Firms' information security investment decisions: Stock market evidence of investors' behavior

Sangmi Chai, Minkyun Kim, H. Raghav Rao

Research output: Contribution to journalArticlepeer-review

102 Scopus citations


In the information society, it is important for firms to manage their core information resources securely. However, the difficulty of measuring the return on an IT security investment is one of the critical obstacles for firms in making such investment decisions. By utilizing event methodology, this study examines the value of an investment in IT security, based on stock market investors' behavior toward a firms' IT security investment announcements. Based on a sample of 101 investment announcements of firms whose stocks are publicly traded in the U.S. stock market between 1997 and 2006, we find substantial support for the hypotheses that information security investment leads to positive abnormal returns for firms. Interestingly, security investments with commercial exploitation tend to result in higher returns than those for IT security improvement. Another interesting finding is that stock market reaction to security investments shows higher abnormal returns after the Sarbanes-Oxley Act (SOX) than any of those before it.

Original languageEnglish
Pages (from-to)651-661
Number of pages11
JournalDecision Support Systems
Issue number4
StatePublished - Mar 2011


  • Abnormal returns
  • Event methodology
  • Information security investment
  • Investors' behavior
  • Market value
  • Sarbanes-Oxley Act (SOX)


Dive into the research topics of 'Firms' information security investment decisions: Stock market evidence of investors' behavior'. Together they form a unique fingerprint.

Cite this