IT internal controls are an important component of an organization's arsenal of internal controls. Upon conceptualizing failures of operational IT systems, or what we call IT operational risk events, as signals of IT internal control weaknesses, we theorize about these events' impact on internal...

How does business complexity affect risk management in financial institutions? The commonly used risk measures rely on either balance-sheet or market-based information, both of which may suffer from identification problems when it comes to answering this question. Balance-sheet measures, such as...