Managing cyber risk in supply chains: a review and research agenda

Abstract

Purpose In spite of growing research interest in cyber security, inter-firm based cyber risk studies are rare. Therefore, this study aims to investigate cyber risk management in supply chain contexts. Design/methodology/approach Adapting a systematic literature review process, papers from interdisciplinary areas published between 1990 and 2017 were selected. Different typologies, developed for conducting descriptive and thematic analysis, were established using data mining techniques to conduct a comprehensive, replicable and transparent review. Findings The review identifies multiple future research directions for cyber security/resilience in supply chains. A conceptual model is developed, which indicates a strong link between information technology, organisational and supply chain security systems. The human/behavioural elements within cyber security risk are found to be critical; however, behavioural risks have attracted less attention because of a perceived bias towards technical (data, application and network) risks. There is a need for raising risk awareness, standardised policies, collaborative strategies and empirical models for creating supply chain cyber-resilience. Research limitations/implications Different types of cyber risks and their points of penetration, propagation levels, consequences and mitigation measures are identified. The conceptual model developed in this study drives an agenda for future research on supply chain cyber security/resilience. Practical implications A multi-perspective, systematic study provides a holistic guide for practitioners in understanding cyber-physical systems. The cyber risk challenges and the mitigation strategies identified support supply chain managers in making informed decisions. Originality/value To the best of the authors’ knowledge, this is the first systematic literature review on managing cyber risks in supply chains. The review defines supply chain cyber risk and develops a conceptual model for supply chain cyber security systems and an agenda for future studies.

Blockchain adoption in food supply chains: a review and implementation framework

“…Data synthesis was conducted following a descriptive and thematic analysis approach proposed by Tranfield, Denyer, and Smart (2003). The descriptive analysis captures the overall state of the research stream, while thematic analysis examines, in-depth, the selected literature for specific themes emerging from the reviewed paper (Ghadge, Weiß, et al 2020).…”

“…Thematic analysis can provide a comprehensive and interpretative literature examination (Ghadge, Weiß et al 2020). There are two approaches to thematic analysis in social studies (Terry et al 2017).…”

Reshaping the policy debate on the implications of COVID-19 for global supply chains

“…Inputs will no longer be supplied. Another type of risk that has recently gained attention is cyber risk (Ghadge, Weiß, Caldwell, & Wilding, 2019). As supply chains increasingly rely on information and communication technologies, they are more vulnerable than before to cyber-attacks and IT failures, a risk that is not lower when production is domestic (and potentially higher if domestic firms all use the same IT infrastructure).…”

Supply Chain Disruption Risk Management with Blockchain: A Dynamic Literature Review

“…This cluster adds other shades of attempts carried out to control disruptions in the supply chain. The most common disruption risks affecting the supply chain and significantly its performance stem from natural disasters (e.g., earthquakes, hurricanes, and floods), cyber threats (human errors, failures, and terrorism), and disruptions of environmental regulations [8,24,74,75]. Recently, attempts to enhance supply chain resilience by emerging technologies in times of increased risks and uncertainty have become increasingly popular, including blockchain [36], digital innovations and Industry 4.0 [25] and 3D printing/additive manufacturing [76].…”