The impact of the Sarbanes-Oxley Act on the corporate disclosures of information security activities

Journal of Accounting and Public Policy

Volumn 25, Issue 5, 2006, Pages 503-530

  Gordon, Lawrence A ^a   Loeb, Martin P ^a   Lucyshyn, William ^b   Sohail, Tashfeen ^c  

^a UNIVERSITY OF MARYLAND   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

^c IE BUSINESS SCHOOL   (Spain)

Author keywords

Corporate disclosures; Information security; Sarbanes Oxley Act; SOX

Indexed keywords

EID: 33748910435     PISSN: 02784254     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jaccpubpol.2006.07.005     Document Type: Article

References (20)

1. Benston G.J., and Hartgraves A.L. Enron: What happened and what we can learn from it. Journal of Accounting and Public Policy 21 2 (2002) 105-127
2. Bhojraj S., Lee C.M.C., and Oler D.K. What's my line? A comparison of industry classification schemes for capital market research. Journal of Accounting Research 41 5 (2003) 745-774
3. Campbell K., Gordon L.A., Loeb M.P., and Zhou L. The economic cost of publicly announced information security breaches: Empirical evidence from the stock market. Journal of Computer Security 11 3 (2003) 431
4. COSO, 1992. Internal Control - Integrated Framework. American Institute of Certified Public Accountants.
5. COSO, 2004. Enterprises Risk Management: Integrated Framework. Available from: .
6. CSIA, 2004. Sarbanes-Oxley Act: Implementation of Information Technology and Security Objectives: Cyber Security Industry Alliance.
7. Fama E.F., and French K.R. Industry costs of equity. Journal of Financial Economics 43 2 (1997) 153-193
8. Ge W., and McVay S. The disclosure of material weaknesses in internal control after the Sarbanes-Oxley Act. Accounting Horizons 19 3 (2005) 137-158
9. Gordon L.A., and Loeb M.P. The economics of information security investment. ACM Transactions on Information and System Security 5 4 (2002) 438-457
10. Gordon L.A., and Narayanan V.K. Management accounting systems, perceived environmental uncertainty and organizations structure: An empirical investigation. Accounting, Organizations and Society 9 1 (1984) 33-47
11. Gordon L.A., Loeb M.P., and Lucyshyn W. Sharing information on computer systems: An economic analysis. Journal of Accounting and Public Policy 22 6 (2003) 461-485
12. Gordon L.A., Loeb M.P., Lucyshyn W., and Richardson R. 2004 CSI/FBI computer crime and security survey. Computer Security Journal 20 3 (2004) 33-51
13. Gordon L.A., Loeb M.P., Lucyshyn W., and Richardson R. 2005 CSI/FBI computer crime and security survey. Computer Security Journal 20 3 (2005) 1-22
14. Green S. Manager's Guide to the Sarbanes-Oxley Act: Improving Internal Controls to Prevent Fraud (2004), John Wiley & Sons, Inc, Hoboken, New Jersey
15. Nearon B.H., Stanley J., Teppler S.W., and Burton J. Life after Sarbanes-Oxley: The Merger of information security and accountability. Jurimetrics 45 4 (2005) 379-412
16. Sarbanes-Oxley Act of 2002. Available from: .
17. SEC, 2003. Management's Report on Internal Control Over Financial Reporting and Certification of Disclosure in Exchange Act Periodic Report, 06/11/2003 [cited January 25, 2006]. Available from: .
18. SEC, 2005. Staff Statement on Management's Report on Internal Controls Over Financial Reporting, 03/092005 [cited January 24, 2006]. Available from: .
19. U.S.C.15 Section 77a et seq. Securities Act of 1933.
20. U.S.C.15 Section 78a et seq. Securities Exchange Act of 1934.