讲座时间：2026年11月11日20:30-21:30
讲座地点：腾讯会议：896-168-728 密码：1111
讲座主题：How Complex is Too Complex? The Threshold Effect of IT Complexity on Data Breach Risk
主办单位：《管理科学》杂志、哈工大黑人av
管理科学与工程系、教育部信息管理与信息系统虚拟教研室(哈工大牵头)
嘉宾简介
梁会刚(Huigang Liang)，现任美国孟菲斯大学教授，奥本大学计算机科学硕士学位及医疗信息系统博士。他的研究兴趣涵盖个体与组织层面的社会行为、管理及战略信息技术议题，涉及多种应用场景。其研究成果发表于MIS Quarterly、Information Systems Research、Journal of Management Information Systems、Journal of the Association for Information Systems、MIT Sloan Management Review、Communications of the ACM、Decision Support Systems、Information Systems Journal、Journal of Strategic Information Systems等期刊。他的研究曾获美国国立卫生研究院(NIH)、联邦快递(FedEx)及斯隆基金会(Sloan Foundation)的资助。梁会刚教授目前担任MIS Quarterly高级编辑，曾担任Information Systems Research副编辑。
内容简介
While it is widely recognized that “complexity is the worst enemy of security” prior research offers limited insight into when and how information technology complexity (ITC) elevates cybersecurity risk. Drawing on Complexity Theory, we propose that ITC, the diversity and interconnectedness of a firm’s IT ecosystem, is positively associated with data breach risk only after exceeding a threshold. Applying Resource Dependence Theory, we further argue that the breach risk associated with ITC is amplified by vendor diversity, the breadth of a firm’s reliance on external IT vendors. Using a nine-year panel of 15,879 firms (2010–2018), we uncover a threshold below which ITC is not significantly associated with breach risk, but above which the association becomes positive. Moreover, vendor diversity strengthens the positive relationship between ITC and breach risk only when ITC exceeds the threshold. Our mechanism exploration further suggests that reduced visibility and control over IT systems may serve as channels linking ITC to increased data breach risk. This study contributes to the information systems literature by revealing a nonlinear relationship between ITC and cybersecurity risk and by exploring its boundary conditions and mechanisms. Our findings offer practical insights for firms to mitigate breach risk and improve cyber resilience by adopting threshold-aware governance and managing vendor portfolios.
