Eleven years of cyberattacks on Chinese supply chains in an era of cyber warfare, a review and future research agenda

Abstract

Purpose The contribution of this study aims to twofold: First, it provides an overview of the current state of research on cyberattacks on Chinese supply chains (SCs). Second, it offers a look at the Chinese Government’s approach to fighting cyberattacks on Chinese SCs and its calls for global governance. Design/methodology/approach A comprehensive literature review was conducted on Clarivate Analytics’ Web of Science, in Social Sciences Citation Index journals, Scopus and Google Scholar, published between 2010–2021. A systematic review of practitioner literature was also conducted. Findings Chinese SCs have become a matter of national security, especially in the era of cyber warfare. The risks to SC have been outlined. Cybersecurity regulations are increasing as China aims to build a robust environment for cyberspace development. Using the Technology-organization-environment (TOE) framework, the results show that the top five factors influencing the adoption process in firms are as follows: relative advantage and technological readiness (Technology context); top management support and firm size (Organization context) and government policy and regulations (Environment context). Research limitations/implications This review focuses on cyberattacks on Chinese SCs and great care was taken when selecting search terms. However, the author acknowledges that the choice of databases/terms may have excluded a few articles on cyberattacks from this review. Practical implications This review provides managerial insights for SC practitioners into how cyberattacks have the potential to disrupt the global SC network. Originality/value Past researchers proposed a taxonomic approach to evaluate progress with SC integration into Industry 4.0; in contrast, this study is one of the first steps toward an enhanced understanding of cyberattacks on Chinese SCs and their contribution to the global SC network using the TOE framework.

Industry 4.0 in “Major Emerging Markets”: A Systematic Literature Review of Benefits, Use, Challenges, and Mitigation Strategies in Supply Chain Management

“…The short-term objectives of profit maximization lead to compromises in process sustainability and product quality [75]. Large organizations have resources to invest in tech-nologies to mitigate cyber-attack risks, but this is not the case in small organizations [76]. Resources used to acquire software required for supplier management are insufficient [63].…”

“…Additionally, the government aims to provide incentives for importing robots [93]. China has put in place critical cyber-security policies, as supply chain cyber security is a high priority for the government [76]. In 2016, the Cyber Security Law came into effect in China, meaning data security is within the legislation [86].…”

“…Top management is required to approve investments in technologies to support Industry 4.0 and carry out periodic reviews that will eliminate hindrances in the supply chain [85]. When there is top management support, planning and responding to cyber threats are quicker and stronger [76]. Corporate governance is required to put policies, plans, and regulations that meet Industry 4.0 needs in place.…”

“…In the Indian context, manufacturers are required to invest significantly in cyber-physical systems to ensure that the manufacturing environment is sustainable [95]. Organizations with advanced infrastructure are better placed to handle threats, as cyber security requires structural and technical capabilities [76].…”

Exploring the influence of government social media on cybersecurity compliance: employee attitudes, motivation and behaviors

“…The prevalence of hostile cyberattacks is increasing because of the rapid evolution in digital technology, which heightens the need to counter cybersecurity threats (Harris and Patten, 2014;He, 2012He, , 2013P erez-Mor on, 2022). Several widespread cyberattacks have used malware, a kind of pernicious software to infiltrate a network, enabling those who spread it to extort payment from that network's owner or otherwise damage that network.…”