| Author: | Liu, Ruiqi |
| Title: | Can you have your cake and eat it too? A tale of cybersecurity and operational efficiency |
| Advisors: | Jin, Yong Jimmy (AF) Cheng, C. S. Agnes (AF) Fan, Yangyang (AF) |
| Degree: | Ph.D. |
| Year: | 2022 |
| Subject: | Computer security Business enterprises -- Computer networks -- Security measures Industrial efficiency Hong Kong Polytechnic University -- Dissertations |
| Department: | School of Accounting and Finance |
| Pages: | iv, 71 pages |
| Language: | English |
| Abstract: | Information security has become the chief concern among corporate executives in the digital age, while the operational efficiency has been the primary concern of the corporate executives for a long history. This study would like to investigate the tale of cybersecurity and firms' operational efficiency – when the companies experience the data breaches, the firms' operational efficiency may be impacted and managers would be reminded of the significance of cybersecurity and pay more attention to the related issues. The attention based-view (ABV) of firms suggests that the managers have limited attention and they will allocate their attention according to the salience of different problems. Thus managers may put more additional resources, such as financial resources and employees, into the recovery issues from the damage of the data breaches. With the distraction of managers' attention and other operational resources to the cybersecurity and recovery issues, operational efficiency would decrease. Using a unique longitudinal data set of US listed firms from 2006 to 2016 and employing the PSM-DiD method, this paper shows that firms would experience a significant operational efficiency decrease after data breaches. The results are robust to a variety of tests on variable definitions, selection and endogeneity issues. Further dynamic DiD tests show that this deterioration effect only lasts for one year after data breaches. Besides, under the three premises of the ABV, focus of attention, structural distribution of attention, and situated attention, this paper finds that the negative relation between data breaches and operational efficiency would be ameliorated under different conditions in individual, organizational, and social levels respectively. Specifically, this paper finds that managerial risk-taking incentives, financial slack, and highly product competitive market would weaken the attention-distraction channel and the negative breach-efficiency relation. Taken together, the findings reveal the negative effect of data breaches on operational efficiency and firms' trade-off between cybersecurity and operational efficiency with limited managers' attention. |
| Rights: | All rights reserved |
| Access: | open access |
Copyright Undertaking
As a bona fide Library user, I declare that:
- I will abide by the rules and legal ordinances governing copyright regarding the use of the Database.
- I will use the Database for the purpose of my research or private study only and not for circulation or further reproduction or any other purpose.
- I agree to indemnify and hold the University harmless from and against any loss, damage, cost, liability or expenses arising from copyright infringement or unauthorized usage.
By downloading any item(s) listed above, you acknowledge that you have read and understood the copyright undertaking as stated above, and agree to be bound by all of its terms.
Please use this identifier to cite or link to this item:
https://theses.lib.polyu.edu.hk/handle/200/11830