IDEAS home Printed from https://ideas.repec.org/a/eee/ijoais/v54y2024ics1467089524000290.html

The impact of cybersecurity risk management strategy disclosure on investors’ judgments and decisions

Author

Listed:
  • (Annabella) Huang, Jiehui
  • Murthy, Uday

Abstract

In March 2022, the Securities and Exchange Commission (SEC) proposed the mandatory reporting of cybersecurity risk management policies for public companies. This study aims to explore the potential impact of cybersecurity risk management strategy disclosure on nonprofessional investors. Using a 4 x 1 between-participants experimental design, we examine whether nonprofessional investors’ perceptions and decisions differ between disclosed cybersecurity risk management strategies of self-assessment, self-assessment referencing the National Institute of Standards and Technology (NIST) framework, third-party assurance, and insurance. We find that nonprofessional investors’ willingness to invest is significantly higher for the insurance strategy compared to the third-party cybersecurity examination and self-assessment (without reference to NIST) strategies. Moderated mediation analysis reveals that investors’ perceptions of financial risk moderates the mediating effect of perceived cybersecurity risk management strategy effectiveness on the relation between cybersecurity risk management strategy and likelihood of investment. Our study contributes to regulators, practitioners, and stakeholders concerned about the potential impact of cybersecurity risk management strategy disclosures on nonprofessional investors.

Suggested Citation

  • (Annabella) Huang, Jiehui & Murthy, Uday, 2024. "The impact of cybersecurity risk management strategy disclosure on investors’ judgments and decisions," International Journal of Accounting Information Systems, Elsevier, vol. 54(C).
    • Handle: RePEc:eee:ijoais:v:54:y:2024:i:c:s1467089524000290
    DOI: 10.1016/j.accinf.2024.100696
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S1467089524000290
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.accinf.2024.100696?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to

    for a different version of it.

    References listed on IDEAS

    as
    1. Ling Yang & Linda Lau & Huiqi Gan, 2020. "Investors’ perceptions of the cybersecurity risk management reporting framework," International Journal of Accounting & Information Management, Emerald Group Publishing Limited, vol. 28(1), pages 167-183, January.
    2. Steven M. Glover & Douglas F. Prawitt & David A. Wood, 2008. "Internal Audit Sourcing Arrangement and the External Auditor's Reliance Decision," Contemporary Accounting Research, John Wiley & Sons, vol. 25(1), pages 193-213, March.
    3. Elliott, W.B. & Hodge, F. & Kennedy, J.J. & Pronk, M., 2007. "Are MBA students a good proxy for nonprofessional investors?," Other publications TiSEM 20271f1d-d385-4122-a175-f, Tilburg University, School of Economics and Management.
    4. Demek, Kristina C. & Kaplan, Steven E., 2023. "Cybersecurity breaches and investors’ interest in the firm as an investment," International Journal of Accounting Information Systems, Elsevier, vol. 49(C).
    5. DeAngelo, Linda Elizabeth, 1981. "Auditor size and audit quality," Journal of Accounting and Economics, Elsevier, vol. 3(3), pages 183-199, December.
    6. Tosun, Onur Kemal, 2021. "Cyber-attacks and stock market activity," International Review of Financial Analysis, Elsevier, vol. 76(C).
    7. Farkas, Maia & Murthy, Uday S., 2014. "Nonprofessional investors' perceptions of the incremental value of continuous auditing and continuous controls monitoring: An experimental investigation," International Journal of Accounting Information Systems, Elsevier, vol. 15(2), pages 102-121.
    8. Kristy Hodge & Nava Subramaniam & Jenny Stewart, 2009. "Assurance of Sustainability Reports: Impact on Report Users' Confidence and Perceptions of Information Credibility," Australian Accounting Review, CPA Australia, vol. 19(3), pages 178-194, September.
    9. Lisa Koonce & Marlys Gascho Lipe, 2010. "Earnings Trend and Performance Relative to Benchmarks: How Consistency Influences Their Joint Use," Journal of Accounting Research, John Wiley & Sons, Ltd., vol. 48(4), pages 859-884, September.
    10. Peng, Jin & Zhang, Haofei & Mao, Juan & Xu, Shouhuai, 2023. "Repeated data breaches and firm value," Economics Letters, Elsevier, vol. 224(C).
    11. Jan Martin Lemnitzer, 2021. "Why cybersecurity insurance should be regulated and compulsory," Journal of Cyber Policy, Taylor & Francis Journals, vol. 6(2), pages 118-136, May.
    12. Asay, H. Scott & Libby, Robert & Rennekamp, Kristina M., 2018. "Do features that associate managers with a message magnify investors’ reactions to narrative disclosures?," Accounting, Organizations and Society, Elsevier, vol. 68, pages 1-14.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Francesco Columba & Manuel Cugliari & Marco Orlandi & Federica Vassalli, 2026. "The Cyber Risk Of Non-Financial Firms," Mercati, infrastrutture, sistemi di pagamento (Markets, Infrastructures, Payment Systems) 75, Bank of Italy, Directorate General for Markets and Payment System.
    2. Nataliya Struk, 2026. "Assessment of Cybersecurity of Accounting Information in the Innovative Activities of Agricultural Enterprises," Oblik i finansi, Institute of Accounting and Finance, issue 1, pages 57-70, March.
    3. Nillasithanukroh, Songkhun & Park, Chul Hyun & Baek, Jaejong & Ahn, Gail-Joon & Richards, Robert, 2025. "Mapping the landscape of cybersecurity preparedness: A systematic review of non-technological determinants and consequences," Technology in Society, Elsevier, vol. 83(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Cade, Nicole L., 2018. "Corporate social media: How two-way disclosure channels influence investors," Accounting, Organizations and Society, Elsevier, vol. 68, pages 63-79.
    2. Yang, Yanjia & Tan, Hun-Tong, 2024. "What you are versus what you do: The effect of noun-verb framing in earnings conference calls," Accounting, Organizations and Society, Elsevier, vol. 113(C).
    3. Patrick Velte & Martin Stawinoga, 2017. "Empirical research on corporate social responsibility assurance (CSRA): A literature review," Journal of Business Economics, Springer, vol. 87(8), pages 1017-1066, November.
    4. Tobias Steindl, 2021. "Cultural rule orientation, legal institutions, and the credibility of corporate social responsibility reports," Corporate Social Responsibility and Environmental Management, John Wiley & Sons, vol. 28(1), pages 310-332, January.
    5. Libby, Robert & Rennekamp, Kristina M. & Seybert, Nicholas, 2015. "Regulation and the interdependent roles of managers, auditors, and directors in earnings management and accounting choice," Accounting, Organizations and Society, Elsevier, vol. 47(C), pages 25-42.
    6. Jennifer Martínez‐Ferrero & Isabel‐María García‐Sánchez & Emiliano Ruiz‐Barbadillo, 2018. "The quality of sustainability assurance reports: The expertise and experience of assurance providers as determinants," Business Strategy and the Environment, Wiley Blackwell, vol. 27(8), pages 1181-1196, December.
    7. Björn Röber, 2020. "Escalating internationalization decisions: intendedly rational, but only limitedly so?," Business Research, Springer;German Academic Association for Business Research, vol. 13(2), pages 455-484, July.
    8. Chelsea Liu & Muhammad Ali Babar, 2026. "Corporate cybersecurity risk and data breaches: A systematic review of empirical research," Australian Journal of Management, Australian School of Business, vol. 51(1), pages 62-92, February.
    9. El Ghoul, Sadok & Guedhami, Omrane & Pittman, Jeffrey, 2016. "Cross-country evidence on the importance of Big Four auditors to equity pricing: The mediating role of legal institutions," Accounting, Organizations and Society, Elsevier, vol. 54(C), pages 60-81.
    10. Chen, Wei & Han, Jun & Tan, Hun-Tong, 2016. "Investor reactions to management earnings guidance attributions: The effects of news valence, attribution locus, and outcome controllability," Accounting, Organizations and Society, Elsevier, vol. 55(C), pages 83-95.
    11. Gerwanski, Jannik & Velte, Patrick & Mechtel, Mario, 2022. "Do nonprofessional investors value the assurance of integrated reports? Exploratory evidence," European Management Journal, Elsevier, vol. 40(1), pages 103-126.
    12. Tobias Gerwing & Peter Kajüter & Maximilian Wirth, 2022. "The role of sustainable corporate governance in mandatory sustainability reporting quality," Journal of Business Economics, Springer, vol. 92(3), pages 517-555, April.
    13. Triki, Anis & Marquez-Illescas, Gilberto, 2025. "Do investors see the darkness in narcissism?," Advances in accounting, Elsevier, vol. 69(C).
    14. Saeed Rabea Baatwah & Adel Ali Al-Qadasi, 2020. "Determinants of outsourced internal audit function: a further analysis," Eurasian Business Review, Springer;Eurasia Business and Economics Society, vol. 10(4), pages 629-659, December.
    15. Liu, Zihan & Jubb, Christine & Abhayawansa, Subhash, 2025. "Choice of financial audit firm and ESG assurance firm: The role of board of director characteristics," The British Accounting Review, Elsevier, vol. 57(4).
    16. Belen Fernandez‐Feijoo & Silvia Romero & Silvia Ruiz, 2018. "Financial Auditor and Sustainability Reporting: Does it matter?," Corporate Social Responsibility and Environmental Management, John Wiley & Sons, vol. 25(3), pages 209-224, May.
    17. Wang, Duo & Hu, Yunge & Li, Yanxi, 2026. "Cybersecurity risk and corporate maturity mismatch," International Review of Financial Analysis, Elsevier, vol. 109(C).
    18. Natalia Vaz Ogando & Silvia Ruiz Blanco & Belen Fernandez-Feijoo, 2018. "A Provider’s Approach to the Assurance Market of Sustainability Reports in Spain," Administrative Sciences, MDPI, vol. 8(3), pages 1-27, June.
    19. Lopin Kuo & Po-Wen Kuo & Chun-Chih Chen, 2021. "Mandatory CSR Disclosure, CSR Assurance, and the Cost of Debt Capital: Evidence from Taiwan," Sustainability, MDPI, vol. 13(4), pages 1-19, February.
    20. Carolin Baier & Max Göttsche & Andreas Hellmann & Frank Schiemann, 2022. "Too Good To Be True: Influencing Credibility Perceptions with Signaling Reference Explicitness and Assurance Depth," Journal of Business Ethics, Springer, vol. 178(3), pages 695-714, July.

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;
    ;

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:ijoais:v:54:y:2024:i:c:s1467089524000290. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/international-journal-of-accounting-information-systems/ .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.