In this paper, we draw from research in the information systems (IS) security and management fields to theorize that a firm's social performance, as measured by its engagement in socially responsible (or irresponsible) activities (i.e., corporate social performance (CSP)), affects its likelihood...