The information systems literature and the public press have called for organizations to more closely scrutinize their information technology (IT) controls; however, little more than anecdotal evidence exists on the business value of IT internal control investments, beyond regulatory compliance....

Previous empirical studies examining the relationship between IT capability and accounting-based measures of firm performance report mixed results. We argue that extant research (1) has relied on aggregate overall measures of the firm's IT capability, ignoring the specific type and nature of IT...