing new skills for employees, that sustain the strategic objectives, is part of the solution for convincing all customers that the company is able to comply with new industry approaches. In the present paper, interviews, brainstorming sessions and workshops were used during two years period, to develop the conceptual framework for a new occupation – software development technical expert auditor (SDTEA). The results are based on ISO 19011:2018, ISO 9001:2015 and ISO 27001:2013 and can be used by the Integrated Management System Manager as a best practice example within a software development company, on one hand. On the other hand, the findings are useful for the specialists in the process of developing new trainings and a new occupational standard.

/pdf/new-skills-and-qualifications-required-by-the-current-50qt0shhl6.pdf

New skills and qualifications required by the current approaches in the software development industry

The new managerial challenges are related to finding solutions for complex problems, inside some more and more complex management systems, in a continuously changing organizational context. Competitivity and progress imply a continuous positive change and the need to accept, respond, and adapt to the organization’s internal and external environments changes. This brief research report aims to point out the organizational ergonomics’ contribution to employees’ wellbeing through a systemic, emotional, and spiritual approach to man’s interaction with technology, systems, and organizational environment. The research methods used were the multidisciplinary bibliographic study and the interview. Three semi-structured interviews were taken to explore today’s challenges and new 4.0 technologies’ impact, especially robots, on the company and on employees’ wellbeing and spiritual fulfillment. The novelty comes from the analysis of new technologies’ impact on the human factor from the spiritual point of view. Our main results have to do with the shaping of a model for human capital’s valorization and with suggesting a list for monitoring human capital valorization in the company. This article’s main conclusion shows that the organizations’ management must be prepared to manage future challenges by improving the employee’s abilities, adaptability to change, and collaboration with robots.

Mirabela Luciana Gaşpar

Papers

Defining Strategic Quality Directions based on Organisational Context Identification; Case Study in a Software Company

Integration of the gdpr requirements into the requirements of the sr en iso/iec 27001:2018 standard, integration security management system in a software development company

New skills and qualifications required by the current approaches in the software development industry

Collaboration Between Humans and Robots in Organizations: A Macroergonomic, Emotional, and Spiritual Approach