IDEAS home Printed from https://ideas.repec.org/a/eee/ijoais/v12y2011i4p280-304.html
   My bibliography  Save this article

IT internal control weaknesses and firm performance: An organizational liability lens

Author

Listed:
  • Stoel, M. Dale
  • Muhanna, Waleed A.

Abstract

The information systems literature and the public press have called for organizations to more closely scrutinize their information technology (IT) controls; however, little more than anecdotal evidence exists on the business value of quality IT internal control, beyond regulatory compliance. In this paper, we (a) advance an organizational liability perspective to the question of IT internal control value; and (b) use the unique setting provided by the enactment of the Sarbanes–Oxley Act of 2002 (SOX) to investigate the relationship between IT internal control weaknesses (ICWs) and both accounting earnings (a contemporaneous measure of firm performance) and market value (a forward looking, risk-adjusted measure of firm performance). Using a data set that provides audited annual assessments of the effectiveness of both IT and non-IT internal controls for a cross-section of companies as mandated by SOX, we find that firms that report an IT ICW have lower accounting earnings compared to firms with strong IT internal controls. We also find that IT ICW moderates the association between accounting earnings and market valuation, with firms reporting weak IT internal controls having a lower earnings multiple. These results are sustained even after controlling for non-IT ICWs and firm-specific factors that are known determinants of ICWs, and are reinforced using an inter-temporal changes analysis in which we use each firm as its own control at a different point in time. Overall, our results provide empirical evidence which suggests that IT internal controls are a strategic necessity and that information systems risk is priced by the capital markets. The implications of these findings for theory and practice are discussed.

Suggested Citation

  • Stoel, M. Dale & Muhanna, Waleed A., 2011. "IT internal control weaknesses and firm performance: An organizational liability lens," International Journal of Accounting Information Systems, Elsevier, vol. 12(4), pages 280-304.
    • Handle: RePEc:eee:ijoais:v:12:y:2011:i:4:p:280-304
    DOI: 10.1016/j.accinf.2011.06.001
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S1467089511000376
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.accinf.2011.06.001?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Francis, Jennifer & LaFond, Ryan & Olsson, Per & Schipper, Katherine, 2005. "The market pricing of accruals quality," Journal of Accounting and Economics, Elsevier, vol. 39(2), pages 295-327, June.
    2. Watts, Rl & Leftwich, Rw, 1977. "Time-Series Of Annual Accounting Earnings," Journal of Accounting Research, Wiley Blackwell, vol. 15(2), pages 253-271.
    3. Mark C. Anderson & Rajiv D. Banker & Sury Ravindran, 2006. "Value Implications of Investments in Information Technology," Management Science, INFORMS, vol. 52(9), pages 1359-1376, September.
    4. Hollis Ashbaugh‐Skaife & Daniel W. Collins & William R. Kinney Jr & Ryan Lafond, 2009. "The Effect of SOX Internal Control Deficiencies on Firm Risk and Cost of Equity," Journal of Accounting Research, Wiley Blackwell, vol. 47(1), pages 1-43, March.
    5. Amir, Eli & Lev, Baruch, 1996. "Value-relevance of nonfinancial information: The wireless communications industry," Journal of Accounting and Economics, Elsevier, vol. 22(1-3), pages 3-30, October.
    6. G. Page West III & Julio DeCastro, 2001. "The Achilles Heel of Firm Strategy: Resource Weaknesses and Distinctive Inadequacies," Journal of Management Studies, Wiley Blackwell, vol. 38(3), pages 417-442, May.
    7. Kothari, S. P., 2001. "Capital markets research in accounting," Journal of Accounting and Economics, Elsevier, vol. 31(1-3), pages 105-231, September.
    8. Richard J. Arend, 2004. "The Definition of Strategic Liabilities, and their Impact on Firm Performance," Journal of Management Studies, Wiley Blackwell, vol. 41(6), pages 1003-1027, September.
    9. Thomas C. Powell, 2001. "Competitive advantage: logical and philosophical considerations," Strategic Management Journal, Wiley Blackwell, vol. 22(9), pages 875-888, September.
    10. Paul Gompers & Joy Ishii & Andrew Metrick, 2003. "Corporate Governance and Equity Prices," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 118(1), pages 107-156.
    11. Heckman, James J, 1978. "Dummy Endogenous Variables in a Simultaneous Equation System," Econometrica, Econometric Society, vol. 46(4), pages 931-959, July.
    12. Barth, ME & Elliott, JA & Finn, MW, 1999. "Market rewards associated with patterns of increasing earnings," Journal of Accounting Research, Wiley Blackwell, vol. 37(2), pages 387-413.
    13. Edward I. Altman, 1968. "Financial Ratios, Discriminant Analysis And The Prediction Of Corporate Bankruptcy," Journal of Finance, American Finance Association, vol. 23(4), pages 589-609, September.
    14. Edward I. Altman, 1968. "The Prediction Of Corporate Bankruptcy: A Discriminant Analysis," Journal of Finance, American Finance Association, vol. 23(1), pages 193-194, March.
    15. Anandhi S. Bharadwaj & Sundar G. Bharadwaj & Benn R. Konsynski, 1999. "Information Technology Effects on Firm Performance as Measured by Tobin's q," Management Science, INFORMS, vol. 45(7), pages 1008-1024, July.
    16. Richard J. Arend, 2003. "Revisiting the logical and research considerations of competitive advantage," Strategic Management Journal, Wiley Blackwell, vol. 24(3), pages 279-284, March.
    17. Shivaram Rajgopal & Mohan Venkatachalam & Suresh Kotha, 2003. "The Value Relevance of Network Advantages: The Case of E–Commerce Firms," Journal of Accounting Research, Wiley Blackwell, vol. 41(1), pages 135-162, March.
    18. Doyle, Jeffrey & Ge, Weili & McVay, Sarah, 2007. "Determinants of weaknesses in internal control over financial reporting," Journal of Accounting and Economics, Elsevier, vol. 44(1-2), pages 193-223, September.
    19. Albrecht, Ws & Lookabill, Ll & Mckeown, Jc, 1977. "Time-Series Properties Of Annual Earnings," Journal of Accounting Research, Wiley Blackwell, vol. 15(2), pages 226-244.
    20. Jingguo Wang & Aby Chaudhury & H. Raghav Rao, 2008. "Research Note ---A Value-at-Risk Approach to Information Security Investment," Information Systems Research, INFORMS, vol. 19(1), pages 106-120, March.
    21. Ashbaugh-Skaife, Hollis & Collins, Daniel W. & Kinney Jr., William R., 2007. "The discovery and reporting of internal control deficiencies prior to SOX-mandated audits," Journal of Accounting and Economics, Elsevier, vol. 44(1-2), pages 166-192, September.
    22. Peter D. Easton & Gregory A. Sommers, 2003. "Scale and the Scale Effect in Market-based Accounting Research," Journal of Business Finance & Accounting, Wiley Blackwell, vol. 30(1-2), pages 25-56.
    23. White, Halbert, 1980. "A Heteroskedasticity-Consistent Covariance Matrix Estimator and a Direct Test for Heteroskedasticity," Econometrica, Econometric Society, vol. 48(4), pages 817-838, May.
    24. Omar M. G. Keshk, 2003. "CDSIMEQ: A program to implement two-stage probit least squares," Stata Journal, StataCorp LP, vol. 3(2), pages 157-167, June.
    25. Power, Michael, 2009. "The risk management of nothing," Accounting, Organizations and Society, Elsevier, vol. 34(6-7), pages 849-855, August.
    26. Xinshu Zhao & John G. Lynch & Qimei Chen, 2010. "Reconsidering Baron and Kenny: Myths and Truths about Mediation Analysis," Journal of Consumer Research, Journal of Consumer Research Inc., vol. 37(2), pages 197-206, August.
    27. Fama, Eugene F, 1970. "Efficient Capital Markets: A Review of Theory and Empirical Work," Journal of Finance, American Finance Association, vol. 25(2), pages 383-417, May.
    28. Thomas C. Powell & Jean-Luc Arregle, 2007. "Firm Performance and the Axis of Errors," Post-Print hal-02312686, HAL.
    29. Lev, Baruch & Sougiannis, Theodore, 1996. "The capitalization, amortization, and value-relevance of R&D," Journal of Accounting and Economics, Elsevier, vol. 21(1), pages 107-138, February.
    30. Karthik Kannan & Rahul Telang, 2005. "Market for Software Vulnerabilities? Think Again," Management Science, INFORMS, vol. 51(5), pages 726-740, May.
    31. Mary E. Barth & Sanjay Kallapur, 1996. "The Effects of Cross†Sectional Scale Differences on Regression Results in Empirical Accounting Research," Contemporary Accounting Research, John Wiley & Sons, vol. 13(2), pages 527-567, September.
    32. repec:bla:jfinan:v:59:y:2004:i:4:p:1553-1583 is not listed on IDEAS
    33. Ramayya Krishnan & James Peters & Rema Padman & David Kaplan, 2005. "On Data Reliability Assessment in Accounting Information Systems," Information Systems Research, INFORMS, vol. 16(3), pages 307-326, September.
    34. Shevlin, Terry, 1996. "The value-relevance of nonfinancial information: A discussion," Journal of Accounting and Economics, Elsevier, vol. 22(1-3), pages 31-42, October.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Feng, Yuan & Mao, Yihuan & Cai, Jing & Xu, Nan, 2024. "Can board IT expertise improve corporate internal control?," Finance Research Letters, Elsevier, vol. 62(PA).
    2. Al Quhtani Masoud, 2017. "Data Mining Usage in Corporate Information Security: Intrusion Detection Applications," Business Systems Research, Sciendo, vol. 8(1), pages 51-59, March.
    3. Wu, Tung-Hsien & Huang, Shaio Yan & Chiu, An-An & Yen, David C., 2024. "IT governance and IT controls: Analysis from an internal auditing perspective," International Journal of Accounting Information Systems, Elsevier, vol. 52(C).
    4. Yasmin MOBASHER, 2022. "The Importance Of Implementing Integrated Information Systems In Hospitals," Business Excellence and Management, Faculty of Management, Academy of Economic Studies, Bucharest, Romania, vol. 12(5), pages 5-21, October.
    5. Ali, Irfan, 2016. "The impact of ERP implementation on the financial performance of the firm : An empirical study," Other publications TiSEM 876506f5-1aed-4421-aa2c-0, Tilburg University, School of Economics and Management.
    6. Benaroch, Michel & Chernobai, Anna & Goldstein, James, 2012. "An internal control perspective on the market value consequences of IT operational risk events," International Journal of Accounting Information Systems, Elsevier, vol. 13(4), pages 357-381.
    7. Allam Hamdan & Reem Khamis & Mohammed Anasweh & Mukhtar Al-Hashimi & Anjum Razzaque, 2019. "IT Governance and Firm Performance: Empirical Study From Saudi Arabia," SAGE Open, , vol. 9(2), pages 21582440198, April.
    8. Wei Yu & Huiqin Huang & Xinyan Kong & Keying Zhu, 2023. "Can Digital Inclusive Finance Improve the Financial Performance of SMEs?," Sustainability, MDPI, vol. 15(3), pages 1-16, January.
    9. Plant, Olivia H. & van Hillegersberg, Jos & Aldea, Adina, 2022. "Rethinking IT governance: Designing a framework for mitigating risk and fostering internal control in a DevOps environment," International Journal of Accounting Information Systems, Elsevier, vol. 45(C).
    10. Lijuan Tao & Xiaoju Wei & Wenjing Wang, 2023. "Does Enterprise Internal Control Improve Environmental Performance—Empirical Evidence from China," Sustainability, MDPI, vol. 15(13), pages 1-20, June.
    11. Mounia Boulhaga & Abdelfettah Bouri & Ahmed A. Elamer & Bassam A. Ibrahim, 2023. "Environmental, social and governance ratings and firm performance: The moderating role of internal control quality," Corporate Social Responsibility and Environmental Management, John Wiley & Sons, vol. 30(1), pages 134-145, January.
    12. Li, Zhe & Wang, Bo & Wu, Tianlong & Zhou, Dan, 2021. "The influence of qualified foreign institutional investors on internal control quality: Evidence from China," International Review of Financial Analysis, Elsevier, vol. 78(C).
    13. Rose, Anna M. & Rose, Jacob M. & Obermire, Kara M. & Strand Norman, Carolyn & Frydenlund, Nicole, 2023. "How can firms repair their reputations when they discover information technology control material weaknesses?," International Journal of Accounting Information Systems, Elsevier, vol. 48(C).
    14. Choi, Dongjoon & Lee, Hansol & Lee, Ho-Young & Park, Hyun-Young, 2021. "The association between human resource investment in IT controls over financial reporting and investment efficiency," International Journal of Accounting Information Systems, Elsevier, vol. 43(C).
    15. Haislip, Jacob Z. & Masli, Adi & Richardson, Vernon J. & Watson, Marcia Weidenmier, 2015. "External reputational penalties for CEOs and CFOs following information technology material weaknesses," International Journal of Accounting Information Systems, Elsevier, vol. 17(C), pages 1-15.
    16. Wei Yu & Huiqin Huang & Keying Zhu, 2023. "Enhancing Construction Enterprise Financial Performance through Digital Inclusive Finance: An Insight into Supply Chain Finance," Sustainability, MDPI, vol. 15(13), pages 1-16, June.
    17. Sungchang Kang & Jeongseok Bang & Doojin Ryu, 2024. "Female CEOs’ risk management and earnings performance during the financial crisis," Asian Business & Management, Palgrave Macmillan, vol. 23(1), pages 110-138, February.
    18. Mai Dao & Trung Pham & Hongkang Xu, 2022. "Internal control effectiveness and trade credit," Review of Quantitative Finance and Accounting, Springer, vol. 59(4), pages 1423-1452, November.
    19. Sangjae Lee & Seongil Jeon & ByungWon Lee, 2019. "Security Controls for Employees’ Satisfaction: Perspective of Controls Framework," SAGE Open, , vol. 9(2), pages 21582440198, May.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Dechow, Patricia & Ge, Weili & Schrand, Catherine, 2010. "Understanding earnings quality: A review of the proxies, their determinants and their consequences," Journal of Accounting and Economics, Elsevier, vol. 50(2-3), pages 344-401, December.
    2. Fargher, Neil & Wee, Marvin, 2019. "The impact of Ball and Brown (1968) on generations of research," Pacific-Basin Finance Journal, Elsevier, vol. 54(C), pages 55-72.
    3. Bixia Xu & Michel L. Magnan & Paul E. André, 2007. "The Stock Market Valuation of R&D Information in Biotech Firms," Contemporary Accounting Research, John Wiley & Sons, vol. 24(4), pages 1291-1318, December.
    4. Efrat Shust & Dan Weiss, 2022. "Disentangling Relevance from Reliability in Value Relevance Tests," Sustainability, MDPI, vol. 14(20), pages 1-15, October.
    5. Lenard, Mary Jane & Petruska, Karin A. & Alam, Pervaiz & Yu, Bing, 2016. "Internal control weaknesses and evidence of real activities manipulation," Advances in accounting, Elsevier, vol. 33(C), pages 47-58.
    6. Kothari, S. P., 2001. "Capital markets research in accounting," Journal of Accounting and Economics, Elsevier, vol. 31(1-3), pages 105-231, September.
    7. Shi, Wei & Wang, Rencheng, 2012. "Dynamic internal control performance over financial reporting and external financing," Journal of Contemporary Accounting and Economics, Elsevier, vol. 8(2), pages 92-109.
    8. Beng Wee Goh & Jayanthi Krishnan & Dan Li, 2013. "Auditor Reporting under Section 404: The Association between the Internal Control and Going Concern Audit Opinions," Contemporary Accounting Research, John Wiley & Sons, vol. 30(3), pages 970-995, September.
    9. Mukesh Garg, 2017. "Value relevance of voluntary internal control certification: An information asymmetry perspective," Australian Journal of Management, Australian School of Business, vol. 42(4), pages 527-559, November.
    10. Su, Lixin (Nancy) & Zhao, Xuezhou (Rachel) & Zhou, Gaoguang (Stephen), 2014. "Do customers respond to the disclosure of internal control weakness?," Journal of Business Research, Elsevier, vol. 67(7), pages 1508-1518.
    11. Richardson, Scott & Tuna, Irem & Wysocki, Peter, 2010. "Accounting anomalies and fundamental analysis: A review of recent research advances," Journal of Accounting and Economics, Elsevier, vol. 50(2-3), pages 410-454, December.
    12. Richard J. Arend, 2008. "Differences in RBV strategic factors and the need to consider opposing factors in turnaround outcomes," Managerial and Decision Economics, John Wiley & Sons, Ltd., vol. 29(4), pages 337-355.
    13. Niket Jindal & Leigh McAlister, 2015. "The Impacts of Advertising Assets and R&D Assets on Reducing Bankruptcy Risk," Marketing Science, INFORMS, vol. 34(4), pages 555-572, July.
    14. Sean T. McGuire & Stevanie S. Neuman & Sarah C. Rice, 2020. "Interim Effective Tax Rate Estimates and Internal Control Quality," Contemporary Accounting Research, John Wiley & Sons, vol. 37(1), pages 603-633, March.
    15. Atoche, Teresa duarte & Pérez lópez, José ángel & Camúñez ruiz, Jose antonio, 2012. "La relevancia de los gastos de I+D. Estudio empírico en el sector del automóvil," Revista de Contabilidad - Spanish Accounting Review, Elsevier, vol. 15(2), pages 257-286.
    16. Skaife, Hollis A. & Veenman, David & Wangerin, Daniel, 2013. "Internal control over financial reporting and managerial rent extraction: Evidence from the profitability of insider trading," Journal of Accounting and Economics, Elsevier, vol. 55(1), pages 91-110.
    17. Hollis Ashbaugh‐Skaife & Daniel W. Collins & William R. Kinney Jr & Ryan Lafond, 2009. "The Effect of SOX Internal Control Deficiencies on Firm Risk and Cost of Equity," Journal of Accounting Research, Wiley Blackwell, vol. 47(1), pages 1-43, March.
    18. Barth, Mary E. & Beaver, William H. & Landsman, Wayne R., 1998. "Relative valuation roles of equity book value and net income as a function of financial health," Journal of Accounting and Economics, Elsevier, vol. 25(1), pages 1-34, February.
    19. Higgins, Huong, 2013. "Can securities analysts forecast intangible firms’ earnings?," International Journal of Forecasting, Elsevier, vol. 29(1), pages 155-174.
    20. Ruey S. Tsay & Yi-Mien Lin & Hsiao-Wen Wang, 2009. "Residual income, non-earnings information, and information content," Journal of Forecasting, John Wiley & Sons, Ltd., vol. 28(6), pages 487-511.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:ijoais:v:12:y:2011:i:4:p:280-304. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/international-journal-of-accounting-information-systems/ .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.