“…However, while cyber-security incidents represent an obvious threat for breached firms, they also carry risks for external auditors (CAQ, 2014;Joe et al, 2015). External auditors provide objective and independent assurance with respect to the quality of a firm's financial reporting and are responsible for auditing financial statements and internal controls over financial reporting (ICFR) (Christopher, Sarens, & Leung, 2009;Stefaniak, Houston, & Cornell, 2012;CAQ, 2014;Kajüter, Klassmann, & Nienhaus, 2016;Frino, Palumbo, & Rosati, 2017). As such, they provide assurance to external stakeholders about the quality and reliability of the information reported in the financial statements of their clients.…”