Academic research on the role of corporate governance and it expertise in addressing cybersecurity breaches: Implications for practice, policy, and research Article

Hartmann, CC, Carmenate, J. (2021). Academic research on the role of corporate governance and it expertise in addressing cybersecurity breaches: Implications for practice, policy, and research . 15(2), A9-A23. 10.2308/CIIA-2020-034



cited authors

  • Hartmann, CC; Carmenate, J

fiu authors

abstract

  • Frequent cyber-attacks on organizations in the last decade have caught the attention of practitioners and governance bodies, who have called for boards to take a more active role in managing and preventing future cyber risks. Governance surveys, however, find that boards are not sufficiently prepared to address cybersecurity risks due to a lack of IT expertise. Firms have begun appointing technology experts, creating board-level technology (IT) committees and delegating responsibilities to the audit committee as a means of managing cybersecurity risk. With the aim of understanding the current and future role of governance mechanisms in managing cybersecurity risks, this paper reviews the existing cybersecurity guidelines and regulations, and summarizes the empirical research related to corporate governance, security breaches, and IT expertise in overseeing cyber risks. Finally, we discuss implications for practice, policy, and researchers.

publication date

  • September 1, 2021

Digital Object Identifier (DOI)

start page

  • A9

end page

  • A23

volume

  • 15

issue

  • 2