Simon Kratzer, Markus Westner, Susanne Strahringer
This study investigates the emerging role of 'Fractional CIOs,' who provide part-time IT leadership to small and medium-sized enterprises (SMEs). It synthesizes findings from a research project involving 62 Fractional CIOs across 10 countries and contextualizes them for the German market through interviews with three local Fractional CIOs/CTOs. The research aims to define the role, identify different types of engagements, and uncover key success factors.
Problem
Small and medium-sized enterprises (SMEs) increasingly require sophisticated IT management to remain competitive, yet often lack the resources or need to hire a full-time Chief Information Officer (CIO). This gap leaves them vulnerable, as IT responsibilities are often handled by non-experts, leading to potential productivity losses and security risks. The study addresses this challenge by exploring a flexible and cost-effective solution.
Outcome
- The study defines the 'Fractional CIO' role as a flexible, part-time IT leadership solution for SMEs, combining the benefits of an internal executive with the flexibility of an external consultant. - Four distinct engagement types are identified for Fractional CIOs: Strategic IT Management, Restructuring, Rapid Scaling, and Hands-on Support, each tailored to different business needs. - The most critical success factors for a successful engagement are trust between the company and the Fractional CIO, strong support from the top management team, and the CIO's personal integrity. - While the Fractional CIO model is not yet widespread in Germany, the study concludes it offers significant potential value for German SMEs seeking expert IT leadership without the cost of a full-time hire. - Three profiles of Fractional CIOs were identified based on their engagement styles: Strategic IT-Coaches, Full-Ownership-CIOs, and Change Agents.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we're looking at a fascinating new leadership model for the modern economy. We're diving into a study titled "Mehr als Vollzeit: Fractional CIOs in KMUs," which translates to "More than Full-time: Fractional CIOs in SMEs." Host: It investigates the emerging role of 'Fractional CIOs' – experts who provide part-time IT leadership to small and medium-sized businesses. Here to break it down for us is our analyst, Alex Ian Sutherland. Alex, welcome. Expert: Great to be here, Anna. Host: So, let's start with the big picture. Why is this role of a 'Fractional CIO' even necessary? What problem does it solve for businesses? Expert: It solves a critical and growing problem for small and medium-sized enterprises, or SMEs. These companies need sophisticated, strategic IT management to compete today. But they often don't have the budget, or frankly, the full-time need, for a six-figure Chief Information Officer. Host: So what happens instead? Expert: Usually, IT responsibility gets handed to someone who isn't an expert, like the CFO or Head of Operations. The study refers to these as 'involuntary IT managers'. They do their best, but they're often overworked, and this can lead to major productivity losses and, even worse, serious security risks. It's a dangerous gap in leadership. Host: A gap that these Fractional CIOs are meant to fill. How did the researchers in this study go about understanding this new role? Expert: They took a comprehensive, multi-stage approach. First, they conducted in-depth interviews with 62 Fractional CIOs across 10 different countries to get a global perspective. Then, to make it relevant for a specific market, they interviewed three experienced Fractional CIOs in Germany to see how the model applies there. Host: So they gathered a lot of real-world experience. What were the key findings? What exactly is a Fractional CIO? Expert: The study defines the role as a hybrid. A Fractional CIO combines the benefits of a deeply integrated internal executive with the flexibility and broad experience of an external consultant. They're not just advisors; they often take on real responsibility, but on a part-time basis, maybe for one to three days a week. Host: And I assume they don't just do one thing. Are there different ways they can help a business? Expert: Exactly. The study identified four distinct types of engagement, each tailored to a specific business need. Host: Can you walk us through them quickly? Expert: Of course. First is 'Strategic IT Management' for companies whose tech isn't aligned with their business goals. Second is 'Restructuring' for when an IT department is in crisis and needs a turnaround. Third is 'Rapid Scaling,' which is perfect for startups that need to build their IT infrastructure from the ground up. And finally, there's 'Hands-on Support' for businesses that have no internal IT and need someone to manage their external tech suppliers. Host: That’s a very clear breakdown. So, if a business hires one, what makes the relationship successful? Expert: The study was incredibly clear on this. The number one success factor, by far, is trust between the company’s leadership and the Fractional CIO. That trust is built on two other key factors: strong support from the top management team and the personal integrity of the Fractional CIO themselves. Host: Alex, this is the most important part for our listeners. If I'm leading a small or medium-sized business, why does this study matter to me? What are the practical takeaways? Expert: The biggest takeaway is that you no longer have to choose between having no IT leadership and hiring an expensive full-time executive. There is a flexible, expert alternative. This study gives you a language and a framework to find the right kind of help. Host: How so? Expert: You can now identify your specific need. Are you trying to fix a broken department? You need a 'Restructuring' specialist. Are you a high-growth startup? You need a 'Rapid Scaling' expert. The study also identified three profiles of these CIOs: 'Strategic IT-Coaches', 'Full-Ownership-CIOs', and 'Change Agents'. This helps you think about the type of person you need – a guide, a hands-on owner, or a transformation leader. Host: So it provides a roadmap for finding the right expert for your specific situation. Expert: Precisely. It turns a vague problem—"we need help with IT"—into a targeted search for a specific type of fractional executive who can deliver strategic value from day one, at a fraction of the cost. Host: Fantastic. Let's summarize. Small and medium-sized businesses face a critical IT leadership gap. The role of the Fractional CIO fills this gap by providing expert, part-time leadership. Host: We learned there are four key engagement types, from strategic planning to crisis restructuring, and that success hinges on trust, management support, and integrity. For business leaders, this offers a new, flexible model to secure top-tier IT talent. Host: Alex, thank you for making that so clear and actionable. Expert: My pleasure, Anna. Host: And thank you for listening to A.I.S. Insights — powered by Living Knowledge. Join us next time for more.
Fractional CIO, Fractional CTO, Part-Time Interim Management, SMEs, IT Management, Chief Information Officer
MIS Quarterly Executive (2022)
Assessing Incumbents' Risk of Digital Platform Disruption
Carmelo Cennamo, Lorenzo Diaferia, Aasha Gaur, Gianluca Salviotti
This study identifies three key market characteristics that make established businesses (incumbents) vulnerable to disruption by digital platforms. Using a qualitative research design examining multiple industries, the authors developed a practical tool for managers to assess their company's specific risk of being disrupted by these new market entrants.
Problem
Traditional companies often struggle to understand the unique threat posed by digital platforms, which disrupt entire market structures rather than just introducing new products. This research addresses the need for a systematic way for incumbent firms to identify their specific vulnerabilities and understand how digital platform disruption unfolds in their industry.
Outcome
- Digital platforms successfully disrupt markets by exploiting three key characteristics: information inefficiencies (asymmetry, fragmentation, complexity), the modular nature of product/service offerings, and unaddressed diverse customer preferences. - Disruption occurs in two primary ways: by creating new, more efficient marketplace infrastructures that replace incumbents' marketing channels, and by introducing alternative marketplaces with entirely new offerings that substitute incumbents' core services. - The paper provides a risk-assessment tool for managers to systematically evaluate their market's exposure to platform disruption based on a detailed set of factors related to information, product modularity, and customer preferences.
Host: Welcome to A.I.S. Insights, powered by Living Knowledge. In a world where companies like Airbnb and Uber can reshape entire industries seemingly overnight, established businesses are constantly looking over their shoulders. Today, we're asking: how can you know if your company is next? We’re diving into a fascinating study from the MIS Quarterly Executive titled, "Assessing Incumbents' Risk of Digital Platform Disruption."
Host: It identifies three key market characteristics that make established businesses vulnerable and, most importantly, provides a tool for managers to assess their company's risk. Here to unpack it all is our analyst, Alex Ian Sutherland. Alex, welcome.
Expert: Glad to be here, Anna.
Host: So, let's start with the big problem. We all know disruption is a threat, but the study suggests that the threat from digital platforms is different, and that traditional companies often misunderstand it. Why is that?
Expert: That's the core issue. Businesses are used to competing on products. Someone builds a better mousetrap, you build an even better one. But digital platforms don't just sell a new product; they fundamentally re-architect the entire market. They change the rules of the game.
Expert: Think about Craigslist's impact on newspapers. Craigslist didn't create a better classifieds section; it created a whole new, more efficient marketplace that made the newspaper's classifieds channel almost irrelevant. It disrupted the *relationships* between buyers, sellers, and the newspaper itself.
Host: So it's about changing the structure, not just the product. How did the researchers identify the warning signs for this kind of structural shift? What was their approach?
Expert: They conducted a deep, qualitative study. They didn't just look at numbers; they examined real-world platform cases across multiple industries—from energy and IT services to banking and insurance. They also conducted in-depth interviews with the key people actually designing, launching, and managing these platforms to understand the common patterns behind their success.
Host: And what were those key patterns? What are the big findings that business leaders need to know?
Expert: The study found that platforms successfully exploit three specific market characteristics. First, they thrive on what the researchers call 'information inefficiencies'. This is when information is lopsided, scattered, or just too complex for customers to easily understand. Platforms fix this by centralizing everything and making it transparent.
Host: Can you give me an example?
Expert: Absolutely. Think of booking a hotel before and after a platform like Booking.com. Information was fragmented across different hotel websites and travel agents. Platforms brought it all into one place, with user reviews to solve the problem of lopsided information—where the hotel knows more about its quality than you do.
Host: Okay, so inefficient information is the first vulnerability. What's the second?
Expert: The second is the modular nature of products or services. If what you sell is really a 'bundle' of smaller parts, a platform can come in, unbundle it, and let customers pick and choose only the pieces they want.
Expert: The study points to the insurance industry. A traditional policy is a bundle. A platform like 'Yolo' allows users to buy "micro-insurance" on-demand—just for a ski trip, for example—by breaking apart the traditional, monolithic insurance package.
Host: That makes perfect sense. Unbundling. And the third characteristic?
Expert: The third is the existence of unaddressed, diverse customer preferences. Large incumbents often focus on the biggest part of the market with a standardized offering. Platforms excel at serving the niches. They aggregate all that diverse demand, making it profitable to cater to very specific tastes, like Apple Podcasts does for every hobby imaginable.
Host: This is incredibly insightful. So, Alex, we come to the most important question. I’m a business leader listening to this. How do I apply these findings? What does this mean for my business today?
Expert: This is the most practical part of the study. It provides a risk-assessment tool, which boils down to asking yourself a few tough questions. First, how severe is the information asymmetry in your market? Do your customers struggle with uncertainty?
Expert: Second, how fragmented is the knowledge? Do customers have to hunt for information across many different sources to make a decision? If so, you're vulnerable.
Host: Okay, what else should I be asking?
Expert: You need to ask, how modular could my product be? Could a competitor break it apart and sell the pieces? And finally, are there groups of customers whose specific needs are not being fully met by your standard offering?
Host: So by going through that checklist, you can essentially diagnose your own company’s risk of disruption.
Expert: Exactly. It’s a proactive health check for your market. Answering "yes" to those questions doesn't mean you're doomed, but it does mean there are cracks in your market's foundation. And those cracks are precisely where a digital platform will try to gain a foothold.
Host: So, to summarize for our listeners: digital platforms don't just introduce new products, they rewire entire markets. They do this by exploiting three main vulnerabilities: information that is inefficient, products that can be unbundled, and diverse customer needs that are being ignored.
Host: The key takeaway is to use these insights as a lens to critically examine your own industry and identify your specific risks before someone else does. Alex, this has been an incredibly clear and actionable breakdown. Thank you so much for joining us.
Expert: My pleasure, Anna.
Host: And thanks to all of you for tuning in to A.I.S. Insights, powered by Living Knowledge. We'll see you next time.
digital platforms, disruption, incumbent firms, market architecture, risk assessment, information asymmetry, modularity
MIS Quarterly Executive (2022)
How SME Watkins Steel Transformed from Traditional Steel Fabrication to Digital Service Provision
Friedrich Chasin, Marek Kowalkiewicz, Torsten Gollhardt
This study presents a case study of Watkins Steel, an Australian small and medium-sized enterprise (SME), detailing its successful digital transformation from a traditional steel fabricator to a digital services provider. It introduces and analyzes two key strategic concepts, 'augmentation' and 'adjacency', as a framework for how SMEs can innovate and add new revenue streams without abandoning their core business.
Problem
While digital transformation success stories for large corporations are common, there is a significant lack of practical guidance and documented examples for small and medium-sized enterprises (SMEs). This gap leaves many SMEs unaware of the potential of digital technologies and constrained by organizational inertia, hindering their ability to innovate and remain competitive.
Outcome
- Watkins Steel successfully transitioned by augmenting its core steel fabrication business with new, high-value digital services like 3D scanning, modeling, and data reporting. - The study proposes a transformation framework for SMEs based on two concepts: 'digital augmentation' (adding new services) and 'digital adjacency' (leveraging existing assets like customers, data, and skills for these new services). - Key success factors included contagious leadership from the CEO, embracing business constraints as innovation opportunities, and a customer-centric approach to solving their clients' problems. - Instead of hiring new talent, Watkins Steel successfully cultivated its own digital experts by empowering existing employees with domain knowledge to learn new skills, fostering a culture of experimentation. - The transformation allowed the company to move up the value chain, from being a materials provider to coordinating and managing construction processes, creating a more defensible market position.
Host: Welcome to A.I.S. Insights, the podcast where we connect business strategy with cutting-edge research. I’m your host, Anna Ivy Summers. Host: Today, we're diving into a study that offers a practical roadmap for one of the biggest challenges facing smaller companies: digital transformation. Host: It’s titled "How SME Watkins Steel Transformed from Traditional Steel Fabrication to Digital Service Provision.” Host: The study presents a fascinating case study of an Australian steel company that successfully added new, high-value digital revenue streams without abandoning its core business. Host: Here to break it all down for us is our analyst, Alex Ian Sutherland. Alex, welcome. Expert: Great to be here, Anna. Host: Alex, we hear about digital transformation all the time, usually in the context of giant corporations. What’s the specific problem this study tackles for smaller businesses? Expert: The biggest problem is a lack of guidance. Small and medium-sized enterprises, or SMEs, see the big success stories but have no clear, practical blueprint to follow. Expert: They're often constrained by limited budgets, a lack of digital skills, and what the study calls 'organizational inertia'. It's tough to innovate when you're just trying to keep the daily operations running. Expert: The CEO of Watkins Steel summed up the initial mindset perfectly. He said, "I thought innovation was just another buzzword... Our business is steel fabrication. You cut steel, and you weld steel. You cannot innovate it." That's the barrier this study helps businesses overcome. Host: So how did the researchers get inside this transformation to create a blueprint? Expert: They took a very hands-on approach. It was a comprehensive, in-depth case study of Watkins Steel, which involved spending significant time on-site. Expert: They interviewed nine different people within the company—from the CEO to business development managers to the draftsmen on the factory floor—to get a complete 360-degree view of what worked and why. Host: And what were the key findings? What did Watkins Steel do that was so different? Expert: The researchers boiled it down to two core strategic concepts: 'digital augmentation' and 'digital adjacency'. Host: Can you break those down for us? What is 'digital augmentation'? Expert: Augmentation is about adding new digital services to your existing business. Watkins Steel didn't stop fabricating steel. They used technologies like 3D laser scanners and drones to offer new services on top of their core product, like detailed site modeling and data reporting. Host: And 'digital adjacency'? Expert: Adjacency means leveraging the assets you already have to build those new services. Watkins Steel offered these new digital services to their existing construction customers. They used the data from their projects and, most importantly, they leveraged their existing employees. Host: That’s a key point. Did they have to go out and hire a team of new tech experts? Expert: Not at all, and this is a huge finding for SMEs. They cultivated their own digital experts. They took employees who had deep domain knowledge—like draftsmen who were previously boilermakers—and empowered them to learn the new scanning and modeling technologies. Host: So the strategy and the people were key. What was the ultimate result for the business? Expert: It completely changed their position in the market. They moved up the value chain. Instead of just being a supplier delivering steel beams, they became a crucial partner coordinating the construction process. As their CEO put it, they went from being at "the bottom of the food chain" to "running the site." Host: That's a powerful shift. So, for a business leader listening right now, what are the most important, actionable takeaways from the Watkins Steel story? Expert: I think there are three big ones. First, you don't have to bet the farm on a risky pivot. The augmentation and adjacency framework shows you can innovate by building on your existing strengths—your customers, your data, and your people. It’s evolution, not revolution. Host: That seems much more manageable for a smaller company. What's the second takeaway? Expert: It’s that leadership has to be contagious. The study highlights how the CEO's passion and encouragement spread throughout the company. He created a culture of experimentation, saying the best resource he could give his team was a credit card to go buy new technology and start playing around with it. Host: And the third takeaway? Expert: Turn your problems into products. Watkins Steel initially invested in 3D scanners to reduce their own costly fabrication errors. But they quickly realized that the data they were capturing was incredibly valuable to their clients. They turned an internal quality-control tool into a brand-new, high-margin digital service. Host: A fantastic story. So to recap: innovate by augmenting your core business, let the leader's passion for experimentation be contagious, and look for ways to turn your internal solutions into external services. Host: Alex, thank you so much for bringing this study to life for us. So many valuable insights. Expert: My pleasure, Anna. Host: And a big thank you to our audience for tuning in to A.I.S. Insights. We'll see you next time.
digital transformation, SME, business model innovation, case study, digital service provision, digital augmentation, digital adjacency
International Conference on Wirtschaftsinformatik (2025)
Education and Migration of Entrepreneurial and Technical Skill Profiles of German University Graduates
David Blomeyer and Sebastian Köffer
This study examines the supply of entrepreneurial and technical talent from German universities and analyzes their migration patterns after graduation. Using LinkedIn alumni data for 43 universities, the research identifies key locations for talent production and evaluates how effectively different cities and federal states retain or attract these skilled workers.
Problem
Amidst a growing demand for skilled workers, particularly for startups, companies and policymakers lack clear data on talent distribution and mobility in Germany. This information gap makes it difficult to devise effective recruitment strategies, choose business locations, and create policies that foster regional talent retention and economic growth.
Outcome
- Universities in major cities, especially TU München and LMU München, produce the highest number of graduates with entrepreneurial and technical skills. - Talent retention varies significantly by location; universities in major metropolitan areas like Berlin, Munich, and Hamburg are most successful at keeping their graduates locally, with FU Berlin retaining 68.8% of its entrepreneurial alumni. - The tech hotspots of North Rhine-Westphalia (NRW), Bavaria, and Berlin retain an above-average number of their own graduates while also attracting a large share of talent from other regions. - Bavaria is strong in both educating and attracting talent, whereas NRW, the largest producer of talent, also loses a significant number of graduates to other hotspots. - The analysis reveals that hotspot regions are generally better at retaining entrepreneurial profiles than technical profiles, highlighting the influence of local startup ecosystems on talent mobility.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. In today's competitive landscape, finding the right talent can make or break a business. But where do you find them? Today, we're diving into a fascinating study titled "Education and Migration of Entrepreneurial and Technical Skill Profiles of German University Graduates." Host: In short, it examines where Germany's top entrepreneurial and tech talent comes from, and more importantly, where it goes after graduation. With me to break it all down is our analyst, Alex Ian Sutherland. Welcome, Alex. Expert: Great to be here, Anna. Host: So, Alex, let's start with the big picture. What's the real-world problem this study is trying to solve? Expert: The problem is a significant information gap. Germany has a huge demand for skilled workers, especially in STEM fields—we're talking a gap of over 300,000 specialists. Startups, in particular, need this talent to scale. But companies and even regional governments don't have clear data on where these graduates are concentrated and how they move around the country. Host: So they’re flying blind when it comes to recruitment or deciding where to set up a new office? Expert: Exactly. Without this data, it's hard to build effective recruitment strategies or create policies that help a region hold on to the talent it educates. This study gives us a map of Germany's brain circulation for the first time. Host: How did the researchers create this map? What was their approach? Expert: It was quite innovative. They used a massive and publicly available dataset: LinkedIn alumni pages. They analyzed over 2.4 million alumni profiles from 43 major German universities. Host: And how did they identify the specific talent they were looking for? Expert: They created two key profiles. First, the 'Entrepreneurial Profile,' using keywords like Founder, Startup, or Business Development. Second, the 'Technical Profile,' with keywords like IT, Engineering, or Digital. Then, they tracked the current location of these graduates to see who stays, who leaves, and where they go. Host: A digital breadcrumb trail for talent. So, what were the key findings? Where is the talent coming from? Expert: Unsurprisingly, universities in major cities are the biggest producers. The undisputed leader is Munich. The Technical University of Munich, TU München, produces the highest number of both entrepreneurial and technical graduates in the entire country. Host: So Munich is the top talent factory. But the crucial question is, does the talent stay there? Expert: That's where it gets interesting. The study found that talent retention varies massively. Again, the big metropolitan areas—Berlin, Munich, and Hamburg—are the most successful at keeping their graduates. Freie Universität Berlin, for example, retains nearly 69% of its entrepreneurial alumni right there in the city. That's an incredibly high rate. Host: That is high. And what about the bigger picture, at the state level? Are there specific regions that are winning the war for talent? Expert: Yes, the study identifies three clear hotspots: Bavaria, Berlin, and North Rhine-Westphalia, or NRW. They not only retain a high number of their own graduates, but they also act as magnets, pulling in talent from all over Germany. Host: And are these hotspots all the same? Expert: Not at all. Bavaria is a true powerhouse—it's strong in both educating and attracting talent. NRW is the largest producer of skilled graduates, but it also has a "brain drain" problem, losing a lot of its talent to the other two hotspots. And Berlin is a massive talent magnet, with almost half of its entrepreneurial workforce having migrated there from other states. Host: This is all fascinating, Alex, but let's get to the bottom line. Why does this matter for the business professionals listening to our show? Expert: This is a strategic roadmap for businesses. For recruitment, it means you can move beyond simple university rankings. This data tells you where specific talent pools are geographically concentrated. Need experienced engineers? The data points squarely to Munich. Looking for entrepreneurial thinkers? Berlin is a giant hub of attracted, not just homegrown, talent. Host: So it helps companies focus their hiring efforts. What about for bigger decisions, like choosing a business location? Expert: Absolutely. This study helps you understand the dynamics of a regional talent market. Bavaria offers a stable, locally-grown talent pool. Berlin is incredibly dynamic but relies on its power to attract people, which could be vulnerable to competition. A company in NRW needs to know it’s competing directly with Berlin and Munich for its best people. Host: So it's about understanding the long-term sustainability of the local talent pipeline. Expert: Precisely. It also has huge implications for investors and policymakers. It reveals which regions are getting the best return on their educational investments. It shows where to invest to build up a local startup ecosystem that can actually hold on to the bright minds it helps create. Host: So, to sum it up: we now have a much clearer picture of Germany's talent landscape. Universities in big cities are the incubators, but major hotspots like Berlin and Bavaria are the magnets that ultimately attract and retain them. Expert: That's right. It's not just about who has the best universities, but who has the best ecosystem to keep the graduates those universities produce. Host: A crucial insight for any business looking to grow. Alex, thank you so much for breaking that down for us. Expert: My pleasure, Anna. Host: And thank you for tuning in. Join us next time for more on A.I.S. Insights — powered by Living Knowledge.
International Conference on Wirtschaftsinformatik (2025)
Trapped by Success – A Path Dependence Perspective on the Digital Transformation of Mittelstand Enterprises
Linus Lischke
This study investigates why German Mittelstand enterprises (MEs), or mid-sized companies, often implement incremental rather than radical digital transformation. Using path dependence theory and a multiple-case study methodology, the research explores how historical success anchors strategic decisions in established business models, limiting the pursuit of new digital opportunities.
Problem
Successful mid-sized companies are often cautious when it comes to digital transformation, preferring minor upgrades over fundamental changes. This creates a research gap in understanding why these firms remain on a slow, incremental path, even when faced with significant digital opportunities that could drive growth.
Outcome
- Successful business models create a 'functional lock-in,' where companies become trapped by their own success, reinforcing existing strategies and discouraging radical digital change. - This lock-in manifests in three ways: ingrained routines (normative), deeply held assumptions about the business (cognitive), and investment priorities that favor existing operations (resource-based). - MEs tend to adopt digital technologies primarily to optimize current processes and enhance existing products, rather than to create new digital business models. - As a result, even promising digital innovations are often rejected if they do not seamlessly align with the company's traditional operations and core products.
Host: Welcome to A.I.S. Insights, the podcast at the intersection of business and technology, powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we’re diving into a fascinating study titled “Trapped by Success – A Path Dependence Perspective on the Digital Transformation of Mittelstand Enterprises.” Host: It explores a paradox: why are some of the most successful and stable mid-sized companies, particularly in Germany, so slow to make big, bold moves in their digital transformation? It turns out, their history of success might be the very thing holding them back. Host: To help us unpack this, we have our expert analyst, Alex Ian Sutherland. Alex, welcome to the show. Expert: Thanks for having me, Anna. It’s a really important topic. Host: Let’s start with the big problem. We’re talking about successful, profitable companies. Why should we be concerned if they prefer small, steady upgrades over radical digital change? Expert: That's the core of the issue. These companies aren't in trouble. They are leaders in their niche markets, often for generations. But the study highlights a critical risk. They tend to use digital technology to optimize what they already do—making a process 5% more efficient or adding a minor digital feature to a physical product. Host: So, they're improving, but not necessarily innovating? Expert: Exactly. They are on an incremental path. This caution means they risk being blindsided by a competitor who uses technology to create an entirely new, digital-first business model. They're optimizing the present at the potential cost of their future. Host: So how did the researchers get to the bottom of this cautious behavior? What was their approach? Expert: They used a powerful concept called 'path dependence theory'. The idea is that the choices a company makes today are heavily influenced by the 'path' created by its past decisions and successes. Expert: To see this in action, they conducted an in-depth multiple-case study, interviewing leaders and managers at three distinct mid-sized industrial machinery companies. This let them see the decision-making patterns up close, right where they happen. Host: And by looking so closely, what did they find? What were the key takeaways? Expert: The biggest finding is a concept they call 'functional lock-in'. These companies are essentially trapped by their own success. Their entire organization—their processes, their culture, their budget—is so perfectly optimized for their current successful business model that it actively resists fundamental change. Host: ‘Lock-in’ sounds quite restrictive. How does this actually manifest in a company day-to-day? Expert: The study found it shows up in three main ways. First is 'normative lock-in', which is about ingrained routines. The "this is how we've always done it" mindset. Expert: Second is 'cognitive lock-in'. This is about the deeply held assumptions of the leaders. One CEO literally said, "We still think in terms of mechanical engineering." They see themselves as a machine builder, not a software company, which limits the kind of digital opportunities they can even imagine. Expert: And finally, there's 'resource-based lock-in'. They invest their money and people into refining existing products and operations because that’s where the guaranteed returns are, rather than funding riskier, purely digital projects. Host: Can you give us a real-world example from the study? Expert: Absolutely. One company, Beta, developed a platform-based digital product. But despite the great hopes, they couldn't get enough users to pay for it and eventually had to pull back. Expert: Another company rejected using smart glasses for remote service. In theory, it sounded great. In reality, employees just used their phones to call for help because it was faster and fit their existing workflow. The new tech didn’t seamlessly integrate, so it was abandoned. Host: This is incredibly insightful. It feels like a real cautionary tale. This brings us to the most important question, Alex. What does this mean for business leaders listening right now? What are the practical takeaways? Expert: This is the critical part. The first takeaway is awareness. Leaders need to consciously recognize this 'success trap'. You have to ask the hard question: "Is our current success blinding us to future disruption?" Host: So, step one is admitting you might have a problem. What’s next? Expert: The second takeaway is to actively challenge the 'cognitive lock-in'. Leaders must question their own assumptions. A powerful question to ask your team is, "Are we using digital for efficiency, just to do the same things better? Or are we using it for renewal, to find completely new ways to create value?" Host: That’s a fundamental shift in perspective. But how do you do that when the main business needs to keep running efficiently? Expert: That's the third and final takeaway: you have to create protected space for innovation. The study suggests solutions like creating dedicated teams, forging external partnerships, or pursuing what’s called 'dual transformation'. You run your core business, but you also build a separate engine for exploring radical new ideas, shielded from the powerful inertia of the main organization. Host: So it's not about abandoning what works, but about building something new alongside it to prepare for the future. Expert: Precisely. It’s about achieving what we call digital ambidexterity—being excellent at optimizing today's business while simultaneously exploring tomorrow's. Host: Fantastic. So, to summarize, this study reveals that many successful mid-sized companies get stuck on a slow digital path due to a 'functional lock-in' created by their own success. Host: This lock-in is driven by established routines, leadership mindsets, and investment habits. For business leaders, the key is to recognize this trap, challenge core assumptions, and intentionally create space for true, radical innovation. Host: Alex, this has been incredibly clarifying. Thank you for breaking it down for us. Expert: My pleasure, Anna. Host: And thank you to our audience for tuning in to A.I.S. Insights — powered by Living Knowledge. We’ll see you next time.
Digital Transformation, Path Dependence, Mittelstand Enterprises
International Conference on Wirtschaftsinformatik (2025)
Designing Digital Service Innovation Hubs: An Ecosystem Perspective on the Challenges and Requirements of SMEs and the Public Sector
Jannika Marie Schäfer, Jonas Liebschner, Polina Rajko, Henrik Cohnen, Nina Lugmair, and Daniel Heinz
This study investigates the design of a Digital Service Innovation Hub (DSIH) to facilitate and orchestrate service innovation for small and medium-sized enterprises (SMEs) and public organizations. Using a design science research approach, the authors conducted 17 expert interviews and focus group validations to analyze challenges and derive specific design requirements. The research aims to create a blueprint for a hub that moves beyond simple networking to actively manage innovation ecosystems.
Problem
Small and medium-sized enterprises (SMEs) and public organizations often struggle to innovate within service ecosystems due to resource constraints, knowledge gaps, and difficulties finding the right partners. Existing Digital Innovation Hubs (DIHs) typically focus on specific technological solutions and matchmaking but fail to provide the comprehensive orchestration needed for sustained service innovation. This gap leaves many organizations unable to leverage the full potential of collaborative innovation.
Outcome
- The study identifies four key challenge areas for SMEs and public organizations: exogenous factors (e.g., market speed, regulations), intraorganizational factors (e.g., resistant culture, outdated systems), knowledge and skill gaps, and partnership difficulties. - It proposes a set of design requirements for Digital Service Innovation Hubs (DSIHs) centered on three core functions: (1) orchestrating actors by facilitating matchmaking, collaboration, and funding opportunities. - (2) Facilitating structured knowledge transfer by sharing best practices, providing tailored content, and creating interorganizational learning formats. - (3) Ensuring effective implementation and provision of the hub itself through user-friendly design, clear operational frameworks, and tangible benefits for participants.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we're exploring a study titled "Designing Digital Service Innovation Hubs: An Ecosystem Perspective on the Challenges and Requirements of SMEs and the Public Sector." Host: It’s all about creating a new type of digital hub to help small and medium-sized businesses and public organizations innovate together, moving beyond simple networking to actively manage the entire innovation process. With me to break it down is our analyst, Alex Ian Sutherland. Welcome, Alex. Expert: Great to be here, Anna. Host: Alex, let's start with the big picture. Why is this topic so important right now? What is the real-world problem this study is trying to solve? Expert: The core problem is that smaller businesses and public sector organizations are often left behind when it comes to innovation. They have great ideas but struggle with resource constraints, knowledge gaps, and simply finding the right partners to collaborate with. Expert: Existing platforms, often called Digital Innovation Hubs, tend to focus on selling a specific technology or just acting as a simple matchmaking service. They don't provide the hands-on guidance, or 'orchestration,' needed to see a complex service innovation through from start to finish. Host: So there's a gap between simply connecting people and actually helping them succeed together. How did the researchers investigate this? What was their approach? Expert: They went directly to the source. The research team conducted 17 in-depth, semi-structured interviews with leaders and experts from a diverse range of small and medium-sized enterprises and public institutions. This allowed them to get a rich, real-world understanding of the specific barriers these organizations face every day. Host: And after speaking with all these experts, what were the main challenges they uncovered? Expert: The study organized the challenges into four key areas. First, 'exogenous factors' – things outside their control, like the incredible speed of technological change and regulations that haven't caught up with technology. Expert: Second were 'intraorganizational factors'. This is the internal friction: an organizational culture that resists change, outdated IT systems, and the constant struggle to secure funding for new ideas. One person even mentioned colleagues saying, "I am two years away from retirement. Why should I change anything?" Host: That’s a powerful and very real obstacle. What were the other two areas? Expert: The third was a clear gap in knowledge and skills, especially around digital competencies and having a structured process for innovation. And fourth, and this is a big one, were partnership difficulties. Finding the right collaborator is often, as one interviewee put it, "unsystematic and based on coincidences." Host: That sounds like a complex web of problems. So how does this new concept, the Digital Service Innovation Hub or DSIH, propose to fix this? Expert: The study lays out a blueprint for a DSIH based on three core functions. First, it must be an active 'orchestrator.' This means using smart tools, maybe even AI-based matching, to not just find partners but to actively facilitate collaboration and connect projects to funding opportunities. Expert: Second, it has to facilitate structured knowledge transfer. This isn't just a library of articles. It’s about sharing success stories, providing tailored, practical content, and creating forums where organizations can learn from each other's wins and losses. Expert: And finally, the hub itself must be designed for its users. It has to be intuitive, offer clear benefits, and provide support. The goal is to make participation easy and obviously valuable. Host: This is what our listeners really want to know, Alex. Why does this matter for business? What are the practical takeaways for a business professional tuning in right now? Expert: I think there are three key takeaways. First, innovation today is a team sport, especially for SMEs. You can't do it all alone. This study provides a model for how to create and engage with structured ecosystems that pool resources, knowledge, and risk. Expert: Second, leaders need to look beyond simple networking. A contact list isn't an innovation strategy. The real value comes from an 'orchestrator'—a central hub that actively manages collaboration and helps navigate complexity. If you're looking to partner, seek out these more structured ecosystems. Expert: And finally, for any industry associations or regional development agencies listening, this study is a practical guide. It outlines the specific design requirements needed to build a hub that actually works—one that creates tangible value by connecting partners, sharing relevant knowledge, and providing a clear framework for success. Host: A fantastic summary. So, to recap, small and medium-sized businesses and public organizations face significant hurdles to innovation, but a well-designed Digital Service Innovation Hub can act as a crucial orchestrator, connecting partners, sharing knowledge, and driving real progress. Host: Alex Ian Sutherland, thank you so much for your insights. Expert: My pleasure, Anna. Host: And thank you for listening to A.I.S. Insights — powered by Living Knowledge. Join us next time as we decode another key piece of research for your business.
service innovation, ecosystem, innovation hubs, SMEs, public sector
International Conference on Wirtschaftsinformatik (2025)
Design Principles for SME-focused Maturity Models in Information Systems
Stefan Rösl, Daniel Schallmo, and Christian Schieder
This study addresses the limited practical application of maturity models (MMs) among small and medium-sized enterprises (SMEs). Through a structured analysis of 28 relevant academic articles, the researchers developed ten actionable design principles (DPs) to improve the usability and strategic impact of MMs for SMEs. These principles were subsequently validated by 18 recognized experts to ensure their practical relevance.
Problem
Maturity models are valuable tools for assessing organizational capabilities, but existing frameworks are often too complex, resource-intensive, and not tailored to the specific constraints of SMEs. This misalignment leads to low adoption rates, preventing smaller businesses from effectively using these models to guide their transformation and innovation efforts.
Outcome
- The study developed and validated ten actionable design principles (DPs) for creating maturity models specifically tailored for Small and Medium-sized Enterprises (SMEs). - These principles, confirmed by experts as highly useful, provide a structured foundation for researchers and designers to build MMs that are more accessible, relevant, and usable for SMEs. - The research bridges the gap between MM theory and real-world applicability, enabling the development of tools that better support SMEs in strategic planning and capability improvement.
Host: Welcome to A.I.S. Insights, the podcast at the intersection of business and technology, powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we’re diving into a study titled "Design Principles for SME-focused Maturity Models in Information Systems." It’s all about a common challenge: how can smaller businesses use powerful strategic tools that were really designed for large corporations? Host: Joining me is our analyst, Alex Ian Sutherland. Alex, great to have you. Expert: Great to be here, Anna. Host: So, let's start with the big picture. The study talks about something called "maturity models." What are they, and what's the problem this study is trying to solve? Expert: Of course. Think of a maturity model as a roadmap. It helps a company assess its capabilities in a certain area—like digital transformation or cybersecurity—and see what steps it needs to take to get better, or more "mature." Expert: The problem is, most of these models are built with big companies in mind. The study points out they are often too complex, too resource-intensive, and don't fit the specific constraints of small and medium-sized enterprises, or SMEs. Host: So they’re a great tool in theory, but in practice, smaller businesses just can't use them? Expert: Exactly. SMEs have limited time, money, and personnel. When they try to use a standard maturity model, they often find it overwhelming and misaligned with their needs. As a result, they miss out on a valuable tool for strategic planning and innovation. Host: It sounds like a classic case of a solution not fitting the user. How did the researchers in this study approach fixing that? Expert: They used a really solid, two-part approach. First, they conducted a systematic review of 28 relevant academic articles to identify the core requirements that a maturity model for SMEs *should* have. Expert: Then, based on that analysis, they developed ten clear design principles. And this is the crucial part: they didn't just stop there. They validated these principles with 18 recognized experts in the field to ensure they were practical and genuinely useful in the real world. Host: So this isn’t just theoretical. They’ve created a practical blueprint. What are some of these key principles they discovered? Expert: The main outcome is this set of ten principles. We don't have time for all of them, but a couple really stand out. The very first one is "Tailored or Configurable Design." Host: Meaning it can't be one-size-fits-all? Expert: Precisely. It means a model for an SME should be adaptable to its specific industry, size, and goals. Another key principle is "Intuitive Self-Assessment Tool." This emphasizes that the model should be easy enough for an SME's team to use on their own, without needing to hire expensive external consultants. Host: That makes perfect sense for a company with a tight budget. Alex, let’s get to the bottom line. Why does this matter for a business professional listening right now? What are the key takeaways? Expert: This is the most important part. If you’re a leader at an SME, this study provides a checklist for what to look for in a strategic tool. It empowers you to ask the right questions. Is this model flexible? Does it focus on our specific needs? Can my team use it easily? Expert: It fundamentally bridges the gap between abstract business theory and practical application for smaller companies. Following these design principles means developers can create better tools, and SME leaders can choose tools that actually help them improve and compete, rather than just collecting dust on a shelf. Host: It’s about leveling the playing field, giving SMEs access to the same kind of strategic guidance that large enterprises have, but in a format that works for them. Expert: That's it exactly. It's about making strategy accessible and actionable for everyone. Host: So, to summarize: Maturity models are powerful roadmaps for business improvement, but they've historically been a poor fit for SMEs. This study identified ten core design principles to change that, focusing on things like adaptability, simplicity, and practical guidance. Host: Ultimately, this gives SME leaders a framework to find or build tools that drive real strategic value. Alex, thank you so much for breaking down this insightful study for us. Expert: My pleasure, Anna. Host: And a big thank you to our audience for tuning in to A.I.S. Insights. Join us next time as we uncover more knowledge to power your business.
International Conference on Wirtschaftsinformatik (2025)
Challenges and Mitigation Strategies for AI Startups: Leveraging Effectuation Theory in a Dynamic Environment
Marleen Umminger, Alina Hafner
This study investigates the unique benefits and obstacles encountered by Artificial Intelligence (AI) startups. Through ten semi-structured interviews with founders in the DACH region, the research identifies key challenges and applies effectuation theory to explore effective strategies for navigating the uncertain and dynamic high-tech field.
Problem
While investment in AI startups is surging, founders face unique challenges related to data acquisition, talent recruitment, regulatory hurdles, and intense competition. Existing literature often groups AI startups with general digital ventures, overlooking the specific difficulties stemming from AI's complexity and data dependency, which creates a need for tailored mitigation strategies.
Outcome
- AI startups face core resource challenges in securing high-quality data, accessing affordable AI models, and hiring skilled technical staff like CTOs. - To manage costs, founders often use publicly available data, form partnerships with customers for data access, and start with open-source or low-cost MVP models. - Founders navigate competition by tailoring solutions to specific customer needs and leveraging personal networks, while regulatory uncertainty is managed by either seeking legal support or framing compliance as a competitive advantage to attract enterprise customers. - Effectuation theory proves to be a relevant framework, as successful founders tend to leverage existing resources and networks (bird-in-hand), form strategic partnerships (crazy quilt), and adapt flexibly to unforeseen events (lemonade) rather than relying on long-term prediction.
Host: Welcome to A.I.S. Insights, the podcast at the intersection of business and technology, powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we're diving into a fascinating new study called "Challenges and Mitigation Strategies for AI Startups: Leveraging Effectuation Theory in a Dynamic Environment." Host: In short, it explores the very specific hurdles that founders of Artificial Intelligence companies face, and how the successful ones are finding clever ways to overcome them. Here to break it all down for us is our analyst, Alex Ian Sutherland. Alex, welcome. Expert: Great to be here, Anna. Host: So, let's start with the big picture. We hear about record-breaking investments in AI startups, but this study suggests it's not as simple as just having a great idea and getting a big check. What's the real problem these founders are up against? Expert: That's right. The core issue is that AI startups are often treated like any other software company, but their challenges are fundamentally different. They have this massive dependency on three very scarce resources: high-quality data, highly specialized talent, and incredibly expensive computing power for their AI models. Expert: The study points out that unlike a typical app, you can't just build an AI product in a vacuum. It needs vast amounts of clean, relevant data to learn from. One founder interviewed literally said, "data is usually also the money." Getting that data is a huge obstacle. Host: And this is before you even get to things like competition or regulations. Expert: Exactly. You have intense competition from both big tech giants and other fast-moving startups. And then you have a complex and ever-changing regulatory landscape, like the EU AI Act, which creates a lot of uncertainty. These aren't just minor speed bumps; they can be existential threats for a new company. Host: So how did the researchers get this inside look? What was their approach? Expert: They went directly to the source. The research team conducted in-depth, semi-structured interviews with eleven founders of AI startups in Germany, Austria, and Switzerland. Host: Semi-structured, meaning it was more of a guided conversation than a strict survey? Expert: Precisely. It allowed them to capture the real-world experiences and nuanced decision-making processes of these founders, getting insights you just can't find in a spreadsheet. Host: Let's get to those insights. What were some of the key findings from these conversations? Expert: There were a few big ones. First, on the resource problem, successful founders are incredibly resourceful. To get data, instead of buying expensive datasets, they form partnerships with their first customers, offering to build a solution in exchange for access to the customer's proprietary data. Host: That’s a clever two-for-one. You get a client and the data you need to build the product. Expert: Exactly. And for the expensive AI models, many don't start by building a massive, complex system from scratch. They begin with open-source models or build a very simple Minimum Viable Product—an MVP—to prove that their concept works before pouring in tons of money. Host: What about finding talent? I imagine hiring a top-tier Chief Technology Officer for an AI startup is tough. Expert: It’s one of the biggest challenges they mentioned. The competition is fierce. The study found that founders lean heavily on their personal and university networks. They find talent through referrals and word-of-mouth, relying on trusted connections rather than just competing on salary with established tech firms. Host: So, this all sounds very practical and adaptive. How does this connect to the "Effectuation Theory" mentioned in the title? It sounds academic, but is there a simple takeaway for our listeners? Expert: Absolutely. This is the most important part for any business leader. Effectuation is essentially a logic for decision-making in highly uncertain environments. Instead of trying to predict the future and create a rigid five-year plan, you focus on controlling the things you can, right now. Host: Can you give us an example? Expert: The study highlights a few principles. One is the "Bird-in-Hand" principle—you start with what you have: who you are, what you know, and whom you know. That's exactly what founders do when they leverage university networks for hiring. Expert: Another is the "Crazy Quilt" principle: building a network of partnerships where each partner commits resources to creating the future together. This is what we see with those customer-data partnerships. Host: And I remember you mentioned regulation. Some founders saw it as a burden, but others saw it as an opportunity. Expert: Yes, and that's a perfect example of the "Lemonade" principle: turning surprises and obstacles into advantages. Founders who embraced GDPR and data security compliance found they could use it as a selling point to attract large enterprise customers, framing it as a competitive advantage rather than just a cost. Host: So the key message is to be resourceful, flexible, and to focus on what you can control, rather than trying to predict the unpredictable. Expert: That's the essence of it. For AI startups, success isn't about having a perfect plan. It's about being able to adapt, collaborate, and cleverly use the resources you have to navigate an environment that’s constantly changing. Host: A powerful lesson for any business, not just those in AI. We have to leave it there. Alex Sutherland, thank you for sharing these insights with us. Expert: My pleasure, Anna. Host: To summarize for our listeners: AI startups face unique challenges around data, talent, and regulation. The most successful founders aren't just waiting for funding; they are actively shaping their environment using resourceful strategies—starting with what they have, forming smart partnerships, and turning obstacles into opportunities. Host: Thanks for tuning in to A.I.S. Insights, powered by Living Knowledge. Join us next time as we continue to explore the ideas shaping our world.
International Conference on Wirtschaftsinformatik (2025)
Designing Scalable Enterprise Systems: Learning From Digital Startups
Richard J. Weber, Max Blaschke, Maximilian Kalff, Noah Khalil, Emil Kobel, Oscar A. Ulbricht, Tobias Wuttke, Thomas Haskamp, and Jan vom Brocke
This study investigates how to design enterprise systems (ES) suitable for the rapidly changing needs of digital startups. Using a design science research approach involving 11 startups, the researchers identified key system requirements and developed nine design principles to create ES that are flexible, adaptable, and scalable.
Problem
Traditional enterprise systems are often rigid, assuming business processes are stable and standardized. This design philosophy clashes with the needs of dynamic digital startups, which require highly adaptable systems to support continuous process evolution and rapid growth.
Outcome
- The study identified core requirements for enterprise systems in startups, highlighting the need for agility, speed, and minimal overhead to support early-stage growth. - Nine key design principles for scalable ES were developed, focusing on automation, integration, data-driven decision-making, flexibility, and user-centered design. - A proposed ES architecture emphasizes a modular approach with a central workflow engine, enabling systems to adapt and scale with the startup. - The research concludes that for startups, ES design must prioritize process adaptability and transparency over the rigid reliability typical of traditional systems.
Host: Welcome to A.I.S. Insights, the podcast at the intersection of business and technology, powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we're diving into a study that tackles a challenge many modern businesses face: how to build the right internal systems for rapid growth. The study is titled "Designing Scalable Enterprise Systems: Learning From Digital Startups". Host: It explores how to design systems that are flexible, adaptable, and can scale with a company, drawing lessons from the fast-paced world of digital startups. With me to break it all down is our analyst, Alex Ian Sutherland. Welcome, Alex. Expert: Great to be here, Anna. Host: Alex, let's start with the big picture. What is the fundamental problem this study is trying to solve? Why do startups, in particular, struggle with traditional business software? Expert: It's a classic case of a square peg in a round hole. Traditional enterprise systems, think of large ERP or CRM platforms, were designed for stability. They assume that business processes are well-defined, standardized, and don't change very often. Host: That sounds like the exact opposite of a startup environment. Expert: Precisely. Startups thrive on change. They experiment, they pivot, and they scale incredibly fast. Their processes are constantly evolving. A rigid system that enforces strict, unchangeable workflows becomes a bottleneck. It stifles the very agility that gives them a competitive edge. Host: So there's a fundamental mismatch in design philosophy. How did the researchers go about finding a solution? Expert: They took a very practical approach called design science research. Instead of just theorizing, they went straight to the source. They conducted in-depth interviews with leaders at 11 different digital startups across various sectors like FinTech, e-commerce, and AI. Host: What were they looking for in these interviews? Expert: They wanted to understand the real-world requirements. They focused on one core internal process called 'Source-to-Pay'—basically, how a company buys things, from a software subscription to new office chairs. This process is a great example because it often starts informally and has to become more structured as the company grows, highlighting the need for scalability. Host: So by studying this one process, they could derive broader lessons. What were the key findings that emerged from this? Expert: The first major finding was a clear set of requirements. Startups need systems that prioritize speed and minimize overhead. For example, an employee should be able to make a small, necessary purchase without a multi-level approval process that takes days. It's about enabling people, not hindering them with bureaucracy. Host: That makes perfect sense. From those requirements, what did they propose as a solution? Expert: They developed a set of nine design principles for what a modern, scalable enterprise system should look like. While we don't have time for all nine, they center on a few key themes. Host: Can you give us the highlights? Expert: Absolutely. The big ones are efficiency through automation, seamless integration with other tools, and flexibility. The system should automate routine tasks, connect easily to the HR and accounting software a company already uses, and, crucially, allow processes to be changed on the fly without calling in a team of consultants. Host: And this all leads to a different kind of system architecture, I imagine. Expert: Exactly. Instead of a single, monolithic system, they propose a modular architecture. At its heart is a central "workflow engine." You can think of it as a conductor that orchestrates different, smaller tools or modules. This means you can swap out one part, like your invoicing tool, or add a new one without having to replace the entire system. It's designed for evolution. Host: This is the most important question for our listeners, Alex. Why does this matter for businesses, especially those that aren't fast-growing startups? Expert: That's the key insight. While the study focused on startups, the principles are incredibly relevant for any established company undergoing digital transformation. Many larger organizations are trapped by their legacy systems. We’ve all heard stories of an old ERP system that becomes a huge bottleneck to innovation. Host: So this isn't just a startup playbook; it's a guide for any company trying to become more agile. Expert: Correct. The study argues that businesses should shift their priorities. Instead of designing systems for rigid reliability, they should design for process adaptability and transparency. By building systems that are flexible and modular, you empower your organization to experiment, adapt, and continuously improve, no matter its size or age. Host: A powerful lesson in future-proofing your operations. To summarize, traditional enterprise systems are too rigid for today's dynamic business world. By learning from startups, we see the need for a new approach based on flexibility, automation, and modular design. Host: And these principles can help any company, not just a startup, build the capacity to adapt and thrive amidst constant change. Alex, thank you for making this so clear and accessible. Expert: My pleasure, Anna. Host: And thank you for tuning in to A.I.S. Insights, powered by Living Knowledge. Join us next time as we translate cutting-edge research into actionable business intelligence.
Enterprise systems, Business process management, Digital entrepreneurship
Jurnal SISFO (2025)
Perbaikan Proses Bisnis Onboarding Pelanggan di PT SEVIMA Menggunakan Heuristic Redesign
Ribka Devina Margaretha, Mahendrawathi ER, Sugianto Halim
This study addresses challenges in PT SEVIMA's customer onboarding process, where Account Managers (AMs) were not always aligned with client needs. Using a Business Process Management (BPM) Lifecycle approach combined with heuristic principles (Resequencing, Specialize, Control Addition, and Empower), the research redesigns the existing workflow. The goal is to improve the matching of AMs to clients, thereby increasing onboarding efficiency and customer satisfaction.
Problem
PT SEVIMA, an IT startup for the education sector, struggled with an inefficient customer onboarding process. The primary issue was the frequent mismatch between the assigned Account Manager's skills and the specific, technical needs of the new client, leading to implementation delays and decreased satisfaction.
Outcome
- Recommends grouping Account Managers (AMs) based on specialization profiles built from post-project evaluations. - Suggests moving the initial client needs survey to occur before an AM is assigned to ensure a better match. - Proposes involving the technical migration team earlier in the process to align strategies from the start. - These improvements aim to enhance onboarding efficiency, reduce rework, and ultimately increase client satisfaction.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I’m your host, Anna Ivy Summers. In today's fast-paced business world, how you welcome a new customer can make or break the entire relationship. Today, we're diving into a study that tackles this very challenge.
Host: It’s titled, "Perbaikan Proses Bisnis Onboarding Pelanggan di PT SEVIMA Menggunakan Heuristic Redesign". It explores how an IT startup, PT SEVIMA, redesigned their customer onboarding process to better match their account managers to client needs, boosting both efficiency and satisfaction. Here to break it all down for us is our expert analyst, Alex Ian Sutherland. Welcome, Alex.
Expert: Great to be here, Anna.
Host: Alex, let's start with the big picture. What was the core problem that PT SEVIMA was trying to solve?
Expert: It's a classic startup growing pain. PT SEVIMA provides software for the education sector. Their success hinges on getting new university clients set up smoothly. But they had a major bottleneck: they were assigning Account Managers, or AMs, to new clients without a deep understanding of the client's specific technical needs.
Host: So it was a mismatch of skills?
Expert: Exactly. You might have an AM who is brilliant with financial systems assigned to a client whose main challenge is student registration. The study's analysis, using tools like a fishbone diagram, showed this created a domino effect: implementation delays, frustrated clients, and a lot of rework for the internal teams. It was inefficient and hurting customer relationships right from the start.
Host: It sounds like a problem many companies could face. So, how did the researchers approach fixing this?
Expert: They used a structured method called Business Process Management, but combined it with something called heuristic principles. It sounds technical, but it's really about applying practical, proven rules of thumb to improve a workflow. Think of it as a toolkit of smart solutions.
Host: Can you give us an example of one of those "smart solutions"?
Expert: Absolutely. The four key principles they used were Resequencing, Specialization, Control Addition, and Empower. Resequencing, for instance, just means changing the order of steps. They found that one simple change could have a huge impact.
Host: I'm intrigued. What were the key findings or recommendations that came out of this approach?
Expert: There were three game-changers. First, using that Resequencing principle, they recommended moving the initial client needs survey to happen *before* an Account Manager is assigned. Get a deep understanding of the client's needs first, then pick the right person for the job.
Host: That seems so logical, yet it’s a step that's often overlooked. What was the second finding?
Expert: That was about Specialization. The study proposed grouping AMs into specialist profiles based on their skills and performance on past projects. After each project, AMs are evaluated on their expertise in areas like data management or academic systems. This creates a clear profile of who is good at what.
Host: So you’re not just assigning the next available person, you’re matching a specialist to a specific problem.
Expert: Precisely. And the third key recommendation was about Empowerment. They suggested involving the technical migration team much earlier in the process. Instead of the AM handing down instructions, the tech team is part of the initial strategy session, which helps them anticipate problems and align on the best approach from day one.
Host: This all sounds incredibly practical. Let's shift to the big question for our listeners: why does this matter for their businesses, even if they aren't in educational tech?
Expert: This is the most crucial part. These findings offer universal lessons for any business. First, it proves that customer onboarding is a strategic process, not just an administrative checklist. A smooth start builds trust and dramatically improves long-term retention.
Host: What's the second big takeaway?
Expert: Don't just assign people, *match* them. The idea of creating specialization profiles is powerful. Every manager should know their team's unique strengths and align them with the right tasks or clients. It reduces errors, builds employee confidence, and delivers better results for the customer.
Host: It’s about putting your players in the right positions on the field.
Expert: Exactly. And finally, front-load your discovery process. The study showed that the simple act of moving a survey to the beginning of the process prevents misunderstandings and costly rework. Take the time to understand your customer's reality deeply before you start building or implementing a solution. It’s about being proactive, not reactive.
Host: Fantastic insights, Alex. So, to recap for our listeners: a smarter onboarding process comes from matching the right expertise to the client, understanding their needs deeply before you begin, and empowering your technical teams by bringing them in early.
Host: Alex Ian Sutherland, thank you so much for translating this study into such clear, actionable advice.
Expert: My pleasure, Anna.
Host: And thanks to all of you for tuning in to A.I.S. Insights — powered by Living Knowledge. Join us next time as we uncover more valuable lessons from the world of business and technology research.
Business Process Redesign, Customer Onboarding, Knowledge-Intensive Process, Heuristics Method, Startup, BPM Lifecycle
MIS Quarterly Executive (2023)
Successfully Organizing AI Innovation Through Collaboration with Startups
Jana Oehmichen, Alexander Schult, John Qi Dong
This study examines how established firms can successfully partner with Artificial Intelligence (AI) startups to foster innovation. Based on an in-depth analysis of six real-world AI implementation projects across two startups, the research identifies five key challenges and provides corresponding recommendations for navigating these collaborations effectively.
Problem
Established companies often lack the specialized expertise needed to leverage AI technologies, leading them to partner with startups. However, these collaborations introduce unique difficulties, such as assessing a startup's true capabilities, identifying high-impact AI applications, aligning commercial interests, and managing organizational change, which can derail innovation efforts.
Outcome
- Challenge 1: Finding the right AI startup. Firms should overcome the inscrutability of AI startups by assessing credible quality signals, such as investor backing, academic achievements of staff, and success in prior contests, rather than relying solely on product demos. - Challenge 2: Identifying the right AI use case. Instead of focusing on data availability, companies should collaborate with startups in workshops to identify use cases with the highest potential for value creation and business impact. - Challenge 3: Agreeing on commercial terms. To align incentives and reduce information asymmetry, contracts should include performance-based or usage-based compensation, linking the startup's payment to the value generated by the AI solution. - Challenge 4: Considering the impact on people. Firms must manage user acceptance by carefully selecting the degree of AI autonomy, involving employees in the design process, and clarifying the startup's role to mitigate fears of job displacement. - Challenge 5: Overcoming implementation roadblocks. Depending on the company's organizational maturity, it should either facilitate deep collaboration between the startup and all internal stakeholders or use the startup to build new systems that bypass internal roadblocks entirely.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we're diving into a study that’s crucial for any company looking to innovate: "Successfully Organizing AI Innovation Through Collaboration with Startups". Host: It examines how established firms can successfully partner with Artificial Intelligence startups, identifying key challenges and offering a roadmap for success. Host: With me is our expert analyst, Alex Ian Sutherland. Alex, welcome. Expert: Thanks for having me, Anna. Host: Alex, let's start with the big picture. Why is this a topic business leaders need to pay attention to right now? Expert: Well, most established companies know they need to leverage AI to stay competitive, but they often lack the highly specialized internal talent. So, they turn to agile, expert AI startups for help. Host: That sounds like a straightforward solution. But the study suggests it’s not that simple. Expert: Exactly. These collaborations are fraught with unique difficulties. How do you assess if a startup's flashy demo is backed by real capability? How do you pick a project that will actually create value and not just be an interesting experiment? These partnerships can easily derail if not managed correctly. Host: So how did the researchers get to the bottom of this? What was their approach? Expert: They took a very hands-on approach. The research team conducted an in-depth analysis of six real-world AI implementation projects. These projects involved two different AI startups working with large companies in sectors like telecommunications, insurance, and logistics. Expert: This allowed them to see the challenges and successes from both the startup's and the established company's perspective, right as they happened. Host: Let's get into those findings. The study outlines five major challenges. What’s the first hurdle companies face? Expert: The first is simply finding the right AI startup. The market is noisy, and AI has become a buzzword. The study found that you can't rely on product demos alone. Host: So what's the recommendation? Expert: Look for credible, external quality signals. Has the startup won competitive grants or contests? Is it backed by specialized, knowledgeable investors? What are the academic or prior career achievements of its key people? These are signals that other experts have already vetted their capabilities. Host: That’s great advice. It’s like checking references for the entire company. Once you've found a partner, what’s Challenge Number Two? Expert: Identifying the right AI use case. Many companies make the mistake of asking, "We have all this data, what can AI do with it?" This often leads to projects with low business impact. Host: So what's the better question to ask? Expert: The better question is, "What are our biggest business challenges, and how can AI help solve them?" The study recommends collaborative workshops where the startup can bring its outside-in perspective to help identify use cases with the highest potential for real value creation. Host: Focus on the problem, not just the data. That makes perfect sense. What about Challenge Three: getting the contract right? Expert: This is a big one. Because AI can be a "black box," it's hard for the client to know how much effort is required. This creates an information imbalance. The key is to align incentives. Expert: The study strongly recommends moving away from traditional flat fees and towards performance-based or usage-based compensation. For example, an insurance company in the study paid the startup based on the long-term financial impact of the AI model, like increased profit margins. This ensures both parties are working toward the same goal. Host: A true partnership model. Now, the last two challenges seem to focus on the human side of things: people and process. Expert: Yes, and they're often the toughest. Challenge Four is managing the impact on your employees. AI can spark fears of job displacement, leading to resistance. Expert: The recommendation here is to manage the degree of AI autonomy carefully. For instance, a telecom company in the study introduced an AI tool that initially just *suggested* answers to call center agents rather than handling chats on its own. It made the agents more efficient—doubling productivity—without making them feel replaced. Host: That builds trust and acceptance. And the final challenge? Expert: Overcoming internal implementation roadblocks. Getting an AI solution integrated requires buy-in from IT, data security, legal, and business units, all of whom have their own priorities. Expert: The study found two paths. If your organization has the maturity, you build a cross-functional team to collaborate deeply with the startup. But if your internal processes are too rigid, the more effective path can be to have the startup build a new, standalone system that bypasses those internal roadblocks entirely. Host: Alex, this is incredibly insightful. To wrap up, what is the single most important takeaway for a business leader listening to our conversation today? Expert: The key takeaway is that you cannot treat an AI startup collaboration as a simple vendor procurement. It is a deep, strategic partnership. Success requires a new mindset. Expert: You have to vet your partner strategically, focus relentlessly on business value, align financial incentives to create a win-win, and most importantly, proactively manage the human and organizational change. It’s as much about culture as it is about code. Host: From procurement to partnership. A powerful summary. Alex Ian Sutherland, thank you so much for breaking this down for us. Expert: My pleasure, Anna. Host: And thank you to our audience for tuning in to A.I.S. Insights — powered by Living Knowledge. Join us next time as we continue to explore the ideas shaping business and technology.
Artificial Intelligence, AI Innovation, Corporate-startup collaboration, Open Innovation, Digital Transformation, AI Startups
MIS Quarterly Executive (2023)
How to Successfully Navigate Crisis-Driven Digital Transformations
Ralf Plattfaut, Vincent Borghoff
This study investigates how digital transformations initiated by a crisis, such as the COVID-19 pandemic, differ from transformations under normal circumstances. Through case studies of three German small and medium-sized organizations (the 'Mittelstand'), the research identifies challenges to established transformation 'logics' and provides recommendations for successfully managing these events.
Problem
While digital transformation is widely studied, there is little understanding of how the process works when driven by an external crisis rather than strategic planning. The COVID-19 pandemic created an urgent, unprecedented need for businesses to digitize their operations, but existing frameworks were ill-suited for this high-pressure, uncertain environment.
Outcome
- The trigger for digital transformation in a crisis is the external shock itself, not the emergence of new technology. - Decision-making shifts from slow, consensus-based strategic planning to rapid, top-down ad-hoc reactions to ensure survival. - Major organizational restructuring is deferred; instead, companies form small, agile steering groups to manage the transformation efforts. - Normal organizational barriers like inertia and resistance to change significantly decrease during the crisis due to the clear and urgent need for action. - After the crisis, companies must actively work to retain the agile practices learned and manage the potential re-emergence of resistance as urgency subsides.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we're diving into a fascinating study titled "How to Successfully Navigate Crisis-Driven Digital Transformations." Host: It explores how digital overhauls prompted by a crisis, like the recent pandemic, are fundamentally different from those planned in normal times. And here to break it all down for us is our expert analyst, Alex Ian Sutherland. Welcome, Alex. Expert: Great to be here, Anna. Host: Alex, let's start with the big picture. We all know digital transformation is a business buzzword, but this study focuses on a very specific scenario. What's the core problem it addresses? Expert: The problem is that most of our playbooks for digital transformation are designed for peacetime. They assume you have time for strategic planning and consensus-building. Expert: But what happens when a crisis hits, as COVID-19 did, and suddenly your entire business model is at risk? Existing frameworks just weren't built for that kind of high-pressure, high-stakes environment where you have to adapt overnight just to survive. Host: So how did the researchers get inside this chaotic process to understand it? Expert: They conducted in-depth case studies on three small and medium-sized German organizations—a bank, a regional development agency, and a manufacturing firm. This allowed them to see, up close, how these companies navigated the transformation from the very beginning of the crisis. Host: And what did they find? What makes a crisis-driven transformation so different? Expert: The biggest difference is the trigger. In normal times, a new technology appears and a company strategically decides how to use it. In a crisis, the trigger is the external shock itself. Survival becomes the only goal, and technology is just the tool you grab to make that happen. Host: It sounds like a shift from proactive strategy to pure reaction. How does that impact decision-making? Expert: It completely flips it. Long, careful, bottom-up planning is replaced by rapid, top-down, ad-hoc decisions. The study found that instead of forming large project teams, these companies created small, agile steering groups of senior leaders who could make 'good enough' decisions immediately. Host: What about the typical resistance to change we always hear about? Did that get in the way? Expert: That's one of the most interesting findings. Those normal barriers—organizational inertia, employee resistance—they largely disappeared. The study shows that when the threat is existential, the need for change becomes obvious to everyone. The urgency of the situation creates a powerful, shared purpose. Host: So, the crisis forces agility. But what happens when the immediate danger passes? Expert: That’s the catch. The study warns that once the urgency fades, resistance can re-emerge. Employees might feel 'digital oversaturation,' or old cultural habits can creep back in. The challenge then becomes how to hold on to the positive changes. Host: This is where it gets critical for our listeners. Alex, what are the practical takeaways for business leaders who might face the next crisis? Expert: The study offers some clear recommendations. First, in a crisis, suspend normal bottom-up decision-making. Use a small, top-down steering group to ensure speed and clarity. Host: So, command and control is key in the short term. What's next? Expert: Second, don't aim for the perfect solution. Aim for a 'satisfactory' one that can be implemented fast. You can optimize it later. As one manager in the study noted, they initially went for solutions that were simply "available and cost-effective in the short term." Host: That makes sense. Get the lifeboat in the water before you worry about what color to paint it. Expert: Exactly. Third, use the crisis as a catalyst for cultural change. Since the usual barriers are down, it's a unique opportunity to build a more agile, error-tolerant culture. Communicate that initial solutions are experiments, not permanent fixtures. Host: And the final takeaway? Expert: Don't just snap back to the old way of doing things. After the crisis, consciously evaluate the crisis-mode practices you adopted. Keep the agility, keep the speed, and embed them into your new normal. Don't let the lessons learned go to waste. Host: Fantastic insights. So, to recap: a crisis changes all the rules of digital transformation. The key for leaders is to embrace top-down speed, aim for 'good enough' solutions, use the moment to build a more resilient culture, and then be intentional about retaining those new capabilities. Host: Alex Ian Sutherland, thank you so much for shedding light on such a timely topic. Expert: My pleasure, Anna. Host: And thank you to our audience for tuning in to A.I.S. Insights — powered by Living Knowledge. Join us next time as we translate another key piece of research into actionable business intelligence.
Digital Transformation, Crisis Management, Organizational Change, German Mittelstand, SMEs, COVID-19, Business Resilience
MIS Quarterly Executive (2024)
How Large Companies Can Help Small and Medium-Sized Enterprise (SME) Suppliers Strengthen Cybersecurity
Jillian K. Kwong, Keri Pearlson
This study investigates the cybersecurity challenges faced by small and medium-sized enterprise (SME) suppliers and proposes actionable strategies for large companies to help them improve. Based on interviews with executives and cybersecurity experts, the paper identifies key barriers SMEs encounter and outlines five practical actions large firms can take to strengthen their supply chain's cyber resilience.
Problem
Large companies increasingly require their smaller suppliers to meet the same stringent cybersecurity standards they do, creating a significant burden for SMEs with limited resources. This gap creates a major security vulnerability, as attackers often target less-secure SMEs as a backdoor to access the networks of larger corporations, posing a substantial third-party risk to entire supply chains.
Outcome
- SME suppliers are often unable to meet the security standards of their large partners due to four key barriers: unfriendly regulations, organizational culture clashes, variability in cybersecurity frameworks, and misalignment of business processes. - Large companies can proactively strengthen their supply chain by providing SMEs with the resources and expertise needed to understand and comply with regulations. - Creating incentives for meeting security benchmarks is more effective than penalizing suppliers for non-compliance. - Large firms should develop programs to help SMEs elevate their cybersecurity culture and align security processes with their own. - Coordinating with other large companies to standardize cybersecurity frameworks and assessment procedures can significantly reduce the compliance burden on SMEs.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I’m your host, Anna Ivy Summers. In today's interconnected world, your company’s security is only as strong as its weakest link. And often, that link is a small or medium-sized supplier.
Host: With me today is our analyst, Alex Ian Sutherland, to discuss a recent study titled, "How Large Companies Can Help Small and Medium-Sized Enterprise Suppliers Strengthen Cybersecurity." Alex, welcome.
Expert: Thanks for having me, Anna. This is a critical topic. The study investigates the cybersecurity challenges smaller suppliers face and, more importantly, proposes actionable strategies for large companies to help them improve.
Host: So let's start with the big problem here. Why is the gap in cybersecurity between large companies and their smaller suppliers such a major risk?
Expert: It’s a massive vulnerability. Large companies demand their smaller suppliers meet the same stringent security standards they do. But for an SME with limited staff and budget, that's often an impossible task. Attackers know this. They specifically target less-secure suppliers as a backdoor into the networks of their bigger clients.
Host: Can you give us a real-world example of that?
Expert: Absolutely. The study reminds us of the infamous 2013 data breach at Target. The hackers didn't attack Target directly at first. They got in using credentials stolen from a small, third-party HVAC vendor. That single point of entry ultimately exposed the data of over 100 million customers. It’s a classic case of the supply chain being the path of least resistance.
Host: A sobering reminder. So how did the researchers in this study approach such a complex issue?
Expert: They went straight to the source. The study is based on 27 in-depth interviews with executives, cybersecurity leaders, and supply chain managers from both large corporations and small suppliers. They gathered insights from people on the front lines who deal with these challenges every single day.
Host: And what were the biggest takeaways from those conversations? What did they find are the main barriers for these smaller companies?
Expert: The study identified four key barriers. The first is what they call "unfriendly regulation." Most cybersecurity rules are designed for big companies with legal and compliance departments. SMEs often lack the expertise to even understand them.
Host: So the rules themselves are a hurdle. What’s the second barrier?
Expert: Organizational culture clashes. For an SME, the primary focus is keeping the business running and getting products out the door. Cybersecurity can feel like a costly, time-consuming distraction, so it constantly gets pushed to the back burner.
Host: That makes sense. And the other two barriers?
Expert: Framework variability and process misalignment. Imagine being a small supplier for five different large companies, and each one asks you to comply with a slightly different security framework. One interviewee described it as "trying to navigate a sea of frameworks in a rowboat, without a map or radio." It creates a huge, confusing compliance burden.
Host: That's a powerful image. It really frames this as a partnership problem, not just a technology problem. So this brings us to the most important question for our listeners: what can businesses actually *do* about it?
Expert: This is the core of the study. It moves beyond just identifying problems to proposing five concrete actions large companies can take. First, provide your SME suppliers with the resources and expertise they lack. This could be workshops, access to your legal teams, or clear guidance on how to comply with regulations.
Host: So it's about helping, not just demanding. What’s the next action?
Expert: Create positive incentives. The study found that punishing suppliers for non-compliance is far less effective than rewarding them for meeting security benchmarks. One CTO put it perfectly: suppliers need to be rewarded for their security efforts, not just punished for failure. This changes the dynamic from a chore to a shared goal.
Host: I like that reframing. What else?
Expert: The third and fourth actions are linked. Large firms should develop programs to help SMEs elevate their security culture. And, crucially, they should coordinate with other large companies to standardize security frameworks and assessments. If competitors can agree on one common questionnaire, it saves every SME countless hours of redundant work.
Host: That seems like such a common-sense solution. What's the final recommendation?
Expert: Bring cybersecurity into the procurement process from the very beginning. Too often, security is an afterthought, brought in after a deal is already signed. This leads to delays and friction. By discussing security expectations upfront, you ensure it's a foundational part of the partnership.
Host: So, to summarize, this isn't about forcing smaller suppliers to fend for themselves. It’s about large companies taking proactive steps: providing resources, offering incentives, standardizing requirements, and making security a day-one conversation.
Expert: Exactly. The study’s main message is that strengthening your supply chain's cybersecurity is an act of partnership. When you help your suppliers become more secure, you are directly helping yourself.
Host: A powerful and practical takeaway. Alex, thank you for breaking this down for us.
Expert: My pleasure, Anna.
Host: And thanks to our audience for tuning in to A.I.S. Insights. Join us next time as we continue to explore the intersection of business, technology, and living knowledge.
Cybersecurity, Supply Chain Management, Third-Party Risk, Small and Medium-Sized Enterprises (SMEs), Cyber Resilience, Vendor Risk Management
MIS Quarterly Executive (2024)
Experiences and Lessons Learned at a Small and Medium-Sized Enterprise (SME) Following Two Ransomware Attacks
Donald Wynn, Jr., W. David Salisbury, Mark Winemiller
This paper presents a case study of a small U.S. manufacturing company that suffered two distinct ransomware attacks four years apart, despite strengthening its cybersecurity after the first incident. The study analyzes both attacks, the company's response, and the lessons learned from the experiences. The goal is to provide actionable recommendations to help other small and medium-sized enterprises (SMEs) improve their defenses and recovery strategies against evolving cyber threats.
Problem
Small and medium-sized enterprises (SMEs) face unique cybersecurity challenges due to significant resource constraints compared to larger corporations. They often lack the financial capacity, specialized expertise, and trained workforce to implement and maintain adequate technical and procedural controls. This vulnerability is increasingly exploited by cybercriminals, with a high percentage of ransomware attacks specifically targeting these smaller, less-defended businesses.
Outcome
- All businesses are targets: The belief in 'security by obscurity' is a dangerous misconception; any online presence makes a business a potential target for cyberattacks. - Comprehensive backups are essential: Backups must include not only data but also system configurations and software to enable a full and timely recovery. - Management buy-in is critical: Senior leadership must understand the importance of cybersecurity and provide the necessary funding and organizational support for robust defense measures. - People are a key vulnerability: Technical defenses can be bypassed by human error, as demonstrated by the second attack which originated from a phishing email, underscoring the need for continuous employee training. - Cybercrime is an evolving 'arms race': Attackers are becoming increasingly sophisticated, professional, and organized, requiring businesses to continually adapt and strengthen their defenses.
Host: Welcome to A.I.S. Insights — powered by Living Knowledge. I'm your host, Anna Ivy Summers. Today we're diving into a story that serves as a powerful warning for any business operating online. We're looking at a study titled, "Experiences and Lessons Learned at a Small and Medium-Sized Enterprise (SME) Following Two Ransomware Attacks".
Host: With me is our analyst, Alex Ian Sutherland. Alex, this study follows a small U.S. manufacturing company that was hit by ransomware not once, but twice, despite strengthening its security after the first incident. It’s a real-world look at how businesses can defend and recover from these evolving threats.
Expert: It is, Anna. And it's a critical topic.
Host: So, let's start with the big problem. We often hear about massive corporations getting hacked. Why does this study focus on smaller businesses?
Expert: Because they are the primary target. SMEs face unique challenges due to resource constraints. They often lack the financial capacity or specialized staff to build robust cyber defenses. The study points out that a huge percentage of ransomware attacks—over 80% in some reports—are aimed specifically at these smaller, less-defended companies. Cybercriminals see them as easy targets.
Host: To explore this, what approach did the researchers take?
Expert: They conducted an in-depth case study of one company. By focusing on this single manufacturing firm, they could analyze the two attacks in detail—one in 2017 and a second, more advanced attack in 2021. They documented the company's response, the financial and operational impact, and the critical lessons learned from both experiences.
Host: Getting hit twice provides a unique perspective. What was the first major finding from this?
Expert: The first and most fundamental finding was that all businesses are targets. Before the 2017 attack, the company’s management believed in 'security by obscurity'—they thought they were too small and not in a high-value industry like finance to be of interest. That was a costly mistake.
Host: A wake-up call, for sure. After that first attack, they tried to recover. What did they learn from that process?
Expert: They learned that comprehensive backups are absolutely essential. They had backups of their data, but not their system configurations or software. This meant recovery was a slow, painful process of rebuilding servers from scratch, leading to almost two weeks of downtime for critical systems.
Host: That kind of downtime could kill a small business. You mentioned management's mindset was a problem initially. Did that change?
Expert: It changed overnight. The third finding is that management buy-in is critical. The IT director had struggled to get funding for security before the attack. Afterwards, the threat became real. He was promoted to Vice President, and the study quotes him saying, “Finding cybersecurity dollars was no longer difficult.”
Host: So with new funding and better technology, they were prepared. But they still got hit a second time. How did that happen?
Expert: This highlights the fourth key finding: people are a key vulnerability. The second, more sophisticated attack in 2021 didn't break through a firewall; it walked in the front door through a phishing email that a single employee clicked. It proved that technology alone isn't enough.
Host: It's a classic problem. And what did that second attack reveal about the attackers themselves?
Expert: It showed that cybercrime is an evolving 'arms race'. The first attack was relatively crude. The second was from a highly professional ransomware group called REvil, which operates like a criminal franchise. They used a 'double extortion' tactic—not just encrypting the company's data, but also stealing it and threatening to release sensitive HR files publicly.
Host: That's terrifying. So, Alex, this is the most important question for our listeners. What are the practical takeaways? Why does this matter for their business?
Expert: There are four key actions every business leader should take. First, accept that you are a target, no matter your size or industry. Budget for cybersecurity proactively, don't wait for a disaster.
Expert: Second, ensure your backups are truly comprehensive and test your disaster recovery plan. You need to be able to restore entire systems, not just data, and you need to know that it actually works.
Expert: Third, invest in your people. Continuous security awareness training is not optional; it’s one of your most effective defenses against threats like phishing that target human error.
Expert: And finally, build relationships with external experts *before* you need them. For the second attack, the company had an incident response firm on retainer. Having experts to call immediately made a massive difference. You don’t want to be looking for help in the middle of a crisis.
Host: Powerful advice. To summarize: assume you're a target, build and test a full recovery plan, train your team relentlessly, and have experts on speed dial. This isn't just a technology problem; it's a business continuity problem.
Host: Alex Ian Sutherland, thank you for sharing these critical insights with us.
Expert: My pleasure, Anna.
Host: And thank you for tuning into A.I.S. Insights, powered by Living Knowledge. Join us next time as we translate academic research into actionable business strategy.
ransomware, cybersecurity, SME, case study, incident response, cyber attack, information security
MIS Quarterly Executive (2025)
How to Operationalize Responsible Use of Artificial Intelligence
Lorenn P. Ruster, Katherine A. Daniell
This study outlines a practical five-phase process for organizations to translate responsible AI principles into concrete business practices. Based on participatory action research with two startups, the paper provides a roadmap for crafting specific responsibility pledges and embedding them into organizational processes, moving beyond abstract ethical statements.
Problem
Many organizations are committed to the responsible use of AI but struggle with how to implement it practically, creating a significant "principle-to-practice gap". This confusion can lead to inaction or superficial efforts known as "ethics-washing," where companies appear ethical without making substantive changes. The study addresses the lack of clear, actionable guidance for businesses, especially smaller ones, on where to begin.
Outcome
- Presents a five-phase process for operationalizing responsible AI: 1) Buy-in, 2) Intuition-building, 3) Pledge-crafting, 4) Pledge-communicating, and 5) Pledge-embedding. - Argues that responsible AI should be approached as a systems problem, considering organizational mindsets, culture, and processes, not just technical fixes. - Recommends that organizations create contextualized, action-oriented "pledges" rather than simply adopting generic AI principles. - Finds that investing in responsible AI practices early, even in small projects, helps build organizational capability and transfers to future endeavors. - Provides a framework for businesses to navigate communication challenges, balancing transparency with commercial interests to build user trust.
Host: Welcome to A.I.S. Insights, powered by Living Knowledge. I’m your host, Anna Ivy Summers. Today, we’re diving into a study that offers a lifeline to any business navigating the complex world of ethical AI. It’s titled, "How to Operationalize Responsible Use of Artificial Intelligence."
Host: The study outlines a practical five-phase process for organizations to translate responsible AI principles into concrete business practices, moving beyond just abstract ethical statements. With me to unpack this is our analyst, Alex Ian Sutherland. Alex, welcome.
Expert: Great to be here, Anna.
Host: So, Alex, let’s start with the big picture. Why do businesses need a study like this? What’s the core problem it’s trying to solve?
Expert: The core problem is something researchers call the "principle-to-practice gap." Nearly every company today says they’re committed to the responsible use of AI. But when it comes to actually implementing it, they struggle. There’s a lot of confusion about where to even begin.
Host: And what happens when companies get stuck in that gap?
Expert: It leads to two negative outcomes. Either they do nothing, paralyzed by the complexity, or they engage in what's called "ethics-washing"—where they publish a list of high-level principles on their website but don't make any substantive changes to their products or processes. This study provides a clear roadmap to avoid those traps.
Host: A roadmap sounds incredibly useful. How did the researchers develop it? What was their approach?
Expert: Instead of just theorizing, they got their hands dirty. They used a method called participatory action research, where they worked directly with two early-stage startups over several years. By embedding with these small, resource-poor companies, they could identify a process that was practical, adaptable, and worked in a real-world business environment, not just in a lab.
Host: I like that it's grounded in reality. So, what did this process, this roadmap, actually look like? What were the key findings?
Expert: The study distills the journey into a clear five-phase process. It starts with Phase 1: Buy-in, followed by Intuition-building, Pledge-crafting, Pledge-communicating, and finally, Pledge-embedding.
Host: "Pledge-crafting" stands out. How is a pledge different from a principle?
Expert: That's one of the most powerful insights of the study. Principles are often generic, like "we believe in fairness." A pledge is a contextualized, action-oriented promise. For example, instead of just saying they value privacy, a company might pledge to minimize data collection, and then define exactly what that means for their specific product. It forces a company to translate a vague value into a concrete commitment.
Host: It makes the idea tangible. So, this brings us to the most important question for our listeners. Why does this matter for business? What are the key takeaways for a leader who wants to put responsible AI into practice today?
Expert: I’d boil it down to three key takeaways. First, approach responsible AI as a systems problem, not a technical problem. It’s not just about code; it's about your organizational mindset, your culture, and your processes.
Host: Okay, a holistic view. What’s the second takeaway?
Expert: The study emphasizes that the first step must be a mindset shift. Leaders and their teams have to move from seeing themselves as neutral actors to accepting their role as active shapers of technology and its impact on society. Without that genuine buy-in, any effort is at risk of becoming ethics-washing.
Host: And the third?
Expert: Build what the study calls "responsibility muscles." They found that by starting this five-phase process, even on small, early-stage projects, organizations build a capability for responsible innovation. That muscle memory then transfers to larger and more complex projects in the future. You don't have to solve everything at once; you just have to start.
Host: A fantastic summary. So, the message is: view it as a systems problem, cultivate the mindset of an active shaper, and start building those responsibility muscles by crafting specific pledges, not just principles.
Expert: Exactly. It provides a way to start moving, meaningfully and authentically.
Host: This has been incredibly insightful. Thank you, Alex Ian Sutherland, for making this complex topic so accessible. And thank you to our listeners for joining us on A.I.S. Insights — powered by Living Knowledge. We’ll see you next time.
Responsible AI, AI Ethics, Operationalization, Systems Thinking, AI Governance, Pledge-making, Startups
MIS Quarterly Executive (2024)
How GuideCom Used the Cognigy.AI Low-Code Platform to Develop an AI-Based Smart Assistant
Imke Grashoff, Jan Recker
This case study investigates how GuideCom, a medium-sized German software provider, utilized the Cognigy.AI low-code platform to create an AI-based smart assistant. The research follows the company's entire development process to identify the key ways in which low-code platforms enable and constrain AI development. The study illustrates the strategic trade-offs companies face when adopting this approach.
Problem
Small and medium-sized enterprises (SMEs) often lack the extensive resources and specialized expertise required for in-house AI development, while off-the-shelf solutions can be too rigid. Low-code platforms are presented as a solution to democratize AI, but there is a lack of understanding regarding their real-world impact. This study addresses the gap by examining the practical enablers and constraints that firms encounter when using these platforms for AI product development.
Outcome
- Low-code platforms enable AI development by reducing complexity through visual interfaces, facilitating cross-functional collaboration between IT and business experts, and preserving resources. - Key constraints of using low-code AI platforms include challenges with architectural integration into existing systems, ensuring the product is expandable for different clients and use cases, and managing security and data privacy concerns. - Contrary to the 'no-code' implication, existing software development skills are still critical for customizing solutions, re-engineering code, and overcoming platform limitations, especially during testing and implementation. - Establishing a strong knowledge network with the platform provider (for technical support) and innovation partners like clients (for domain expertise and data) is a crucial factor for success. - The decision to use a low-code platform is a strategic trade-off; it significantly lowers the barrier to entry for AI innovation but requires careful management of platform dependencies and inherent constraints.
Host: Welcome to A.I.S. Insights, the podcast at the intersection of business and technology, powered by Living Knowledge. I’m your host, Anna Ivy Summers. Host: Today, we’re diving into a fascinating case study called "How GuideCom Used the Cognigy.AI Low-Code Platform to Develop an AI-Based Smart Assistant". Host: It explores how a medium-sized company built its first AI product using a low-code platform, and what that journey reveals about the strategic trade-offs of this popular approach. Host: To help us unpack this, we have our expert analyst, Alex Ian Sutherland. Welcome, Alex. Expert: Thanks for having me, Anna. Host: Alex, let's start with the big picture. What's the real-world problem this study is tackling? Expert: The problem is something many businesses, especially small and medium-sized enterprises or SMEs, are facing. They know they need to adopt AI to stay competitive, but they often lack the massive budgets or specialized teams of data scientists and AI engineers to build solutions from scratch. Host: And I imagine off-the-shelf products can be too restrictive? Expert: Exactly. They’re often not a perfect fit. Low-code platforms promise a middle ground—a way to "democratize" AI development. But there's been a gap in understanding what really happens when a company takes this path. This study fills that gap. Host: So how did the researchers approach this? What did they do? Expert: They conducted an in-depth case study. They followed a German software provider, GuideCom, for over 16 months as they developed their first AI product—a smart assistant for HR services—using a low-code platform called Cognigy.AI. Host: It sounds like they had a front-row seat to the entire process. So, what were the key findings? Did the low-code platform live up to the hype? Expert: It was a story of enablers and constraints. On the positive side, the platform absolutely enabled AI development. Its visual, drag-and-drop interface dramatically reduced complexity. Host: How did that help in practice? Expert: It was crucial for fostering collaboration. Suddenly, the business experts from the HR department could work directly with the IT developers. They could see the logic, understand the process, and contribute meaningfully, which is often a huge challenge in tech projects. It also saved a significant amount of resources. Host: That sounds fantastic. But you also mentioned constraints. What were the challenges? Expert: The constraints were very real. The first was architectural integration. Getting the AI tool, built on an external platform, to work smoothly with GuideCom’s existing software suite was a major hurdle. Host: And what else? Expert: Security and expandability. They needed to ensure the client’s data was secure, and they wanted the product to be scalable for many different clients, each with unique needs. The platform had limitations that made this complex. Host: So 'low-code' doesn't mean 'no-skills needed'? Expert: That's perhaps the most critical finding. GuideCom's existing software development skills were absolutely essential. They had to write custom code and re-engineer parts of the solution to overcome the platform's limitations and meet their security and integration needs. The promise of 'no-code' wasn't the reality. Host: This brings us to the most important question for our listeners: why does this matter for business? What are the practical takeaways? Expert: The biggest takeaway is that adopting a low-code AI platform is a strategic trade-off, not a magic bullet. It brilliantly lowers the barrier to entry, allowing companies to start innovating with AI without a massive upfront investment. That’s a game-changer. Host: But there's a 'but'. Expert: Yes. But you must manage the trade-offs. Firstly, you become dependent on the platform provider, so you need to choose your partner carefully. Secondly, you cannot neglect in-house technical skills. You still need people who can code to handle customization and integration. Host: The study also mentioned the importance of partnerships, didn't it? Expert: It was a crucial factor for success. GuideCom built a strong knowledge network. They had a close relationship with the platform provider, Cognigy, for technical support, and they partnered with a major bank as their first client. This client provided invaluable domain expertise and real-world data to train the AI. Host: A powerful combination of technical and business partners. Expert: Precisely. You need both to succeed. Host: This has been incredibly insightful. So to summarize for our listeners: Low-code platforms can be a powerful gateway for companies to start building AI solutions, as they reduce complexity and foster collaboration. Host: However, it's a strategic trade-off. Businesses must be prepared for challenges with integration and security, retain in-house software skills for customization, and build a strong network with both the platform provider and innovation partners. Host: Alex, thank you so much for breaking this down for us. Expert: My pleasure, Anna. Host: And thank you for tuning in to A.I.S. Insights, powered by Living Knowledge. Join us next time as we continue to explore the future of business and technology.
low-code development, AI development, smart assistant, conversational AI, case study, digital transformation, SME