Architecting Cyber Resilience in Digital Supply Chains: A Dynamic Capabilities Perspective on Maturity Assessment in the Industry 5.0 Era

Supply Chain Industry 5.0 is characterized by the convergence of Artificial Intelligence (AI), Enterprise Resource Planning (ERP), the Internet of Things (IoT), Cyber-Physical Systems (CPS), and Supply Chain Information Systems (SCIS). Artificial intelligence technologies present both unprecedented opportunities and emerging systemic risks for cybersecurity within digitally interconnected ecosystems, that simultaneously increase organizational vulnerability to cyber threats, data governance failures, and cascading disruptions across multi-tier supply networks. The escalating frequency and financial consequences of cyber incidents, with global data breach costs averaging approximately $4.9 million in 2024, underscore the strategic necessity of cyber resilience. Drawing on Dynamic Capabilities Theory, this study conceptualizes cyber resilience as a dynamic organizational capability that enables firms to sense emerging cyber risks, seize adaptive security opportunities, and reconfigure digital and operational resources during disruptions. To address existing theoretical and managerial gaps, the study proposes a Cyber-Resilient Supply Chain Maturity Model (CRSCMM) for evaluating software supply chain risk and organizational preparedness. The framework advances research in AI-driven cyber risk management while offering a practical roadmap for strengthening cybersecurity governance, digital adaptability, operational continuity, and strategic resilience in digitally enabled supply chains.