Do governance determinants contribute to effective management of cybersecurity threats posed by misleading information? Evidence from Canadian organizations

Purpose This study aims to explore governance solutions adopted by Canadian organizations to address the cybersecurity threats posed by misleading information. Design/methodology/approach This paper investigates the impact of several organizations’ governance determinants on five types of misleading information: phishing incidents, impersonation, fake news or false stories, fake reviews and other types of misleading information. Using nonparametric statistical techniques and regression models, this study assessed regional variations in responding to misleading information challenges and the effectiveness of mitigation strategies. Findings These results reveal that no unique governance solutions have emerged across the jurisdictions, implying that organizations operating in each province have different tolerances for emerging cyber risks and, thus, adopted specific strategies to combat them. The results also suggest that the impact exerted by specific governance determinants on misleading information varies across jurisdictions. Research limitations/implications Limitations: The reliance on secondary data may limit the generalization of the results to other countries. Future research should consider additional determinants, such as non-technological organizational factors, and a longitudinal approach to assessing the significance of solutions and the frequency of incidents. Implications: The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Practical implications The study’s findings are expected to contribute to operational and strategic directions that elevate awareness of the growing threat of misleading information in the cyber domain. It provides stakeholders with effective governance solutions that play a critical role in mitigating cybersecurity risks by fostering awareness and detection capabilities. Originality/value This paper offers new insights and practical implications about governance solutions that might be considered in combating specific misleading information portrayed as emerging cyber threats.