Cybersecurity Startups: The Importance of Early and Rapid Globalization

Corporations and government agencies worldwide seek to ensure that their networks are safe from cyber-attacks, and startups are being launched to take advantage of this expanded market for cybersecurity products, services, and solutions. The cybersecurity market is inherently global; therefore, cybersecurity startups must globalize to survive. With this article, we fill a gap in the literature by identifying the factors that make a technology startup valuable to specific stakeholders (e.g., investors, customers, employees) and by providing a tool and illustrating a process to describe, design, challenge, and invent the actions that should be performed to globalize a cybersecurity startup early and rapidly for the purpose of increasing its value. The development of the tool builds on recent advances in the resource-based literature, the review of the literature on born-global firms and business model discovery processes, and the experience gained operating the Lead to Win ecosystem. This article will be of interest to entrepreneurs and their venture teams, investors, business development agencies, advisors, and mentors of cybersecurity startups as well as researchers who develop tools and approaches that are relevant to technology entrepreneurs.


Introduction
Technology startups that globalize early and rapidly are more willing to change and more capable of adapting to uncertain environments (Sapienza et al., 2006), are worth more (Chetty & Campbell-Hunt, 2004), grow revenue and employment faster (Andersson et al., 2004;Gabrielsson & Manek Kirpalani, 2004;Gabrielsson et al., 2004), and bring more cash into a local economy from outside their borders (Poole, 2012).But, how can entrepreneurs discover the actions that should be carried out to make their startups valuable by globalizing early and rapidly?Although the perceived benefits from globalization are known, an approach to systematically describe, design, challenge, and invent the actions that should be performed to make a technology startup valuable by globalizing it early and rapidly is not available.This article makes two contributions.First, it combines the ex-ante value of a resource and born-global literature streams in the development of a tool that can help technology startups increase their value.Second, the article provides entrepreneurs with a means to identify the specific and concrete actions that should be performed to globalize their startups early and rapidly.
In the remainder of this article, we first identify what makes a technology startup valuable and what enables a technology startup to globalize early and rapidly.Then, we develop a tool, the Global Value Generator, we illustrate the process to generate the actions that can help globalize a technology startup, and we identify generic examples of the actions that 12 existing cybersecurity startups have carried out to globalize.The last section provides the conclusions.

To Make a Technology Startup Valuable
We identify the conditions that make a technology startup valuable to a stakeholder ex-ante (i.e., value of the startup is based on forecasts and not the results of the startup's performance).Traditionally, the resource-Corporations and government agencies worldwide seek to ensure that their networks are safe from cyber-attacks, and startups are being launched to take advantage of this expanded market for cybersecurity products, services, and solutions.The cybersecurity market is inherently global; therefore, cybersecurity startups must globalize to survive.With this article, we fill a gap in the literature by identifying the factors that make a technology startup valuable to specific stakeholders (e.g., investors, customers, employees) and by providing a tool and illustrating a process to describe, design, challenge, and invent the actions that should be performed to globalize a cybersecurity startup early and rapidly for the purpose of increasing its value.The development of the tool builds on recent advances in the resource-based literature, the review of the literature on born-global firms and business model discovery processes, and the experience gained operating the Lead to Win ecosystem.This article will be of interest to entrepreneurs and their venture teams, investors, business development agencies, advisors, and mentors of cybersecurity startups as well as researchers who develop tools and approaches that are relevant to technology entrepreneurs.
As the world is increasingly interconnected, everyone shares the responsibility of securing cyberspace.(Barney, 1991;Peteraf, 1993;Simon et al., 2007).Schmidt and Keil (2012) develop a theory that identifies the ex-ante conditions under which firms attribute value to a resource.They highlight the crucial difference between the ex-ante value of a resource (i.e., value before a decision to acquire or build the resource is made) and the ex-post value of a resource (i.e., value after the performance of the resource is known).Schmidt and Keil also identify four conditions that make a resource valuable to a firm ex-ante: i) the firm's ex-ante market position; ii) its ex-ante resource base, which allows for complementarities; iii) its position in inter-organizational networks; and iv) the prior knowledge and experience of its managers.
We apply the logic that Schmidt and Keil (2012) used to examine the ex-ante value a firm allocates to a resource for the purpose of examining the ex-ante value a stakeholder allocates to a technology startup.A stakeholder is an individual or organization that can potentially make cash or in-kind contributions to the startup.Inkind contributions can include access to resources and people.
We postulate that, to increase its ex-ante value to a stakeholder, a technology startup must act to: 1. Increase spread: Increase the spread between customers' willingness to pay for its product and the cost of the product 2. Increase demand: Increase the demand for its product 3. Increase complementarity: Increase the demand for the stakeholder's products complemented by the startup's product 4. Increase privileged information: Establish a position in inter-organizational networks that improves the volume, variety, velocity, and veracity of privileged information that is accessible 5. Increase judgment: Attract individuals who have the requisite experience and knowledge to create value for the startup A stakeholder, while making decisions about the value of a startup, will develop forecasts for the results from the five actions identified above.The results of carrying out these five actions will determine how much value a stakeholder attributes to a technology startup.The value of a startup is idiosyncratic to the stakeholder; even when all stakeholders have the same information they will attribute different values to the startup.
A key result of applying Schmidt and Kiel (2012) is that the ex-ante value of a technology startup is driven by forecasts of product market value creation that is made possible by the startup's existence, not just the startup's ability to generate profitable revenue.Forecasts of "increased spread" and "increased demand" express the startup's ability to increase its revenue.Forecasts of "increased complementarity", "increased privileged information", and "increased judgment" express other components of product market creation that the startup is expected to enable.

To Enable Early and Rapid Globalization in a Technology Startup
We reviewed the born-global literature to identify the factors that enable a technology startup to globalize early and rapidly.We found that startups that globalize early and rapidly tend to take the following actions: • Use the Internet intensively (Jaw & Chen, 2006;Maltby, 2012, Tanev, 2012;Yoos, 2013) • Partner with companies with a global footprint (Lemminger et al., 2014;Nummela et al., 2014) • Have top managers with international experience (Hutchinson et al., 2007;Kudina et al., 2008;Poole, 2012;Sapienza et al., 2006;Spence & Crick, 2009) • Trade control for growth (Spence & Crick, 2009) • Develop niche products with global appeal (Spence & Crick, 2009;Chetty & Campbell-Hunt, 2004;Hutchinson et al., 2007;Kudina et al., 2008) • Initially focus on selling in the lead market for their technology regardless of geographic location (Knight et al., 2004;Spence & Crick, 2009) • Develop a strong brand identity (Hutchinson et al., 2007) • Identify international opportunities (Karra et al., 2008) • Focus on customers with overseas operations (Kudina et al., 2008) www.timreview.ca Cybersecurity Startups: The Importance of Early and Rapid Globalization

Global Value Generator and Search Process
Table 1 provides a tool in the form of a matrix that combines the five factors that enable a technology startup to be valuable and the six factors that enable a technology startup to globalize early and rapidly.
We believe that the Global Value Generator shown as Table 1 can be used by entrepreneurs to anchor the search for actions illustrated in Figure 1.The purpose of the search is to identify and test the specific and concrete actions that a technology startup should carry out to make it valuable by globalizing early and rapidly.
The discovery of the actions to increase the value of a technology startup by globalizing early and rapidly

Cybersecurity Startups: The Importance of Early and Rapid Globalization
Tony Bailetti and Erik Zijdemans should be a disciplined process that is carried out during the early stage of a startup's lifecycle.Muegge (2012) argues that a disciplined discovery process is one that is designed to enable opportunities for learning to arise and has a work plan that results in specific deliverables.
Each cell in Table 1 identifies assertions about the actions that should be carried out.Each assertion included in one of the cells in Table 1 is a cause-effect statement about what a technology startup will do to globalize early and rapidly and what will happen to the factors that drive value as a result.The structure of the statement is as follows: If a startup does "X" to globalize early and rapidly, then "Y" will be the value result).Each statement must be clear, short, simple, and concise.The assertions build on prior knowledge, logical inference, and informed, creative imagination.
Figure 1 illustrates the search process anchored around the use of the Global Value Generator.The first step is to populate the cells in Table 1 with initial assertions.Then, in the second step, new assertions are added and existing assertions are modified, detailed, or elimin-ated.In the third step, a lean process is used to test the assertions.This process should be a quickly iterating cycle that continuously states and validates assertions with stakeholders and learns from the past.Assertions that stakeholders validate can be refined.Assertions that stakeholders do not validate are modified or eliminated.The fourth step is to identify a set of actions that, as a whole, will produce requisite results at an acceptable level of confidence.
The process illustrated in Figure 1 allows a technology startup to describe the actions they take in their globalization process, as well as design, challenge, and invent specific and concrete actions.Muegge (2012) provides the rationale for using a disciplined model discovery process such as the one illustrated in Figure 1.He emphasizes that discipline has two components: intent and structure.Technology entrepreneurs should deliberately identify and undertake activities to acquire new information, test assumptions, and uncover new options and organize discovery-driven activities as a project, with beginning and end points in time, specific deliverables, and a work plan to produce those deliverables.

Examples of Actions Cybersecurity Startups Carry Out to Globalize
The websites of 12 cybersecurity startups that are based in North America and have been operating for five years or less were examined for the purpose of providing generic examples of the actions that firms that operate in the cybersecurity market carry out to globalize early and rapidly.The startups were identified by two experts who work to secure the networks of the federal government of Canada and have experience with suppliers of cybersecurity products and services.We made no attempt to select startups judged to be successful because of these actions.
For each startup, we first used the information provided on its website to infer the actions undertaken to globalize and then these actions were organized into the cells included in the Global Value Generator (Table 1).This activity resulted in 12 matrices: one for each startup.Finally, we collapsed the information in the cells of the 12 matrices into the cells of one matrix.
The 12 startups examined currently operate in the following eight cybersecurity product markets: 1. Total cybersecurity solutions for specific global industries such as aerospace and defense 2. Digital identity and information security and assurance Table 2 provides the information that was collapsed from the 12 matrices (i.e., the actions we inferred that the startups carried out to globalize).The sole purpose of producing Table 2 was to provide generic examples of actions undertaken by cybersecurity startups to globalize.The decisions as to the cells where these examples are shown in Table 2 were made by the authors solely for the purpose to illustrate what the high level results of a discovery process may look like.
The objective of an entrepreneur using the tool introduced in Table 1 as part of a disciplined discovery process is to identify a set of actions that are specific and concrete.By specific actions, we mean those that apply to a particular cybersecurity startup and are not generic like those provided as examples in Table 2.By concrete actions we mean those that are results oriented, not abstract.

Conclusion
The main motivation for writing this article was to provide a tool that can help entrepreneurs discover the actions that they should carry out to increase the exante value of their cybersecurity startups through early and rapid globalization.The tool was developed by leveraging a recent theoretical advance in resourcebased theory (Schmidt & Keil, 2012), a review of the born-global literature, research on business model discovery (Muegge, 2012), and the experience gained operating the Lead to Win ecosystem (leadtowin.ca)(Bailetti & Bot, 2013).
In this article, five factors that make a technology startup valuable were identified by applying the logic that Schmidt and Kiel (2012) used to advance the resourcebased theory.Moreover, six factors that enable a technology startup to globalize early and rapidly were identified from a literature review.These factors were combined into the Global Value Generator, a tool structured as a matrix that can be used to describe, design, challenge, and invent the specific and concrete actions that a cybersecurity startup should perform for the purpose of increasing its value by globalizing early and rapidly.The Global Value Generator needs to be used as part of disciplined discovery processes such as the one described by Muegge (2012).The tool can be used to complement the various business model frameworks proposed in both the management literature and consulting organizations.
We offer three questions to anchor future research efforts.The first research question is: What are the specific actions to globalize early and rapidly that have the greatest effect on the value of the cybersecurity startups?The relationship between the specific actions to globalize and the value of the startup needs to be examined empirically.This effort requires that a myriad of definitional issues be resolved and will take years to complete.

Cybersecurity Startups: The Importance of Early and Rapid Globalization
Tony Bailetti and Erik Zijdemans The second question is: What actions to globalize early and rapidly are unique to cybersecurity startups?The objective of this research would be to identify the specific actions that startups that depend on the existence of a global resource such as cyberspace need to do that other born-global firms do not.For example, cybersecurity startups can and perhaps should issue specific "threatscapes" for the global markets they target.This action would be unique to cybersecurity firms.Managerial judgment and imagination about how a cybersecurity startup can help create value for customers worldwide may be key factors that drive its value.
The third research question is: How can business development agencies improve the support they provide to cybersecurity ventures?Hundreds of incubators and accelerators for startups operate worldwide.They address the needs of startups that operate in many different product markets.The objective of this research would be to identify the tools, processes, simulations, and so on required to better support the startups that operate in the cybersecurity domain.For example, what can business development agencies do to support startups that wish to issue threat-scapes for global markets, improve their managerial judgment, and imagine solutions to specific cybersecurity problems of customers worldwide?
Cybersecurity Startups: The Importance of Early and Rapid Globalization Tony Bailetti and Erik Zijdemans

Figure 1 .
Figure 1.Illustration of the disciplined discovery process that leads to the identification of actions to globalize early and rapidly

Table 2 .
Examples of actions a cybersecurity startup may carry out to increase its value by globalizing early and rapidly