Reproduce “Fortress and Gatekeeper: Theorizing Transitive Trust in Third-Party Cybersecurity Risk Governance” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Yijun Chen, Misita Anwar
The authors develop a transitive-trust framework for cybersecurity governance across providers and vendors using qualitative document analysis of the 2025 OpenAI–Mixpanel incident. It explains how customer trust and accountability can remain with a visible provider when data processing is delegated despite limited vendor visibility. The case illustrates this mismatch but cannot establish prevalence, root cause, or specific control failures.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.