The Impact of Anti-phishing Laws on IT and Security Investment

Xiaoxiao Wang; Wilson Weixun Li; Alvin Chung Man Leung; Wei Thoo Yue

The Impact of Anti-phishing Laws on IT and Security Investment

Department of Information Systems

Research output: Chapters, Conference Papers, Creative and Literary Works › RGC 32 - Refereed conference paper (with host publication) › peer-review

Abstract

Many companies have been attacked by phishing leading to serious financial loss. In the United States, 23 states have enacted anti-phishing laws to ensure information security. However, the punishment rules of each state are different and the effects of the laws vary. Therefore, it is meaningful to study what kind of laws are the most effective to motivate firms to make appropriate IT and security investment decisions against phishing. Moreover, we posit that multi-site companies that operate in both with-law state and without-law state may have different IT and security investment decisions. We have collected 530 thousand corporates’ investment data from 2010 and 2017. We plan to apply propensity score matching method and difference-in-difference model to answer our research questions. We hope that we can get some insights on developing effective anti-phishing laws and provide governments and regulatory agencies with some suggestions to motivate firms to adopt better anti-phishing solutions.

Original language	English
Title of host publication	PACIS 2019 Proceedings
Editors	Dongming Xu, James Jiang, Hee-Woong Kim
Publisher	Association for Information Systems
Publication status	Published - Jul 2019
Event	23rd Pacific Asia Conference on Information Systems (PACIS 2019): Secure ICT Platform for the 4th Industrial Revolution - Shaanxi Guesthouse, Xi'an, China Duration: 8 Jul 2019 → 12 Jul 2019 http://www.pacis2019.org/ http://www.pacis2019.org/program/show.php?lang=en&id=356 https://aisel.aisnet.org/pacis2019/

Publication series

Name	Proceedings of the Pacific Asia Conference on Information Systems, PACIS

Conference

Conference	23rd Pacific Asia Conference on Information Systems (PACIS 2019)
Abbreviated title	PACIS 2019
Place	China
City	Xi'an
Period	8/07/19 → 12/07/19
Internet address	http://www.pacis2019.org/ http://www.pacis2019.org/program/show.php?lang=en&id=356 https://aisel.aisnet.org/pacis2019/

Bibliographical note

Research Unit(s) information for this publication is provided by the author(s) concerned.

Research Keywords

Anti-phishing law
IT investment
security investment

Access Output

https://aisel.aisnet.org/pacis2019/60/

Other Access Options

Check CityUHK Library

Permanent Link

Right click to copy link

Cite this

@inproceedings{ef0c249f05aa4bb294839fa29c635347,

title = "The Impact of Anti-phishing Laws on IT and Security Investment",

abstract = "Many companies have been attacked by phishing leading to serious financial loss. In the United States, 23 states have enacted anti-phishing laws to ensure information security. However, the punishment rules of each state are different and the effects of the laws vary. Therefore, it is meaningful to study what kind of laws are the most effective to motivate firms to make appropriate IT and security investment decisions against phishing. Moreover, we posit that multi-site companies that operate in both with-law state and without-law state may have different IT and security investment decisions. We have collected 530 thousand corporates{\textquoteright} investment data from 2010 and 2017. We plan to apply propensity score matching method and difference-in-difference model to answer our research questions. We hope that we can get some insights on developing effective anti-phishing laws and provide governments and regulatory agencies with some suggestions to motivate firms to adopt better anti-phishing solutions.",

keywords = "Anti-phishing law, IT investment, security investment",

author = "Xiaoxiao Wang and Li, \{Wilson Weixun\} and Leung, \{Alvin Chung Man\} and Yue, \{Wei Thoo\}",

note = "Research Unit(s) information for this publication is provided by the author(s) concerned.; 23rd Pacific Asia Conference on Information Systems (PACIS 2019) : Secure ICT Platform for the 4th Industrial Revolution, PACIS 2019 ; Conference date: 08-07-2019 Through 12-07-2019",

year = "2019",

month = jul,

language = "English",

series = "Proceedings of the Pacific Asia Conference on Information Systems, PACIS",

publisher = "Association for Information Systems",

editor = "Dongming Xu and James Jiang and Hee-Woong Kim",

booktitle = "PACIS 2019 Proceedings",

address = "United States",

url = "http://www.pacis2019.org/, http://www.pacis2019.org/program/show.php?lang=en\&id=356, https://aisel.aisnet.org/pacis2019/",

}

Wang, X , Li, WW , Leung, ACM & Yue, WT 2019, The Impact of Anti-phishing Laws on IT and Security Investment. in D Xu, J Jiang & H-W Kim (eds), PACIS 2019 Proceedings. Proceedings of the Pacific Asia Conference on Information Systems, PACIS, Association for Information Systems, 23rd Pacific Asia Conference on Information Systems (PACIS 2019), Xi'an, China, 8/07/19. <https://aisel.aisnet.org/pacis2019/60/>

The Impact of Anti-phishing Laws on IT and Security Investment. / Wang, Xiaoxiao ; Li, Wilson Weixun ; Leung, Alvin Chung Man et al.
PACIS 2019 Proceedings. ed. / Dongming Xu; James Jiang; Hee-Woong Kim. Association for Information Systems, 2019. (Proceedings of the Pacific Asia Conference on Information Systems, PACIS).

Research output: Chapters, Conference Papers, Creative and Literary Works › RGC 32 - Refereed conference paper (with host publication) › peer-review

TY - GEN

T1 - The Impact of Anti-phishing Laws on IT and Security Investment

AU - Wang, Xiaoxiao

AU - Li, Wilson Weixun

AU - Leung, Alvin Chung Man

AU - Yue, Wei Thoo

N1 - Research Unit(s) information for this publication is provided by the author(s) concerned.

PY - 2019/7

Y1 - 2019/7

N2 - Many companies have been attacked by phishing leading to serious financial loss. In the United States, 23 states have enacted anti-phishing laws to ensure information security. However, the punishment rules of each state are different and the effects of the laws vary. Therefore, it is meaningful to study what kind of laws are the most effective to motivate firms to make appropriate IT and security investment decisions against phishing. Moreover, we posit that multi-site companies that operate in both with-law state and without-law state may have different IT and security investment decisions. We have collected 530 thousand corporates’ investment data from 2010 and 2017. We plan to apply propensity score matching method and difference-in-difference model to answer our research questions. We hope that we can get some insights on developing effective anti-phishing laws and provide governments and regulatory agencies with some suggestions to motivate firms to adopt better anti-phishing solutions.

AB - Many companies have been attacked by phishing leading to serious financial loss. In the United States, 23 states have enacted anti-phishing laws to ensure information security. However, the punishment rules of each state are different and the effects of the laws vary. Therefore, it is meaningful to study what kind of laws are the most effective to motivate firms to make appropriate IT and security investment decisions against phishing. Moreover, we posit that multi-site companies that operate in both with-law state and without-law state may have different IT and security investment decisions. We have collected 530 thousand corporates’ investment data from 2010 and 2017. We plan to apply propensity score matching method and difference-in-difference model to answer our research questions. We hope that we can get some insights on developing effective anti-phishing laws and provide governments and regulatory agencies with some suggestions to motivate firms to adopt better anti-phishing solutions.

KW - Anti-phishing law

KW - IT investment

KW - security investment

UR - https://www.scopus.com/pages/publications/85089210636

UR - https://www.scopus.com/record/pubmetrics.uri?eid=2-s2.0-85089210636&origin=recordpage

M3 - RGC 32 - Refereed conference paper (with host publication)

T3 - Proceedings of the Pacific Asia Conference on Information Systems, PACIS

BT - PACIS 2019 Proceedings

A2 - Xu, Dongming

A2 - Jiang, James

A2 - Kim, Hee-Woong

PB - Association for Information Systems

T2 - 23rd Pacific Asia Conference on Information Systems (PACIS 2019)

Y2 - 8 July 2019 through 12 July 2019

ER -

The Impact of Anti-phishing Laws on IT and Security Investment

Abstract

Publication series

Conference

Bibliographical note

Research Keywords

Access Output

Other Access Options

Permanent Link

Other Files and Links

Fingerprint

Cite this