Cybersecurity management: an empirical analysis of dynamic capabilities framework for enhancing cybersecurity intelligence
Angélica Pigola, Priscila Rezende da Costa · Information and Computer Security · 2025
Purpose The purpose of this paper is to propose a dynamic capabilities framework in cybersecurity (DCCI) and explore its potential to explain organizations’ cybersecurity intelligence (CI). This study aims to develop and empirically test the DCCI framework, which encompasses key dimensions for enhancing CI across various business sectors. Design/methodology/approach The DCCI framework was designed through an extensive literature review and tested using data from 207 cybersecurity experts across diverse regions. Hierarchical regression analysis was used to examine the contribution of the DCCI framework’s components to CI. Findings Results indicate a positive association between the “doing” and “improving” dimensions of the DCCI framework and the development of CI. However, the “enabling” and “managing” dimensions did not exhibit a significant contribution to CI. These findings suggest that CI is a multifaceted concept shaped by certain dynamic capabilities within cybersecurity practices. Practical implications The DCCI framework introduces a structured approach to developing and enhancing CI, with practical applications for businesses and broader societal contexts aiming to improve cybersecurity strategies and resilience. Originality/value This study provides a novel framework for DCCI, offering valuable insights into how specific dynamic capabilities support CI. By addressing gaps in cybersecurity models, the framework adds practical and theoretical dimensions to understanding CI and the evolving needs of cybersecurity.