The Case for Lean Cybersecurity Leadership

Flostrand, Andrew; Park, Andrew; Demetis, Dionysios; Kietzmann, Jan; McCarthy, Ian

Abstract

Organizations concerned with cybersecurity risk may dedicate more managerial resources to the issue, but new research finds that this has the potential to heighten rather than reduce risk. Individuals in senior cybersecurity were found to routinely overestimate their capabilities relative to people in similar roles in peer organizations — an overconfident stance that can be dangerous in a fast-moving threat landscape.

Citation

Flostrand, A., Park, A., Demetis, D., Kietzmann, J., Pitt, L., & McCarthy, I. (2025). The Case for Lean Cybersecurity Leadership. MIT Sloan Management Review, 66(3), 16-18

• Journal Article Type: Article
• Acceptance Date: Jan 15, 2025
• Online Publication Date: Feb 10, 2025
• Publication Date: Mar 1, 2025
• Deposit Date: Jan 20, 2025
• Publicly Available Date: Feb 11, 2026
• Journal: MIT Sloan Management Review
• Print ISSN: 1532-9194
• Peer Reviewed: Peer Reviewed
• Volume: 66
• Issue: 3
• Pages: 16-18
• Public URL: https://hull-repository.worktribe.com/output/5006261
• Publisher URL: https://sloanreview.mit.edu/article/the-case-for-lean-cybersecurity-leadership/