The Role of Internal Auditors Characteristics in Cybersecurity Risk Assessment in Financial-Based Business Organisations: A Conceptual Review

• Autores: Alih Usman, Ayoib Che Ahmad, Salau Olarinoye Abdulmalik
• Localización: International Journal of Professional Business Review: Int. J. Prof.Bus. Rev., ISSN 2525-3654, ISSN-e 2525-3654, Vol. 8, Nº. 8, 2023 (Ejemplar dedicado a: Continuous publication; e02907)
• Idioma: inglés
• DOI: 10.26668/businessreview/2023.v8i8.2922
• Enlaces
  • Texto completo (pdf)
• Resumen

  • Purpose: This paper aims to establish a theoretical framework that will enhance the examination of the role of internal auditors in cybersecurity risk assessment in financial-based business organizations. Financial-based business organizations are institutions or companies that render financial services to public and private stakeholders in an economy. It is a powerful sector in the economy of every country. This drive poses a lot of challenges to organizations. Hence, business organizations strategically devised a means to safeguard the integrity, confidentiality, and availability of information. Also, innovation poses many risks and threats to the internal audit function in an organization.

      Theoretical Framework/Findings: Using the competency and planned behaviour theories (McClelland 1973 and Ajzen,1991), this study disclosed that the task performance of cybersecurity risk assessment by the internal auditor is influenced by the required internal auditor’s characteristics of professional ethics of integrity and objectivity, personality traits, professional skills competency professional knowledge competency and deterrence and rewards to advise the management on the implications of cyber security risk on business organisations for monitoring and mitigations.

      Methodology: A literature review approach is adopted to highlight the role of internal auditors in cyber security risk assessment in financial–based business organizations.

      Research Limitation/Implication: This conceptual paper has consequences for the practice of internal auditing. This approach is helpful to academic scholars in testing it out in the real world. This model is helpful to practitioners when evaluating the function of IAs in the cybersecurity risk assessment context.

      Originality/Values: Earlier auditing-related studies haven't addressed this problem. This study makes an effort to close such a gap and investigate the subject of the internal auditor’s characteristics and cyber security risk assessment among financial-based organizations.

• Referencias bibliográficas
  • Abu-Musa, A. A. (2006). Investigating the Perceived Threats of Computerized Accounting Information Systems in Developing Countries: An Empirical...
  • Ajiji, Y. M. (2019). Cybersecurity Issued in Nigeria and Challenges. International Journal of Advanced Research in Computer Science and Software...
  • Ajzen, I. (1991). The theory of planned behabehavioururnal of Organizational Behavior and Human Decision Processes, 50(2), 179–211. https://doi.org/10.1016/0749-5978(91)90020-T
  • Albawwat, I.E., Al-Hajaia. M.E.,& Al Frijat, Y. . (2021). The Relationship Between Internal Auditors’ Personality Traits, Internal Audit...
  • Aldasoro, I., Gambacorta, L., & Giudici, P. (2020). Operational and cyber risks in the financial sector. Journal of Accounting and Economics,...
  • Alhazmi, A. K. (2015). Conceptual Model for the Academic Use of Social Networking Sites from Student Engagement Perspective. Conference on...
  • Alih Usman, Samuel, P. & Sadiq, H. (2019). Job Satisfaction and Workers Performance in Kogi State Public Sector.Journal of Leadership...
  • Ayoib Che-Ahmad & Salau Olarinoye Abdulmalik (2022). IT investment and corporate performance: Evidence from Malaysia, Cogent Business...
  • Babo,S.Alon,I.& Paltrinieri, A (2020). Corruption in international business: A review and research agenda.International Business Revie...
  • Bade, A. M., & Mohammed, I. (2019). Cybersecurity Capability Maturity Model for Critical Information Technology Infrastructure Among Nigeria...
  • Baron, R. M., & Kenny, D. A. (1986). The moderator–mediator variable distinction in social psychological research: Conceptual, strategic,...
  • Betti, N., & Sarens, G. (2020a). Understanding the internal audit function in a digitalised business environment. Journal of Accounting...
  • Betti, N., & Sarens, G. (2020b). Understanding the internal audit function in a digitalised business environment. https://doi.org/10.1108/JAOC-11-2019-0114
  • Bidabad, B., & Sherafati, M. (2016). Operational ethical banking in Rastin Banking: (Professional ethics, auditing, inspection, control,...
  • Bondarenko, N., & Kryzhanovska, O. (2020). Professional Values and Ethics as a Factor of Increasing Trust in the Profession of the Accountant....
  • Brogi, M., Arcuri, M. C., & Gandolfi, G. (2018). The effect of cyber-attacks on stock returns. Corporate Ownership and Control, 15(2),...
  • Carlton, M., & Levy, Y. (2017). Cybersecurity skills : Foundational theory and the cornerstone of advanced persistent threats ( APTs )...
  • Carlton, M., Levy, Y., & Ramim, M. (2019). Mitigating cyber-attacks through the measurement of non-IT professionals’ cybersecurity skills....
  • Clarkson, P. M., Li, Y., Richardson, G. D., & Vasvari, F. P. (2008). Revisiting the relation between environmental performance and environmental...
  • Czerniawska, M., & Szydło, J. (2021). Do values relate to personality traits and if so, in what way? – analysis of relationships. Psychology...
  • Dellai, H. (2015). Factors Affecting the Internal Audit Effectiveness. Factors Affecting the Internal Audit Effectiveness, 12(2), 89–109....
  • Dzikrullah, A. D., Harymawan, I., & Ratri, M. C. (2020). Internal audit functions and audit outcomes: Evidence from Indonesia. Cogent...
  • Elaigwu Moses, Ayoib Che-Ahmad & Salau Olarinoye Abdulmalik | (2020) Board governance mechanisms and sustainability reporting quality:...
  • Gordon, L. A., Loeb, M. P., & Lucyshyn, W. (2003). Sharing information on computer systems security: An economic analysis. Journal of...
  • Gordon, L. A., Loeb, M. P., Lucyshyn, W., & Zhou, L. (2015). Externalities and the Magnitude of Cyber Security Underinvestment by Private...
  • Haapamäki, E., & Sihvonen, J. (2019a). Cybersecurity in accounting research. Managerial Auditing Journal, 34(7), 808–834. https://doi.org/10.1108/MAJ-09-2018-2004
  • Haapamäki, E., & Sihvonen, J. (2019b). Research on International Standards on Auditing: Literature synthesis and opportunities for future...
  • Hamshari, Y. M. (2021). The Relationship of Professional Skepticism to the Risks of Auditing and Internal Control and the Discovery of Fraud...
  • Hausken, K. (2017). Information Sharing Among Cyber Hackers in Successive Attacks. International Game Theory Review, May. https://doi.org/10.1142/S0219198917500104
  • IFAC. (2011). IFAC Sustainability Framework 2.2.0 Noitle. In PAIB Committee.
  • IFAC. (2015). IES 3 - Professional Skills and General Education. 58–64. https://www.ifac.org/system/files/publications/files/ies-3-professional-skills-1.pdf
  • IIA. (2017a). Measuring Internal Audit Effectiveness and Efficiency.
  • IIA. (2017b). Measuring Internal Audit Effectiveness and Efficiency. In International Professional Practices Framework, The Institute of Internal...
  • Islam, S. (2019). Md. Shariful Islam, DBA, CPA, CMA. 1–4.
  • Islam, S., Farah, N., & Stafford, T. F. (2018). Factors associated with ssecurity/cybersecurityaudit by internal audit function An international...
  • Ismail, I. A. (2021). Understanding quantitative and qualitative research methods : A theoretical perspective for young researchers Understanding...
  • Khando, K., Gao, S., Islam, S. M., & Salman, A. (2021). Enhancing employees information security awareness in private and public organisations:...
  • Kuijck, B. Van, & Paresi, V. (2020). Personality of internal auditors ; an exploratory study in The Netherlands Relevance to practice...
  • Kure, H. I., & Islam, S. (2019). Assets focus risk management framework for critical infrastructure cybersecurity risk management. IET...
  • Lan, Y., Wang, L., & Zhang, X. (2013). Determinants and features of voluntary disclosure in the Chinese stock market. China Journal of...
  • Li, Y., & Liu, Q. (2021). A comprehensive review study of cyber-attacks and cyber security ; Emerging trends and recent developments....
  • Lois, P., Drogalas, G., Karagiorgos, A., Thrassou, A., & Vrontis, D. (2021). Internal auditing and cyber security: audit role and procedural...
  • Luthan, E., Ali, S., & Hairaty, E. (2019). the Professionalism, Competence, Organizational Commitment & Job Satisfaction on the Performance...
  • Macnish, K., & van der Ham, J. (2020). Ethics in cybersecurity research and practice. Technology in Society, 63(December 2019), 101382....
  • Mahoney, L. S., Thorne, L., Cecil, L., & LaGore, W. (2013). A research note on standalone corporate social responsibility reports: Signaling...
  • Marei, A., Mustafa, J. A., Othman, M. D., Daoud, L., Lutfi, A., Al-Amarneh, A. (2023) The Moderation of Organizational Readiness on the Relationship...
  • McClelland, D. C. (1973). Testing for competence rather than for “intelligence”. Journal of American Psychologist, 28(1), 1–14. https://doi.org/10.1037/h0034092
  • Mooradian, T., Renzl, B., & Matzler, K. (2006). Who trusts? Personality, trust and knowledge sharing. Management Learning, 37(4), 523–540....
  • NIST. (2018). NIST Cybersecurity Framework Assessment for [ Name of company ]. NIST, 1105.
  • Özçelik, G., & Ferman, M. (2006). Competency Approach to Human Resources Management: Outcomes and Contributions in a Turkish Cultural...
  • Pasculli, L. (2020). The Global Causes of Cybercrime and State Responsibilities . Towards an Integrated Interdisciplinary Theory. 2(April).
  • Pérez-sánchez, B., González, M., & Perea, C. (2021). A New Computational Method for Estimating Simultaneous Equations Models Using Entropy...
  • Poorchangizi, B., Borhani, F., Abbaszadeh, A., Mirzaee, M., & Farokhzadian, J. (2019). The importance of professional values from nursing...
  • Pricewaterhouse Coopers, P. (2017). COSO Internal Control Framework.
  • Products, G., Bochkovskyi, A., & Sapozhnikova, N. Y. (2018). THE THEORY AND PRACTICE OF RISK ASSESSMENT OF PROFESSIONAL THE THEORY AND...
  • Radoilska, L., & Ceva, E. (2021). Ethical Theory and Moral Practice at 24 Content courtesy of Springer Nature , terms of use apply . Rights...
  • Şahin, R., Öztürk, Ş., & Ünalmiş, M. (2009). Professional ethics and moral values in Akhi institution. Procedia - Social and Behavioral...
  • Salleh, K., & Aziz, R. A. (2014). Traits , skills and ethical values of public sector forensic accountants : an empirical investigation....
  • Shankaraiah, K. & Amiri, S. M. S. (2017). Audit committee quality and financial reporting quality: a study of selected Indian companies....
  • Sohrabi Safa, N., Von Solms, R., & Furnell, S. (2016). Information security policy compliance model in organizations. Computers and Security,...
  • Soto, C. J., & Jackson, J. J. (2013). Five-Factor Model of Personality. Psychology, January 2020. https://doi.org/10.1093/obo/9780199828340-0120
  • Soto, C. J., & John, O. P. (2009). Ten facet scales for the Big Five Inventory: Convergence with NEO PI-R facets, self-peer agreement,...
  • Steinbart, P. J., Raschke, R., Gal, G., & Dilla, W. N. (2015). The Influence of Internal Audit on Information System Effectiveness: Perceptions...
  • Steinbart, P. J., & Raschke, R. L. (2018). The Relationship between Internal Audit and Information Security : An Exploratory Investigation...
  • Sunyoto, Y. (2020). Auditor’s experience, professional commitment, and knowledge on financial audit performance in indonesia. International...
  • Suzuki, M., Ando, N., & Nishikawa, H. (2022). Discontinuity of required oral and literacy skills across job roles in achieving high work...
  • Tedeholm, P. G., Sjöberg, A., & Larsson, A. C. (2021). Personality traits among Swedish counterterrorism intervention unit police officers:...
  • Tehranineshat, B., Torabizadeh, C., & Bijani, M. (2020). A study of the relationship between professional values and ethical climate and...
  • Thompson, E. C. (2018). Cybersecurity Incident Response, How to Contain, Eradicate, and Recover from Incidents. In Apress.
  • Usman Alih, Elaigwu M. &Salau R.K. (2021).Cybersecurity Risk Assessment and The Role of Internal Audit Function Among The Listed Financial...
  • Vuko, T., Cular, M., & Dra, M. (2022). International Journal of Accounting Effectiveness of cybersecurity audit. 44(January 2021). https://doi.org/10.1016/j.accinf.2021.100548
  • Vuko, T., & Slapnicar, S. (2021). Key Drivers of Cybersecurity Audit Effectiveness : a neo-institutional Key Drivers of Cybersecurity...
  • Yanita., Yusniar., Iis, E. Y., Abubakar, R., Maimunah, S. (2023) The Effect of Information Technology Utilization and Employee Competence...
  • Yunus, M. R. B. M., Wahab, N. B. A., Ismail, M. S., & Othman, M. S. (2018). The Importance Role of Personality Trait. International Journal...
  • Zweighaft, D. (2017). Business email compromise and executive impersonation : are financial institutions exposed ? Journal of Investment Compliance,...
  • Zwilling, M. (2022). Trends and Challenges Regarding Cyber Risk Mitigation by CISOs — A Systematic Literature and Experts ’ Opinion Review...
  • Zwilling, M., Klien, G., Lesjak, D., Wiechetek, Ł., Cetin, F., & Basim, H. N. (2022). Cyber Security Awareness , Knowledge and Behavior...