Badi, S and Nasaj, M (2024) Cybersecurity effectiveness in UK construction firms: An extended McKinsey 7S model approach. Engineering, Construction and Architectural Management, 31(11), pp. 4482-4515. ISSN 0969-9988
Abstract
Purpose: This study aims to assess the essential elements of internal organisational capability that influence the cybersecurity effectiveness of a construction firm. An extended McKinsey 7S model is used to analyse the relationship between a construction firm's cybersecurity effectiveness and nine internal capability elements: shared values, strategy, structure, systems, staff, style, skills, relationships with third parties and regulatory compliance. Design/methodology/approach: Based on a quantitative research strategy, this study collected data through a cross-sectional survey of professionals working in the construction sector in the United Kingdom (UK). The collected data was analysed using descriptive and inferential statistical methods. Findings: The findings underlined systems, regulatory compliance, staff and third-party relationships as the most significant elements of internal organisational capability influencing a construction firm's cybersecurity effectiveness, organised in order of importance. Research limitations/implications: Future research possibilities are proposed including the extension of the proposed diagnostic model to consider additional external factors, examining it under varying industrial relationship conditions and developing a dynamic framework that helps improve cybersecurity capability levels while overseeing execution outcomes to ensure success. Practical implications: The extended McKinsey 7S model can be used as a diagnostic tool to assess the organisation's internal capabilities and evaluate the effectiveness of implemented changes. This can provide specific ways for construction firms to enhance their cybersecurity effectiveness. Originality/value: This study contributes to the field of cybersecurity in the construction industry by empirically assessing the effectiveness of cybersecurity in UK construction firms using an extended McKinsey 7S model. The study highlights the importance of two additional elements, third-party relationships and construction firm regulatory compliance, which were overlooked in the original McKinsey 7S model. By utilising this model, the study develops a concise research model of essential elements of internal organisational capability that influence cybersecurity effectiveness in construction firms.
| Item Type: | Article |
|---|---|
| Uncontrolled Keywords: | construction firms; cybersecurity; effectiveness; mckinsey's 7s model; United Kingdom |
| Index terms: | quantitative research, construction industry, effectiveness, statistical method, construction firm, survey, United Kingdom, strategy, shared value, organizational capability, construction sector, regulatory compliance, methodology |
| Subjects: | equitable outcomes, organization, data collection methods, data analysis and analytics, environmental policy, Geography, performance management, research methods, management, statistical analysis, industry analysis, sociology |
| Topics: | Organizational Design, Quality Management, Value Management, Sustainability, Research Practice, Geographical Context, Business Strategy |
| Descriptive scope: | 5 PCTEA |
N.B. Descriptive scope is a count of how many of the five facets of empirical research are indicated by the words used in title, abstract and keywords. It is not intended as a judgement on the research; merely a count of the kind of word we would expect to indicate Phenomenon, Concepts, Theoretical framing, Empirical techniques, Analytical techniques. If all five are present, then a code of “5 PCTEA” will indicate this. If you feel the coding for this record is questionable, we welcome discussion around the terms we matched or the way we categorized them. The facet you would expect may not be coded, or a facet may be coded inappropriately. This can also bear on a larger question, of which facets should be treated as defining in construction management research. Please get in touch, and we will look at it. More details here