{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T12:12:14Z","timestamp":1773231134059,"version":"3.50.1"},"reference-count":61,"publisher":"Institute for Operations Research and the Management Sciences (INFORMS)","issue":"8","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Management Science"],"published-print":{"date-parts":[[2025,8]]},"abstract":"<jats:p> Financial statement audits for public companies require auditors to test the internal controls over the client\u2019s information systems that are material to the financial reporting process. Given the increasingly integrated nature of corporate data and control systems, a standard audit may have a positive effect on client firms\u2019 other information systems, such as those that help prevent data breaches. In this paper, I provide evidence on whether and how auditors help prevent data breaches. Using plausibly exogenous improvements in auditing due to regulatory inspections and auditors\u2019 cross-client learning, I find a decreased likelihood of data breaches among these auditors\u2019 clients. Institutional insights gathered from interviews with accounting firm partners and industry professionals suggest two mechanisms for the role of auditors in preventing data breaches: the provision of relevant information and incentives for internal controls. Collectively, the findings provide evidence that improving accounting information systems can have a positive impact on nonaccounting systems. <\/jats:p><jats:p> This paper was accepted by Ranjani Krishnan, accounting. <\/jats:p><jats:p> Funding: I gratefully acknowledge financial support from Columbia Business School, the University of Chicago Booth School of Business, the Deloitte Foundation, and the Bradley Fellowship awarded by the Stigler Center for the Study of the Economy and the State. <\/jats:p><jats:p> Supplemental Material: The data files are available at https:\/\/doi.org\/10.1287\/mnsc.2023.01357 . <\/jats:p>","DOI":"10.1287\/mnsc.2023.01357","type":"journal-article","created":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T10:30:09Z","timestamp":1730457009000},"page":"6340-6366","source":"Crossref","is-referenced-by-count":3,"title":["Financial Statement Audits and Data Breaches"],"prefix":"10.1287","volume":"71","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9073-4857","authenticated-orcid":false,"given":"Lisa Yao","family":"Liu","sequence":"first","affiliation":[{"name":"Accounting Division, Columbia Business School, Columbia University, New York, New York 10027"}]}],"member":"109","reference":[{"key":"B1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2009.07.002"},{"key":"B2","doi-asserted-by":"publisher","DOI":"10.1086\/426036"},{"key":"B3","doi-asserted-by":"publisher","DOI":"10.7763\/IJTEF.2010.V1.19"},{"key":"B5","doi-asserted-by":"publisher","DOI":"10.1007\/s11142-018-9452-4"},{"key":"B6","doi-asserted-by":"publisher","DOI":"10.1515\/9781400829828"},{"key":"B7","doi-asserted-by":"publisher","DOI":"10.2308\/accr-51948"},{"key":"B8","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2018.09.001"},{"key":"B9","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2021.101420"},{"key":"B10","doi-asserted-by":"publisher","DOI":"10.2308\/TAR-2019-1033"},{"key":"B11","doi-asserted-by":"publisher","DOI":"10.2308\/accr-52622"},{"key":"B12","doi-asserted-by":"publisher","DOI":"10.2308\/HORIZONS-2020-018"},{"key":"B14","doi-asserted-by":"publisher","DOI":"10.1016\/j.jfineco.2022.01.004"},{"key":"B15","doi-asserted-by":"publisher","DOI":"10.2307\/2490325"},{"key":"B18","doi-asserted-by":"publisher","DOI":"10.1111\/1911-3846.12490"},{"key":"B101","doi-asserted-by":"crossref","unstructured":"Beck MJ, Gunn JL, Hallman N (2019) The geographic decentralization of audit firms and audit quality. J. Accounting Econom. 68(1):101234.","DOI":"10.1016\/j.jacceco.2019.101234"},{"key":"B19","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.2014.2013"},{"key":"B20","doi-asserted-by":"publisher","DOI":"10.1093\/restud\/rdae007"},{"key":"B21","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2015.01.004"},{"key":"B24","doi-asserted-by":"publisher","DOI":"10.2308\/accr.2010.85.1.127"},{"key":"B25","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2013.03.001"},{"key":"B26","doi-asserted-by":"publisher","DOI":"10.1111\/1475-679X.12219"},{"key":"B27","doi-asserted-by":"publisher","DOI":"10.1111\/1475-679X.12151"},{"key":"B28","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2014.09.002"},{"key":"B29","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.2016.2528"},{"key":"B30","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2015.01.005"},{"key":"B31","volume-title":"Cyber Runs","author":"Duffie D","year":"2019"},{"key":"B32","doi-asserted-by":"publisher","DOI":"10.1016\/j.jacceco.2009.09.004"},{"key":"B33","doi-asserted-by":"publisher","DOI":"10.2308\/accr-50909"},{"key":"B35","doi-asserted-by":"publisher","DOI":"10.1016\/0191-8869(86)90014-0"},{"key":"B36","doi-asserted-by":"crossref","unstructured":"Gipper B, Leuz C, Maffett M (2019) Public audit oversight and reporting credibility: Evidence from the PCAOB inspection regime. Rev. Financial Stud. 33(10):4532\u20134579.","DOI":"10.1093\/rfs\/hhz149"},{"key":"B38","doi-asserted-by":"crossref","unstructured":"Hanlon M, Shroff N (2022) Insights into auditor public oversight boards: Whether, how, and why they \u201cwork.\u201d J. Accounting Econom. 74(1):101497.","DOI":"10.1016\/j.jacceco.2022.101497"},{"key":"B39","first-page":"59","volume":"29","author":"Hoffman BW","year":"2018","journal-title":"Internat. J. Accounting Inform. Systems"},{"key":"B40","doi-asserted-by":"publisher","DOI":"10.1506\/car.25.1.9"},{"key":"B41","doi-asserted-by":"publisher","DOI":"10.2308\/TAR-2018-0643"},{"key":"B42","doi-asserted-by":"publisher","DOI":"10.2308\/accr-52106"},{"key":"B44","doi-asserted-by":"publisher","DOI":"10.1016\/j.jfineco.2019.05.019"},{"key":"B45","doi-asserted-by":"crossref","unstructured":"Kim J (2024) The effect of PCAOB inspections on corporate innovation: Evidence from deficiencies about the valuation of intangibles. Rev. Accounting Stud. 29(2):1491\u20131523.","DOI":"10.1007\/s11142-022-09750-9"},{"key":"B46","doi-asserted-by":"publisher","DOI":"10.2308\/ajpt-51784"},{"key":"B47","doi-asserted-by":"publisher","DOI":"10.18421\/TEM24-08"},{"key":"B48","doi-asserted-by":"publisher","DOI":"10.2308\/ajpt-52593"},{"key":"B50","doi-asserted-by":"publisher","DOI":"10.2307\/41410413"},{"key":"B52","doi-asserted-by":"publisher","DOI":"10.1111\/j.1475-679X.2004.00156.x"},{"key":"B54","doi-asserted-by":"publisher","DOI":"10.1111\/j.1475-679X.2011.00411.x"},{"key":"B102","unstructured":"Moeller R (2014) COSO issues: Guidance on internal control over IT. J. Accountancy (May 1), https:\/\/www.journalofaccountancy.com\/issues\/2014\/may\/coso-it-controls-20138951.html."},{"key":"B55","doi-asserted-by":"publisher","DOI":"10.2308\/jis.2011.25.1.129"},{"key":"B56","doi-asserted-by":"publisher","DOI":"10.1111\/j.1540-6261.2012.01767.x"},{"key":"B57","doi-asserted-by":"publisher","DOI":"10.1080\/07350015.2016.1227711"},{"key":"B64","doi-asserted-by":"publisher","DOI":"10.1007\/s11142-020-09570-9"},{"key":"B65","doi-asserted-by":"publisher","DOI":"10.1002\/pam.20567"},{"key":"B66","doi-asserted-by":"publisher","DOI":"10.1080\/09638180.2020.1856162"},{"key":"B67","doi-asserted-by":"publisher","DOI":"10.1257\/aeri.20210236"},{"key":"B68","doi-asserted-by":"publisher","DOI":"10.1016\/j.jeconom.2023.03.008"},{"key":"B69","doi-asserted-by":"crossref","unstructured":"Schoenfeld J (2024) Cyber risk and voluntary Service Organization Control (SOC) audits. Rev. Accounting Stud. 29(1):580\u2013620.","DOI":"10.1007\/s11142-022-09713-0"},{"key":"B70","doi-asserted-by":"publisher","DOI":"10.2308\/accr-51360"},{"key":"B71","doi-asserted-by":"publisher","DOI":"10.2308\/ajpt-51862"},{"key":"B74","doi-asserted-by":"publisher","DOI":"10.1037\/h0048784"},{"key":"B75","doi-asserted-by":"publisher","DOI":"10.1007\/s11142-016-9375-x"},{"key":"B76","doi-asserted-by":"publisher","DOI":"10.2308\/isys-52241"},{"key":"B77","doi-asserted-by":"publisher","DOI":"10.2308\/TAR-2019-0637"},{"key":"B78","volume-title":"Econometric Analysis of Cross Section and Panel Data","author":"Wooldridge J","year":"2010","edition":"2"},{"key":"B79","doi-asserted-by":"publisher","DOI":"10.1108\/02686900410530547"}],"container-title":["Management Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/pubsonline.informs.org\/doi\/pdf\/10.1287\/mnsc.2023.01357","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,11]],"date-time":"2025-08-11T08:11:38Z","timestamp":1754899898000},"score":1,"resource":{"primary":{"URL":"https:\/\/pubsonline.informs.org\/doi\/10.1287\/mnsc.2023.01357"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8]]},"references-count":61,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2025,8]]}},"alternative-id":["10.1287\/mnsc.2023.01357"],"URL":"https:\/\/doi.org\/10.1287\/mnsc.2023.01357","relation":{},"ISSN":["0025-1909","1526-5501"],"issn-type":[{"value":"0025-1909","type":"print"},{"value":"1526-5501","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8]]}}}