An Analysis of the Dynamics of Information Risk in Supply Chains of Select SME Clusters

Abstract

Virtual integration of supply chains is on the agenda of most organizations as there is a growing need to reduce inventories at each echelon to maximize the value for the ultimate customer. In this context, information has emerged as the most important asset to create competitive advantage. Thus availability of correct and timely information to all the partners of supply chain is an imperative achieved through the adoption of the latest IT tools. But along with the advantages of IT enablement, there are also risks which, if not tackled properly, can bring the whole supply chain to a halt. The purpose of this paper is to understand various information risks from a supply chain perspective. Case study method is applied to three small and medium enterprises (SMEs) clusters in India to understand how these information risks could impact the supply chain. Further using Interpretive Structural Modelling (ISM,) a hierarchy of enablers for information risks mitigation is developed. This helps focus on those areas that are most effective for minimizing information risks in a supply chain.

Keywords

Supply chain information risks ISM SMEs

Get full access to this article

View all access options for this article.

References

Adeleye

B. C.

Annansingh

Nunes

M. B.

(2004), “Risk Management Practices in IS Outsourcing: An Investigation into Commercial Banks in Nigeria”, International Journal of Information Management, 24, (2), pp. 67–180.

Agarwal

Shankar

Tiwari

M. K.

(2006), “Modelling Agility of Supply Chain”, Industrial Marketing Management, Available online March 6, 2006.

Anderson

J. A.

(2003), “Why We Need a New Definition of Information Security”, Computers and Security, 22, (4), pp. 308–313.

Bender

P. S.

(2000), “Debunking Five Supply Chain Myths”, Supply Chain Management Review, 4, (1), pp. 52–58.

Bhattacharya

Behara

R. S.

Gundersen

D. E.

(2003), “Business Risk Perspectives on Information Systems Outsourcing”, International Journal of Accounting Information Systems, 4, (1), pp. 75–93.

Bolanos

Fontela

Nenclares

Paster

(2005), “Using Interpretative Structural Modelling in Strategic Decision-making Groups”, Management Decision, 43, (6), pp. 877–895.

Búrca

S. D

Fynes

Marshall

(2005), “Strategic Technology Adoption: Extending ERP across the Supply Chain”, The Journal of Enterprise Information Management, 18, (4), pp. 427–440.

Caldeira

M. M.

Ward

J. M.

(2003), “Using Resource-based Theory to Interpret the Successful Adoption and Use of Information Systems and Technology in Manufacturing Small and Medium-sized Enterprises”, European Journal of Information Systems, 12, pp. 127–141.

Cardinali

(1998), “If the System Fails, Who is Liable?”, Logistics Information Management, 11, (4), pp. 257–261.

10.

Chen

L-C.

Longstaff

T. A.

Carley

K. M.

(2004), “Characterization of Defense Mechanisms against Distributed Denial of Service Attacks”, Computers and Security, 23, (8), pp. 665–678.

11.

Chopra

Sodhi

M. S.

(2004), “Managing Risk to Avoid Supply Chain Breakdown”, Sloan Management Review, Fall, pp. 53–61.

12.

Dalmin

Mininno

(2003), “Supplier Selection using a Multi-criteria Decision Aid Method”, Journal of Purchasing and Supply Management, 9, pp. 177–187.

13.

Dhillon

Backhouse

(1996), “Risks in the Use of Information Technology within Organizations”, International Journal of Information Management, 16, (1), pp. 65–74.

14.

Doukidis

G. I.

Smithson

Lybereas

(1994), “Trends in Information Technology in Small Business”, Journal of End-user Computing, 6, (4), pp. 15–25.

15.

Eisenhardt

K. M.

(1989), “Building Theory from Case Study Research”, Academy of Management Review, 14, (4), pp. 532–50.

16.

Ellram

L. M.

(1996), “The Use of the Case Study Method in Logistics Research”, Journal of Business Logistics, 17, (2), pp. 93–138.

17.

Faisal

M. N.

Banwet

D. K.

Shankar

(2006), “Supply Chain Risk Mitigation: Modelling the Enablers”, Business Process Management Journal, 12, (4), pp. 535–552.

18.

Ford

Ray

(2004), “Googling for Gold: Web Crawlers, Hacking and Defense Explained”, Network Security, 2004, (1), pp. 10–13.

19.

Fransoo

J. C.

Wouters

M. J. F

(2000), “Measuring the Bullwhip Effect in the Supply Chain”, Supply Chain Management, 5, (2), pp. 78–89.

20.

Ganguli

(2000), “Intellectual Property Rights: Mothering Innovations to Markets”, World Patent Information, 22, (1–2), pp. 43–52.

21.

Gordon

L. A.

Loeb

M. P.

(2002), “The Economics of Information Security”, ACM Transactions on Information System Security, 5, (4), pp. 438–457.

22.

Grossman

G. M.

Helpman

(2005), “Outsourcing in a Global Economy”, Review of Economic Studies, 72, (1), pp. 135–159.

23.

Halchin

L. E.

(2004), “Electronic Government: Government Capability and Terrorist Resource”, Government Information Quarterly, 21, (4), pp. 406–419.

24.

Handfield

R. B

Nichols

E. L

(1999), Introduction to Supply Chain Management, Prentice-Hall, NJ.

25.

Hinde

(2004), “Hacking Gains Momentum”, Computer Fraud and Security, 2004, (11), pp. 13–15.

26.

Hong

Zhu

(2006), “Migrating to Internet-based e-commerce: Factors Affecting e-commerce Adoption and Migration at the Firm Level”, Information and Management, 43, (2), pp. 204–221.

27.

Hoyt

Huq

(2000), “From Arms-length to Collaborative Relationships in the Supply Chain”, International Journal of Physical Distribution and Logistics Management, 30, (9), pp. 750–764.

28.

Jharkharia

Shankar

(2005), “IT-enablement of Supply Chains: Understanding the Barriers”, The Journal of Enterprise Information Management, 18, (1), pp. 11–27.

29.

Jolliffe

I. T.

(1986), Principal Component Analysis, Springer, New York.

30.

Kilpatrick

Factor

(2000), “Logistics in Canada Survey: Tracking Year 2000–Supply Chain Issues and Trends”, Materials Management and Distribution, 45, (1), pp. 16–20.

31.

King

W. R.

Malhotra

(2000), “Developing a Framework for Analyzing IS Outsourcing”, Information and Management, 37, (6), pp. 323–334.

32.

Lacity

M. C.

Hirschheim

Willcocks

L. P.

(1994), “Realizing Outsourcing Expectations”, Information Systems Management, 4, pp. 7–18.

33.

Lee

H. L.

Padmanabham

Whang

(1997), “The Bullwhip Effect in Supply Chains”, Sloan Management Review, 38, (3), pp. 93–102.

34.

Lee

H. L.

K. C.

Tang

C. S.

(2000), “The Value of Information Sharing in a Two-level Supply Chain”, Management Science, 46, (5), pp. 626–643.

35.

Lee

H. G.

(1998), “Do Electronic Marketplaces Lower the Price of Goods?”, Communications of the ACM, 41, (1), pp. 73–80.

36.

Lohman

Fortuin

Wouters

(2004), “Designing a Performance Measurement System: A Case Study”, European Journal of Operational Research, 156, pp. 267–286.

37.

Lorange

Roos

(1992), Strategic Alliances, Blackwell, Cambridge.

38.

Love

P. E. D.

Irani

Standing

Lin

Burn

J. M.

(2005), “The Enigma of Evaluation: Benefits, Costs and Risks of IT in Australian Small–medium-sized Enterprises”, Information Management, 42, (7), pp. 947–964.

39.

Luhmann

(1979), Trust and Power, John Wiley & Sons, Chichester, England.

40.

Lummus

R. R.

Vokurka

R. J.

(1999), “Defining Supply Chain Management: A Historical Perspective and Practical Guidelines”, Industrial Management & Data Systems, 99, (1), pp. 11–17.

41.

Mandal

Deshmukh

S. G.

(1994), “Vendor Selection using Interpretative Structural Modelling (ISM)”, International Journal of Operations and Production Management, 14, (6), pp. 52–59.

42.

Malone

D. W.

(1975), “An Introduction to the Application of Interpretative Structural Modelling”, Proceedings of IEEE, 63, pp. 397–404.

43.

Markusen

J. R.

(2001), “Contracts, Intellectual Property Rights and Multinational Investment in Developing Countries”, Journal of International Economics, 53, (1), pp. 189–204.

44.

McIvor

Humphreys

(2004), “The Implications of Electronic B2B Intermediaries for the Buyer-supplier Interface”, International Journal of Operations and Production Management, 24, (3), pp. 241–269.

45.

Meade

L. M.

Sarkis

(1999), “Analyzing Organizational Project Alternatives for Agile Manufacturing Processes”, International Journal of Production Research, 37, (2), pp. 241–261.

46.

McFarlan

F. W.

(1981) “Portfolio Approach to Information Systems”, Harvard Business Review, September-October, pp. 142–150.

47.

NRC (2002) National Research Council, Cybersecurity Today and Tomorrow: Pay Now or Pay Later, National Academy Press.

48.

Norrman

Jansson

(2004), “Ericsson's Pro-active Supply Chain Risks Management Approach after a Serious sub-supplier Accident”, International Journal of Physical Distribution and Logistics Management, 34, (5), pp. 434–456.

49.

Noy

Ellis

(2003), “Risk: A Neglected Component of Strategy Formulation”, Journal of Managerial Psychology, 18, (7), pp. 691–707.

50.

Osei-Bryson

K-M.

Ngwenyama

O. K.

(2005), “Managing Risks in Information Systems Outsourcing: An Approach to Analyzing Outsourcing Risks and Structuring Incentive Contracts”, European Journal of Operational Research, Available online May 17, 2005.

51.

Ravi

Shankar

(2005), “Analysis of Interactions among the Barriers of Reverse Logistics”, Technological Forecasting and Social Change, 72, (8), pp. 1011–1029.

52.

Sage

A. P.

(1977), Interpretative Structural Modelling: Methodology for Large-scale Systems, McGraw-Hill, New York, pp. 91–164.

53.

Saaty

T. L.

(1980), “The Analytic Hierarchy Process: Planning, Priority Setting, Resource Allocation”, McGraw-Hill International Book Co., New York.

54.

Saaty

T. L.

(2001), Decision-making with Dependence and Feedback: The Analytic Network Processes, RWS Publications, Pittsburgh.

55.

Sinha

P. R.

Whitman

L. E.

Malzahn

(2004), “Methodology to Mitigate Supplier Risks in an Aerospace Supply Chain”, Supply Chain Management, An International Journal, 9, (2), pp. 154–168.

56.

Tanaka

Matsuura

Sudoh

(2005), “Vulnerability and Information Security Investment: An Empirical Analysis of e-local Government in Japan”, Journal of Accounting and Public Policy, 24, (1), pp. 37–60.

57.

Warfield

J. W.

(1974), “Developing Interconnected Matrices in Structural Modelling”, IEEE Transactions on Systems Men and Cybernetics, 4, (1), pp. 51–81.

58.

Willcocks

Margetts

(1994), “Risk Assessment and Information Systems”, European Journal of Information Systems, 3, (2), pp. 127–138.

59.

(WIPO)World Intellectual Property Organization (2005), About Intellectual Property, Retrieved April 5, 2006, from http://www.wipo.org/about-ip/en/.

60.

Yin

(1994), Case Study Research, CA, Sage Publications, Beverly Hills.

61.

Zsidisin

G. A.

Ellram

L. M.

Carter

J. R.

Cavinato

J. L.

(2004), “An Analysis of Supply Risk Assessment Techniques”, International Journal of Physical Distribution and Logistics Management, 34, (5), pp. 397–413.