Can You See It Coming? How Disclosure And Corporate Social Responsibility Activity Predict Cybersecurity Breach

Search for this publication on Google Scholar
Binkley, M. (2021). Can You See It Coming? How Disclosure And Corporate Social Responsibility Activity Predict Cybersecurity Breach. Unc Charlotte Electronic Theses And Dissertations.
Download PDF

Analytics

154 views ◎
128 downloads ⇓


Abstract

This dissertation explores the cybersecurity risk disclosure and the information an organization signals via disclosure contents. Extant literature acknowledges the ability of the cybersecurity risk disclosure to predict subsequent related outcome (i.e., realization of breach incident). However, little research has addressed whether the disclosure signals important information about the IT Risk Culture governing the organization. To fill this gap, I examine cybersecurity risk disclosures using textual analysis and clustering techniques to analyze the IT Risk Culture of a sample of organizations between the years 2011 – 2019. Three classifications of IT Risk Culture are identified. I find that a certain IT Risk Culture, evidenced by the vulnerability and the propensity for risk transfer (i.e. cybersecurity insurance) expressed in the cybersecurity risk disclosure, is associated with subsequent cybersecurity breach. Additionally, the disclosure of Corporate Social Responsibility activity is found to be associated with a second classification of IT Risk Culture, one in which there is no significant association with subsequent cybersecurity breach. This dissertation contributes to holistic risk management literature by employing a systems perspective of IT Risk Culture to analyze related disclosures. Findings contribute greatly to the understanding of IT Risk Culture classification, predominant risk response behavior and the likelihood of subsequent related outcomes.

Details
Author

Binkley, Marcy

Title

Can You See It Coming? How Disclosure And Corporate Social Responsibility Activity Predict Cybersecurity Breach

Physical Description

1 online resource (110 pages) : PDF

Date

2021

Degree Granting Institution

University of North Carolina at Charlotte

Abstract

This dissertation explores the cybersecurity risk disclosure and the information an organization signals via disclosure contents. Extant literature acknowledges the ability of the cybersecurity risk disclosure to predict subsequent related outcome (i.e., realization of breach incident). However, little research has addressed whether the disclosure signals important information about the IT Risk Culture governing the organization. To fill this gap, I examine cybersecurity risk disclosures using textual analysis and clustering techniques to analyze the IT Risk Culture of a sample of organizations between the years 2011 – 2019. Three classifications of IT Risk Culture are identified. I find that a certain IT Risk Culture, evidenced by the vulnerability and the propensity for risk transfer (i.e. cybersecurity insurance) expressed in the cybersecurity risk disclosure, is associated with subsequent cybersecurity breach. Additionally, the disclosure of Corporate Social Responsibility activity is found to be associated with a second classification of IT Risk Culture, one in which there is no significant association with subsequent cybersecurity breach. This dissertation contributes to holistic risk management literature by employing a systems perspective of IT Risk Culture to analyze related disclosures. Findings contribute greatly to the understanding of IT Risk Culture classification, predominant risk response behavior and the likelihood of subsequent related outcomes.

Genre

doctoral dissertations

Subjects--Topics

Information technology
Accounting

Degree

D.B.A.

Keywords

Corporate Social Responsibility
Cybersecurity Insurance
Disclosure Analysis
IT Risk Culture

Subject Area

Business Administration

Advisor(s)

Stanley, Laura

Committee Members

Watson, Marcia
Martin, Gregory
Subramaniam, Chandra

Degree Note

Thesis (D.B.A.)--University of North Carolina at Charlotte, 2021.

Rights Statement

This Item is protected by copyright and/or related rights. You are free to use this Item in any way that is permitted by the copyright and related rights legislation that applies to your use. For other uses you need to obtain permission from the rights-holder(s). For additional information, see http://rightsstatements.org/page/InC/1.0/.

Rights Holder Information

Copyright is held by the author unless otherwise indicated.

Identifier

Binkley_uncc_0694D_12721

Permalink

http://hdl.handle.net/20.500.13093/etd:2200