Bibliography#
Sources cited across the chapter reference lists, in alphabetical order.
Adner, R. (2017). Ecosystem as structure: An actionable construct for strategy. Journal of Management, 43(1), 39-58. https://doi.org/10.1177/0149206316678451
Amazon Web Services. (n.d.). Shared responsibility model. https://aws.amazon.com/compliance/shared-responsibility-model/
Amazon Web Services. (n.d.). What is a data lake? https://aws.amazon.com/what-is/data-lake/
Anderson, R. (2020). Security engineering (3rd ed.). Wiley. https://www.cl.cam.ac.uk/~rja14/book.html
Armbrust, M., et al. (2010). A view of cloud computing. Communications of the ACM, 53(4), 50-58. https://doi.org/10.1145/1721654.1721672
Arnott, D., & Pervan, G. (2005). A critical analysis of decision support systems research. Journal of Information Technology, 20(2), 67-87. https://doi.org/10.1057/palgrave.jit.2000035
Association for Computing Machinery. (2018). ACM code of ethics and professional conduct. https://www.acm.org/code-of-ethics
Atkinson, R. (1999). Project management: Cost, time and quality, two best guesses and a phenomenon, its time to accept other success criteria. International Journal of Project Management, 17(6), 337-342. https://doi.org/10.1016/S0263-7863(98)00069-6
Bakos, J. Y., & Treacy, M. E. (1986). Information technology and corporate strategy: A research perspective. MIS Quarterly, 10(2), 107-119. https://doi.org/10.2307/249039
Barney, J. (1991). Firm resources and sustained competitive advantage. Journal of Management, 17(1), 99-120. https://doi.org/10.1177/014920639101700108
Batini, C., Cappiello, C., Francalanci, C., & Maurino, A. (2009). Methodologies for data quality assessment and improvement. ACM Computing Surveys, 41(3), Article 16. https://doi.org/10.1145/1541880.1541883
Beck, K., Beedle, M., van Bennekum, A., Cockburn, A., Cunningham, W., Fowler, M., Grenning, J., Highsmith, J., Hunt, A., Jeffries, R., Kern, J., Marick, B., Martin, R. C., Mellor, S., Schwaber, K., Sutherland, J., & Thomas, D. (2001). Manifesto for agile software development. https://agilemanifesto.org/
Beck, N., & Rygl, D. (2015). Categorization of multiple channel retailing in multi-, cross-, and omni-channel retailing. Journal of Retailing and Consumer Services, 27, 170-178. https://doi.org/10.1016/j.jretconser.2015.08.001
Bender, E. M., Gebru, T., McMillan-Major, A., & Shmitchell, S. (2021). On the dangers of stochastic parrots. Proceedings of the 2021 ACM Conference on Fairness, Accountability, and Transparency, 610-623. https://doi.org/10.1145/3442188.3445922
Bharadwaj, A. S. (2000). A resource-based perspective on information technology capability and firm performance. MIS Quarterly, 24(1), 169-196. https://doi.org/10.2307/3250983
Boehm, B. W. (1988). A spiral model of software development and enhancement. Computer, 21(5), 61-72. https://doi.org/10.1109/2.59
Bommasani, R., et al. (2021). On the opportunities and risks of foundation models. arXiv. https://arxiv.org/abs/2108.07258
Boudreau, K. J. (2010). Open platform strategies and innovation: Granting access vs. securing control. Management Science, 56(10), 1849-1872. https://doi.org/10.1287/mnsc.1100.1213
Bourgeois, D. T., Mortati, J., Wang, S., & Smith, J. (2019). Information systems for business and beyond. https://www.jstor.org/stable/community.39516295
Brynjolfsson, E., Hu, Y. J., & Rahman, M. S. (2013). Competing in the age of omnichannel retailing. MIT Sloan Management Review, 54(4), 23-29.
Buyya, R., Yeo, C. S., Venugopal, S., Broberg, J., & Brandic, I. (2009). Cloud computing and emerging IT platforms. Future Generation Computer Systems, 25(6), 599-616. https://doi.org/10.1016/j.future.2008.12.001
Carr, N. G. (2003). IT doesn’t matter. Harvard Business Review. https://hbr.org/2003/05/it-doesnt-matter
Chen, H., Chiang, R. H. L., & Storey, V. C. (2012). Business intelligence and analytics: From big data to big impact. MIS Quarterly, 36(4), 1165-1188. https://doi.org/10.2307/41703503
Christopher, M., & Peck, H. (2004). Building the resilient supply chain. The International Journal of Logistics Management, 15(2), 1-14. https://doi.org/10.1108/09574090410700275
Cybersecurity and Infrastructure Security Agency. (2023). Cross-sector cybersecurity performance goals. https://www.cisa.gov/cyber-guidance/cybersecurity-performance-goals
Davenport, T. H., & Harris, J. G. (2007). Competing on analytics: The new science of winning. Harvard Business School Press.
Davenport, T. H., & Short, J. E. (1990). The new industrial engineering: Information technology and business process redesign. MIT Sloan Management Review, 31(4), 11-27.
Davenport, T. H. (1998). Putting the enterprise into the enterprise system. Harvard Business Review. https://hbr.org/1998/07/putting-the-enterprise-into-the-enterprise-system
Davenport, T. H. (2013). Analytics 3.0. Harvard Business Review. https://hbr.org/2013/12/analytics-30
de Reuver, M., Sorensen, C., & Basole, R. C. (2018). The digital platform: A research agenda. Journal of Information Technology, 33(2), 124-135. https://doi.org/10.1057/s41265-016-0033-3
DeLone, W. H., & McLean, E. R. (2003). The DeLone and McLean model of information systems success: A ten-year update. Journal of Management Information Systems, 19(4), 9-30. https://doi.org/10.1080/07421222.2003.11045748
Dumas, M., La Rosa, M., Mendling, J., & Reijers, H. A. (2018). Fundamentals of business process management (2nd ed.). Springer. https://doi.org/10.1007/978-3-662-56509-4
Eisenmann, T., Parker, G., & Van Alstyne, M. W. (2006). Strategies for two-sided markets. Harvard Business Review. https://hbr.org/2006/10/strategies-for-two-sided-markets
European Commission. (n.d.-a). Data Act. https://digital-strategy.ec.europa.eu/en/policies/data-act
European Commission. (n.d.-b). Digital Markets Act. https://digital-markets-act.ec.europa.eu/index_en
European Parliament and Council of the European Union. (2016). Regulation (EU) 2016/679 (General Data Protection Regulation). https://eur-lex.europa.eu/eli/reg/2016/679/oj
European Parliament and Council of the European Union. (2024). Regulation laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). https://eur-lex.europa.eu/
Featonby, M. (n.d.). Making retries safe with idempotent APIs. Amazon Web Services. https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/
Floridi, L., et al. (2018). AI4People - An ethical framework for a good AI society. Minds and Machines, 28, 689-707. https://doi.org/10.1007/s11023-018-9482-5
Flyvbjerg, B., & Budzier, A. (2011). Why your IT project may be riskier than you think. Harvard Business Review. https://hbr.org/2011/09/why-your-it-project-may-be-riskier-than-you-think
Gawer, A., & Cusumano, M. A. (2014). Industry platforms and ecosystem innovation. Journal of Product Innovation Management, 31(3), 417-433. https://doi.org/10.1111/jpim.12105
Gawer, A., Cusumano, M., & Yoffie, D. (n.d.). The platform organization [Chapter manuscript]. Harvard Business School. https://www.hbs.edu/ris/Publication Files/The Platform Organization_aef6ca33-fb20-4acd-9121-24c91202f9fa.pdf
Gordon, L. A., & Loeb, M. P. (2002). The economics of information security investment. ACM Transactions on Information and System Security, 5(4), 438-457. https://doi.org/10.1145/581271.581274
Hammer, M. (1990). Reengineering work: Don’t automate, obliterate. Harvard Business Review. https://hbr.org/1990/07/reengineering-work-dont-automate-obliterate
Hay, D. C., Redman, T. C., Yonke, C. L., & Zachman, J. A. (2021, December 14). Effective digital transformation depends on a shared language. Harvard Business Review. https://hbr.org/2021/12/effective-digital-transformation-relies-on-a-shared-language
Iansiti, M., & Lakhani, K. R. (2017). The truth about blockchain. Harvard Business Review. https://hbr.org/2017/01/the-truth-about-blockchain
Iansiti, M., & Lakhani, K. R. (2020). Competing in the age of AI. Harvard Business Review. https://hbr.org/2020/01/competing-in-the-age-of-ai
IBM. (n.d.). What is supply chain management? https://www.ibm.com/topics/supply-chain-management
IBM Security. (2024). Cost of a data breach report 2024. https://www.ibm.com/reports/data-breach
Institute of Electrical and Electronics Engineers. (2018). ISO/IEC/IEEE 29148:2018: Requirements engineering. https://standards.ieee.org/standard/29148-2018.html
Ivanov, D., & Dolgui, A. (2020). Viability of intertwined supply networks. International Journal of Production Research, 58(10), 2904-2915. https://doi.org/10.1080/00207543.2020.1750727
Jacobides, M. G., Cennamo, C., & Gawer, A. (2018). Towards a theory of ecosystems. Strategic Management Journal, 39(8), 2255-2276. https://doi.org/10.1002/smj.2904
Kahneman, D. (2011). Thinking, fast and slow. Farrar, Straus and Giroux.
Klaus, H., Rosemann, M., & Gable, G. G. (2000). What is ERP? Information Systems Frontiers, 2, 141-162. https://doi.org/10.1023/A:1026543906354
Laudon, K. C., & Laudon, J. P. (2022). Management information systems: Managing the digital firm (17th global ed.). Pearson.
Lee, H. L. (2004). The triple-A supply chain. Harvard Business Review. https://hbr.org/2004/10/the-triple-a-supply-chain
Lemon, K. N., & Verhoef, P. C. (2016). Understanding customer experience throughout the customer journey. Journal of Marketing, 80(6), 69-96. https://doi.org/10.1509/jm.15.0420
Lemon, K. N. (2016). What is the future of omnichannel retailing? Journal of Retailing, 92(2), 174-181.
Markus, M. L., & Benjamin, R. I. (1997). The magic bullet theory in IT-enabled transformation. Sloan Management Review, 38(2), 55-68.
McAfee, A., & Brynjolfsson, E. (2012). Big data: The management revolution. Harvard Business Review. https://hbr.org/2012/10/big-data-the-management-revolution
McAfee, A. (2011). What every CEO needs to know about the cloud. Harvard Business Review. https://hbr.org/2011/09/what-every-ceo-needs-to-know-about-the-cloud
McKinsey & Company. (2016). Delivering large-scale IT projects on time, on budget, and on value. https://www.mckinsey.com/
McKinsey & Company. (2020). Risk, resilience, and rebalancing in global value chains. https://www.mckinsey.com/capabilities/operations/our-insights/risk-resilience-and-rebalancing-in-global-value-chains
McKinsey & Company. (2021). The great consumer shift: Ten charts that show how US shopping behavior is changing. https://www.mckinsey.com/
Mell, P., & Grance, T. (2011). The NIST definition of cloud computing (NIST Special Publication 800-145). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-145
Melville, N., Kraemer, K., & Gurbaxani, V. (2004). Information technology and organizational performance: An integrative model of IT business value. MIS Quarterly, 28(2), 283-322. https://doi.org/10.2307/25148625
Mentzer, J. T., et al. (2001). Defining supply chain management. Journal of Business Logistics, 22(2), 1-25. https://doi.org/10.1002/j.2158-1592.2001.tb00001.x
Microsoft. (n.d.). Azure Data Lake Storage. https://azure.microsoft.com/en-us/products/storage/data-lake-storage
Microsoft. (n.d.). What is cloud computing? https://azure.microsoft.com/en-us/resources/cloud-computing-dictionary/what-is-cloud-computing
MIT Sloan School of Management. (n.d.). Data, analytics, and decision making. https://mitsloan.mit.edu/ideas-made-to-matter/data-analytics
Mitchell, T. M. (2017). Machine learning. McGraw-Hill.
National Institute of Standards and Technology. (2019). NIST Big Data interoperability framework (NIST Special Publication 1500 series). https://www.nist.gov/itl/big-data-nist
National Institute of Standards and Technology. (2020). Digital identity guidelines (NIST Special Publication 800-63-3). https://pages.nist.gov/800-63-3/
National Institute of Standards and Technology. (2020). NIST privacy framework: A tool for improving privacy through enterprise risk management. https://www.nist.gov/privacy-framework
National Institute of Standards and Technology. (2020). Security and privacy controls for information systems and organizations (NIST Special Publication 800-53, Revision 5). https://doi.org/10.6028/NIST.SP.800-53r5
National Institute of Standards and Technology. (2020). Zero trust architecture (NIST Special Publication 800-207). https://doi.org/10.6028/NIST.SP.800-207
National Institute of Standards and Technology. (2023). Artificial Intelligence Risk Management Framework 1.0. https://doi.org/10.6028/NIST.AI.100-1
National Institute of Standards and Technology. (2024). Artificial intelligence risk management framework: Generative artificial intelligence profile (NIST AI 600-1). https://doi.org/10.6028/NIST.AI.600-1
National Institute of Standards and Technology. (2024). The NIST cybersecurity framework (CSF) 2.0 (NIST CSWP 29). https://doi.org/10.6028/NIST.CSWP.29
National Institute of Standards and Technology. (n.d.). Privacy Framework. https://www.nist.gov/privacy-framework
National Institute of Standards and Technology. (n.d.-a). Recovery point objective. Computer Security Resource Center Glossary. https://csrc.nist.gov/glossary/term/recovery_point_objective
National Institute of Standards and Technology. (n.d.-b). Recovery time objective. Computer Security Resource Center Glossary. https://csrc.nist.gov/glossary/term/recovery_time_objective
Nonaka, I., & Takeuchi, H. (1995). The knowledge-creating company. Oxford University Press.
Oracle. (n.d.). What is supply chain management? https://www.oracle.com/scm/what-is-supply-chain-management/
Organisation for Economic Co-operation and Development. (2019). OECD AI principles. https://oecd.ai/en/ai-principles
Organisation for Economic Co-operation and Development. (2020). Digital business diagnostic tools for SMEs. https://www.oecd.org/digital/sme/
Organisation for Economic Co-operation and Development. (2021). Global value chains: Efficiency and risks. https://www.oecd.org/
Organisation for Economic Co-operation and Development. (2024). OECD digital economy outlook 2024 (Volume 2): Strengthening connectivity, innovation and trust. https://doi.org/10.1787/3adf705b-en
Orlikowski, W. J., & Scott, S. V. (2008). Sociomateriality: Challenging the separation of technology, work and organization. The Academy of Management Annals, 2(1), 433-474. https://doi.org/10.1080/19416520802211644
Payne, A., & Frow, P. (2005). A strategic framework for customer relationship management. Journal of Marketing, 69(4), 167-176. https://doi.org/10.1509/jmkg.2005.69.4.167
Pinto, J. K., & Slevin, D. P. (1988). Critical success factors across the project life cycle. Project Management Journal, 19(3), 67-75.
Porter, M. E., & Millar, V. E. (1985). How information gives you competitive advantage. Harvard Business Review. https://hbr.org/1985/07/how-information-gives-you-competitive-advantage
Porter, M. E. (2001). Strategy and the Internet. Harvard Business Review. https://hbr.org/2001/03/strategy-and-the-internet
Porter, M. E. (2008). The five competitive forces that shape strategy. Harvard Business Review. https://hbr.org/2008/01/the-five-competitive-forces-that-shape-strategy
Power, D. J. (2002). Decision support systems: Concepts and resources for managers. Decision Support Systems, 33(3), 315-316. https://doi.org/10.1016/S0167-9236(01)00115-8
Project Management Institute. (2021). A guide to the project management body of knowledge (7th ed.).
Project Management Institute. (2024). Pulse of the profession 2024. https://www.pmi.org/learning/thought-leadership/pulse
Ries, E. (2011). The lean startup. Crown Business.
Rochet, J.-C., & Tirole, J. (2003). Platform competition in two-sided markets. Journal of the European Economic Association, 1(4), 990-1029. https://doi.org/10.1162/154247603322493212
Royce, W. W. (1970). Managing the development of large software systems. In Proceedings of IEEE WESCON (pp. 1-9).
Russell, S., & Norvig, P. (2021). Artificial intelligence: A modern approach (4th ed.). Pearson.
Salesforce. (n.d.). What is CRM? https://www.salesforce.com/crm/what-is-crm/
Salesforce. (n.d.). What is omnichannel retail? https://www.salesforce.com/commerce/omnichannel/
SAP. (n.d.). What is enterprise resource planning? https://www.sap.com/products/erp/what-is-erp.html
SAP. (n.d.). What is supply chain management? https://www.sap.com/products/scm/what-is-supply-chain-management.html
Schein, E. H. (2010). Organizational culture and leadership (4th ed.). Jossey-Bass.
Schneier, B. (2015). Data and Goliath: The hidden battles to collect your data and control your world. W. W. Norton.
Seddon, P. B., Calvert, C., & Yang, S. (2010). A multi-project model of key factors affecting organizational benefits from enterprise systems. MIS Quarterly, 34(2), 305-328. https://doi.org/10.2307/20721429
Serrador, P., & Turner, R. (2015). The relationship between project success and project efficiency. International Journal of Project Management, 33(7), 1570-1578. https://doi.org/10.1016/j.ijproman.2015.01.008
Shi, W., Cao, J., Zhang, Q., Li, Y., & Xu, L. (2016). Edge computing: Vision and challenges. IEEE Internet of Things Journal, 3(5), 637-646. https://doi.org/10.1109/JIOT.2016.2579198
Shopify. (n.d.). What is omnichannel retail? https://www.shopify.com/retail/omnichannel-retailing
Simon, H. A. (1978, December 8). Rational decision-making in business organizations [Nobel lecture]. Nobel Foundation. https://www.nobelprize.org/uploads/2018/06/simon-lecture.pdf
Simon, H. A. (1996). The sciences of the artificial (3rd ed.). MIT Press.
Solove, D. J. (2006). A taxonomy of privacy. University of Pennsylvania Law Review, 154(3), 477-560. https://scholarship.law.upenn.edu/penn_law_review/vol154/iss3/1
Sommerville, I. (2015). Software engineering (10th ed.). Pearson.
Souppaya, M., Scarfone, K., & Dodson, D. (2022). Secure software development framework (SSDF) version 1.1: Recommendations for mitigating the risk of software vulnerabilities (NIST Special Publication 800-218). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-218
Standish Group. (2020). CHAOS report. https://www.standishgroup.com/
Stanford Institute for Human-Centered Artificial Intelligence. (2025). AI Index report 2025. https://aiindex.stanford.edu/report/
Stripe. (2025, June 7). How to track payments in real time and resolve issues faster. https://stripe.com/resources/more/how-to-track-payments-in-real-time-and-resolve-issues-faster
Stripe. (n.d.-a). Place a hold on a payment method. Retrieved October 21, 2026, from https://docs.stripe.com/payments/place-a-hold-on-a-payment-method
Stripe. (n.d.-b). Refund and cancel payments. Retrieved October 21, 2026, from https://docs.stripe.com/refunds
Takeuchi, H., & Nonaka, I. (1986). The new new product development game. Harvard Business Review. https://hbr.org/1986/01/the-new-new-product-development-game
Tang, C. S. (2006). Perspectives in supply chain risk management. International Journal of Production Economics, 103(2), 451-488. https://doi.org/10.1016/j.ijpe.2005.11.006
Teece, D. J., Pisano, G., & Shuen, A. (1997). Dynamic capabilities and strategic management. Strategic Management Journal, 18(7), 509-533. https://doi.org/10.1002/(SICI)1097-0266(199708)18:7<509::AID-SMJ882>3.0.CO;2-Z
The Standish Group. (2020). CHAOS report. https://www.standishgroup.com/
The White House. (2023). Executive order on the safe, secure, and trustworthy development and use of artificial intelligence. https://www.federalregister.gov/documents/2023/11/01/2023-24283/2023-24283/safe-secure-and-trustworthy-development-and-use-of-artificial-intelligence
The White House. (2023). Executive order on the safe, secure, and trustworthy development and use of artificial intelligence. https://www.federalregister.gov/documents/2023/11/01/2023-24283/safe-secure-and-trustworthy-development-and-use-of-artificial-intelligence
Tiwana, A., Konsynski, B., & Bush, A. A. (2010). Platform evolution: Coevolution of platform architecture, governance, and environmental dynamics. Information Systems Research, 21(4), 675-687. https://doi.org/10.1287/isre.1100.0323
UK Government. (n.d.). Digital markets competition regime. https://www.gov.uk/government/collections/digital-markets-competition-regime
UNESCO. (2021). Recommendation on the ethics of artificial intelligence. https://unesdoc.unesco.org/ark:/48223/pf0000381137
U.S. Department of Energy. (n.d.). Federal energy management program: Data centers. https://www.energy.gov/femp/data-centers
U.S. Digital Service. (n.d.). Digital services playbook. https://playbook.cio.gov/
U.S. Government Accountability Office. (2020). Cost estimating and assessment guide (GAO-20-195G). https://www.gao.gov/products/gao-20-195g
van der Aalst, W. M. P., ter Hofstede, A. H. M., Kiepuszewski, B., & Barros, A. P. (2003). Workflow patterns. Distributed and Parallel Databases, 14, 5-51. https://doi.org/10.1023/A:1022883727209
Vaquero, L. M., & Rodero-Merino, L. (2014). Finding your way in the cloud: The cloud definition. ACM Computing Surveys, 51(1), 1-17. https://doi.org/10.1145/2516535
Verhoef, P. C. (2019). A study of 46,000 shoppers shows that omnichannel retailing works. Harvard Business Review. https://hbr.org/2019/12/a-study-of-46000-shoppers-shows-that-omnichannel-retailing-works
Verhoef, P. C., Kannan, P. K., & Inman, J. J. (2015). From multi-channel retailing to omni-channel retailing: Introduction to the special issue on multi-channel retailing. Journal of Retailing, 91(2), 174-181. https://doi.org/10.1016/j.jretai.2015.02.005
Verizon. (2025). 2025 data breach investigations report. https://www.verizon.com/business/resources/reports/dbir/
Wagner, E. L., & Newell, S. (2004). Best-fit IT project: Examining social context in systems implementation. Information Systems Journal, 14(4), 313-334. https://doi.org/10.1111/j.1365-2575.2004.00175.x
Wang, R. Y., & Strong, D. M. (1996). Beyond accuracy: What data quality means to data consumers. Journal of Management Information Systems, 12(4), 5-33. https://doi.org/10.1080/07421222.1996.11518099
Wareham, J., Fox, P. B., & Cano Giner, J. L. (2014). Technology ecosystem governance. MIS Quarterly, 38(3), 119-142. https://doi.org/10.25300/MISQ/2014/38.3.08
Why cybersecurity is a strategic issue. (2017). Harvard Business Review. https://hbr.org/2017/05/why-cybersecurity-is-a-strategic-issue
World Economic Forum. (2020). Data excellence: Transforming data into value. https://www.weforum.org/
World Economic Forum. (2020). The future of jobs report 2020. https://www.weforum.org/publications/the-future-of-jobs-report-2020/
World Economic Forum. (2023). The future of jobs report 2023. https://www.weforum.org/publications/the-future-of-jobs-report-2023/
World Economic Forum. (2025). Global cybersecurity outlook 2025. https://www.weforum.org/publications/global-cybersecurity-outlook-2025/
World Economic Forum. (2025). The global risks report 2025. https://www.weforum.org/publications/global-risks-report-2025/
World Wide Web Consortium. (2024, December 12). Web content accessibility guidelines (WCAG) 2.2. https://www.w3.org/TR/2024/REC-WCAG22-20241212/