Effects of Organizational Cyber Security Culture Across the Energy Sector Supply Chain

In critical infrastructure, cyber incidents can have significant impact not only on an organization itself but also on the security of society and safety of the public. In recent years, there has been an increasing number of supply chain cyber attacks, with weak links in the chain commonly exploited as points of penetration. For this reason, it is crucial for organizations to start managing cyber security not only within their own organization, but also across the entire supply chain. To shed light on this challenge and bridge existing gaps, this study investigated the effects of cyber security culture within and among organizations across the energy sector supply chain. Our findings indicate that cultivating a robust security culture can significantly enhance supply chain security practices. Therefore, it is of paramount importance to prioritize efforts towards aligning organizations through the promotion of common understanding and shared values. These concerted efforts are not only advantageous but also indispensable as we strive toward a more secure future for the supply chain.