The impact of the Sarbanes-Oxley Act on the corporate disclosures of information security activities

This paper empirically examines the impact of the Sarbanes-Oxley Act (SOX) of 2002 on the voluntary disclosure of information security activities by corporations. The empirical evidence provided clearly indicates that SOX is having a positive impact on such disclosure. These findings provide strong indirect evidence that corporate information security activities are receiving more focus since the passage of SOX than before SOX was enacted.