Classification of hybrid threats as a basis for the formation of enterprise security management mechanisms

Abstract

The article investigates theoretical approaches to the classification of hybrid threats within the enterprise security management system. It is substantiated that the contemporary security environment is characterized by a combination of economic, digital, informational, psychological, personnel-related, and logistical influences that create a complex system of interconnected risks. The study demonstrates that existing approaches to threat classification are primarily developed within the framework of national security, international relations, and cybersecurity, while insufficiently considering the specific features of enterprise functioning under conditions of wartime economy, digital transformation, and increasing environmental uncertainty. Based on the analysis of foreign and Ukrainian scientific research, an authorial approach to the classification of hybrid threats is proposed. The classification is developed according to the source of origin, sphere of influence, nature of impact, speed of implementation, duration, controllability, and scale of consequences. It is argued that such a multidimensional approach enables a more comprehensive understanding of the complex and nonlinear nature of hybrid threats affecting enterprise activities. The study identifies the main groups of hybrid threats to enterprises, including economic, digital, informational, personnel-related, psychological, logistical, energy, legal, regulatory, and reputational threats. It is emphasized that these threats do not exist independently but interact with each other, generating cascading effects and increasing the overall level of uncertainty within the enterprise environment. Particular attention is paid to the relationship between hybrid threats and enterprise security management mechanisms. The article substantiates that the classification of threats should serve not only as an analytical tool but also as a foundation for the formation of appropriate security management mechanisms. An authorial matrix of correspondence between hybrid threats and security management mechanisms is developed, which allows determining priority managerial responses to various categories of threats. The results of the study prove that the effectiveness of enterprise security management depends on the degree of integration of strategic, risk-oriented, personnel, digital, informational, communication, crisis-management, and adaptive-resilience mechanisms. The proposed classification provides a theoretical basis for developing security-oriented management systems, assessing enterprise adaptive resilience, and designing integrated security management models under hybrid threats. Keywords: hybrid threats, security management, enterprise security, economic security, security-oriented management, adaptive resilience, resilience, risk management, cybersecurity, crisis management, enterprise security management mechanisms, hybrid risk classification.