IDEAS home Printed from https://ideas.repec.org/a/eee/finana/v93y2024ics1057521924001066.html

Cybersecurity data breaches and internal control

Author

Listed:
  • Zhou, Fuzhao
  • Huang, Jianning

Abstract

The present study provides novel evidence of the effects of data breaches on firms' subsequent internal control. We find data breaches to be negatively associated with subsequent disclosure of internal control material weakness (i.e., improved internal control), and CEO dismissal to be an effective mechanism for improving internal control. We further find that data breaches can magnify the accounting expertise effect and attenuate the complexity effect on subsequent internal control, and that firms are less likely to file “Big R” restatements and face litigation subsequent to making improvements in internal control.

Suggested Citation

  • Zhou, Fuzhao & Huang, Jianning, 2024. "Cybersecurity data breaches and internal control," International Review of Financial Analysis, Elsevier, vol. 93(C).
    • Handle: RePEc:eee:finana:v:93:y:2024:i:c:s1057521924001066
    DOI: 10.1016/j.irfa.2024.103174
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S1057521924001066
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.irfa.2024.103174?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to

    for a different version of it.

    References listed on IDEAS

    as
    1. Chris E. Hogan & Michael S. Wilkins, 2008. "Evidence on the Audit Risk Model: Do Auditors Increase Audit Fees in the Presence of Internal Control Deficiencies?," Contemporary Accounting Research, John Wiley & Sons, vol. 25(1), pages 219-242, March.
    2. Jeff L. McMullin & Bryce Schonberger, 2020. "Entropy-balanced accruals," Review of Accounting Studies, Springer, vol. 25(1), pages 84-119, March.
    3. Hainmueller, Jens, 2012. "Entropy Balancing for Causal Effects: A Multivariate Reweighting Method to Produce Balanced Samples in Observational Studies," Political Analysis, Cambridge University Press, vol. 20(1), pages 25-46, January.
    4. Banker, Rd & Datar, Sm, 1989. "Sensitivity, Precision, And Linear Aggregation Of Signals For Performance Evaluation," Journal of Accounting Research, John Wiley & Sons, Ltd., vol. 27(1), pages 21-39.
    5. R. G. Walker, 2004. "Gaps in Guidelines on Audit Committees," Abacus, Accounting Foundation, University of Sydney, vol. 40(2), pages 157-192, June.
    6. Richard J. Gentry & Joseph S. Harrison & Timothy J. Quigley & Steven Boivie, 2021. "A database of CEO turnover and dismissal in S&P 1500 firms, 2000–2018," Strategic Management Journal, Wiley Blackwell, vol. 42(5), pages 968-991, May.
    7. Edward I. Altman, 1968. "The Prediction Of Corporate Bankruptcy: A Discriminant Analysis," Journal of Finance, American Finance Association, vol. 23(1), pages 193-194, March.
    8. Doyle, Jeffrey & Ge, Weili & McVay, Sarah, 2007. "Determinants of weaknesses in internal control over financial reporting," Journal of Accounting and Economics, Elsevier, vol. 44(1-2), pages 193-223, September.
    9. Lambert, Richard A., 2001. "Contracting theory and accounting," Journal of Accounting and Economics, Elsevier, vol. 32(1-3), pages 3-87, December.
    10. Karla Johnstone & Chan Li & Kathleen Hertz Rupley, 2011. "Changes in Corporate Governance Associated with the Revelation of Internal Control Material Weaknesses and Their Subsequent Remediation," Contemporary Accounting Research, John Wiley & Sons, vol. 28(1), pages 331-383, March.
    11. Beng Wee Goh, 2009. "Audit Committees, Boards of Directors, and Remediation of Material Weaknesses in Internal Control," Contemporary Accounting Research, John Wiley & Sons, vol. 26(2), pages 549-579, June.
    12. Sarah C. Rice & David P. Weber, 2012. "How Effective Is Internal Control Reporting under SOX 404? Determinants of the (Non‐)Disclosure of Existing Material Weaknesses," Journal of Accounting Research, John Wiley & Sons, Ltd., vol. 50(3), pages 811-843, June.
    13. Aloke (Al) Ghosh & Yong Gyu Lee, 2013. "Financial Reporting Quality, Structural Problems and the Informativeness of Mandated Disclosures on Internal Controls," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 40(3-4), pages 318-349, April.
    14. Eli Amir & Shai Levi & Tsafrir Livne, 2018. "Do firms underreport information on cyber-attacks? Evidence from capital markets," Review of Accounting Studies, Springer, vol. 23(3), pages 1177-1206, September.
    15. Schrand, Catherine M. & Zechman, Sarah L.C., 2012. "Executive overconfidence and the slippery slope to financial misreporting," Journal of Accounting and Economics, Elsevier, vol. 53(1), pages 311-329.
    16. Dain C. Donelson & Justin J. Hopkins, 2016. "Large Market Declines and Securities Litigation: Implications for Disclosing Adverse Earnings News," Management Science, INFORMS, vol. 62(11), pages 3183-3198, November.
    17. Claire Lending & Kristina Minnick & Patrick J. Schorno, 2018. "Corporate Governance, Social Responsibility, and Data Breaches," The Financial Review, Eastern Finance Association, vol. 53(2), pages 413-455, May.
    18. Shijun Cheng & Robert Felix & Raffi Indjejikian, 2019. "Spillover Effects of Internal Control Weakness Disclosures: The Role of Audit Committees and Board Connections," Contemporary Accounting Research, John Wiley & Sons, vol. 36(2), pages 934-957, June.
    19. Li, Chan & Sun, Lili & Ettredge, Michael, 2010. "Financial executive qualifications, financial executive turnover, and adverse SOX 404 opinions," Journal of Accounting and Economics, Elsevier, vol. 50(1), pages 93-110, May.
    20. Dan Dhaliwal & Vic Naiker & Farshid Navissi, 2010. "The Association Between Accruals Quality and the Characteristics of Accounting Experts and Mix of Expertise on Audit Committees," Contemporary Accounting Research, John Wiley & Sons, vol. 27(3), pages 787-827, September.
    21. Edward I. Altman, 1968. "Financial Ratios, Discriminant Analysis And The Prediction Of Corporate Bankruptcy," Journal of Finance, American Finance Association, vol. 23(4), pages 589-609, September.
    22. Devos, Erik & Huang, Jianning & Zhou, Fuzhao, 2021. "The effects of corporate name changes on firm information environment and earnings management," International Review of Financial Analysis, Elsevier, vol. 77(C).
    23. AC Pritchard, 2007. "Do the Merits Matter More? The Impact of the Private Securities Litigation Reform Act," The Journal of Law, Economics, and Organization, Oxford University Press, vol. 23(3), pages 627-652, October.
    24. Gopal V. Krishnan & Emma‐Riikka Myllymäki & Neerav Nagar, 2021. "Does financial reporting quality vary across firm life cycle?," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 48(5-6), pages 954-987, May.
    25. Hoitash, Udi & Mkrtchyan, Anahit, 2022. "Internal governance and outside directors’ connections to non-director executives," Journal of Accounting and Economics, Elsevier, vol. 73(1).
    26. Chychyla, Roman & Leone, Andrew J. & Minutti-Meza, Miguel, 2019. "Complexity of financial reporting standards and accounting expertise," Journal of Accounting and Economics, Elsevier, vol. 67(1), pages 226-253.
    27. Nikos Vafeas, 2005. "Audit Committees, Boards, and the Quality of Reported Earnings," Contemporary Accounting Research, John Wiley & Sons, vol. 22(4), pages 1093-1122, December.
    28. Beardsley, Erik L. & Imdieke, Andrew J. & Omer, Thomas C., 2021. "The distraction effect of non-audit services on audit quality," Journal of Accounting and Economics, Elsevier, vol. 71(2).
    29. Imbens,Guido W. & Rubin,Donald B., 2015. "Causal Inference for Statistics, Social, and Biomedical Sciences," Cambridge Books, Cambridge University Press, number 9780521885881, August.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Wang, Zhen, 2026. "Can the establishment of a personal data protection system promote firm value? An exploration of the economics of privacy," Research in International Business and Finance, Elsevier, vol. 82(C).
    2. Saeed Rabea Baatwah & Mohammed Asiri & Mohammed Saleh Bajaher & Ayoob Alyafai & Salem Baajajah, 2026. "Thriving post-cyberattacks: the power of control, disclosure, and IT maturity," Electronic Commerce Research, Springer, vol. 26(2), pages 1705-1743, April.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. DeFond, Mark & Zhang, Jieying, 2014. "A review of archival auditing research," Journal of Accounting and Economics, Elsevier, vol. 58(2), pages 275-326.
    2. Philip Beaulieu & Louise Hayes & Lev M. Timoshenko, 2023. "Changes in accounting estimates: An update of priors or an earnings management strategy of “last resort”?," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 50(3-4), pages 622-659, March.
    3. Hasan, Md Mahmudul, 2025. "Private lenders and borrowers' internal control-related private information," Advances in accounting, Elsevier, vol. 68(C).
    4. Westfall, Tiffany J. & Myring, Mark, 2022. "Are voluntary internal control weakness disclosures in initial public offerings associated with managerial ability and subsequent financial reporting quality?," Advances in accounting, Elsevier, vol. 59(C).
    5. Xiaolu Xu, 2024. "Generalist CEOs, management risk and internal control weaknesses," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 51(1-2), pages 209-239, January.
    6. Sean T. McGuire & Stevanie S. Neuman & Sarah C. Rice, 2020. "Interim Effective Tax Rate Estimates and Internal Control Quality," Contemporary Accounting Research, John Wiley & Sons, vol. 37(1), pages 603-633, March.
    7. Beng Wee Goh & Jayanthi Krishnan & Dan Li, 2013. "Auditor Reporting under Section 404: The Association between the Internal Control and Going Concern Audit Opinions," Contemporary Accounting Research, John Wiley & Sons, vol. 30(3), pages 970-995, September.
    8. Robert Carnes, 2025. "Riding the merger wave: the gatekeeping role of auditors," Review of Accounting Studies, Springer, vol. 30(2), pages 2071-2133, June.
    9. Juan Mao & Zhongxia (Shelly) Ye, 2023. "Internal control material weakness disclosure and misstatement duration," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 50(1-2), pages 118-151, January.
    10. Mohamad Mazboudi & Salim Chahine & Yiwei Fang & Mingying Cheng, 2025. "Do high‐centrality CEOs influence audit outcomes?," Financial Markets, Institutions & Instruments, John Wiley & Sons, vol. 34(1), pages 3-38, February.
    11. Armanious, Amir & Zhao, Ruoyun, 2024. "Stock liquidity effect on leverage: The role of debt security, financial constraint, and risk around the global financial crisis and Covid-19 pandemic," International Review of Financial Analysis, Elsevier, vol. 92(C).
    12. Ranjan D’Mello & Xinghua Gao & Yonghong Jia, 2017. "Internal control and internal capital allocation: evidence from internal capital markets of multi-segment firms," Review of Accounting Studies, Springer, vol. 22(1), pages 251-287, March.
    13. Hua-Wei Huang & Mai Dao & James M. Fornaro, 2016. "Corporate governance, SFAS 157 and cost of equity capital: evidence from US financial institutions," Review of Quantitative Finance and Accounting, Springer, vol. 46(1), pages 141-177, January.
    14. Feng Guo & Chenxi Lin & Adi Masli & Michael S. Wilkins, 2021. "Auditor Responses to Shareholder Activism," Contemporary Accounting Research, John Wiley & Sons, vol. 38(1), pages 63-95, March.
    15. Simon Fung & Viet Tuan Pham & K. K. Raman, 2022. "Client corruption culture and audit quality: the conditioning effect of the competitive position of the incumbent auditor," Review of Quantitative Finance and Accounting, Springer, vol. 59(3), pages 1133-1171, October.
    16. Eunice S. Khoo & Youngdeok Lim & Gary S. Monroe, 2020. "Audit Committee Members’ Reputation Incentives and Their Effectiveness in Monitoring the Financial Reporting Process," Abacus, Accounting Foundation, University of Sydney, vol. 56(3), pages 348-406, September.
    17. Li, Yuanhui & Li, Xiao & Xiang, Erwei & Geri Djajadikerta, Hadrian, 2020. "Financial distress, internal control, and earnings management: Evidence from China," Journal of Contemporary Accounting and Economics, Elsevier, vol. 16(3).
    18. Buslepp, William & Legoria, Joseph & Rosa, Regina & Shaw, Dan, 2019. "Misclassification of audit-related fees as a measure of internal control quality," Advances in accounting, Elsevier, vol. 46(C), pages 1-1.
    19. Si, Deng-Kui & Du, Qianqian & Pan, Yukun, 2025. "The effect of superstitious beliefs on financial reporting conservatism: Evidence from Chinese “Zodiac Year”," Journal of Economic Behavior & Organization, Elsevier, vol. 231(C).
    20. Inder K. Khurana & Hoyoun Kyung, 2021. "Internal control material weakness and CEO recruitment," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 48(9-10), pages 1940-1987, October.

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;
    ;

    JEL classification:

    • M41 - Business Administration and Business Economics; Marketing; Accounting; Personnel Economics - - Accounting - - - Accounting
    • M15 - Business Administration and Business Economics; Marketing; Accounting; Personnel Economics - - Business Administration - - - IT Management

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:finana:v:93:y:2024:i:c:s1057521924001066. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: http://www.elsevier.com/locate/inca/620166 .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.