<p>Using a firm-level measure of cybersecurity awareness constructed from SEC 10-K filings, we examine how cybersecurity breach incidents influence firms’ cybersecurity awareness and risk disclosure behavior, with a particular focus on information spillovers from peer breaches. We show that our cybersecurity awareness measure captures firms’ perceived underlying cybersecurity risk. Firms significantly increase cybersecurity awareness following their own breach incidents. We further document significant information spillovers: firms increase cybersecurity awareness following breaches experienced by industry peers, although these responses are smaller than those following their own breach incidents and weaker under geographically defined peer groups. Finally, we examine whether these information spillovers are associated with firms’ subsequent breach outcomes. While peer breach information consistently influences firms’ cybersecurity awareness, its association with subsequent breach outcomes is considerably less robust across alternative peer definitions and model specifications.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Spillover effects of breach incidents on cybersecurity awareness

  • Wanggefei Wu,
  • Stephen H. Shore

摘要

Using a firm-level measure of cybersecurity awareness constructed from SEC 10-K filings, we examine how cybersecurity breach incidents influence firms’ cybersecurity awareness and risk disclosure behavior, with a particular focus on information spillovers from peer breaches. We show that our cybersecurity awareness measure captures firms’ perceived underlying cybersecurity risk. Firms significantly increase cybersecurity awareness following their own breach incidents. We further document significant information spillovers: firms increase cybersecurity awareness following breaches experienced by industry peers, although these responses are smaller than those following their own breach incidents and weaker under geographically defined peer groups. Finally, we examine whether these information spillovers are associated with firms’ subsequent breach outcomes. While peer breach information consistently influences firms’ cybersecurity awareness, its association with subsequent breach outcomes is considerably less robust across alternative peer definitions and model specifications.