Purpose

Disruptive events caused by cyber incidents, such as supply chain (SC) cyber incidents, can affect firms’ SC operations on a large scale, causing disruptions in material, information and financial flows and impacting the availability, integrity and confidentiality of SC assets. While SC resilience (SCRES) research has received much attention in recent years, the purpose of this study is to investigate specific capabilities for building SCRES to cyber risks. Based on a nuanced understanding of SC cyber risk characteristics, this study explores how to build SC cyber resilience (SCCR) using the perspective of dynamic capability (DC) theory.

Design/methodology/approach

Based on 79 in-depth interviews, this qualitative study examines 28 firms representing 4 SCs in Central Europe. The researchers interpret data from semistructured interviews and secondary data using the DC perspective, which covers sensing, seizing and transforming.

Findings

The authors identify SCRES capabilities, in general, and SCCR-specific capabilities that form the basis for the realignment of DCs for addressing cyber risks in SCs. The authors argue that SCRES capabilities should, in general, be combined with specific capabilities for SCCR to deal with SC cyber risks. Based on these findings, 10 propositions for future research are provided.

Practical implications

Practitioners should collaborate specifically to address cyber threats and risks in SCs, integrate new SC partners and use new approaches. Furthermore, this study shows that cyber risks need to be treated differently from traditional SC risks.

Originality/value

This empirical study enriches the SC management literature by examining SCRES to cyber risks through the insightful lens of DCs. It identifies DCs for building SCCR, makes several managerial contributions and is among the few that apply the DC approach to address specific SC risks.

中文翻译：

---

构建供应链抵御网络风险的能力：动态能力视角

 目的

网络事件引起的破坏性事件，例如供应链（SC）网络事件，可能会大规模影响企业的供应链运营，导致物质、信息和资金流中断，并影响供应链资产的可用性、完整性和保密性。尽管 SC 弹性（SCRES）研究近年来受到广泛关注，但本研究的目的是调查构建 SCRES 应对网络风险的具体能力。基于对SC网络风险特征的细致理解，本研究从动态能力（DC）理论的角度探讨了如何构建SC网络弹性（SCCR）。

设计/方法论/途径

这项定性研究基于 79 次深度访谈，对代表中欧 4 个 SC 的 28 家公司进行了调查。研究人员使用 DC 视角解读半结构化访谈和二手数据，涵盖感知、捕获和转换。

 发现

作者确定了 SCRES 的总体能力和 SCCR 的特定能力，这些能力构成了 DC 重新调整以解决 SC 网络风险的基础。作者认为，一般来说，SCRES 能力应与 SCCR 的特定能力相结合，以应对 SC 网络风险。根据这些发现，提出了 10 项未来研究建议。

 实际影响

从业者应专门合作解决供应链中的网络威胁和风险，整合新的供应链合作伙伴并使用新方法。此外，这项研究表明，网络风险需要与传统的供应链风险区别对待。

 原创性/价值

这项实证研究通过 DC 富有洞察力的视角审视 SCRES 对网络风险的影响，丰富了 SC 管理文献。它确定了建立 SCCR 的 DC，做出了多项管理贡献，并且是少数应用 DC 方法来解决特定 SC 风险的机构之一。