Impact of Information Technology (IT) Security Information Sharing among Competing IT Firms on Firm's Financial Performance: An Empirical Investigation

Traditionally, IT firms closely guard the management and control of critical information assets. A group of IT firms, however, adopted a different approach and formed an organization with the goal of sharing critical IT security information with industry peers (firms in the same industry that do not directly compete) and competitors to more effectively manage IT security. The inherent vulnerability in sharing critical information with other (potentially competing) firms presents an interesting, coopetition paradox for firms. Drawing from the theoretical foundations of the relational view of the firm that resolves the coopetition paradox, we conducted an empirical test to determine whether security information sharing impacts firm's financial performance. Our findings suggest that IT firms engaged in interfirm security information sharing outperform their industry peers in terms of operational costs and overall profitability.

[1]  Anindya Ghose,et al.  The Economic Incentives for Sharing Security Information , 2004, Inf. Syst. Res..

[2]  Lode Li Cournot Oligopoly with Information Sharing , 1985 .

[3]  L. Camp Economics of Information Security , 2006 .

[4]  Huseyin Cavusoglu,et al.  The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers , 2004, Int. J. Electron. Commer..

[5]  Thiagarajan Ravichandran,et al.  Effect of Information Systems Resources and Capabilities on Firm Performance: A Resource-Based Perspective , 2005, J. Manag. Inf. Syst..

[6]  Manohar U. Kalwani,et al.  Long-Term Manufacturer-Supplier Relationships: Do They Pay off for Supplier Firms? , 1995 .

[7]  Huseyin Cavusoglu,et al.  Economics of IT Security Management , 2004, Economics of Information Security.

[8]  C. Shapiro Exchange of Cost Information in Oligopoly , 1986 .

[9]  E. Gal‐Or,et al.  Information Transmission—Cournot and Bertrand Equilibria , 1986 .

[10]  Jackie Rees Ulmer,et al.  Reading the Disclosures with New Eyes: Bridging the Gap between Information Security Disclosures and Incidents , 2008, WEIS.

[11]  Alision Joyce Kirby Trade associations as information exchange mechanisms , 1985 .

[12]  Arun Rai,et al.  Interfirm Strategic Information Flows in Logistics Supply Chain Relationships , 2009, MIS Q..

[13]  樊國楨,et al.  資訊分析與分享中心(Information sharing and analysis center,簡稱ISAC )簡介--以美國為例 , 2002 .

[14]  P. Schoemaker,et al.  Strategic assets and organizational rent , 1993 .

[15]  Hsinchun Chen,et al.  A Discrete Stock Price Prediction Engine Based on Financial News , 2010, Computer.

[16]  Robert J. Bennett,et al.  The Logic of Membership of Sectoral Business Associations , 2000 .

[17]  Christian Weiner,et al.  The Impact of Industry Classification Schemes on Financial Research , 2005 .

[18]  H. Sonnenschein,et al.  Fulfilled Expectations Cournot Duopoly with Information Acquisition and Release , 1982 .

[19]  Mo Adam Mahmood,et al.  Measuring the Organizational Impact of Information Technology Investment: An Exploratory Study , 1993, J. Manag. Inf. Syst..

[20]  E. Brynjolfsson,et al.  Paradox Lost? Firm-Level Evidence on the Returns to Information Systems Spending , 1996 .

[21]  Robert M. Brown,et al.  Strategic Information Systems and Financial Performance , 1995, J. Manag. Inf. Syst..

[22]  J. H. Dyer,et al.  Creating and managing a high‐performance knowledge‐sharing network: the Toyota case , 2000 .

[23]  Albert O. Hirschman,et al.  Exit, Voice, and Loyalty , 1970 .

[24]  Yunhao Liu,et al.  Ad-UDDI: An Active and Distributed Service Registry , 2005, TES.

[25]  Eric W. K. Tsang,et al.  Replication and Theory Development in Organizational Science: A Critical Realist Perspective , 1999 .

[26]  X. Vives Trade Association Disclosure Rules, Incentives to Share Information, and Welfare , 1990 .

[27]  Heather A. Smith,et al.  The relationship between information technology use and organizational performance , 1993 .

[28]  Richard N. Clarke Collusion and the Incentives for Information Sharing , 1983 .

[29]  Shu Han,et al.  Competing through Services: Service Migration of Information Technology Product Vendors , 2010, 2010 43rd Hawaii International Conference on System Sciences.

[30]  Jeffrey H. Dyer,et al.  The Relational View: Cooperative Strategy and Sources of Interorganizational Competitive Advantage , 1998 .

[31]  Varun Grover,et al.  E-commerce and corporate strategy: an executive perspective , 2003, Inf. Manag..

[32]  Vernon J. Richardson,et al.  Information Transfer among Internet Firms: The Case of Hacker Attacks , 2003, J. Inf. Syst..

[33]  R. Gulati,et al.  The dynamics of learning alliances: competition, cooperation, and relative scope , 1998 .

[34]  Emma Disley,et al.  Incentives and Challenges for Information Sharing in the Context of Network and Information Security , 2012 .

[35]  L. Richard Ye,et al.  Information technology and firm performance: Linking with environmental, strategic and managerial contexts , 1999, Inf. Manag..

[36]  Radhika Santhanam,et al.  Issues in Linking Information Technology Capability to Firm Performance , 2003, MIS Q..

[37]  D. Teece Profiting from technological innovation: Implications for integration, collaboration, licensing and public policy , 1993 .

[38]  Marion G. Sobol,et al.  The relationship between computerization and performance: A strategy for maximizing the economic benefits of computerization , 1983, Inf. Manag..

[39]  Anandhi S. Bharadwaj,et al.  A Resource-Based Perspective on Information Technology Capability and Firm Performance: An Empirical Investigation , 2000, MIS Q..

[40]  Lawrence A. Gordon,et al.  Sharing Information on Computer Systems Security: An Economic Analysis , 2003 .

[41]  X. Vives Duopoly information equilibrium: Cournot and bertrand , 1984 .

[42]  E. Gal‐Or,et al.  Information Sharing in Oligopoly , 1985 .

[43]  Huseyin Cavusoglu,et al.  The Value of Intrusion Detection Systems in Information Technology Security Architecture , 2005, Inf. Syst. Res..

[44]  John J. Morris,et al.  The Impact of Enterprise Resource Planning (ERP) Systems on the Effectiveness of Internal Controls over Financial Reporting , 2011, J. Inf. Syst..

[45]  R. Grant Chapter 8 – Prospering in Dynamically-Competitive Environments: Organizational Capability as Knowledge Integration , 1999 .

[46]  Peter Mykytyn,et al.  Evaluating the Financial Performance of Business Method Patent Owners Evaluating the Financial Performance of Business Method Patent Owners , 2022 .

[47]  Paul Alpar,et al.  A Microeconomic Approach to the Measurement of Information Technology Value , 1990, J. Manag. Inf. Syst..

[48]  Ashish Garg,et al.  Quantifying the financial impact of IT security breaches , 2003, Inf. Manag. Comput. Secur..

[49]  W. Powell,et al.  Interorganizational Collaboration and the Locus of Innovation: Networks of Learning in Biotechnology. , 1996 .

[50]  Aleksandra Mojsilovic,et al.  A logistic regression framework for information technology outsourcing lifecycle management , 2007, Comput. Oper. Res..

[51]  B. Kogut,et al.  INTERFIRM COOPERATION AND STARTUP INNOVATION IN THE BIOTECHNOLOGY INDUSTRY. , 1993 .

[52]  Wenpin Tsai Social Structure of Coopetition Within a Multiunit Organization: Coordination, Competition, and Intraorganizational Knowledge Sharing , 2002 .

[53]  Derek Oler,et al.  What's My Line? A Comparison of Industry Classification Schemes for Capital Market Research , 2003 .

[54]  Xavier Vives,et al.  Technological competition, uncertainty, and oligopoly , 1989 .

[55]  Varun Grover,et al.  Strategic Information Systems Revisited: A Study in Sustainability and Performance , 1994, MIS Q..

[56]  Jean-Pierre Ponssard,et al.  The Strategic Role of Information on the Demand Function in an Oligopolistic Market , 1979 .

[57]  A. Hirschman,et al.  Shifting Involvements: Private Interest and Public Action , 1982 .

[58]  Michael Raith A General Model of Information Sharing in Oligopoly , 1993 .

[59]  Huseyin Cavusoglu,et al.  Model for Evaluating , 2022 .