Information Security in Value Chains: A Governance Perspective

As supply chains become more complex and global, organizations increasingly rely on advanced information technology systems to coordinate and support value chain activities. These interorganizational systems while integral to supply chain management also introduce an additional point of vulnerability. Although a matter of increasing concern, who and how the responsibility for securing these systems is governed is not well understood. We propose a conceptual framework for how these security decisions can be made in different types of value chains by combining value chain governance archetypes with the information security governance decisions that need to be made for different contexts.