Implications of Cybersecurity on Accounting Information

Abstract

Implications of Cybersecurity on Accounting Information I. INTRODUCTION R ecent high-profile cybersecurity incidents, such as Equifax, Sony, and Target, have increased professional and regulatory attention. For example, organizations are under pressure to demonstrate that they are managing cybersecurity threats, and that they have effective processes and controls in place to detect, respond to, mitigate, and recover from breaches and other security events. Cybersecurity risk management involves not only improving internal controls, but also includes a wide range of factors from strategy, IT management, investment decisions, human behavior, disaster recovery/business continuity, and technical solutions to actual implementation and practices. From the regulatory perspective, the PCAOB explicitly included the assessment of cybersecurity risks in its 2018-2022 strategic plan (PCAOB 2018). Further, the Securities and Exchange Commission (SEC) recently issued reporting guidelines on cybersecurity risk disclosures (SEC 2018), while the AICPA proposed an assurance framework for auditors to use to evaluate an organization's cybersecurity risk management policies and procedures (AICPA 2017). Accounting information systems (AIS) researchers, who stand at the intersection between information systems and accounting, can contribute to understanding the impact of cybersecurity on accounting information from different theoretical or empirical perspectives. For example, our emphasis on understanding how behavior impacts action may provide insight to managers as they develop and implement cybersecurity policies and work to prevent and detect cybersecurity breaches. Further, our knowledge of how financial and nonfinancial information impacts organizational value may be helpful to investigate how investors and auditors react to disclosed data security breaches. Finally, we offer this special-theme issue to encourage cybersecurity research by the broader accounting community. To illustrate, Banker and Feng (2019) and Richardson, Smith, and Watson (2019) demonstrate how archival financial methodology can be used to examine important cybersecurity issues. Accounting behavioral researchers are encouraged to follow the lead of Cheng and Walton (2019) and Frank, Grenier, and Pyzoha (2019) in using experiments to provide insights into cybersecurity challenges. Further, managerial researchers may find Curry, Marshall, Correia, and Crossler's (2019) work helpful in generating ideas on how applicable theories and skills can be applied to this important topic.

A proposed Framework for Studying the Impact of Cybersecurity on Accounting Information to Increase Trust in The Financial Reports in the Context of Industry 4.0: An Event, Impact and Response Approach

“…On the other hand, many studies have researched the problems of accounting data security in conditions of active cyber threats at micro and macro levels. For instance, the study of (Janvrin & wang , 2019 ) formulated a comprehensive definition of cybersecurity from the accounting point of view. It defines cybersecurity as "the security from internal and external threats of the enterprise's vital interests, human and intellectual capital, trade secrets, proprietary technologies, profits, added and market value, information created by the accounting system and provided for by special legal, economic, organizational, informational and technical measures".…”

مدخل مقترح لمواجهة مخاطر تبنى تكنولوجیا إنترنت الأشیاء على نظام المعلومات المحاسبى

“…(Kremer et al, 2019;Mohankumar,2019;Atlam and Wills,2020;Demirkan et al, 2020;IoT Alliance Auslralia,2020;Efosa et al, 2021;Muravskyi et al, (Lee and Lee,2015;Leloglu,2017;Devi and Mohankumar,2019;Payne,2019, Atlam andWills,2020;Chang et al, 2020;Mahlous and Ara,2020;Khadam et al, 2020;Romansky and Noninska,2020;Tavana et al, 2020;Busulwa and Evans,2021;Martens et al, 2021;Popescu et al, 2021) . (Ernst and Young,2011;Janes,2012;Duncan et al, 2017;ENISA,2019;Janvrin and Wang ,2019;Cui et al, ,2020 (WatchGuard,2010;Payne , 2018;Cui et al, 2020;Zadorozhnyi et al, 2020;Alghamdie,2021;Busulwa and Evans, 2021) . (Ernst and Young, 2011;Janes, 2012;Contreras and Coatrieux,2017;Ducan et al, 2017;Sanagani and Zarger,2017;Altam et al, 2018;CPA, 2019;Ghumro et al, 2020) .…”