Abstract :

This study examines the relationships among business analytics capability, data driven risk detection, and organizational cyber resilience while evaluating the moderating influence of cybersecurity governance maturity. Drawing on Dynamic Capabilities Theory and Organizational Information Processing Theory, it conceptualizes organizational cyber resilience as the outcome of organizational capabilities that transform integrated analytical resources and cyber risk information into timely, coordinated, and adaptive responses. Cybersecurity governance maturity serves as a boundary condition that determines whether analytical insights can be translated into stronger resilience outcomes. A quantitative cross-sectional design gathered responses through a five point Likert scale questionnaire from 385 Vietnamese professionals knowledgeable about business analytics, cybersecurity, information technology, risk management, digital operations, organizational governance, or business continuity. IBM SPSS version 26 supported reliability assessment, exploratory factor analysis, and multiple linear regression, while Hayes’ Process Macro Model 1 examined the moderating effect. The findings show that business analytics capability (β = 0.573) and data driven risk detection (β = 0.638) significantly improve organizational cyber resilience. Data driven risk detection produces the stronger direct effect, emphasizing the importance of continuous monitoring, anomaly identification, and actionable cyber risk warnings. Cybersecurity governance maturity further strengthens the positive relationship between business analytics capability and organizational cyber resilience through a significant interaction coefficient of 0.407. The results demonstrate that analytical technologies alone cannot guarantee cyber resilience. Organizations must combine integrated analytical resources and timely risk detection with clear accountability, formal escalation procedures, structured oversight, continuous governance improvement, and sufficient authority to coordinate responses.

---

Keywords :

business analytics capability, cybersecurity analytics., cybersecurity governance maturity, data-driven risk detection, organizational cyber resilience

---

References :

1. Al-Ghattas, H., & Marjanovic, O. (2021, January). Business analytics capabilities for organisational resilience. In Hawaii International Conference on System Sciences (54th: 2021) (pp. 228–235). University of Hawaii at Manoa. https://doi.org/10.24251/hicss.2021.026
2. Annarelli, A., Nonino, F., & Palombi, G. (2020). Understanding the management of cyber resilient systems. Computers & Industrial Engineering, 149, 106829. https://doi.org/10.1016/j.cie.2020.106829
3. Bagheri, S., Ridley, G., & Williams, B. (2023). Organisational cyber resilience: Management perspectives. Australasian Journal of Information Systems, 27. https://doi.org/10.3127/ajis.v27i0.4183
4. Bahrami, M., & Shokouhyar, S. (2022). The role of big data analytics capabilities in bolstering supply chain resilience and firm performance: A dynamic capability view. Information Technology & People, 35(5), 1621–1651. https://doi.org/10.1108/ITP-01-2021-0048
5. Brezavšček, A., & Baggia, A. (2025). Recent trends in information and cyber security maturity assessment: A systematic literature review. Systems, 13(1), 52. https://doi.org/10.3390/systems13010052
6. Bryman, A. (2016). Social research methods. Oxford University Press.
7. Büyüközkan, G., & Güler, M. (2025). Cybersecurity maturity model: Systematic literature review and a proposed model. Technological Forecasting and Social Change, 213, 123996. https://doi.org/10.1016/j.techfore.2025.123996
8. Cremer, F., Sheehan, B., Fortmann, M., Kia, A. N., Mullins, M., Murphy, F., & Materne, S. (2022). Cyber risk and cybersecurity: A systematic review of data availability. The Geneva Papers on Risk and Insurance: Issues and Practice, 47(3), 698–736. https://doi.org/10.1057/s41288-022-00266-6
9. Dubey, R., Gunasekaran, A., Childe, S. J., Fosso Wamba, S., Roubaud, D., & Foropon, C. (2021). Empirical investigation of data analytics capability and organizational flexibility as complements to supply chain resilience. International Journal of Production Research, 59(1), 110–128. https://doi.org/10.1080/00207543.2019.1582820
10. Dupont, B., Shearing, C., Bernier, M., & Leukfeldt, R. (2023). The tensions of cyber-resilience: From sensemaking to practice. Computers & Security, 132, 103372. https://doi.org/10.1016/j.cose.2023.103372
11. Estay, D. A. S., Sahay, R., Barfod, M. B., & Jensen, C. D. (2020). A systematic review of cyber-resilience assessment frameworks. Computers & Security, 97, 101996. https://doi.org/10.1016/j.cose.2020.101996
12. Fernandez de Arroyabe, J. C., Arroyabe, M. F., Fernandez, I., & Arranz, C. F. (2024). Cybersecurity resilience in SMEs: A machine learning approach. Journal of Computer Information Systems, 64(6), 711–727. https://doi.org/10.1080/08874417.2023.2248925
13. Ferrag, M. A., Maglaras, L., Moschoyiannis, S., & Janicke, H. (2020). Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study. Journal of Information Security and Applications, 50, 102419. https://doi.org/10.1016/j.jisa.2019.102419
14. Galbraith, J. R. (1974). Organization design: An information processing view. Interfaces, 4(3), 28–36. https://doi.org/10.1287/inte.4.3.28
15. Goel, L., Russell, D., Williamson, S., & Zhang, J. Z. (2023). Information systems security resilience as a dynamic capability. Journal of Enterprise Information Management, 36(4), 906–924. https://doi.org/10.1108/JEIM-07-2022-0228
16. Goldkuhl, G. (2012). Pragmatism vs interpretivism in qualitative information systems research. European Journal of Information Systems, 21(2), 135–146. https://doi.org/10.1057/ejis.2011.54
17. Hair, J. F., Black, W. C., Babin, B. J., & Anderson, R. E. (2019). Multivariate data analysis (8th ed.). Cengage.
18. Hayes, A. F. (2022). Introduction to mediation, moderation, and conditional process analysis: A regression-based approach (3rd ed.). Guilford Press.
19. Huynh, M. T., Nippa, M., & Aichner, T. (2023). Big data analytics capabilities: Patchwork or progress? A systematic review of the status quo and implications for future research. Technological Forecasting and Social Change, 197, 122884. https://doi.org/10.1016/j.techfore.2023.122884
20. Jada, I., & Mayayise, T. O. (2024). The impact of artificial intelligence on organisational cyber security: An outcome of a systematic literature review. Data and Information Management, 8(2), 100063. https://doi.org/10.1016/j.dim.2023.100063
21. Korycki, Ł., & Krawczyk, B. (2023). Adversarial concept drift detection under poisoning attacks for robust data stream mining. Machine Learning, 112(10), 4013–4048. https://doi.org/10.1007/s10994-022-06177-w
22. Lankton, N., Price, J. B., & Karim, M. (2021). Cybersecurity breaches and the role of information technology governance in audit committee charters. Journal of Information Systems, 35(1), 101–119. https://doi.org/10.1108/ICS-03-2019-0036
23. Lin, J., Wu, S., & Luo, X. (2025). How does big data analytics capability affect firm performance? Unveiling the role of organisational resilience and environmental dynamism. European Journal of Information Systems, 34(3), 502–528. https://doi.org/10.1080/0960085X.2024.2375262
24. Malatji, M., Marnewick, A. L., & Von Solms, S. (2022). Cybersecurity capabilities for critical infrastructure resilience. Information & Computer Security, 30(2), 255–279. https://doi.org/10.1108/ICS-06-2021-0091
25. Mikalef, P., Boura, M., Lekakos, G., & Krogstie, J. (2019). Big data analytics and firm performance: Findings from a mixed-method approach. Journal of Business Research, 98, 261–276. https://doi.org/10.1016/j.jbusres.2019.01.044
26. Mikalef, P., Krogstie, J., Pappas, I. O., & Pavlou, P. (2020). Exploring the relationship between big data analytics capability and competitive performance: The mediating roles of dynamic and operational capabilities. Information & Management, 57(2), 103169. https://doi.org/10.1016/j.im.2019.05.004
27. Mikalef, P., Van De Wetering, R., & Krogstie, J. (2021). Building dynamic capabilities by leveraging big data analytics: The role of organizational inertia. Information & Management, 58(6), 103412. https://doi.org/10.1016/j.im.2020.103412
28. Mingers, J. (2015). Helping business schools engage with real problems: The contribution of critical realism and systems thinking. European Journal of Operational Research, 242(1), 316–331. https://doi.org/10.1016/j.ejor.2014.10.058
29. Rabii, A., Assoul, S., Ouazzani Touhami, K., & Roudies, O. (2020). Information and cyber security maturity models: A systematic literature review. Information & Computer Security, 28(4), 627–644. https://doi.org/10.1108/ICS-03-2019-0039
30. Saeed, S., Suayyid, S. A., Al-Ghamdi, M. S., Al-Muhaisen, H., & Almuhaideb, A. M. (2023). A systematic literature review on cyber threat intelligence for organizational cybersecurity resilience. Sensors, 23(16), 7273. https://doi.org/10.3390/s23167273
31. Sarker, I. H., Kayes, A. S. M., Badsha, S., Alqahtani, H., Watters, P., & Ng, A. (2020). Cybersecurity data science: An overview from machine learning perspective. Journal of Big Data, 7(1), 41. https://doi.org/10.1186/s40537-020-00318-5
32. Saunders, M., Lewis, P., & Thornhill, A. (2016). Research methods for business students (7th ed.). Pearson Education.
33. Shrestha, N. (2020). Detecting multicollinearity in regression analysis. American Journal of Applied Mathematics and Statistics, 8(2), 39–42. https://doi.org/10.12691/ajams-8-2-1
34. Shrestha, Y. R., Ben-Menahem, S. M., & Von Krogh, G. (2019). Organizational decision-making structures in the age of artificial intelligence. California Management Review, 61(4), 66–83. https://doi.org/10.1177/0008125619862257
35. Tavakol, M., & Dennick, R. (2011). Making sense of Cronbach’s alpha. International Journal of Medical Education, 2, 53–55. https://doi.org/10.5116/ijme.4dfb.8dfd
36. Teece, D. J. (2018). Business models and dynamic capabilities. Long Range Planning, 51(1), 40–49. https://doi.org/10.1016/j.lrp.2017.06.007
37. Tsen, E., Ko, R. K., & Slapničar, S. (2025). The effect of organizational cyber resilience on cyber incident outcomes. Journal of Cybersecurity, 11(1), tyaf040. https://doi.org/10.1093/cybsec/tyaf040
38. Tushman, M. L., & Nadler, D. A. (1978). Information processing as an integrating concept in organizational design. Academy of Management Review, 3(3), 613–624. https://doi.org/10.5465/amr.1978.4305791
39. Tzavara, V., & Vassiliadis, S. (2024). Tracing the evolution of cyber resilience: A historical and conceptual review. International Journal of Information Security, 23(3), 1695–1719. https://doi.org/10.1007/s10207-023-00811-x
40. Yu, W., Zhao, G., Liu, Q., & Song, Y. (2021). Role of big data analytics capability in developing integrated hospital supply chains and operational flexibility: An organizational information processing theory perspective. Technological Forecasting and Social Change, 163, 120417. https://doi.org/10.1016/j.techfore.2020.120417