Cybersecurity Governance Under Surveillance Capitalism: A Systematic Review with Business Management Insights

This systematic review investigates the impact of surveillance capitalism on contemporary cybersecurity risks, mechanisms, and governance strategies. Drawing on 28 peer-reviewed studies published between 2014 and 2025, the review explores three guiding research questions: (1) How does surveillance capitalism affect cybersecurity risks? (2) What mechanisms of corporate data harvesting contribute to digital exploitability? (3) How do cybersecurity policies address, or overlook, the structural challenges posed by surveillance capitalism? Following the PRISMA 2020 guidelines, the review employs a thematic synthesis approach. It identifies four major themes: (1) the expansion of cyber risk surfaces through large-scale data commodification, (2) the exploitability of opaque data infrastructures operated by platform corporations and brokers, (3) significant gaps in cybersecurity regulation and transnational governance, and (4) the socio-political entanglements between surveillance practices and security norms. Findings reveal that the structural logic of surveillance capitalism not only increases cybersecurity vulnerabilities to businesses but also escapes conventional regulatory oversight. The review concludes by advocating a paradigm shift from reactive, technical models of cybersecurity to structural, interdisciplinary, and rights-based approaches that confront the root causes of digital insecurity in businesses.