 Does CIO risk appetite matter? Evidence from information security breach incidentsFeng, Cecilia (Qian) and Tawei Wang International Journal of Accounting Information Systems, 2019, vol. 32, issue C, 59-75 Abstract: After a series of recent high-profile information security breach incidents, practitioners have engaged in heated debates about the role of the chief information officer (CIO), particularly his/her role in information security risk management. However, little is known in the academic literature about how a CIO's appetite for risk affects the effectiveness of information security management. We address this gap by examining how a CIO's risk appetite is associated with information security breach incidents. We show that the level of CIO risk aversion is negatively associated with the likelihood of breach incidents. Furthermore, we find that this association is stronger if the company's chief executive officer (CEO) is also risk averse. In additional analyses, we show that the relationship between CIO risk aversion and breach incidents varies depending on breach type and the strategic position of the company and is moderated by the CIO's power. Keywords: Chief information officer; Information security risk management; Information security breach (search for similar items in EconPapers) Downloads: (external link) Related works: Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text Persistent link: https://EconPapers.repec.org/RePEc:eee:ijoais:v:32:y:2019:i:c:p:59-75 DOI: 10.1016/j.accinf.2018.11.001 Access Statistics for this article International Journal of Accounting Information Systems is currently edited by S.V. Grabski More articles in International Journal of Accounting Information Systems from Elsevier |
Is your work missing from RePEc? Here is how to contribute.
Questions or problems? Check the EconPapers FAQ or send mail to .
EconPapers is hosted by the
School of Business at Örebro University.