Bedeutung der digitalen Transformation in Bezug auf das stra-tegische Cybersicherheitsmanagement: Eine sektorenübergrei-fende qualitative Untersuchung von Organisationen in der Schweiz

This thesis explores the impact of Digital Transformation (DT) on the strategic Cybersecurity Management (CSM) of organizations based in Switzerland. An extensive literature review was conducted, resulting in the development of a theoretical framework that incorporates both technological and business drivers as well as the conceptualization of CSM. The technological drivers influencing CSM include key technologies such as Cloud Services, Artificial Intelligence (AI), Cyber-physical Systems (CPS), and Quantum Computing. Additionally, CSM is conceptualized through five subdisciplines: Governance and Strategy, Leadership, Financial Management, Cybersecurity Culture and Awareness, and Risk Management.

A qualitative study conducted in 2024 involves interviews with 22 participants – 19 Chief Information Security Officers (CISOs) or equivalent and 3 CISO Advisors – from various Swiss organizations. This study extended the theoretical framework into a theoretical-empirical model informed by primary data. A two-stage sampling approach was employed, combining purposive and theoretical sampling methods to ensure diverse and relevant insights.
The findings reveal that the underlying technological factors influencing CSM are not the key technologies themselves, but rather the convergence and dynamics of these technologies. Specifically, factors such as Technology Dynamics, Architecture, Outsourcing, Autonomy and Automation, and Self-Digitalization emerged as critical. From a business perspective, the primary drivers are evolving Business Operations and Compliance Requirements, highlighting that DT is increasingly driven by business needs rather than internal IT functions.

The research demonstrates that the interplay of these seven factors necessitates a Business Transformation within CSM to protect organizations’ assets without impeding the DT agenda. To support this transformation, the thesis offers several practical und research-oriented propositions.
In conclusion, this thesis provides valuable insights into the CSM practice of Swiss organizations and deepens the understanding of the interaction between DT and CSM. The results contribute to balancing DT initiatives with cybersecurity requirements, ensuring that digital innovation continues without escalating cyber-risks.