Cybersecurity in business Dissertation Topics

Cybersecurity in business Dissertation Topics

Info: Cybersecurity in business Dissertation Topics
Published: 28th January in Cybersecurity in business Dissertation Topics

Share this:

Cybersecurity in business Dissertation Topics I phdassistance.com

Introduction

Cybersecurity has turned out to be a critical matter in the areas of business, management, and accounting. It no longer concerns simply technical measures but also risk communication, investor interaction, employee conduct, managerial responsibility, and governance practices. On the one hand, academic interest in organisational cybersecurity has increased, and on the other hand, many areas still lack studies, especially those related to the human, strategic, and institutional dimensions. The PhD dissertation topics presented below are thus designed to fill these gaps in research. Each topic is well-defined, theory-based, and appropriate for doctoral research, and consequently, it can lead to many academic contributions as well as practical relevance in contemporary corporate contexts.

Dissertation Topic 1:

Corporate Cybersecurity Risk Disclosure and Investor Response: A Longitudinal Analysis of Reporting Quality, Transparency, and Market Reactions

Background Context

Cybersecurity risks increasingly affecting the value of firms and the trust of stakeholders have made the corporate disclosure of such risks a vital part of both financial and non-financial reporting. The regulatory attention to this has been increasing, but the researchers in business and accounting are still mainly looking at the market reactions to the announcements of cybersecurity breaches instead of the routine cybersecurity risk disclosures contained in annual reports, sustainability reports, and integrated reports. According to the bibliometric review by Al-Shattarat et al. (2025), it is still an underdeveloped area of study in accounting-oriented cybersecurity research that raises issues of disclosure quality, transparency, and consistency. Consequently, it remains unclear how investors will interpret the cybersecurity-related information in the case of no actual breach events.

PhD-Level Verification

While earlier research has analysed how markets react to announcements of cybersecurity breaches, there is practically no longitudinal research that investigates the routine announcements of cybersecurity risks and the changes of their qualitative properties over time. The ongoing accounting and disclosure studies are not systematically evaluating the quality, consistency, or transparency of the disclosures in the absence of breach events, and they are not providing the investors with sufficient explanations on how to interpret such information. The lack of longitudinal and disclosure-focused analysis posits a golden opportunity for PhD-level research that will combine accounting theory, disclosure quality measurement and investor behaviour.

Research Questions
  • What changes have there been in the quality and transparency of corporate disclosures around cybersecurity risks over time?
  • What factors specific to firms affect their practices of disclosing cybersecurity?
  • What is the reaction of investors to the differences in the quality of cybersecurity disclosures when there are no security breaches?
  • PhD-Level Contributions
  • Creation of a framework spanning several years for measuring the quality of cybersecurity disclosure
  • Data to support the idea of a connection between cybersecurity reporting and investor reaction
  • Enhancements to the literature on accounting, disclosure, and corporate transparenc
  • Suggested Readings:

    Al-Shattarat, W., et al. (2025). A decade of cybersecurity research in business, management, and accounting: Bibliometric analyses and future research directions. Cogent Business & Management, 12(1)  https://www.tandfonline.com/doi/epdf/10.1080/23311975.2025.2544230?needAccess=true

    Dissertation Topic 2:

    Employee Security Awareness, Organisational Culture, and Cybersecurity Risk Exposure: An Organisational-Level Study of Compliance, Behaviour, and Incident Vulnerability

    Background Context

    Human and behavioural factors are still responsible for a major share of cybersecurity incidents, although the majority of the investments in cybersecurity have gone to technological safeguards. Up until now, most of the research in business and management has been directed towards finding technical solutions, thus leaving security awareness of the employees, organisational culture, and compliance behaviour as the least researched areas. According to the bibliometric findings of Al-Shattarat et al. (2025), there is a huge discrepancy between the technical cybersecurity research and the studies focused on human-centric risk factors. Knowing how organisational culture and employee behaviour affect cybersecurity vulnerability is vital for designing comprehensive risk management strategies.

    PhD-Level Verification

    The up-to-date cybersecurity investigation in business and management is still focused mainly on technology, with scant empirical inquiry into the people and organisations that carry the risk of cybersecurity. Employee awareness and culture are often recognised as key factors, but they are seldom scrutinised through solid organisational-level models that connect behaviour to real risk exposure or incident vulnerability. The absence of empirically validated frameworks that link awareness, culture, and cybersecurity outcomes is a reason for an extensive doctoral study.

    Research Questions
  • To what extent would the employee’s security awareness affect the adherence to security policies?
  • In what ways does the company’s culture affect the employees’ attitudes and practices towards cybersecurity?
  • What are the behavioural factors that cause different susceptibilities to cyber incidents?
  • PhD-Level Contributions

  • A human-centric framework connecting employee conduct to exposure to cybersecurity risks
  • Empirical data proving the significance of organisational culture in cybersecurity compliance
  • Valuable suggestions regarding the development of efficient cybersecurity training and awareness initiative
  • Suggested Readings

    Al-Shattarat, W., et al. (2025). A decade of cybersecurity research in business, management, and accounting: Bibliometric analyses and future research directions. Cogent Business & Management, 12(1)  https://www.tandfonline.com/doi/epdf/10.1080/23311975.2025.2544230?needAccess=true

    Dissertation Topic 3:

    Cybersecurity Capabilities and Firm Performance: An Empirical Examination of Strategic Value Creation, Competitive Advantage, and Resource Deployment

    Background Context

    Employee awareness programs often do not result in behaviour change, particularly since there is typically a knowing-doing gap. This study investigates the effect of behavioural reinforcement strategies, such as rewards and punishments, on compliance with cybersecurity policies that concern employee behaviours. Using reinforcement theory, this study seeks to clarify the most appropriate strategies for improving employee security-related behaviours.

    PhD Level Verification

    While the resource-based view frequently features in discussions about cybersecurity capabilities, existing research very seldom empirically tests RBV assumptions or investigates the ways in which cybersecurity resources lead to sustained firm performance. A large portion of the research is based on proxy measures or short-term outcomes, which leads to fragmented evidence. It calls for PhD research to effectively operationalise cybersecurity capabilities, analyse their interplay with other strategic resources, and measure the implications for the long-run performance.

    Research Questions
  • What is the effect of reinforcement strategies on employee compliance with cybersecurity policies?
  • What type of incentives (positive and negative) are most effective in encouraging compliance with information security policies?
  • How can organisations develop reinforcement systems for behaviour that maximises long-term compliance with security policies?
  • PhD-Level Contributions
  • A behavioural reinforcement type of intervention may yield more compliance with respect to information security policies that is long-lasting and meaningful.
  • Results may also aid organisations in refining their compliance programs through new and potentially more effective behavioural incentives.
  • It may provide insight into aligning organisational rewards and recognition to be consistent with security objectives.
  • Suggested Readings

    Al-Shattarat, W., et al. (2025). A decade of cybersecurity research in business, management, and accounting: Bibliometric analyses and future research directions. Cogent Business & Management, 12(1)  https://www.tandfonline.com/doi/epdf/10.1080/23311975.2025.2544230?needAccess=true

    Dissertation Topic 4:

    Cybersecurity Governance and Managerial Accountability: A Multi-Level Analysis of Internal Controls and Risk Oversight

    Background Context

    Cybersecurity investments are frequently rationalised as unavoidable risk reduction expenses; however, their strategic importance still lacks sufficient empirical research evaluation. The resource-based view is mostly mentioned by prior studies to justify the investments in cybersecurity, yet only a few of them carry out empirical testing to determine if the capabilities associated with cybersecurity indeed work as strategic resources that create sustained competitive advantage. Al-Shattarat et al. (2025) point out that in the area of business and management, cybersecurity research often presupposes performance benefits, but the mechanisms through which these capabilities contribute to firm-level outcomes are not examined rigorously.

    PhD-Level Verification

    Cybersecurity governance has not yet been analysed in detail through the perspectives of managerial accountability and internal control systems. The literature on the topic mostly regards governance as compliance or structural, thus ignoring the distribution of accountability among the management levels and the embedding of control in the mechanisms. A lack of multi-level and governance-oriented empirical research signifies the necessity of a PhD-level study that will incorporate the perspectives of corporate governance, management control and cybersecurity oversight.

    Research Questions
  • Do the measures of cybersecurity help to maintain the ongoing performance of the company?
  • What organisational resources amplify the strategic value of the investments in cybersecurity?
  • In what way do the company’s cybersecurity capabilities blend with other firm-level strategic assets?
  • Contributions at the PhD-Level
  • Proving through evidence that the capabilities in cybersecurity are such strategic resources
  • Broadening the resource-based view regarding the cybersecurity issue
  • Providing top-level insights that will significantly help the management to make decisions about the investment in cybersecurity
  • Suggested Readings

    Al-Shattarat, W., et al. (2025). A decade of cybersecurity research in business, management, and accounting: Bibliometric analyses and future research directions. Cogent Business & Management, 12(1)  https://www.tandfonline.com/doi/epdf/10.1080/23311975.2025.2544230?needAccess=true

    Dissertation Topic 5:

    Institutional Contexts and Cybersecurity Governance: A Comparative Study of Regulatory Compliance and Organisational Responses in Emerging Economies

    Background Context

    Cybersecurity governance is a factor that is different in every country, and this is mainly the result of the differences in regulatory frameworks, institutional settings, and enforcement mechanisms. The majority of the existing cybersecurity research in the area of business and management is heavily focused on developed economies, which in turn renders the current governance models less applicable in the case of the emerging markets. Al-Shattarat et al. (2025) underline the necessity of carrying out context-sensitive research with an institutional perspective in order to clarify how the factors affect the organisation’s cybersecurity responses. The whole area of cybersecurity governance in the context of emerging economies is full of lessons for the areas of regulatory compliance, organisational adaptation, and the effectiveness of policies.

    PhD-Level Verification

    The geography of cybersecurity governance research remains limited to the developed world, and therefore, it is of little use to the theoretical and policy domains because it is not universally applicable. Institutional theory is generally not used in the existing literature to elaborate on how the regulatory, enforcement, and cultural aspects influence the cybersecurity practices of organisations. A doctoral comparative study of emerging economies is thus needed for the purpose of making governance insights that are sensitive to context and sequence, and for the extension of the theory of cybersecurity to the duo of the developed and developing economies.

    Research Questions
  • In what ways do regulatory and institutional environments affect the governance practices in cybersecurity?
  • How do organisations deal with the different requirements of compliance with cybersecurity?
  • What are the institutional factors that account for the differences in the effectiveness of the governance of cybersecurity?
  • PhD-Level Contributions
  • A framework for comparing institutions regarding the governance of cybersecurity
  • Empirical proof coming from the contexts of emerging economies
  • Suggestions for policies directed towards regulators and organisations
  • Suggested Readings

    Al-Shattarat, W., et al. (2025). A decade of cybersecurity research in business, management, and accounting: Bibliometric analyses and future research directions. Cogent Business & Management, 12(1)  https://www.tandfonline.com/doi/epdf/10.1080/23311975.2025.2544230?needAccess=true

    Conclusion

  • Looking to select a focused and impactful PhD topic in cybersecurity research within business, management, or accounting
  • Connect with us to explore how your doctoral research can address critical gaps in cybersecurity governance, disclosure, human behaviour, and firm performance through a structured, PhD-level research approach.
  • Share this:

    Cite this work

    Study Resources

    Free resources to assist you with your university studies!

    Research Questions