{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T13:16:28Z","timestamp":1780578988672,"version":"3.54.1"},"reference-count":133,"publisher":"MIS Quarterly","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,12,1]]},"abstract":"<jats:p>We develop a theory to explain why, how, and under what conditions corporate strategy changes negatively affect a multibusiness firm\u2019s ability to design and effectively operate IT controls, and lead to the emergence of IT control material weaknesses (IT MW). Corporate strategy changes such as diversification, mergers and acquisitions (M&amp;A), and divestitures alter a firm\u2019s complicatedness by adding or removing business units. These changes can also affect the firm\u2019s complexity by altering the degree of interrelatedness among the firm\u2019s businesses. We hypothesize that corporate strategy changes that affect the firm\u2019s complexity are more likely to increase IT MW than those that only affect the firm\u2019s complicatedness. Complexity-altering corporate strategy changes are likely to disrupt all three types of IT controls: IT controls over technology, IT controls over business processes, and IT controls over people\u2019s behaviors. We hypothesize that the changes are likely to disrupt the IT controls over people much more than IT controls over technology or business processes. Complexity-altering corporate strategy changes are also likely to affect the design effectiveness of the IT controls much more than the operating effectiveness of the IT controls. We find support for these ideas in a longitudinal study of 2,477 publicly traded U.S. firms. Results also indicate that the internal control material weaknesses (IC MW) that emerge following corporate strategy changes are primarily due to IT MW rather than non-IT MW. The proposed theory and the findings have important implications for research and practice.<\/jats:p>","DOI":"10.25300\/misq\/2020\/14223","type":"journal-article","created":{"date-parts":[[2021,1,14]],"date-time":"2021-01-14T15:28:55Z","timestamp":1610638135000},"page":"1573-1617","source":"Crossref","is-referenced-by-count":18,"title":["Corporate Strategy Changes and Information Technology Control Effectiveness in Multibusiness Firms"],"prefix":"10.25300","volume":"44","author":[{"given":"H\u00fcseyin","family":"Tanriverdi","sequence":"first","affiliation":[{"name":"Red McCombs School of Business, The University of Texas at Austin, 1 University Station, B6500, CBA 5.208, Austin, TX 78712 U.S.A."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kui","family":"Du","sequence":"additional","affiliation":[{"name":"College of Management, University of Massachusetts Boston, 100 Morrissey Boulevard, Boston, MA 02125 U.S.A."}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"10933","published-online":{"date-parts":[[2020,12,1]]},"reference":[{"key":"2025082212221967500_b1-04_14223_ra_tanriverdidu","volume-title":"A Framework for Evaluating Control Exceptions and Deficiencies","author":"AICPA","year":"2004"},{"issue":"3","key":"2025082212221967500_b2-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"315","DOI":"10.1080\/0953732022000002131","article-title":"Complex Systems and the Merger Process","volume":"14","author":"Allen","year":"2002","journal-title":"Technology Analysis & Strategic Management"},{"key":"2025082212221967500_b3-04_14223_ra_tanriverdidu","volume-title":"Survival Analysis Using SAS: A Practical Guide","author":"Allison","year":"2010","edition":"2nd"},{"key":"2025082212221967500_b4-04_14223_ra_tanriverdidu","unstructured":"Applegate, L. M., Watson, E., and Vatz, M. E.\u20082007. \u201cRoyal DSM N.V.: Information Technology Enabling Business Transformation,\u201d Case #9-807-167, Harvard Business School."},{"issue":"1","key":"2025082212221967500_b5-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"166","DOI":"10.1016\/j.jacceco.2006.10.001","article-title":"The Discovery and Reporting of Internal Control Deficiencies Prior to SOX-Mandated Audits","volume":"44","author":"Ashbaugh-Skaife","year":"2007","journal-title":"Journal of Accounting and Economics"},{"issue":"2","key":"2025082212221967500_b6-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"112","DOI":"10.1016\/j.jsis.2013.08.002","article-title":"Integrating the IS Functions after Mergers and Acquisitions: Analyzing Business\u2013IT Alignment","volume":"23","author":"Baker","year":"2014","journal-title":"The Journal of Strategic Information Systems"},{"issue":"3","key":"2025082212221967500_b7-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"285","DOI":"10.1177\/1476127008094339","article-title":"Controlling for Endogeneity with Instrumental Variables in Strategic Management Research","volume":"6","author":"Bascle","year":"2008","journal-title":"Strategic Organization"},{"issue":"1","key":"2025082212221967500_b8-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1145\/3184444.3184448","article-title":"Integration of Information Systems and Cybersecurity Countermeasures: An Exposure to Risk Perspective","volume":"49","author":"Baskerville","year":"2018","journal-title":"The Data Base for Advances in Information Systems"},{"issue":"3","key":"2025082212221967500_b9-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"150","DOI":"10.1016\/j.scaman.2016.08.001","article-title":"Speed of Acquisition Integration: Separating the Role of Human and Task Integration","volume":"32","author":"Bauer","year":"2016","journal-title":"Scandinavian Journal of Management"},{"issue":"3","key":"2025082212221967500_b10-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"825","DOI":"10.2308\/accr.00000036","article-title":"Detection and Severity Classifications of Sarbanes\u2013Oxley Section 404 Internal Control Deficiencies","volume":"86","author":"Bedard","year":"2011","journal-title":"The Accounting Review"},{"issue":"3","key":"2025082212221967500_b11-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"665","DOI":"10.2308\/accr.2008.83.3.665","article-title":"Internal Control Weaknesses and Information Uncertainty","volume":"83","author":"Beneish","year":"2008","journal-title":"The Accounting Review"},{"issue":"4","key":"2025082212221967500_b12-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"49","DOI":"10.2308\/ajpt-51693","article-title":"Business Strategy, Internal Control over Financial Reporting, and Audit Reporting Quality","volume":"36","author":"Bentley-Goode","year":"2017","journal-title":"Auditing: A Journal of Practice & Theory"},{"issue":"1","key":"2025082212221967500_b13-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"169","DOI":"10.2307\/3250983","article-title":"A Resource-Based Perspective on Information Technology Capability and Firm Performance: An Empirical Investigation","volume":"24","author":"Bharadwaj","year":"2000","journal-title":"MIS Quarterly"},{"issue":"4","key":"2025082212221967500_b14-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"524","DOI":"10.1177\/1536867X0900900402","article-title":"CEM: Coarsened Exact Matching in Stata","volume":"9","author":"Blackwell","year":"2009","journal-title":"The Stata Journal"},{"issue":"6","key":"2025082212221967500_b15-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"751","DOI":"10.1177\/0149206306292879","article-title":"What Have We Acquired and What Should We Acquire in Divestiture Research? A Review and Research Agenda","volume":"32","author":"Brauer","year":"2006","journal-title":"Journal of Management"},{"issue":"6","key":"2025082212221967500_b16-04_14223_ra_tanriverdidu","first-page":"1472","article-title":"Industry Divestiture Waves: How a Firm\u2019s Position Influences Investor Returns","volume":"55","author":"Brauer","year":"2012","journal-title":"The Academy of Management Journal"},{"issue":"1","key":"2025082212221967500_b17-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1108\/18347640910967753","article-title":"The Pervasive Nature of IT Controls: An Examination of Material Weaknesses in IT Controls and Audit Fees","volume":"17","author":"Canada","year":"2009","journal-title":"International Journal of Accounting and Information Management"},{"issue":"3","key":"2025082212221967500_b18-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"533","DOI":"10.2307\/3069368","article-title":"Top Management Teams, Global Strategic Posture, and the Moderating Role of Uncertainty","volume":"44","author":"Carpenter","year":"2001","journal-title":"Academy of Management Journal"},{"issue":"1","key":"2025082212221967500_b19-04_14223_ra_tanriverdidu","first-page":"95","article-title":"Downsizing: What Do We Know? What Have We Learned?","volume":"7","author":"Cascio","year":"1993","journal-title":"Academy of Management Executive"},{"issue":"2","key":"2025082212221967500_b20-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"63","DOI":"10.2308\/ajpt-51574","article-title":"Business Strategy and Auditor Reporting","volume":"36","author":"Chen","year":"2017","journal-title":"Auditing: A Journal of Practice & Theory"},{"issue":"2","key":"2025082212221967500_b21-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"149","DOI":"10.2308\/isys-50778","article-title":"Information Technology Capability, Internal Control Effectiveness, and Audit Fees and Delays","volume":"28","author":"Chen","year":"2014","journal-title":"Journal of Information Systems"},{"issue":"3","key":"2025082212221967500_b22-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1287\/isre.14.3.291.16563","article-title":"Portfolios of Control in Outsourced Software Development Projects","volume":"14","author":"Choudhury","year":"2003","journal-title":"Information Systems Research"},{"key":"2025082212221967500_b23-04_14223_ra_tanriverdidu","first-page":"466","article-title":"Towards Real-Time Static and Dynamic Profiling of Organizational Complexity","author":"Chung","year":"2014"},{"key":"2025082212221967500_b24-04_14223_ra_tanriverdidu","volume-title":"Complexity and Postmodernism: Understanding Complex Systems","author":"Cilliers","year":"1998"},{"issue":"3","key":"2025082212221967500_b25-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"40","DOI":"10.1207\/S15327000EM0203_04","article-title":"Rules and Complex Systems","volume":"2","author":"Cilliers","year":"2000","journal-title":"Emergence: Complexity & Organization"},{"key":"2025082212221967500_b26-04_14223_ra_tanriverdidu","volume-title":"An Introduction to Survival Analysis Using Stata","author":"Cleves","year":"2010","edition":"3rd"},{"key":"2025082212221967500_b27-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1177\/001316446002000104","article-title":"A Coefficient of Agreement for Nominal Scales","volume":"20","author":"Cohen","year":"1960","journal-title":"Educational and Psychological Measurement"},{"issue":"3","key":"2025082212221967500_b28-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"839","DOI":"10.1177\/0149206309354645","article-title":"Organizational Identification and Serendipitous Value Creation in Post-Acquisition Integration","volume":"37","author":"Colman","year":"2011","journal-title":"Journal of Management"},{"key":"2025082212221967500_b29-04_14223_ra_tanriverdidu","unstructured":"Conkle, A., Sands, D., and Diaz-Insua, E.\u20082016. \u201cManaging Risk During M&A Integration\u2014A Focus on Internal Controls,\u201d PowerGrid International (https:\/\/www.elp.com\/articles\/print\/volume-94\/issue-1\/sections\/finance\/managing-risk-during-m-a-integration-a-focus-on-internal-controls.html; accessed October 18, 2018)."},{"key":"2025082212221967500_b30-04_14223_ra_tanriverdidu","volume-title":"Internal Control\u2014Integrated Framework: Executive Summary","author":"COSO","year":"2013"},{"key":"2025082212221967500_b31-04_14223_ra_tanriverdidu","volume-title":"Going Rogue. How Behavioral Factors Affect Decisions Related to Work Process Deviation","author":"Cotteleer","year":"2015"},{"issue":"2","key":"2025082212221967500_b32-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1111\/j.2517-6161.1972.tb00899.x","article-title":"Regression Models and Life-Tables","volume":"34","author":"Cox","year":"1972","journal-title":"Journal of the Royal Statistical Society. Series B (Methodological)"},{"issue":"3","key":"2025082212221967500_b33-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"195","DOI":"10.1111\/isj.12059","article-title":"Hitting a Moving Target: A Process Model of Information Systems Control Change","volume":"26","author":"Cram","year":"2016","journal-title":"Information Systems Journal"},{"issue":"4","key":"2025082212221967500_b34-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"216","DOI":"10.17705\/1jais.00427","article-title":"Information Systems Control: A Review and Framework for Emerging Information Systems Processes","volume":"17","author":"Cram","year":"2016","journal-title":"Journal of the Association for Information Systems"},{"issue":"2","key":"2025082212221967500_b35-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"209","DOI":"10.1177\/1536867X0700700205","article-title":"QIC Program and Model Selection in GEE Analyses","volume":"7","author":"Cui","year":"2007","journal-title":"The Stata Journal"},{"issue":"3","key":"2025082212221967500_b36-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"371","DOI":"10.2307\/30040727","article-title":"Corporate Governance: Decades of Dialogue and Data","volume":"28","author":"Daily","year":"2003","journal-title":"Academy of Management Review"},{"issue":"2","key":"2025082212221967500_b37-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"189","DOI":"10.1007\/s10111-011-0211-6","article-title":"Complicated, Complex, and Compliant: Best Practice in Obstetrics","volume":"15","author":"Dekker","year":"2013","journal-title":"Cognition Technology & Work"},{"key":"2025082212221967500_b38-04_14223_ra_tanriverdidu","volume-title":"Seven Secrets of Highly Effective Divestitures","author":"Deloitte","year":"2008"},{"key":"2025082212221967500_b39-04_14223_ra_tanriverdidu","volume-title":"A Closer Look at Carve-Outs","author":"Deloitte","year":"2009"},{"issue":"1","key":"2025082212221967500_b40-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"52","DOI":"10.2307\/2393080","article-title":"Dimensions of Organizational Task Environments","volume":"29","author":"Dess","year":"1984","journal-title":"Administrative Science Quarterly"},{"issue":"5","key":"2025082212221967500_b41-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"1141","DOI":"10.2308\/accr.2007.82.5.1141","article-title":"Accruals Quality and Internal Control over Financial Reporting","volume":"82","author":"Doyle","year":"2007","journal-title":"The Accounting Review"},{"issue":"1","key":"2025082212221967500_b42-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"193","DOI":"10.1016\/j.jacceco.2006.10.003","article-title":"Determinants of Weaknesses in Internal Control over Financial Reporting","volume":"44","author":"Doyle","year":"2007","journal-title":"Journal of Accounting and Economics"},{"issue":"2","key":"2025082212221967500_b43-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"168","DOI":"10.1177\/1536867X0300300206","article-title":"Testing for Serial Correlation in Linear Panel-Data Models","volume":"3","author":"Drukker","year":"2003","journal-title":"The Stata Journal"},{"issue":"4","key":"2025082212221967500_b44-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"829","DOI":"10.1287\/isre.2015.0604","article-title":"Parenting New Acquisitions: Acquirers\u2019 Digital Resource Redeployment and Targets\u2019 Performance Improvement in the U.S. Hospital Industry","volume":"26","author":"Du","year":"2015","journal-title":"Information Systems Research"},{"key":"2025082212221967500_b45-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"506","DOI":"10.4135\/9781446201084.n30","article-title":"Complexity Theory and Corporate Strategy","volume-title":"The Sage Handbook of Complexity and Management","author":"Eisenhardt","year":"2011"},{"issue":"2","key":"2025082212221967500_b46-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1057\/jittc.2013.10","article-title":"Managing an IT Carve-Out at a Multi-National Enterprise","volume":"3","author":"F\u00e4hling","year":"2013","journal-title":"Journal of Information Technology Teaching Cases"},{"issue":"3","key":"2025082212221967500_b47-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"71","DOI":"10.2308\/ajpt-51669","article-title":"Is SOX 404(a) Management Internal Control Reporting an Effective Alternative to SOX 404(b) Internal Control Audits?","volume":"36","author":"Fan","year":"2017","journal-title":"Auditing: A Journal of Practice & Theory"},{"issue":"2","key":"2025082212221967500_b48-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"529","DOI":"10.2308\/accr-50909","article-title":"Does Ineffective Internal Control over Financial Reporting Affect a Firm\u2019s Operations? Evidence from Firms\u2019 Inventory Management","volume":"90","author":"Feng","year":"2015","journal-title":"The Accounting Review"},{"issue":"3","key":"2025082212221967500_b49-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"137","DOI":"10.2308\/acch.2005.19.3.137","article-title":"The Disclosure of Material Weaknesses in Internal Control after the Sarbanes\u2013Oxley Act","volume":"19","author":"Ge","year":"2005","journal-title":"Accounting Horizons"},{"key":"2025082212221967500_b50-04_14223_ra_tanriverdidu","first-page":"47","article-title":"How Can We Think the Complex?","volume-title":"Managing Organizational Complexity: Philosophy, Theory and Application","author":"Gershenson","year":"2005"},{"issue":"8","key":"2025082212221967500_b51-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"751","DOI":"10.1002\/smj.419","article-title":"Momentum and Serendipity: How Acquired Leaders Create Value in the Integration of Technology Firms","volume":"25","author":"Graebner","year":"2004","journal-title":"Strategic Management Journal"},{"key":"2025082212221967500_b52-04_14223_ra_tanriverdidu","first-page":"194","article-title":"The Role of the Internal Audit Function in Corporate Governance: A Synthesis of the Extant Internal Auditing Literature and Directions for Future Research","volume":"23","author":"Gramling","year":"2004","journal-title":"Journal of Accounting Literature"},{"key":"2025082212221967500_b53-04_14223_ra_tanriverdidu","unstructured":"Granville, K.\n          \u20082018. \u201cFacebook and Cambridge Analytica: What You Need to Know as Fallout Widens,\u201d The New York Times, Technology Section (https:\/\/www.nytimes.com\/2018\/03\/19\/technology\/facebook-cambridge-analytica-explained.html; accessed April 6, 2019)."},{"issue":"5","key":"2025082212221967500_b54-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"961","DOI":"10.1287\/mnsc.1110.1465","article-title":"Impact of Performance-Based Contracting on Product Reliability: An Empirical Analysis","volume":"58","author":"Guajardo","year":"2012","journal-title":"Management Science"},{"key":"2025082212221967500_b55-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.accinf.2016.01.001","article-title":"The Effect of Auditor IT Expertise on Internal Controls","volume":"20","author":"Haislip","year":"2016","journal-title":"International Journal of Accounting Information Systems"},{"issue":"3","key":"2025082212221967500_b56-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1177\/0149206308330554","article-title":"Taking Stock of What We Know About Mergers and Acquisitions: A Review and Research Agenda","volume":"35","author":"Haleblian","year":"2009","journal-title":"Journal of Management"},{"issue":"1","key":"2025082212221967500_b57-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1177\/1476127003001001218","article-title":"Correcting for Endogeneity in Strategic Management Research","volume":"1","author":"Hamilton","year":"2003","journal-title":"Strategic Organization"},{"key":"2025082212221967500_b58-04_14223_ra_tanriverdidu","volume-title":"Generalized Estimating Equations","author":"Hardin","year":"2003","edition":"1st"},{"issue":"1","key":"2025082212221967500_b59-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"153","DOI":"10.2307\/1912352","article-title":"Sample Selection Bias as a Specification Error","volume":"47","author":"Heckman","year":"1979","journal-title":"Econometrica"},{"issue":"4","key":"2025082212221967500_b60-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"942","DOI":"10.1080\/07421222.2016.1267516","article-title":"Understanding Information Systems Integration Deficiencies in Mergers and Acquisitions: A Configurational Perspective","volume":"33","author":"Henningsson","year":"2016","journal-title":"Journal of Management Information Systems"},{"key":"2025082212221967500_b61-04_14223_ra_tanriverdidu","volume-title":"Financial Valuation: Applications and Models","author":"Hitchner","year":"2006","edition":"2nd"},{"issue":"3","key":"2025082212221967500_b62-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"839","DOI":"10.2308\/accr.2009.84.3.839","article-title":"Corporate Governance and Internal Control over Financial Reporting: A Comparison of Regulatory Regimes","volume":"84","author":"Hoitash","year":"2009","journal-title":"The Accounting Review"},{"issue":"4","key":"2025082212221967500_b63-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"347","DOI":"10.1002\/smj.520","article-title":"Is Speed of Integration Really a Success Factor of Mergers and Acquisitions? An Analysis of the Role of Internal and External Relatedness","volume":"27","author":"Homburg","year":"2006","journal-title":"Strategic Management Journal"},{"key":"2025082212221967500_b64-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","DOI":"10.1002\/9780470258019","volume-title":"Applied Survival Analysis: Regression Modeling of Time to Event Data","author":"Hosmer","year":"2008","edition":"2nd"},{"issue":"1","key":"2025082212221967500_b65-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1093\/pan\/mpr013","article-title":"Causal Inference Without Balance Checking: Coarsened Exact Matching","volume":"20","author":"Iacus","year":"2012","journal-title":"Political Analysis"},{"key":"2025082212221967500_b66-04_14223_ra_tanriverdidu","article-title":"GAIT for IT General Control Deficiency Assessment: An Approach for Evaluating ITGC Deficiencies in Sarbanes\u2013Oxley Section 404 Assessments of Internal Controls over Financial Reporting","volume-title":"The Institute of Internal Auditors","author":"IIA","year":"2008"},{"key":"2025082212221967500_b67-04_14223_ra_tanriverdidu","volume-title":"Global Technology Audit Guide (GTAG) 8: Auditing Application Controls","author":"IIA","year":"2009"},{"key":"2025082212221967500_b68-04_14223_ra_tanriverdidu","volume-title":"Global Technology Audit Guide (GTAG) 1: Information Technology Controls","author":"IIA","year":"2012","edition":"2nd"},{"key":"2025082212221967500_b69-04_14223_ra_tanriverdidu","volume-title":"IT Control Objectives for Sarbanes\u2013Oxley: The Role of IT in the Design and Implementation of Internal Control over Financial Reporting","author":"ITGI","year":"2006","edition":"2nd"},{"key":"2025082212221967500_b70-04_14223_ra_tanriverdidu","volume-title":"COBIT 4.1","author":"ITGI","year":"2007"},{"issue":"1","key":"2025082212221967500_b71-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"145","DOI":"10.1287\/isre.2014.0558","article-title":"Turnover or Turn-away? Competing Risks Analysis of Male and Female IT Professionals\u2019 Job Mobility and Relative Pay Gap","volume":"26","author":"Joseph","year":"2015","journal-title":"Information Systems Research"},{"key":"2025082212221967500_b72-04_14223_ra_tanriverdidu","volume-title":"Divestitures and Spin-Offs: Lessons Learned in the Trenches of the World\u2019s Largest M&A Deals","author":"Joy","year":"2019"},{"issue":"6","key":"2025082212221967500_b73-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"943","DOI":"10.1016\/j.jbi.2011.06.006","article-title":"Considering Complexity in Healthcare Systems","volume":"44","author":"Kannampallil","year":"2011","journal-title":"Journal of Biomedical Informatics"},{"issue":"2","key":"2025082212221967500_b74-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1002\/smj.371","article-title":"Meta-Analyses of Post-Acquisition Performance: Indications of Unidentified Moderators","volume":"25","author":"King","year":"2004","journal-title":"Strategic Management Journal"},{"issue":"2","key":"2025082212221967500_b75-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"137","DOI":"10.1093\/oxfordjournals.pan.a004868","article-title":"Logistic Regression in Rare Events Data","volume":"9","author":"King","year":"2001","journal-title":"Political Analysis"},{"issue":"2","key":"2025082212221967500_b76-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"413","DOI":"10.1111\/j.1475-679X.2011.00400.x","article-title":"Do Control Effectiveness Disclosures Require SOX 404(B) Internal Control Audits? A Natural Experiment with Small U.S. Public Companies","volume":"49","author":"Kinney","year":"2011","journal-title":"Journal of Accounting Research"},{"issue":"2","key":"2025082212221967500_b77-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"307","DOI":"10.2308\/acch-10266","article-title":"Determinants of the Persistence of Internal Control Weaknesses","volume":"26","author":"Klamm","year":"2012","journal-title":"Accounting Horizons"},{"issue":"2","key":"2025082212221967500_b78-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"1","DOI":"10.2308\/jis.2009.23.2.1","article-title":"SOX 404 Reported Internal Control Weaknesses: A Test of COSO Framework Components and Information Technology","volume":"23","author":"Klamm","year":"2009","journal-title":"Journal of Information Systems"},{"issue":"3","key":"2025082212221967500_b79-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"685","DOI":"10.1111\/j.1540-6261.1986.tb04532.x","article-title":"The Timing and Substance of Divestiture Announcements: Individual, Simultaneous and Cumulative Effects","volume":"41","author":"Klein","year":"1986","journal-title":"Journal of Finance"},{"issue":"1","key":"2025082212221967500_b80-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1111\/1467-8551.12145","article-title":"To Divest or Not to Divest: A Meta-Analysis of the Antecedents of Corporate Divestitures","volume":"17","author":"Kolev","year":"2015","journal-title":"British Journal of Management"},{"issue":"2","key":"2025082212221967500_b81-04_14223_ra_tanriverdidu","first-page":"37","article-title":"Putting out the for-Sale Sign","volume":"7","author":"Kreuz","year":"2004","journal-title":"Executive Agenda"},{"issue":"2","key":"2025082212221967500_b82-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"73","DOI":"10.1111\/j.1099-1123.2007.00358.x","article-title":"Reporting Internal Control Deficiencies in the Post-Sarbanes\u2013Oxley Era: The Role of Auditors and Corporate Governance","volume":"11","author":"Krishnan","year":"2007","journal-title":"International Journal of Auditing"},{"issue":"3","key":"2025082212221967500_b83-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"227","DOI":"10.1108\/IJAIM-12-2011-0042","article-title":"An Examination of the Relationship of IT Control Weakness to Company Financial Performance and Health","volume":"21","author":"Kuhn","year":"2013","journal-title":"International Journal of Accounting & Information Management"},{"issue":"2","key":"2025082212221967500_b84-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"451","DOI":"10.25300\/MISQ\/2014\/38.2.06","article-title":"Proactive Versus Reactive Security Investments in the Healthcare Sector","volume":"38","author":"Kwon","year":"2014","journal-title":"MIS Quarterly"},{"issue":"1","key":"2025082212221967500_b85-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"159","DOI":"10.2307\/2529310","article-title":"The Measurement of Observer Agreement for Categorical Data","volume":"33","author":"Landis","year":"1977","journal-title":"Biometrics"},{"key":"2025082212221967500_b86-04_14223_ra_tanriverdidu","first-page":"753","article-title":"A Review of Quantitative Research in Management Control Systems and Strategy","volume-title":"Handbook of Management Accounting Research","author":"Langfield-Smith","year":"2007"},{"issue":"4","key":"2025082212221967500_b87-04_14223_ra_tanriverdidu","first-page":"171","article-title":"How Sprint Nextel Reconfigured IT Resources for Results","volume":"7","author":"LeFave","year":"2008","journal-title":"MIS Quarterly Executive"},{"issue":"4","key":"2025082212221967500_b88-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1016\/j.accinf.2007.09.002","article-title":"Internal and External Influences on IT Control Governance","volume":"8","author":"Li","year":"2007","journal-title":"International Journal of Accounting Information Systems"},{"issue":"1","key":"2025082212221967500_b89-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"179","DOI":"10.2307\/41410413","article-title":"The Consequences of Information Technology Control Weaknesses on Management Information Systems: The Case of Sarbanes\u2013Oxley Internal Control Reports","volume":"36","author":"Li","year":"2012","journal-title":"MIS Quarterly"},{"issue":"1","key":"2025082212221967500_b90-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"287","DOI":"10.2308\/accr.00000016","article-title":"The Role of the Internal Audit Function in the Disclosure of Material Weaknesses","volume":"86","author":"Lin","year":"2011","journal-title":"The Accounting Review"},{"issue":"10","key":"2025082212221967500_b91-04_14223_ra_tanriverdidu","first-page":"92","article-title":"How the Best Divest","volume":"86","author":"Mankins","year":"2008","journal-title":"Harvard Business Review"},{"key":"2025082212221967500_b92-04_14223_ra_tanriverdidu","unstructured":"Martin, R. L.\n          \u20082017. \u201cStrategic Choices Need to Be Made Simultaneously, Not Sequentially\u201d Havard Business Review (https:\/\/hbr.org\/2017\/04\/strategic-choices-need-to-be-made-simultaneously-not-sequentially; accessed January 20, 2018)."},{"issue":"3","key":"2025082212221967500_b93-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"1001","DOI":"10.2308\/accr.2010.85.3.1001","article-title":"Examining the Potential Benefits of Internal Control Monitoring Technology","volume":"85","author":"Masli","year":"2010","journal-title":"The Accounting Review"},{"issue":"3","key":"2025082212221967500_b94-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"687","DOI":"10.25300\/MISQ\/2016\/40.3.08","article-title":"Senior Executives\u2019 IT Management Responsibilities: Serious IT-Related Deficiencies and CEO\/CFO Turnover","volume":"40","author":"Masli","year":"2016","journal-title":"MIS Quarterly"},{"issue":"7\/8","key":"2025082212221967500_b95-04_14223_ra_tanriverdidu","first-page":"98","article-title":"Investing in the IT That Makes a Competitive Difference","volume":"86","author":"McAfee","year":"2008","journal-title":"Harvard Business Review"},{"issue":"1","key":"2025082212221967500_b96-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"113","DOI":"10.5465\/amj.2008.30755057","article-title":"The Performance Implications of Participating in an Acquisition Wave: Early Mover Advantages, Bandwagon Effects, and the Moderating Influence of Industry Characteristics and Acquirer Tactics","volume":"51","author":"McNamara","year":"2008","journal-title":"Academy of Management Journal"},{"issue":"2","key":"2025082212221967500_b97-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"201","DOI":"10.1016\/j.jfineco.2003.07.002","article-title":"Firm Size and the Gains from Acquisitions","volume":"73","author":"Moeller","year":"2004","journal-title":"Journal of Financial Economics"},{"issue":"1","key":"2025082212221967500_b98-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"129","DOI":"10.2308\/jis.2011.25.1.129","article-title":"The Impact of Enterprise Resource Planning (ERP) Systems on the Effectiveness of Internal Controls over Financial Reporting","volume":"25","author":"Morris","year":"2011","journal-title":"Journal of Information Systems"},{"issue":"1","key":"2025082212221967500_b99-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"191","DOI":"10.2753\/MIS0742-1222300106","article-title":"The Impact of Influence Tactics in Information System Development Projects: A Control\u2013Loss Perspective","volume":"30","author":"Narayanaswamy","year":"2013","journal-title":"Journal of Management Information Systems"},{"issue":"5","key":"2025082212221967500_b100-04_14223_ra_tanriverdidu","first-page":"1","article-title":"Seven Reasons Divestitures Are Harder Than You Think","author":"Neely","year":"2007","journal-title":"Chief Executive"},{"key":"2025082212221967500_b101-04_14223_ra_tanriverdidu","volume-title":"Understanding Complexity","author":"Page","year":"2009"},{"issue":"3","key":"2025082212221967500_b102-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"239","DOI":"10.1002\/smj.4250060305","article-title":"Diversification Strategy, Profit Performance and the Entropy Measure","volume":"6","author":"Palepu","year":"1985","journal-title":"Strategic Management Journal"},{"issue":"1","key":"2025082212221967500_b103-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"120","DOI":"10.1111\/j.0006-341X.2001.00120.x","article-title":"Akaike\u2019s Information Criterion in Generalized Estimating Equations","volume":"57","author":"Pan","year":"2001","journal-title":"Biometrics"},{"key":"2025082212221967500_b104-04_14223_ra_tanriverdidu","article-title":"Too Old to Be Hacked? Information Technology Investment Profiles and Security Vulnerabilities in the U.S. Federal Government","author":"Pang","year":"2017"},{"issue":"5","key":"2025082212221967500_b105-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"545","DOI":"10.1287\/orsc.1060.0207","article-title":"Acquisition Integration and Productivity Losses in the Technical Core: Disruption of Inventors in Acquired Companies","volume":"17","author":"Paruchuri","year":"2006","journal-title":"Organization Science"},{"issue":"1","key":"2025082212221967500_b106-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"325","DOI":"10.2308\/accr.00000012","article-title":"The Causes and Consequences of Internal Control Problems in Nonprofit Organizations","volume":"86","author":"Petrovits","year":"2011","journal-title":"The Accounting Review"},{"issue":"2","key":"2025082212221967500_b107-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"383","DOI":"10.1111\/j.1475-679X.2008.00279.x","article-title":"Regulation and Bonding: The Sarbanes\u2013Oxley Act and the Flow of International Listings","volume":"46","author":"Piotroski","year":"2008","journal-title":"Journal of Accounting Research"},{"issue":"6","key":"2025082212221967500_b108-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"523","DOI":"10.1002\/smj.4250100603","article-title":"Research on Corporate Diversification\u2014A Synthesis","volume":"10","author":"Ramanujam","year":"1989","journal-title":"Strategic Management Journal"},{"issue":"4","key":"2025082212221967500_b109-04_14223_ra_tanriverdidu","first-page":"161","article-title":"Life after IT Outsourcing: Lessons Learned from Resizing the IT Workforce","volume":"8","author":"Ranganathan","year":"2009","journal-title":"MIS Quarterly Executive"},{"issue":"1","key":"2025082212221967500_b110-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1287\/isre.1080.0174","article-title":"Choice and Chance: A Conceptual Model of Paths to Information Security Compromise","volume":"20","author":"Ransbotham","year":"2009","journal-title":"Information Systems Research"},{"issue":"3","key":"2025082212221967500_b111-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"502","DOI":"10.2307\/3094873","article-title":"Fool\u2019s Gold: Social Proof in the Initiation and Abandonment of Coverage by Wall Street Analysts","volume":"46","author":"Rao","year":"2001","journal-title":"Administrative Science Quarterly"},{"issue":"3","key":"2025082212221967500_b112-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1057\/jibs.2011.60","article-title":"Endogeneity in International Business Research","volume":"43","author":"Reeb","year":"2012","journal-title":"Journal of International Business Studies"},{"key":"2025082212221967500_b113-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","DOI":"10.1002\/9781118692028","volume-title":"M&A Information Technology Best Practices","author":"Roehl-Anderson","year":"2013"},{"issue":"2","key":"2025082212221967500_b114-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"261","DOI":"10.2307\/249754","article-title":"Arrangements for Information Technology Governance: A Theory of Multiple Contingencies","volume":"23","author":"Sambamurthy","year":"1999","journal-title":"MIS Quarterly"},{"key":"2025082212221967500_b115-04_14223_ra_tanriverdidu","unstructured":"Scipioni, J.\n          \u20082018. \u201cFedex Data Breach: 119,000 Passports or Photo IDs Found on Unsecured Server,\u201d Fox Business (https:\/\/www.foxbusiness.com\/features\/fedex-data-breach-119000-passports-or-photo-ids-found-on-unsecured-server; accessed October 18, 2018)."},{"issue":"4","key":"2025082212221967500_b116-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"571","DOI":"10.1287\/mnsc.44.4.571","article-title":"Accounting for Endogeneity When Assessing Strategy Performance: Does Entry Mode Choice Affect FDI Survival?","volume":"44","author":"Shaver","year":"1998","journal-title":"Management Science"},{"key":"2025082212221967500_b117-04_14223_ra_tanriverdidu","unstructured":"Smith, B.\n          \u20082018. \u201cProject Strobe: Protecting Your Data, Improving Our Third-Party APIs, and Sunsetting Consumer Google+\u201d (https:\/\/www.blog.google\/technology\/safety-security\/project-strobe\/; accessed October 14, 2018)."},{"issue":"3","key":"2025082212221967500_b118-04_14223_ra_tanriverdidu","first-page":"167","article-title":"Restructuring Information Systems Following the Divestiture of Carestream Health","volume":"12","author":"Smith","year":"2013","journal-title":"MIS Quarterly Executive"},{"issue":"4","key":"2025082212221967500_b119-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"280","DOI":"10.1016\/j.accinf.2011.06.001","article-title":"IT Internal Control Weaknesses and Firm Performance: An Organizational Liability Lens","volume":"12","author":"Stoel","year":"2011","journal-title":"International Journal of Accounting Information Systems"},{"issue":"2","key":"2025082212221967500_b120-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"311","DOI":"10.2307\/25148681","article-title":"Information Technology Relatedness, Knowledge Management Capability, and Performance of Multibusiness Firms","volume":"29","author":"Tanriverdi","year":"2005","journal-title":"MIS Quarterly"},{"issue":"1","key":"2025082212221967500_b121-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"57","DOI":"10.2307\/25148717","article-title":"Performance Effects of Information Technology Synergies in Multibusiness Firms","volume":"30","author":"Tanriverdi","year":"2006","journal-title":"MIS Quarterly"},{"key":"2025082212221967500_b122-04_14223_ra_tanriverdidu","article-title":"Disintegrating Information Technology in Corporate Divestures: Implications for Regulatory Compliance Risks and Costs","author":"Tanriverdi","year":"2009"},{"key":"2025082212221967500_b123-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"421","DOI":"10.17705\/1jais.00061","article-title":"The Role of Information Technology in Risk\/Return Relations of Firms","volume":"5","author":"Tanriverdi","year":"2004","journal-title":"Journal of the Association for Information Systems"},{"issue":"4","key":"2025082212221967500_b124-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"703","DOI":"10.1287\/isre.1090.0250","article-title":"Cross-Business Information Technology Integration and Acquirer Value Creation in Corporate Mergers and Acquisitions","volume":"22","author":"Tanriverdi","year":"2011","journal-title":"Information Systems Research"},{"issue":"2","key":"2025082212221967500_b125-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1002\/smj.435","article-title":"Knowledge Relatedness and the Performance of Multibusiness Firms","volume":"26","author":"Tanriverdi","year":"2005","journal-title":"Strategic Management Journal"},{"key":"2025082212221967500_b126-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4757-3294-8","volume-title":"Modeling Survival Data: Extending the Cox Model","author":"Therneau","year":"2000"},{"key":"2025082212221967500_b127-04_14223_ra_tanriverdidu","volume-title":"Complexity: The Emerging Science at the Edge of Order and Chaos","author":"Waldrop","year":"1992"},{"issue":"2","key":"2025082212221967500_b128-04_14223_ra_tanriverdidu","first-page":"26","article-title":"A Matrixed Approach to Designing IT Governance","volume":"46","author":"Weill","year":"2005","journal-title":"MIT Sloan Management Review"},{"issue":"10","key":"2025082212221967500_b129-04_14223_ra_tanriverdidu","article-title":"Top Performing Firms Are More Effective at Digital Reuse","volume":"10","author":"Weill","year":"2010","journal-title":"Research Briefing"},{"issue":"6","key":"2025082212221967500_b130-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"730","DOI":"10.1287\/orsc.12.6.730.10084","article-title":"Replication as Strategy","volume":"12","author":"Winter","year":"2001","journal-title":"Organization Science"},{"key":"2025082212221967500_b131-04_14223_ra_tanriverdidu","volume-title":"Econometric Analysis of Cross Section and Panel Data","author":"Wooldridge","year":"2010","edition":"2nd"},{"issue":"1","key":"2025082212221967500_b132-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"121","DOI":"10.2307\/2531248","article-title":"Longitudinal Data Analysis for Discrete and Continuous Outcomes","volume":"42","author":"Zeger","year":"1986","journal-title":"Biometrics"},{"issue":"3","key":"2025082212221967500_b133-04_14223_ra_tanriverdidu","doi-asserted-by":"crossref","first-page":"300","DOI":"10.1016\/j.jaccpubpol.2007.03.001","article-title":"Audit Committee Quality, Auditor Independence, and Internal Control Weaknesses","volume":"26","author":"Zhang","year":"2007","journal-title":"Journal of Accounting and Public Policy"}],"container-title":["MIS Quarterly"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/misq.umn.edu\/misq\/article-pdf\/44\/4\/1573\/6690\/04_14223_ra_tanriverdidu.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/misq.umn.edu\/misq\/article-pdf\/44\/4\/1573\/6690\/04_14223_ra_tanriverdidu.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T16:23:31Z","timestamp":1755879811000},"score":1,"resource":{"primary":{"URL":"https:\/\/misq.umn.edu\/misq\/article\/44\/4\/1573\/1828\/Corporate-Strategy-Changes-and-Information"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12,1]]},"references-count":133,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2020,12,1]]},"published-print":{"date-parts":[[2020,12,1]]}},"URL":"https:\/\/doi.org\/10.25300\/misq\/2020\/14223","relation":{},"ISSN":["0276-7783","2162-9730"],"issn-type":[{"value":"0276-7783","type":"print"},{"value":"2162-9730","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,12,1]]}}}