The impact of country institutional factors on firm disclosure: Cybersecurity disclosures in Chinese cross-listed firms

This paper explores differences in qualitative disclosures between Chinese firms that cross-list in the US and their US domestic counterparts that reflect firm-level cybersecurity awareness. Consistent with the strong regulatory framework in China externalizing cybersecurity and thus reducing the need to disclose individual company cybersecurity awareness, we find that relative to their US domestic counterparts, Chinese cross-listed firms in the US provide less cybersecurity disclosure. However, market valuation of these cybersecurity disclosures is higher for Chinese cross-listed firms, suggesting that the market more favorably views Chinese firm disclosures that communicate a greater level of internalized cybersecurity awareness. We also explore the effect of institutional setting on market valuation of cybersecurity awareness through an event study surrounding the arrest of Huawei’s CFO. This event highlighted cybersecurity weaknesses at Huawei, potentially more generally challenging the effectiveness of Chinese cybersecurity policies. We find a negative stock market reaction to the event, but only for our Chinese sample. These results provide evidence that the market’s view of company cybersecurity awareness is sensitive to changes in perceptions of companies’ institutional setting.