Seeking to protect an organization against a new form of business losses.

No abstract

No abstract

a b s t r a c tThe practice of configuring products to individual customer orders has found application in a variety of industry contexts, but little is known about the specific capabilities that firms develop to successfully compete when offering configurable products. Our research begins to fill this gap in the context of industrial equipment manufacturing. Drawing from the ambidexterity literature, we argue that firms have to balance dual goals of reducing variation and promoting variation in their product configuration activities by fostering two distinct firm-level capabilities: product configuration effectiveness (PCE) and product configuration intelligence (PCI). Specifically, we hypothesize that the simultaneous presence of PCE and PCI-that is, product configuration ambidexterity (PCA)-drives superior firm responsiveness and, indirectly firm sales and operating margin. However, we also contend that responsiveness gains through PCA can diminish with product complexity and can increase operating cost. We test these hypotheses by collecting both primary and secondary data from a sample of 108 European industrial equipment manufacturing firms. Results from our analyses indicate that PCA has an indirect effect through responsiveness on sales and operating cost but not on operating margin, with this effect diminishing with product complexity. Taken together, our results suggest that investment in developing PCA may represent a conundrum for industrial equipment manufacturing firms, because it translates into market but not financial advantages, and it is intertwined with product design decisions. We conclude this study with a discussion of the findings for theory and practice.

The design and use of management control systems can play a key role in dealing with cybersecurity issues that have arisen in tandem with the emergence of the Internet. Efficient management control systems will reduce a firm's likelihood of suffering significant losses from cybersecurity breaches. Drawing on and extending the extant agency-based capital budgeting literature, this paper demonstrates the relevance of the study of management accounting controls to problems arising in the cybersecurity setting. The main finding is that firms can use an information security audit (which is an integral part of a management control system) along with adjustments to the compensation payments to the agent and the investment decision rules, to mitigate a Chief Information Security Officer's inherent empire building preferences. The paper also identifies additional research areas where management accountants with expertise in management control systems can contribute to the academic literature and practice surrounding cybersecurity issues.