Search results

It has long been known that family firms have a high mortality rate and that increasing these firms' survival rate is one of the most difficult challenges faced by both public policies and scholars. While most policies and researchers have focused on the business side, in recent years, more attention has been paid to the family sphere. This chapter goes one step further by not focusing on one side or another of this binomial, but on the relationship between both. In particular, we analyze the paradoxes emerging between the different inter- and intragenerational dyads that coexist in family firms (mother-daughter, father-son, mother-son, father-daughter, brother-sister, wife-husband, etc.) to open new lines of debate and propose new basis for the establishment of family firms-targeted public politics. We propose policies that will help family decision-makers to manage unique paradoxes that characterize family businesses.

The starting point for the considerations the authors make in this paper are the special features of family businesses in the area of management discussed in the literature. It has been established here that family businesses sometimes choose different organizational setups than nonfamily businesses. This has not yet been investigated for cybersecurity. In the context of cybersecurity, there has been little theoretical or empirical work addressing the question of whether the qualitative characteristics of family businesses have an impact on the understanding of cybersecurity and the organization of cyber risk defense in the companies. Based on theoretically founded hypotheses, a quantitative empirical study was conducted in German companies.

The article is based on a quantitative-empirical survey of 184 companies, the results of which were analyzed using statistical-empirical methods.

The article asked – based on the subjective perception of cybersecurity and cyber risks – to what extent family businesses are sensitized to the topic and what conclusions they draw from it. An interesting tension emerges: family businesses see their employees more as a security risk, but do less than nonfamily businesses in terms of both training and organizational establishment. Whether this is due to a lack of technical or managerial expertise, or whether family businesses simply think they can prevent cybersecurity with less formal methods such as trust, is open to conjecture, but cannot be demonstrated with the research approach taken here. Qualitative follow-up studies are needed here.

This paper represents the first quantitative survey on cybersecurity with a specific focus on family businesses. It shows tension between awareness, especially of risks emanating from employees, and organizational routines that have not been implemented or established.