Data breaches can severely damage a firm’s reputation and its customers’ confidence. Firms must therefore continuously invest in security measures to prevent such breaches. However, the effectiveness of security investment has been questioned by both practitioners and academics. We illustrate the bidirectional dynamic relationship between information technology (IT) investment and data breaches moderated by threat and countermeasure security awareness using an eight-year panel of 311 U.S.-listed firms to provide empirical evidence that threat awareness broadens firms’ scope for addressing data-breach issues by investing more in IT than in security. Countermeasure awareness equips firms with sufficient knowledge and experience to ensure effective implementation of IT, which provides more comprehensive protection than security investment alone. Our results suggest that firms should evolve beyond the reactive mindset of solely upgrading security and begin nurturing both threat awareness and countermeasure awareness to address the underlying IT system issues that are the cause of data breaches.

PurposeThe anonymity of the Internet supports an increasing number of deviant behaviors such as secret affairs. This paper aims to investigate whether religiosity has a negative relationship with the incidence of secret affairs in cyberspace and how it moderates the substitution effect between the use of online and off-line channels for such deviant behaviors.Design/methodology/approachThe authors constructed a cross-sectional county-level dataset containing data on US religious adherents' ratios and actual expenditures on a social website related to extramarital affairs. The data were analyzed by ordinary least squares and two-stage least squares regression models.FindingsIn general, religiosity has a negative relationship with secret affairs in cyberspace. It also moderates the relationship between using online (secret affairs websites) and off-line (entertainment facilities) channels for extramarital affairs. The deterrent effect of religiosity is weakened in religious communities with diversified religious teachings/structures and stricter requirements.Originality/valueThis work enriches the understanding of the role of religiosity in online deviant behaviors and provides essential insights for policymakers (e.g. in relation to spillover effects of social norms in cyberspace).