To read this content please select one of the options below:

Managing cyber risk in supply chains: a review and research agenda

Abhijeet Ghadge (Centre for Logistics and Supply Chain Management, Cranfield School of Management, Cranfield University, Bedfordshire, UK)
Maximilian Weiß (Department of Logistics Research Centre, School of Social Sciences, Heriot Watt University, Edinburgh, UK)
Nigel D. Caldwell (Department of Logistics Research Centre, School of Social Sciences, Heriot Watt University, Edinburgh, UK)
Richard Wilding (Centre for Logistics and Supply Chain Management, Cranfield School of Management, Cranfield University, Bedfordshire, UK)

Supply Chain Management

ISSN: 1359-8546

Article publication date: 2 December 2019

Issue publication date: 24 February 2020

6560

Abstract

Purpose

In spite of growing research interest in cyber security, inter-firm based cyber risk studies are rare. Therefore, this study aims to investigate cyber risk management in supply chain contexts.

Design/methodology/approach

Adapting a systematic literature review process, papers from interdisciplinary areas published between 1990 and 2017 were selected. Different typologies, developed for conducting descriptive and thematic analysis, were established using data mining techniques to conduct a comprehensive, replicable and transparent review.

Findings

The review identifies multiple future research directions for cyber security/resilience in supply chains. A conceptual model is developed, which indicates a strong link between information technology, organisational and supply chain security systems. The human/behavioural elements within cyber security risk are found to be critical; however, behavioural risks have attracted less attention because of a perceived bias towards technical (data, application and network) risks. There is a need for raising risk awareness, standardised policies, collaborative strategies and empirical models for creating supply chain cyber-resilience.

Research limitations/implications

Different types of cyber risks and their points of penetration, propagation levels, consequences and mitigation measures are identified. The conceptual model developed in this study drives an agenda for future research on supply chain cyber security/resilience.

Practical implications

A multi-perspective, systematic study provides a holistic guide for practitioners in understanding cyber-physical systems. The cyber risk challenges and the mitigation strategies identified support supply chain managers in making informed decisions.

Originality/value

To the best of the authors’ knowledge, this is the first systematic literature review on managing cyber risks in supply chains. The review defines supply chain cyber risk and develops a conceptual model for supply chain cyber security systems and an agenda for future studies.

Keywords

Citation

Ghadge, A., Weiß, M., Caldwell, N.D. and Wilding, R. (2020), "Managing cyber risk in supply chains: a review and research agenda", Supply Chain Management, Vol. 25 No. 2, pp. 223-240. https://doi.org/10.1108/SCM-10-2018-0357

Publisher

:

Emerald Publishing Limited

Copyright © 2019, Emerald Publishing Limited

Related articles