IDEAS home Printed from https://ideas.repec.org/a/inm/ormnsc/v72y2026i2p783-804.html

Inexpert Supervision: Field Evidence on Boards’ Oversight of Cybersecurity

Author

Listed:
  • Michelle R. Lowry

    (Accounting and Information Systems Department, Pamplin College of Business, Virginia Tech, Blacksburg, Virginia 24060)

  • Anthony Vance

    (Department of Business Information Technology, Pamplin College of Business, Virginia Tech, Blacksburg, Virginia 24060)

  • Marshall D. Vance

    (Accounting and Information Systems Department, Pamplin College of Business, Virginia Tech, Blacksburg, Virginia 24060)

Abstract

We conduct a field study of boards’ emerging responsibility to oversee cybersecurity risk, a setting in which few directors have expertise. We find that, although nonexpert directors may genuinely seek to provide diligent oversight, without expertise their efforts lack substance and therefore are mostly symbolic, even when they perform the same oversight activities as expert directors. We also explore why boards do not prioritize the appointment of cybersecurity experts and show that nonexpert directors do not perceive that their efforts are symbolic and insufficient. In contrast, expert directors perceive keenly the deficiency of their nonexpert counterparts and argue for the need for more cybersecurity experts on boards, and this viewpoint is shared by cybersecurity executives and consultants who support the board. Thus, we contribute to our understanding of when boards are likely to provide substantive versus symbolic oversight and inform the debate on the merits of board-level cybersecurity expertise.

Suggested Citation

  • Michelle R. Lowry & Anthony Vance & Marshall D. Vance, 2026. "Inexpert Supervision: Field Evidence on Boards’ Oversight of Cybersecurity," Management Science, INFORMS, vol. 72(2), pages 783-804, February.
    • Handle: RePEc:inm:ormnsc:v:72:y:2026:i:2:p:783-804
    DOI: 10.1287/mnsc.2023.04147
    as

    Download full text from publisher

    File URL: http://dx.doi.org/10.1287/mnsc.2023.04147
    Download Restriction: no
    File URL: https://libkey.io/10.1287/mnsc.2023.04147?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    References listed on IDEAS

    as
    1. Hwang, Byoung-Hyoun & Kim, Seoyoung, 2009. "It pays to have friends," Journal of Financial Economics, Elsevier, vol. 93(1), pages 138-158, July.
    2. Michael C. Jensen, 2010. "The Modern Industrial Revolution, Exit, and the Failure of Internal Control Systems," Journal of Applied Corporate Finance, Morgan Stanley, vol. 22(1), pages 43-58, January.
    3. Renée B. Adams & Daniel Ferreira, 2007. "A Theory of Friendly Boards," Journal of Finance, American Finance Association, vol. 62(1), pages 217-250, February.
    4. Mark S. Beasley & Joseph V. Carcello & Dana R. Hermanson & Terry L. Neal, 2009. "The Audit Committee Oversight Process," Contemporary Accounting Research, John Wiley & Sons, vol. 26(1), pages 65-122, March.
    5. Fisher, Robert J, 1993. "Social Desirability Bias and the Validity of Indirect Questioning," Journal of Consumer Research, Journal of Consumer Research Inc., vol. 20(2), pages 303-315, September.
    6. J. Yo-Jud Cheng & Boris Groysberg & Paul Healy & Rajesh Vijayaraghavan, 2021. "Directors’ Perceptions of Board Effectiveness and Internal Operations," Management Science, INFORMS, vol. 67(10), pages 6399-6420, October.
    7. Xia Chen & Qiang Cheng & Xin Wang, 2015. "Does increased board independence reduce earnings management? Evidence from recent regulatory reforms," Review of Accounting Studies, Springer, vol. 20(2), pages 899-933, June.
    8. Mark L. Defond & Rebecca N. Hann & Xuesong Hu, 2005. "Does the Market Value Financial Expertise on Audit Committees of Boards of Directors?," Journal of Accounting Research, John Wiley & Sons, Ltd., vol. 43(2), pages 153-193, May.
    9. Ling Lei Lisic & Linda A. Myers & Timothy A. Seidel & Jian Zhou, 2019. "Does Audit Committee Accounting Expertise Help to Promote Audit Quality? Evidence from Auditor Reporting of Internal Control Weaknesses†," Contemporary Accounting Research, John Wiley & Sons, vol. 36(4), pages 2521-2553, December.
    10. Weisbach, Michael S., 1988. "Outside directors and CEO turnover," Journal of Financial Economics, Elsevier, vol. 20(1-2), pages 431-460, January.
    11. Richard Clune & Dana R. Hermanson & James G. Tompkins & Zhongxia (Shelly) Ye, 2014. "The Nominating Committee Process: A Qualitative Examination of Board Independence and Formalization," Contemporary Accounting Research, John Wiley & Sons, vol. 31(3), pages 748-786, September.
    12. Masulis, Ronald W. & Mobbs, Shawn, 2014. "Independent director incentives: Where do talented directors spend their limited time and energy?," Journal of Financial Economics, Elsevier, vol. 111(2), pages 406-429.
    13. Kang, Yoon Ju & Trotman, Andrew J. & Trotman, Ken T., 2015. "The effect of an Audit Judgment Rule on audit committee members’ professional skepticism: The case of accounting estimates," Accounting, Organizations and Society, Elsevier, vol. 46(C), pages 59-76.
    14. Klein, April, 2002. "Audit committee, board of director characteristics, and earnings management," Journal of Accounting and Economics, Elsevier, vol. 33(3), pages 375-400, August.
    15. Fama, Eugene F & Jensen, Michael C, 1983. "Separation of Ownership and Control," Journal of Law and Economics, University of Chicago Press, vol. 26(2), pages 301-325, June.
    16. Xie, Biao & Davidson, Wallace III & DaDalt, Peter J., 2003. "Earnings management and corporate governance: the role of the board and the audit committee," Journal of Corporate Finance, Elsevier, vol. 9(3), pages 295-316, June.
    17. Lori Holder-Webb & Jeffrey Cohen & Leda Nath & David Wood, 2009. "The Supply of Corporate Social Responsibility Disclosures Among U.S. Firms," Journal of Business Ethics, Springer, vol. 84(4), pages 497-527, February.
    18. Beng Wee Goh, 2009. "Audit Committees, Boards of Directors, and Remediation of Material Weaknesses in Internal Control," Contemporary Accounting Research, John Wiley & Sons, vol. 26(2), pages 549-579, June.
    19. Kamiya, Shinichi & Kang, Jun-Koo & Kim, Jungmin & Milidonis, Andreas & Stulz, René M., 2021. "Risk management, firm reputation, and the impact of successful cyberattacks on target firms," Journal of Financial Economics, Elsevier, vol. 139(3), pages 719-749.
    20. Gendron, Yves & Bedard, Jean, 2006. "On the constitution of audit committee effectiveness," Accounting, Organizations and Society, Elsevier, vol. 31(3), pages 211-239, April.
    21. Christie Hayne & Marshall Vance, 2019. "Information Intermediary or De Facto Standard Setter? Field Evidence on the Indirect and Direct Influence of Proxy Advisors," Journal of Accounting Research, John Wiley & Sons, Ltd., vol. 57(4), pages 969-1011, September.
    22. Bruynseels, L.M.L. & Cardinaels, E., 2014. "The audit committee : Management watchdog or personal friend of the CEO?," Other publications TiSEM 4efbab67-3b44-4eab-9f17-0, Tilburg University, School of Economics and Management.
    23. Duchin, Ran & Matsusaka, John G. & Ozbas, Oguzhan, 2010. "When are outside directors effective?," Journal of Financial Economics, Elsevier, vol. 96(2), pages 195-214, May.
    24. Edmans, Alex & Gosling, Tom & Jenter, Dirk, 2023. "CEO compensation: Evidence from the field," Journal of Financial Economics, Elsevier, vol. 150(3).
    25. Fama, Eugene F, 1980. "Agency Problems and the Theory of the Firm," Journal of Political Economy, University of Chicago Press, vol. 88(2), pages 288-307, April.
    26. Agrawal, Anup & Chadha, Sahiba, 2005. "Corporate Governance and Accounting Scandals," Journal of Law and Economics, University of Chicago Press, vol. 48(2), pages 371-406, October.
    27. Faleye, Olubunmi & Hoitash, Rani & Hoitash, Udi, 2011. "The costs of intense board monitoring," Journal of Financial Economics, Elsevier, vol. 101(1), pages 160-181, July.
    28. Jeffrey Cohen & Ganesh Krishnamoorthy & Arnold Wright, 2017. "Enterprise Risk Management and the Financial Reporting Process: The Experiences of Audit Committee Members, CFOs, and External Auditors," Contemporary Accounting Research, John Wiley & Sons, vol. 34(2), pages 1178-1209, June.
    29. Sila, Vathunyoo & Gonzalez, Angelica & Hagendorff, Jens, 2017. "Independent director reputation incentives and stock price informativeness," Journal of Corporate Finance, Elsevier, vol. 47(C), pages 219-235.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Sun, Liang, 2021. "Does the location of directors' additional positions matter? A new dimension of board structure," Global Finance Journal, Elsevier, vol. 49(C).
    2. Balachandran, Balasingham & Williams, Barry, 2018. "Effective governance, financial markets, financial institutions & crises," Pacific-Basin Finance Journal, Elsevier, vol. 50(C), pages 1-15.
    3. Wang, Qiong & Wang, Huajie & Wang, Kemin, 2024. "Making outside directors inside: Independent directors’ corporate site visits and real earnings management," The British Accounting Review, Elsevier, vol. 56(6).
    4. Upadhyay, Arun & Öztekin, Özde, 2021. "What matters more in board independence? Form or substance: Evidence from influential CEO-directors," Journal of Corporate Finance, Elsevier, vol. 71(C).
    5. Obermire, Kara M. & Cohen, Jeffrey R. & Zehms, Karla M., 2021. "Audit committee members’ professional identities: Evidence from the field," Accounting, Organizations and Society, Elsevier, vol. 93(C).
    6. James, Hui Liang & Ngo, Thanh & Wang, Hongxia, 2021. "Independent director tenure and corporate transparency," The North American Journal of Economics and Finance, Elsevier, vol. 57(C).
    7. Yanmin Gao & Jeong-Bon Kim & Desmond Tsang & Haibin Wu, 2017. "Go before the whistle blows: an empirical analysis of director turnover and financial fraud," Review of Accounting Studies, Springer, vol. 22(1), pages 320-360, March.
    8. Masulis, Ronald W. & Wang, Cong & Xie, Fei, 2012. "Globalizing the boardroom—The effects of foreign directors on corporate governance and firm performance," Journal of Accounting and Economics, Elsevier, vol. 53(3), pages 527-554.
    9. Bill B. Francis & Iftekhar Hasan & Qiang Wu, 2012. "Do corporate boards matter during the current financial crisis?," Review of Financial Economics, John Wiley & Sons, vol. 21(2), pages 39-52, April.
    10. Hidaya Lawati & Khaled Hussainey & Roza Sagitova, 2021. "Disclosure quality vis-à-vis disclosure quantity: Does audit committee matter in Omani financial institutions?," Review of Quantitative Finance and Accounting, Springer, vol. 57(2), pages 557-594, August.
    11. Cai, Chen & Hasan, Iftekhar & Shen, Yinjie & Wang, Shuai, 2021. "Military directors, governance and firm behavior," Advances in accounting, Elsevier, vol. 55(C).
    12. Xiao Wu, Dong & Yao, Xiao & Luan Guo, Jian, 2021. "Is Textual Tone Informative or Inflated for Firm’s Future Value? Evidence from Chinese Listed Firms," Economic Modelling, Elsevier, vol. 94(C), pages 513-525.
    13. Sandvik, Jason, 2020. "Board monitoring, director connections, and credit quality☆," Journal of Corporate Finance, Elsevier, vol. 65(C).
    14. Le, Quyen & Vafaei, Alireza & Ahmed, Kamran & Kutubi, Shawgat, 2022. "Independent directors' reputation incentives and firm performance – an Australian perspective," Pacific-Basin Finance Journal, Elsevier, vol. 72(C).
    15. Lerong He & Rong Yang & Yuanlong He, 2018. "Does social exchange relationship impair audit committee effectiveness?," Journal of Management & Governance, Springer;Accademia Italiana di Economia Aziendale (AIDEA), vol. 22(2), pages 219-249, June.
    16. Armstrong, Christopher S. & Guay, Wayne R. & Weber, Joseph P., 2010. "The role of information and financial reporting in corporate governance and debt contracting," Journal of Accounting and Economics, Elsevier, vol. 50(2-3), pages 179-234, December.
    17. Fan, Yaoyao & Jiang, Yuxiang & John, Kose & Liu, Frank Hong, 2021. "From watchdog to watchman: Do independent directors monitor a CEO of their own age?," Journal of Empirical Finance, Elsevier, vol. 61(C), pages 206-229.
    18. Dah, Mustafa A., 2025. "Refreshing boards: Countering CEO entrenchment," Research in International Business and Finance, Elsevier, vol. 75(C).
    19. Luminita Enache & Antonio Parbonetti & Anup Srivastava, 2020. "Are all outside directors created equal with respect to firm disclosure policy?," Review of Quantitative Finance and Accounting, Springer, vol. 55(2), pages 541-577, August.
    20. Adams, Mike & Jiang, Wei, 2016. "Do outside directors influence the financial performance of risk-trading firms? Evidence from the United Kingdom (UK) insurance industry," Journal of Banking & Finance, Elsevier, vol. 64(C), pages 36-51.

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;
    ;

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:inm:ormnsc:v:72:y:2026:i:2:p:783-804. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Chris Asher (email available below). General contact details of provider: https://edirc.repec.org/data/inforea.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.