Adapting supply chain management strategies to security – an analysis of existing gaps and recommendations for improvement

Abstract

This is the accepted version of a paper published in. This paper has been peer-reviewed but does not include the final publisher proof-corrections or journal pagination.

Managing cyber risk in supply chains: a review and research agenda

“…In this study, a few articles (e.g. Faisal et al, 2007;Smith et al, 2007;Charitoudi and Blyth, 2014;Tran et al, 2016;Urciuoli and Hintsa, 2017) acknowledge natural disasters as a critical driver for cyber risks. For example, when a flood or a tornado disrupts the functioning of servers, which then interferes with the seamless flow of the cyber supply chain network.…”

“…Meanwhile, Smith et al (2007) and Urciuoli and Hintsa (2017) go one step further and add the deliberate damaging or theft of physical infrastructure components to this physical risk category. Faisal et al (2007) also consider terrorist attacks to be a part of the physical aspect of cyber risks.…”

“…Data theft is central to cybercrime (Urciuoli and Hintsa, 2017) which, to date, seems to have exempted communities from direct cyber-attack. The risk propagation model proposed here, suggests supply chain risks are not static and, propagate out from the centre of risk occurrence to other related areas with the 'cascading or ripple effect' (Ghadge et al, 2013;Dolgui et al, 2018).…”

Supply Chain and Logistics Management and an Open Door Policy Concerning Cyber Security Introduction

“…Supply chain managers and suppliers share a large amount of data to support communication and collaborative efforts as well as build trust in the supply chain management process (Urciuoli and Hintsa, 2017). According to Boiko et al (2019) "the chains of manufacturers, suppliers, contractors, transport and trading companies are intertwined in the most intimate way and are already real online networks" (p. 67).…”

“…With the increase in cybercrimes and identity thefts, it is crucial for both supply chain managers and information security managers to understand the importance of embracing ethical cultures, moral reasoning, and ethical decision making. Urciuoli and Hintsa (2017) asserted that most supply chain managers were unaware of their supply chain exposure to cyberattack because they lacked visibility across the entire supply chain. This assertion supports the need for whistleblowing.…”