The boardroom firewall: Gender diversity and cybersecurity

Abstract

Cybersecurity risk poses a growing threat to business operations and financial reporting integrity. This study explores whether board gender diversity is associated with enhanced resilience to cyber threats, focusing on its relationship with the likelihood of cybersecurity incidents. Using panel data from US listed firms between 2007 and 2021, we find that gender-diverse boards are significantly less likely to report cyber incidents, with this association concentrated in boards achieving a critical mass of at least three female directors. Substantive representation, rather than symbolic inclusion, appears pivotal as female directors’ participation on key committees, particularly audit committees, is linked to stronger cybersecurity oversight. The relationship is more pronounced in firms where the Chief Executive Officer (CEO) also serves as board chair, where the top management team (TMT) is gender-diverse, and where a dedicated technology committee exists. This underscores the importance of advisory capacity and complementary governance structures. Conversely, the association weakens in boards with longer average director tenure or extensive external networks. To address endogeneity, we leverage the 2017 “Fearless Girl” campaign as a quasi-natural experiment and find consistent results using a difference-in-differences design. These findings contribute to better understanding how governance dynamics shape organizational capacity to navigate complex technological risks.