From corporate digital responsibility to responsible cybersecurity: unpacking the role of substantive digital transformation

Purpose As digital-related threats affect organizations and stakeholders, understanding how firms develop responsible cybersecurity has become essential. This study aims to examine the role of corporate digital responsibility dimensions in promoting responsible cybersecurity through substantive digital transformation, addressing the limited empirical evidence on the pathways linking digital responsibility to cybersecurity practices. Design/methodology/approach A cross-sectional survey of 382 firms in Ho Chi Minh City, Vietnam, was conducted using snowball sampling. The proposed model was tested using partial least squares structural equation modeling and necessary condition analysis. Findings Ethical digital responsibility is positively associated with the economic, legal and philanthropic dimensions of corporate digital responsibility. Digital responsibilities are positively associated with substantive digital transformation, which statistically mediates the relationship between corporate digital responsibility and responsible cybersecurity. The results also show that legal and ethical dimensions of corporate digital responsibility are necessary conditions for achieving higher levels of substantive digital transformation. Originality/value Drawing on institutional theory, resource-based view and dynamic capabilities theory, this study contributes to the corporate digital responsibility literature by providing empirical evidence on the links between its dimensions, substantive digital transformation and responsible cybersecurity. By combining partial least squares structural equation modeling with necessary condition analysis, the study provides complementary evidence on both sufficiency and necessity relationships, offering an integrated empirical perspective on the conditions associated with responsible cybersecurity.