Investors’ Reactions to Cybersecurity Incidents: The Joint Effects of Disclosure Tone, Critical Audit Matters, and IT Knowledge

Nithara Godewatta, Soon-Yeow Phang, Ashna Prasad and Xinning Xiao

European Accounting Review, 2025, vol. 34, issue 5, 1975-2000

Abstract: We investigate whether investors’ reactions to management’s tone and to auditor’s commentary in the disclosure of a cybersecurity incident are contingent on investors’ level of knowledge about information technology (IT). In Experiment 1, we predict and find that investors with a high level of IT knowledge are more likely to invest in a company when management’s cybersecurity risk disclosure is written in a neutral tone and a critical audit matter (CAM) about the cybersecurity incident is present. In contrast, investors with a low level of IT knowledge are more likely to invest when the cybersecurity risk disclosure is written in a positive tone and a CAM about the incident is absent. We also find that for investors with a high level of IT knowledge, a positive tone of disclosure results in lower perceived management credibility and thus in lower willingness to invest when the CAM relating to the cybersecurity incident is present. In Experiment 2, we find that these results are unchanged regardless of the number of CAMs disclosed. Our findings are relevant to management, to auditors, and to the regulators that have expressed concerns about the quality of cybersecurity risk disclosures for informing investors’ decision-making.

Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/09638180.2024.2445692 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:euract:v:34:y:2025:i:5:p:1975-2000

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/REAR20

DOI: 10.1080/09638180.2024.2445692

Access Statistics for this article

European Accounting Review is currently edited by Laurence van Lent

More articles in European Accounting Review from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().