The interdependency of information security risks often induces firms to invest inefficiently in IT security management. Cyberinsurance has been proposed as a promising solution to help firms optimize security spending. However, cyberinsurance is ineffective in addressing the investment...

This study examines how the risk-taking motives of top managers drives risk-taking in IT implementations. We use the risk incentives provided in managerial compensation to capture top managers' risk-taking motives, and develop measures of aggressive IT implementation to capture strategic...