Corporate management boards’ information security orientation: an analysis of cybersecurity incidents in DAX 30 companies

Our study analyzes the impact of cybersecurity incidents (CSIs) at executive level in German blue-chip companies between 2005 and 2018. Using Upper Echelons Theory, we examine effect CSIs on both composition management boards as well their members’ profiles related responsibilities, performing a qualitative in-depth analysis positive cases found. results show that while are common problem for large groups, only few them have addressed IT-related directly through governance. Firms reacted strongly went against general trend, either added new functional unit to board or strengthened functions issue. findings indicate not yet devised strategy deal with CSIs. reshape tend instead take more compliance-oriented approach.