Developing dynamic capabilities to increase cybersecurity policymaking agility and resilience

Organizations need to keep pace with the ever-changing dynamics of their cyber environments. A crucial facet of this adaptability involves embracing agility in cybersecurity policymaking (CSPM). Yet, the existing body of literature in this domain remains understudied, and this short paper strives to address this gap by investigating the notion of agility in CSPM and identifying its Dynamic Capabilities (DCs). The findings from the first two phases of the study have revealed a set of six DCs. We have hypothesized that configurations of these DCs can lead to CSPM agility and cyber resilience. Thus, this paper presents preliminary findings and sets out the use of fuzzy set quantitative comparative analysis (fsQCA) method to find the combinations of the DCs that result in CSPM agility and cyber resilience. Our findings have implications for the Information Systems discourse as they enhance our understanding of how DCs enable agility and resilience in CSPM.