Puay Fong Oh
The Chinese classic on strategy, Sunzi’s The Art of War (hereafter SAW), is often quoted in the cybersecurity literature without further explanation or justification why or how it is applicable to cyber risk management (CyRM). This paper presents the results of a pilot survey that was part of a larger study using a mixed-methods approach to rigorously and systematically examine this issue. The results based on a sample size of 50 respondents reinforced the same observation that prompted the study, namely, while there was agreement on SAW’s applicability to CyRM, there was less understanding on how it could be operationalized in practice. Following data collection, the Chi-square independence tests revealed statistically significant differences between observed and expected frequencies for age; gender; education level; employment status; geographical location; possession or lack of cybersecurity qualification(s); employment in a small or medium enterprise (SME); and familiarity with SAW. The Cronbach alpha calculated for the theoretical categories that emerged from the earlier qualitative phases of the study fell within acceptable range. Notably, removing data outliers did not change the results, suggesting that data saturation was achieved. Nonetheless, further research, such as follow-up interviews with selected participants or focus groups, and a full survey with more participants, including more CyRM professionals, are recommended.