Title:
Cybersecurity Governance Under Organizational Expansion: Mergers, Acquisitions, and Structural Risk in Healthcare Systems

Authors:
Dr. Gilbert B. Mengnjo, Dr. Robb Shawe, USA

Abstract:

This study examines the cybersecurity governance challenges associated with organizational growth through mergers and acquisitions (M&A) in healthcare systems. As healthcare organizations expand across geographic regions and operational domains, they frequently inherit heterogeneous information systems, inconsistent security policies, and fragmented governance structures. This study adopts a conceptual governance analysis, informed by evidence from organizational cases, to explore how M&A activity contributes to cybersecurity fragmentation and risk exposure. The findings indicate that rapid expansion without integrated governance frameworks can lead to misaligned security controls, reduced visibility, and weakened oversight. The article introduces a structural model of cybersecurity fragmentation and provides practical implications for healthcare leaders seeking to align cybersecurity governance with organizational growth.

DOI: http://dx.doi.org/10.51505/ijaemr.2026.11307