Chief Information Security Officers on Top Management Teams: Impact on Firms’ Innovation

References

• Aguas T, Kark K, François M (2017) The new CISO: Leading the strategic security organization. The Wall Street Journal. Accessed Aug 1, 2025, https://deloitte.wsj.com/riskandcompliance/the-new-ciso-leading-the-strategic-security-organization-1489381336.Google Scholar
• Arend RJ, Zhao YL, Song M, Im S (2017) Strategic planning as a complex and enabling managerial tool. Strategic Management J. 38(8):1741–1752.Crossref, Google Scholar
• Bendig D, Wagner R, Piening EP, Foege JN (2023) Attention to digital innovation: Exploring the impact of a chief information officer in the top management team. MIS Quart. 47(4):1487–1515.Crossref, Google Scholar
• Bose I, Leung ACM (2019) Adoption of identity theft countermeasures and its short- and long-term impact on firm value. MIS Quart. 43(1):313–328.Crossref, Google Scholar
• Carter M, Grover V, Thatcher JB (2011) The emerging CIO role of business technology strategist. MIS Quart. Executive 10(1):19–29.Google Scholar
• Chau DC, Ngai EW, Gerow JE, Thatcher JB (2020) The effects of business–IT strategic alignment and it governance on firm performance: A moderated polynomial regression analysis. MIS Quart. 44(4):1679–1703.Crossref, Google Scholar
• Chen DQ, Zhang Y, Xiao J, Xie K (2021) Making digital innovation happen: A chief information officer issue selling perspective. Inform. Systems Res. 32(3):987–1008.Link, Google Scholar
• Choi I, Chung S, Han K, Pinsonneault A (2021) CEO risk-taking incentives and IT innovation: The moderating role of a CEO’s IT-related human capital. MIS Quart. 45(4):2175–2192.Crossref, Google Scholar
• Crosignani M, Macchiavelli M, Silva AF (2023) Pirates without borders: The propagation of cyberattacks through firms’ supply chains. J. Financial Econom. 147(2):432–448.Crossref, Google Scholar
• Crossland C, Zyung JY, Hiller NJ, Hambrick DC (2014) CEO career variety: Effects on firm-level strategic and social novelty. Acad. Management J. 57(3):652–674.Crossref, Google Scholar
• Custódio C, Ferreira MA, Matos P (2013) Generalists versus specialists: Lifetime work experience and chief executive officer pay. J. Financial Econom. 108(2):471–492.Crossref, Google Scholar
• Custódio C, Ferreira MA, Matos P (2019) Do general managerial skills spur innovation? Management Sci. 65(2):459–476.Link, Google Scholar
• Dawson GS, Denford JS, Desouza KC (2016) Governing innovation in US state government: An ecosystem perspective. J. Strategic Inform. Systems 25(4):299–318.Crossref, Google Scholar
• Doan M (2019) Companies need to rethink what cybersecurity leadership is. Harvard Bus. Rev. (November 27), https://hbr.org/2019/11/companies-need-to-rethink-what-cybersecurity-leadership-is.Google Scholar
• Dokko G, Wilk SL, Rothbard NP (2009) Unpacking prior experience: How career history affects job performance. Organ. Sci. 20(1):51–68.Link, Google Scholar
• Dong JQ, Yang CH (2019) Information technology and innovation outcomes: Is knowledge recombination the missing link? Eur. J. Inform. Systems 28(6):612–626.Google Scholar
• Drechsler K, Wagner H-T, Reibenspiess VA (2019) Risk and return of chief digital officers’ appointment – An event study. Proc. 2019 Internat. Conf. Inform. Systems (Association for Information Systems, Atlanta), 1–17.Google Scholar
• Fahrenkopf E, Guo J, Argote L (2020) Personnel mobility and organizational performance: The effects of specialist vs. generalist experience and organizational work structure. Organ. Sci. 31(6):1601–1620.Link, Google Scholar
• Florackis C, Louca C, Michaely R, Weber M (2023) Cybersecurity risk. Rev. Financial Stud. 36(1):351–407.Crossref, Google Scholar
• Gahi Y, Guennoun M, Mouftah HT (2016) Big data analytics: Security and privacy challenges. Proc. IEEE Sympos. Comput. Comm. (IEEE, Piscataway, NJ), 952–957.Google Scholar
• Guldiken O, Mallon MR, Fainshmidt S, Judge WQ, Clark CE (2019) Beyond tokenism: How strategic leaders influence more meaningful gender diversity on boards of directors. Strategic Management J. 40(12):2024–2046.Crossref, Google Scholar
• Han NC, Zhang YC, Tong TW (2024) Appropriability risk and knowledge search on digital platforms. Res. Policy 53(7):105028.Crossref, Google Scholar
• He CZJ, Frost T, Pinsker RE (2020) The impact of reported cybersecurity breaches on firm innovation. J. Inform. Systems 34(2):187–209.Crossref, Google Scholar
• Hirshleifer D, Hsu P-H, Li D (2013) Innovative efficiency and stock returns. J. Financial Econom. 107(3):632–654.Crossref, Google Scholar
• ISC2 Research (2024) Employers must act as cybersecurity workforce growth stalls and skills gaps widen. Accessed January 26, 2025, https://www.isc2.org/Insights/2024/09/Employers-Must-Act-Cybersecurity-Workforce-Growth-Stalls-as-Skills-Gaps-Widen.Google Scholar
• Kaplan RS, Mikes A (2012) Managing risks: A new framework. Harvard Bus. Rev. 90(6):48–60.Google Scholar
• Kappelman L, Johnson VL, Maurer C, Guerra K, McLean E, Torres R, Snyder M, et al. (2020) The 2019 SIM IT issues and trends study. MIS Quart. Executive 19(1):69–104.Crossref, Google Scholar
• Karahanna E, Preston DS (2013) The effect of social capital of the relationship between the CIO and top management team on firm performance. J. Management Inform. Systems 30(1):15–56.Crossref, Google Scholar
• Keats BW, Hitt MA (1988) A causal model of linkages among environmental dimensions, macro organizational characteristics, and performance. Acad. Management J. 31(3):570–598.Google Scholar
• Kogan L, Papanikolaou D, Seru A, Stoffman N (2017) Technological innovation, resource allocation, and growth. Quart. J. Econom. 132(2):665–712.Crossref, Google Scholar
• Lattanzio G, Ma Y (2023) Cybersecurity risk and corporate innovation. J. Corporate Finance 82:102445.Google Scholar
• Lee JY, Swink M, Pandejpong T (2011) The roles of worker expertise, information sharing quality, and psychological safety in manufacturing process innovation: An intellectual capital perspective. Production Oper. Management 20(4):556–570.Crossref, Google Scholar
• Lee Y, Madnick SE, Wang RY, Wang F, Zhang H (2014) A cubic framework for the chief data officer: Succeeding in a world of big data. MIS Quart. Executive 13(1):1–13.Google Scholar
• Leidner DE, Preston D, Chen D (2010) An examination of the antecedents and consequences of organizational IT innovation in hospitals. J. Strategic Inform. Systems 19(3):154–170.Crossref, Google Scholar
• Lin A, Chen N-C (2012) Cloud computing as an innovation: Percepetion, attitude, and adoption. Internat. J. Inform. Management 32(6):533–540.Crossref, Google Scholar
• Lin M, Lucas HC, Shmueli G (2013) Research commentary—Too big to fail: Large samples and the p-value problem. Inform. Systems Res. 24(4):906–917.Link, Google Scholar
• Lowry MR, Vance A, Vance MD (2025) Inexpert supervision: Field evidence on boards’ oversight of cybersecurity. Management Sci., ePub ahead of print May 23, https://doi.org/10.1287/mnsc.2023.04147.Google Scholar
• Luo YD (2022) A general framework of digitization risks in international business. J. Internat. Bus. Stud. 53(2):344–361.Crossref, Google Scholar
• Maynard S, Onibere M, Ahmad A (2018) Defining the strategic role of the chief information security officer. Pacific Asia J. Assoc. Inform. Systems 10(3):61–86.Google Scholar
• Miller BP, Sheneman AG, Williams BM (2022) The impact of control systems on corporate innovation. Contemporary Accounting Res. 39(2):1425–1454.Crossref, Google Scholar
• Ou AY, Waldman DA, Peterson SJ (2018) Do humble CEOs matter? An examination of CEO humility and firm outcomes. J. Management 44(3):1147–1173.Crossref, Google Scholar
• Pérez-González F, Yun HY (2013) Risk management and firm value: Evidence from weather derivatives. J. Finance 68(5):2143–2176.Crossref, Google Scholar
• Posch A (2020) Integrating risk into control system design: The complementarity between risk-focused results controls and risk-focused information sharing. Accounting Organizations Soc. 86:101126.Crossref, Google Scholar
• Ravichandran T, Han S, Mithas S (2017) Mitigating diminishing returns to R&D: The role of information technology in innovation. Inform. Systems Res. 28(4):812–827.Link, Google Scholar
• Soluk J, Miroshnychenko I, Kammerlander N, De Massis A (2021) Family influence and digital business model innovation: The enabling role of dynamic capabilities. Entrepreneurship Theory Practice 45(4):867–905.Crossref, Google Scholar
• Stewart JM, Tittel E, Chapple M (2011) CISSP: Certified Information Systems Security Professional Study Guide (John Wiley & Sons, Hoboken, NJ).Google Scholar
• Tambe P, Hitt LM, Brynjolfsson E (2012) The extroverted firm: How external information practices affect innovation and productivity. Management Sci. 58(5):843–859.Link, Google Scholar
• Tumbas S, Berente N, Brocke N (2018) Digital innovation and institutional entrepreneurship: Chief Digital Officer perspectives of their emerging role. J. Inform. Tech. 33(3):188–202.Crossref, Google Scholar
• Wang JM, Ho CY, Shan YG (2024) Does cybersecurity risk stifle corporate innovation activities? Internat. Rev. Financial Anal. 91:103028.Crossref, Google Scholar
• Watts S, Henderson JC (2006) Innovative IT climates: CIO perspectives. J. Strategic Inform. Systems 15(2):125–151.Crossref, Google Scholar
• Wu L, Hitt L, Lou B (2020) Data analytics, innovation, and firm productivity. Management Sci. 66(5):2017–2039.Link, Google Scholar
• Wu L, Lou B, Hitt L (2019) Data analytics supports decentralized innovation. Management Sci. 65(10):4863–4877.Link, Google Scholar
• Xue L, Ray G, Sambamurthy V (2012) Efficiency or innovation: How do industry environments moderate the effects of firms’ IT asset portfolios? MIS Quart. 36(2):509–528.Crossref, Google Scholar
• Zhong RI (2018) Transparency and firm innovation. J. Accounting Econom. 66(1):67–93.Crossref, Google Scholar