Cybersecurity risk write-ups in filings predict profits, but where they appear matters
A study of 13,800 firm-years examined how companies’ required cybersecurity disclosures vary by topic and where they appear. It found that risk-factor write-ups were more consistently linked to next-year profitability and valuation than similar text in management’s discussion section.
·20 views