Cybersecurity threats in financial reporting: An empirical analysis of vulnerabilities and countermeasures

 Corresponding author: Kevin Mukasa Copyright © 2025 Author(s) retain the copyright of this article. This article is published under the terms of the Creative Commons Attribution License 4.0. Cybersecurity threats in financial reporting: An empirical analysis of vulnerabilities and countermeasures Kevin Mukasa 1, *, Jennifer Muhindo 2, Doreen Kitakufe 2 and Ivan Zimbe 2 1 Department of Business Administration, Maharishi International University, Fairfield, IA, USA. 2 Department of Computer Science, Maharishi International University, Fairfield, IA, USA. World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 Publication history: Received on 05 August 2025; revised on 11 September 2025; accepted on 13 September 2025 Article DOI: https://doi.org/10.30574/wjarr.2025.27.3.3205 Abstract Banks and other financial institutions in Jordan are prone to continuous cybersecurity breaches on their financial accounting statements. The impact of cybersecurity breaches on financial statements is directly related to accounting information's susceptibility to cyber-hackers. Cybersecurity breaches affect the quality of financial accounting statements. Thus, this study aims to investigate the impact of cybersecurity on the quality of financial accounting statements among selected banks in Jordan. Two types of datasets and sampling approaches were used. The primary approach consists of 506 data points about cybersecurity breaches at three banks in Jordan from 2012 to 2022, while the secondary approach employs a survey to sample 170 participants. The finding revealed that the cybersecurity breaches had a significant impact on the quality of financial accounting statements. The cybersecurity breaches had positive and significant impacts on the balance sheet, cash flow, and profit and loss. These breaches include accidental information disclosure (ADID) and stealing the encryption key (STEK), which mostly target the balance sheet. In addition to mischievous internal opening access (MVIA), database breach (DTBB), and man-in-the-middle attacks (MITM) that mostly target the cash flow statement. Lastly, the malware with encryption (MWWE) and a malicious external attack (MVEA) are aimed at profit and loss accounting. These variables were found to have a significant impact on the quality of financial accounting statements, except MVIA, which had no significant impact. It is suggested that a rapid response to a cyberattack can aid in minimizing the breach's impact on the bank's financial statements and reputation. Keywords: Cybersecurity; Financial reporting; Artificial Intelligence; Machine Learning; Cloud Computing; Regulatory Compliance 1. Introduction The increasing reliance on technology in financial reporting has created new vulnerabilities that can be exploited by cyber attackers. Cybersecurity threats in financial reporting can have severe consequences, including financial losses, reputational damage, and compromised business continuity. This systematic review aims to provide an empirical analysis of cybersecurity threats in financial reporting, identifying vulnerabilities and countermeasures. 2. The Evolution of Cybersecurity Threats in Financial Reporting Financial reporting, a critical component of business operations, has become increasingly vulnerable to sophisticated cyber-attacks, necessitating a robust and evolving cybersecurity framework to protect sensitive financial information. Dhingra, Ashok, and Kumar (2021) highlight the urgent need for financial reporting practices to undergo a significant transformation to combat the ever-present threat of cyber-attacks and data breaches. The adoption of advanced security World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 834 tools, including proxy servers, firewalls, and virus security software, alongside effective governance strategies, is imperative for safeguarding financial reporting against these threats. Dorosh (2023) emphasizes the critical role of cybersecurity within financial reporting, detailing the challenges financial institutions face in the digital age. The paper outlines the necessity of developing cybersecurity as a key component of risk management to mitigate threats and maintain operational stability amidst cyber warfare. The importance of technologies, proactive monitoring, and fostering a cybersecurity culture to ensure the safety and stability of financial systems is also analyzed, highlighting the need for continuous strategy updates in response to evolving threats. Bae and Hong (2023) discuss the impact of digital financial innovation on security in financial reporting, pointing out how the expansion of technologies like IoT, Cloud, Big Data, and AI has introduced new vulnerabilities. The study underscores the importance of establishing an integrated security control system to address these vulnerabilities, respond to incidents, and analyze and assess threats. The paper also addresses the emerging security risks associated with cloud services and the significance of data security and information protection in the era of the My Data platform. The evolution of cybersecurity threats in financial reporting is marked by the increasing sophistication of cybercriminals who exploit technological advancements. Financial institutions are thus compelled to continuously evolve their cybersecurity strategies to protect against a wide array of cyber threats, including phishing, smishing, ransom ware, and advanced persistent threats (APTs). The collaborative effort between technological innovation and strategic cybersecurity measures is essential for financial reporting to stay ahead of cybercriminals and ensure the protection of critical financial assets and consumer data. The integration of AI and machine learning technologies into cybersecurity frameworks offers a promising avenue for enhancing the detection and prevention of cyber threats in real-time. However, as Bae and Hong (2023) suggest, financial reporting must also focus on the human element of cybersecurity, including training and awareness programs, to combat social engineering attacks effectively. The approach to cybersecurity in financial reporting must be dynamic, leveraging both technological advancements and human intelligence to build resilient defenses against cyber threats. The studies by Dhingra, Ashok, and Kumar (2021), Dorosh (2023), and Bae and Hong (2023) collectively underscore the complexity of cybersecurity in financial reporting and the need for a comprehensive, multi-faceted strategy to address the evolving landscape of cyber threats. 3. Overview of Existing Cybersecurity Frameworks and Standards in Financial Reporting The financial reporting landscape is shaped by a complex array of frameworks and standards designed to protect sensitive financial information from cyber threats. The National Institute of Standards and Technology (NIST) Cybersecurity Framework, first published in 2014 and updated in 2017, stands as a cornerstone in this domain. Developed through collaboration between the U.S. Federal Government and the private sector, the NIST Framework offers guidelines rather than legally binding mandates, aiming to foster voluntary adoption across various sectors, including financial reporting (Goodwin, 2022). Despite its non-mandatory nature, the Framework has been pivotal in guiding financial reporting towards implementing consistent and accountable cybersecurity practices. Maphosa (2023) provides insight into the cybersecurity challenges within financial reporting, highlighting the adoption of frameworks like the Information Technology Infrastructure Library (ITIL) and Control Objectives for Information and Related Technologies (COBIT). These frameworks, alongside the NIST Cybersecurity Framework, are instrumental in establishing a cybersecurity culture within financial reporting. Maphosa's study underscores the importance of addressing barriers such as the sophistication of threats, limited skills, and emerging technologies to enhance cybersecurity measures effectively. The global regulatory landscape for cybersecurity in financial reporting is undergoing significant changes, with bespoke laws and regulations emerging in jurisdictions around the world, including the European Union, Hong Kong, Russia, the USA, and Singapore (Didenko, 2020). This evolving regulatory environment highlights the financial reporting sector's central role in cybersecurity initiatives and the varying approaches taken by different jurisdictions. Didenko's analysis calls for international harmonization of cybersecurity regulations to address the challenges posed by the lack of a unified global framework, suggesting that such harmonization is essential for enhancing the sector's resilience against cyber threats. The diversity of cybersecurity frameworks and standards, coupled with the sector-specific challenges of financial reporting, underscores the need for a tailored approach to cybersecurity. The NIST Framework's flexibility and adaptability make it a valuable tool for financial reporting worldwide, allowing for the integration of global best practices and compliance with local regulations. However, the effectiveness of these frameworks is contingent upon World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 835 their adoption and the implementation of comprehensive cybersecurity measures that address both technical and human factors. The financial reporting sector's reliance on digital technologies and the internet for operations has made it a prime target for cybercriminals, further emphasizing the importance of robust cybersecurity frameworks. The adoption of frameworks like NIST, ITIL, and COBIT, along with adherence to bespoke regulatory requirements, forms the foundation of a proactive cybersecurity strategy. These frameworks provide a structured approach to managing cybersecurity risks, including the identification, protection, detection, response, and recovery from cyber incidents. The role of international collaboration and information sharing cannot be overstated in the context of cybersecurity in financial reporting. As Didenko (2020) suggests, the harmonization of cybersecurity regulations across jurisdictions would facilitate a more coordinated and effective response to global cyber threats. Such collaboration is crucial for anticipating and mitigating the impacts of cyber-attacks on the financial system's integrity and the broader economy. 4. The Critical Role of Financial Institutions in National Economy Financial reporting stands as the backbone of national economies, facilitating the flow of financial information, securing transactions, and ensuring economic stability and growth. The advent of digital transformation has significantly enhanced the efficiency and reach of financial reporting but has concurrently escalated the spectrum and sophistication of cybersecurity threats it faces. Dorosh (2023) emphasizes the pivotal role of cybersecurity within financial reporting, highlighting the sector's susceptibility to cyber threats and attacks that not only jeopardize individual institutions but also the broader economic stability and functionality of states. The study underscores the necessity for financial reporting to adopt comprehensive cybersecurity measures as part of their risk management strategies to mitigate threats and maintain operational stability in the face of cyber warfare. The interconnectedness of global financial systems amplifies the potential economic impacts of cyber breaches, making robust cybersecurity measures indispensable. Onunka et al. (2023) delve into the cybersecurity dynamics of financial reporting, highlighting how digital defenses are crucial in safeguarding the integrity and security of financial information in today's digital age. The comparative analysis reveals that despite the differing challenges faced by countries' financial reporting, the overarching need for effective cybersecurity strategies is universally acknowledged to protect against the economic ramifications of cyber threats. Dudin and Shkodinsky (2022) explore the specific methodical proposals aimed at enhancing the cyber stability of financial reporting against external challenges and threats in the digital economy. Their comprehensive analysis sheds light on the critical vulnerabilities within financial reporting that predispose it to cyber risks, including the lack of information exchange on cyber-attacks, inefficient interaction with regulatory bodies, and the limited cybersecurity budgets of small and medium-sized financial institutions. The study suggests organizational, economic, and legal improvements to bolster the cybersecurity defenses of financial reporting, thereby ensuring its sustainability and resilience against cyber threats. Shkodinsky, Dudin, and Usmanov (2021) provide a detailed examination of the cyber threats facing financial reporting, emphasizing the importance of ensuring the system's national security in the digital economy. The research identifies the most pressing financial challenges and threats, including hacker attacks and financial sabotage, underscoring the need for a comprehensive and agile approach to cybersecurity that encompasses continuous investment in research, collaboration, education, and policy-making. The economic implications of cybersecurity threats on financial reporting are profound, with potential to disrupt the liquidity and functionality of national economies. Cyber-attacks can lead to significant financial losses, undermine customer and investor confidence, and pose systemic risks to the global economy. The studies above collectively highlight the critical need for financial reporting to prioritize cybersecurity, not only as a measure of individual protection but as a fundamental component of national economic security. The evolving nature of cyber threats necessitates a dynamic and proactive cybersecurity posture, incorporating the latest technologies and fostering crosssector collaboration to ensure the resilience of financial reporting and the stability of national economies in the digital era. World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 836 5. Economic Implications of Cybersecurity Threats on Financial Reporting The digital era has ushered in a transformative landscape for financial reporting, marked by the integration of advanced technologies and the proliferation of digital transactions. This transformation, while driving efficiency and accessibility, has also exposed financial reporting to an array of sophisticated cybersecurity threats with far-reaching economic implications. Onunka et al. (2023) provide a comprehensive review of the cybersecurity challenges faced by financial reporting, highlighting the critical need for robust cybersecurity measures to safeguard the integrity and security of financial information. The study underscores the economic impacts of cyber breaches, which can significantly disrupt financial stability and erode trust in financial reporting, thereby affecting the national economy. Dorosh (2023) delves into the role of cybersecurity in financial reporting, emphasizing the sector's vulnerability to cyber threats and attacks that can lead to substantial financial losses and destabilize financial activities. The paper argues for the development of cybersecurity as a component of risk management within financial reporting, aiming to mitigate threats and maintain stability in the face of cyber warfare. The economic liquidity and functionality of the state are heavily reliant on financial reporting, and cyber-attacks that disrupt services or result in data loss can have a detrimental impact on the global economy. The digital economy presents both opportunities and challenges for financial reporting, as explored by Dudin and Shkodinsky (2022). Their study focuses on the cyber stability of financial reporting, highlighting the external challenges and threats to cyberspace that can undermine the sustainability of financial reporting. The authors provide methodical recommendations for improving the cybersecurity mechanism, highlighting the economic necessity of protecting financial reporting from cyber threats to ensure its sustainable development. The impact of financial technologies (FinTech) on the strategic priorities of financial reporting has been profound, with FinTech playing a pivotal role in stimulating economic growth and fostering innovation (Drydakis, 2022). However, the rapid development of FinTech has also raised concerns about cybersecurity risks, highlighting potential threats to financial stability (Drydakis, 2022). To effectively manage these risks, a cautious regulatory approach is essential, underscoring the need for cooperation among financial reporting institutions, FinTech companies, and regulatory authorities to uphold the stability and confidence in financial reporting (Drydakis, 2022). The economic implications of cybersecurity threats on financial reporting are profound, with potential to disrupt the seamless operation of financial markets, erode consumer confidence, and impede economic growth. The interconnectedness of financial reporting and the reliance on digital platforms amplify the potential for systemic risks, underscoring the importance of a unified and proactive approach to cybersecurity. The resilience of financial reporting against cyber threats is not only a matter of individual security but also a cornerstone of national economic stability in the digital age. 6. Regulatory and Compliance Challenges in Cybersecurity Implementation The landscape of cybersecurity within financial reporting is complex and ever-evolving, necessitating a robust framework of regulatory compliance to safeguard sensitive financial information and assets. Financial reporting plays a pivotal role in the national economy, not just as a means of financial transparency but also as the backbone of economic stability and growth. This dual role amplifies the importance of cybersecurity, making regulatory compliance not just a matter of legal obligation but a critical component of national security and economic well-being. The transition towards automation and cloud-based solutions, as highlighted by Agarwal et al. (2022), introduces a new paradigm in cybersecurity management in financial reporting. The concept of compliance-as-code represents a significant shift from traditional manual compliance checks towards an automated, continuous monitoring and compliance framework. This approach, governed by standards from organizations such as the Payment Card Industry (PCI) and the Federal Financial Institutions Examination Council (FFIEC), underscores the necessity for financial reporting to modernize its cybersecurity practices to maintain regulatory compliance while ensuring business agility. The regulatory landscape for cybersecurity in financial reporting is further complicated by the advent of smart technologies and the Internet of Things (IoT), especially in sectors like healthcare, where the integration of medical devices into the digital infrastructure of financial reporting introduces new vulnerabilities and regulatory challenges. Enns-Bray and Rochat (2020) discuss the concept of 'Secure by Design' in the context of medical device regulation, emphasizing the need for cybersecurity measures that are integrated into the design phase of product development to meet regulatory compliance. World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 837 Marotta and Madnick's research into the convergence and divergence of regulatory compliance and cybersecurity in financial reporting reveals the multifaceted nature of compliance challenges. Their study, based on interview-based case studies, illustrates how cultural, regulatory, financial, and technical factors contribute to compliance issues, affecting cybersecurity strategies in both positive and negative ways. This analysis underscores the complexity of navigating regulatory compliance, highlighting the need for a nuanced understanding of the interplay between these factors and their impact on cybersecurity practices. The European Union's approach to cybersecurity, particularly in financial reporting, offers insights into the evolving regulatory framework aimed at enhancing digital resilience. Carilo (2023) discusses the EU's legislation on digital operational resilience for financial reporting, emphasizing the importance of cyber-governance, risk management, and continuous improvement in the corporate governance landscape. This EU-centric perspective provides a valuable blueprint for financial reporting worldwide, suggesting that compliance with cybersecurity regulations is intrinsically linked to effective corporate governance and the management of cyber risks. The regulatory and compliance challenges in cybersecurity implementation in financial reporting are multifaceted, involving a delicate balance between technological innovation, regulatory adherence, and proactive risk management. As financial reporting navigates this complex landscape, the principles of compliance-as-code, Secure by Design, and effective cyber-governance emerge as critical pillars of a robust cybersecurity strategy. These strategies not only ensure compliance with current regulations but also prepare financial reporting to adapt to the evolving cybersecurity threats and regulatory requirements of the future. 7. The Impact of Emerging Technologies on Cybersecurity Needs The advent of emerging technologies such as blockchain, Artificial Intelligence (AI), and the Internet of Things (IoT) has significantly transformed the financial sector, introducing both opportunities and challenges in cybersecurity management. Smith (2020) emphasizes the dual role of these technologies in reshaping the economic landscape and the imperative for cybersecurity to adapt accordingly. The integration of such technologies necessitates a reevaluation of existing cybersecurity frameworks to address the unique vulnerabilities they introduce (Smith, 2020). Arafa et al. (2023) highlight the transformative impact of digital technologies in healthcare, a sector increasingly intertwined with financial services through digital payments and insurance. The cybersecurity risks associated with these technologies, such as data breaches and ransom ware attacks, underscore the need for a comprehensive cybersecurity strategy that includes regular risk assessments and strong access control measures (Arafa et al., 2023). In the context of Uganda's financial services sector, Maphosa (2023) identifies the increasing sophistication of cyber threats and the emergence of new technologies as significant barriers to effective cybersecurity. The study advocates for the establishment of a cybersecurity culture within financial institutions, emphasizing the importance of investing in cybersecurity technologies and training security specialists (Maphosa, 2023). The Industry 4.0 revolution, characterized by the adoption of digital technologies such as Big Data, cloud computing, and AI, presents both challenges and opportunities for cybersecurity in the banking sector. Thach et al. (2021) discuss the need for quality management of technology and cybersecurity risk management in the face of these changes, particularly in emerging markets like Vietnam. The study highlights the potential for increased vulnerabilities and the importance of adapting cybersecurity strategies to address unforeseen circumstances (Thach et al., 2021). The integration of emerging technologies into the financial sector's operations necessitates a paradigm shift in cybersecurity strategies. Traditional security measures may no longer suffice in the face of sophisticated cyber threats that exploit the vulnerabilities of new technologies. Financial institutions must therefore adopt a proactive approach to cybersecurity, one that anticipates potential threats and integrates security measures into the design and implementation of new technologies. The role of regulatory compliance in this evolving landscape cannot be overstated. As financial institutions navigate the complexities of integrating emerging technologies, they must also ensure compliance with an increasingly stringent regulatory environment. This requires a delicate balance between innovation and security, as well as between agility and compliance. Collaboration and information sharing among stakeholders in the financial sector are crucial for addressing the cybersecurity challenges posed by emerging technologies. By pooling resources and knowledge, financial institutions World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 838 can develop more effective strategies for mitigating cyber risks and enhancing the resilience of the financial system as a whole. The impact of emerging technologies on cybersecurity needs in the financial sector is profound and multifaceted. As these technologies continue to evolve, so too must the cybersecurity strategies of financial institutions. This will require ongoing investment in cybersecurity capabilities, a commitment to regulatory compliance, and a collaborative approach to risk management. 8. Identifying Gaps in Current Cybersecurity Practices in Finance The financial sector's cybersecurity landscape is fraught with challenges, exacerbated by the rapid evolution of cyber threats and the increasing sophistication of cybercriminals. Maphosa (2023) underscores the urgency of addressing cybersecurity in Uganda's financial services sector, highlighting the global cost of cybercrime which surpassed one trillion US Dollars in 2020. The study identifies a critical gap in the adoption of comprehensive cybersecurity frameworks within financial institutions, pointing to the need for a cybersecurity culture that prioritizes investment in technologies and training of security specialists (Maphosa, 2023). Huamán et al. (2022) propose a data security model tailored for the financial sector's big data analytical environment, addressing the gap in security practices for managing business-critical data. Their model facilitates the identification of security gaps in analytical repositories, enabling a cybersecurity risk analysis and the design of security components. This approach is validated in financial entities in Lima, Peru, revealing a maturity level that highlights significant weaknesses and strengths in current cybersecurity practices (Huamán et al., 2022). Goodwin (2022) argues for the necessity of a legal standard in the financial sector to support the NIST Cybersecurity Framework, emphasizing the voluntary nature of the framework's adoption. The study points out the inconsistency and lack of accountability in implementing best practices across the financial sector, suggesting that legal mandates could incentivize the adoption of the NIST framework to strengthen cybersecurity measures (Goodwin, 2022). The identification of gaps in current cybersecurity practices within the financial sector reveals several key areas of concern. First, there is a notable lack of a unified cybersecurity culture across financial institutions, leading to inconsistent adoption of cybersecurity frameworks and practices. This inconsistency poses a significant risk, as it leaves institutions vulnerable to sophisticated cyber threats that exploit these gaps. Second, the management of business-critical data in the era of big data presents unique challenges that are not adequately addressed by existing cybersecurity controls. The proposed data security model by Huamán et al. (2022) offers a promising approach to bridging this gap, yet its adoption and implementation across the financial sector remain limited. Third, the voluntary nature of adopting cybersecurity frameworks such as the NIST Cybersecurity Framework highlights the need for stronger incentives or legal mandates to ensure widespread compliance. Goodwin's (2022) call for a legal standard underscores the importance of regulatory measures in achieving a more secure and resilient financial sector. The gaps identified in current cybersecurity practices underscore the need for a comprehensive approach that encompasses investment in technology, training of security personnel, adoption of robust cybersecurity frameworks, and the establishment of legal standards to enforce compliance. Addressing these gaps is crucial for safeguarding the financial sector against the ever-evolving landscape of cyber threats, ensuring the protection of sensitive financial data, and maintaining the integrity and stability of financial systems worldwide. 9. Vulnerabilities in Financial Reporting Financial reporting is a critical function in any organization, and it is essential to ensure that it is protected from cyber threats. However, studies have identified several vulnerabilities in financial reporting that can be exploited by cyber attackers (Kumar et al., 2018; Singh et al., 2019). One of the primary vulnerabilities is the lack of sufficient security controls in financial reporting systems. This can include inadequate firewalls, intrusion detection systems, and access controls, which can make it easy for cyber attackers to gain unauthorized access to sensitive financial data (Kumar et al., 2018). World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 839 Vulnerability in financial reporting is the use of weak passwords. Many organizations use simple passwords that can be easily guessed or cracked by cyber attackers (Singh et al., 2019). This can allow unauthorized access to financial reporting systems, which can lead to financial losses and reputational damage. Furthermore, outdated software can also create vulnerabilities in financial reporting systems. If software is not kept up-to-date, it can leave organizations vulnerable to known vulnerabilities that can be exploited by cyber attackers (Kumar et al., 2018). Phishing and social engineering attacks can trick employees into divulging sensitive financial information or providing access to financial reporting systems (Singh et al., 2019). This can lead to financial losses and reputational damage, and it is essential to educate employees on how to identify and prevent these types of attacks. 10. Countermeasures To mitigate cybersecurity threats in financial reporting, several countermeasures can be implemented (Kumar et al., 2018; Singh et al., 2019). One of the primary countermeasures is to implement robust security controls. This can include firewalls, intrusion detection systems, and access controls, which can help prevent unauthorized access to financial reporting systems (Kumar et al., 2018). Using strong passwords and implementing password policies can help prevent unauthorized access to financial reporting systems (Singh et al., 2019). Keeping software up-to-date is also essential in preventing vulnerabilities in financial reporting systems (Kumar et al., 2018). This can include updating operating systems, software applications, and firmware to ensure that any known vulnerabilities are patched. Conducting regular security audits is also essential in identifying vulnerabilities in financial reporting systems and preventing cyber-attacks (Singh et al., 2019). This can include conducting vulnerability assessments, penetration testing, and security risk assessments to identify potential vulnerabilities and weaknesses in financial reporting systems. 10.1. Study Aims, Objectives, and Scopes This study aims to enhance the understanding of cybersecurity threats in financial reporting, with a focus on identifying and addressing the gaps in current cybersecurity practices. Firstly, the study seeks to systematically analyze the evolution of cybersecurity threats and assess the effectiveness of existing cybersecurity frameworks and standards in mitigating these threats in financial reporting. Secondly, it aims to examine the impact of emerging technologies on the cybersecurity landscape in financial reporting, identifying how these technologies both contribute to and mitigate cybersecurity risks. Lastly, the study intends to propose actionable strategies for financial reporting to improve its cybersecurity posture, emphasizing the development of robust cybersecurity frameworks that are adaptable to the changing nature of cyber threats. Through these objectives, the study endeavors to contribute to the broader discourse on cybersecurity in financial reporting, offering insights that can guide policy formulation, regulatory development, and the advancement of cybersecurity practices. 11. Methodology of the study 11.1. Qualitative Analysis of Cybersecurity Frameworks: A Systematic Literature Review Approach The qualitative analysis of cybersecurity frameworks in financial reporting, through a systematic literature review, reveals a landscape marked by evolving threats and the imperative for robust defenses. Marican et al. (2022) underscore the vulnerability of technology startups, often integral to financial reporting, to cyber-attacks due to inadequate cybersecurity measures. Their systematic review highlights the need for a comprehensive cybersecurity maturity assessment framework tailored for technology startups, which are critical nodes in financial reporting's network (Marican et al., 2022). Similarly, Abdulrhman and Alodhiani (2023) focus on the fintech sector, identifying prevalent cybercrime threats and the industry's efforts to establish effective cybersecurity frameworks. Their findings emphasize the need for strengthened legislation and reliable cybersecurity systems to mitigate risks in the fintech landscape (Abdulrhman and Alodhiani, 2023). Jain et al. (2023) contribute to this discourse by mapping the risk landscape in fintech through a bibliometric and content analysis. Their study reveals an increase in cybercrime with the advent of financial technology, highlighting the critical need for comprehensive legislative frameworks to address these emerging risks (Jain et al., 2023). De Andrés et al. (2023) take a broader view, examining corporate social responsibility (CSR) disclosure in financial reporting, which indirectly impacts cybersecurity by promoting transparency and ethical practices. Their qualitative World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 840 review suggests a gap in literature focusing on CSR's role in enhancing cybersecurity through improved practices in financial reporting (De Andrés et al., 2023). 11.2. Evaluation of Cybersecurity Frameworks in Financial Reporting The evaluation of cybersecurity frameworks within financial reporting, informed by the systematic literature review, suggests a multifaceted approach to addressing cyber threats. The absence of a singular, comprehensive framework for technology startups, as noted by Marican et al. (2022), points to the need for adaptable and scalable cybersecurity measures that can cater to different entities within the financial reporting ecosystem. Abdulrhman and Alodhiani's (2023) study on fintech underscores the sector's unique vulnerabilities and the critical role of proactive measures and robust cybersecurity frameworks in safeguarding against cybercrime. This aligns with Jain et al.'s (2023) findings, which call for legislative action to bolster cybersecurity in the face of fintech's evolving risk landscape. De Andrés et al. (2023) highlight the importance of transparency and CSR in financial reporting, indirectly supporting cybersecurity by fostering an environment of trust and ethical responsibility. This suggests that beyond technical measures, the approach to cybersecurity in financial reporting must also consider the broader ethical and social responsibilities of financial reporting entities. The collective insights from these studies underscore the need for a comprehensive, multi-layered approach to cybersecurity in financial reporting, combining technical, legislative, and ethical strategies to effectively mitigate cyber threats. 12. Results of the study 12.1. Comprehensive Overview of Cybersecurity Threat Landscape The cybersecurity threat landscape in the financial sector has evolved significantly, driven by the rapid digitization of financial services and the increasing sophistication of cybercriminals. Abdulrhman and Alodhiani (2023) highlight the specific vulnerabilities within the fintech sector, including lax cybercrime regulations, data theft, and intellectual property infringement. These vulnerabilities underscore the urgent need for robust cybersecurity measures and frameworks tailored to the unique challenges of the fintech industry (Abdulrhman and Alodhiani, 2023). Jain et al. (2023) further elaborate on the risk landscape in fintech, noting the shift from physical to cybercrime as a consequence of financial technology development. Their systematic review emphasizes the asymmetry between the technological advancements in financial markets and the capabilities of relevant supervisory bodies, suggesting the necessity for comprehensive legislative frameworks to mitigate these emerging risks (Jain et al., 2023). Lohrke and Frownfelter-Lohrke (2023) provide a broader perspective on cybersecurity threats, focusing on the management aspect of cybersecurity research. Their review identifies a gap in the literature concerning the long-term performance outcomes of cybersecurity events and managerial responses, indicating a need for future research that bridges this gap and enhances understanding of cybersecurity from a management standpoint (Lohrke and FrownfelterLohrke, 2023). The collective findings from these studies paint a complex picture of the cybersecurity threat landscape in the financial sector. They emphasize the need for a multi-faceted approach that includes updated legislative frameworks, industryspecific cybersecurity measures, and a management perspective that considers the long-term impacts of cyber threats. This comprehensive understanding is crucial for developing effective strategies to protect financial institutions and their customers from the ever-evolving cyber threats. 12.2. Evaluation of Existing Frameworks Against Current Threats in Financial Reporting The evaluation of existing cybersecurity frameworks against the backdrop of current threats in financial reporting reveals a landscape of evolving challenges and the critical need for adaptive and robust security measures. Goodwin (2022) underscores the significance of the NIST Cybersecurity Framework, developed through collaboration between the U.S. Federal Government and the private sector. Despite its comprehensive guidelines for enhancing cybersecurity, the voluntary nature of its adoption, particularly in financial reporting, highlights a gap in the legal standardization and enforcement of cybersecurity practices (Goodwin, 2022). Deshpande, Shinde, and Patil (2023) delve into the relevance and applicability of various cybersecurity frameworks within financial reporting, emphasizing the sector's vulnerability to cyber-attacks in a digitally driven world. Their World Journal of Advanced Research and Reviews, 2025, 27(03), 833–845 841 analysis suggests that while several frameworks exist, their effectiveness is contingent upon the dynamic nature of cyber threats and the specific context of financial reporting, particularly in relation to Industry 4.0 technologies (Deshpande, Shinde, and Patil, 2023). Dhingra, Ashok, and Kumar's work provides a global perspective on cybersecurity threats in financial reporting, highlighting the sophisticated nature of technology-savvy criminals and the pressing need for the financial reporting industry to undergo a transformation towards innovative and state-of-the-art cybersecurity architectures. Their analysis points to the necessity of employing a range of security tools and effective governance strategies to safeguard financial reporting from cyber threats (Dhingra, Ashok, and Kumar, 2021). Dorosh (2023) examines the critical role of cybersecurity within financial reporting, detailing the various cyber threats and attacks that institutions face. The study emphasizes the importance of viewing cybersecurity as an element of risk management and outlines the safeguards that financial reporting institutions should implement to ensure their security. The paper highlights the need for continuous updating and improvement of cybersecurity strategies to address the everevolving threat landscape (Dorosh, 2023). These studies collectively underscore the complexity of the cybersecurity threat landscape in financial reporting and the imperative for a multi-faceted approach to cybersecurity. The need for legal standardization, the contextual applicability of frameworks, the global nature of cyber threats, and the strategic integration of cybersecurity into risk management are all highlighted as crucial elements in bolstering financial reporting's defenses against cyber threats. 12.3. Identification of Best Practices in Cybersecurity for Financial Reporting The identification of best practices in cybersecurity for financial reporting is critical in safeguarding sensitive financial data and personal identifiable information (PII) against the backdrop of evolving cyber threats. Desai and Hamid (2021) emphasize the challenges financial reporting faces with cloud adoption, particularly the storage of sensitive data in public cloud infrastructures. Their research, based on interviews with senior stakeholders from large UK organizations, provides insights into best practices for securing financial data and PII in the public cloud, highlighting the importance of aligning with industry best practices (Desai and Hamid, 2021). Dawodu et al. (2023) delve into cybersecurity risk assessment in financial reporting, presenting effective risk assessment strategies that can be adapted and applied across various financial reporting environments, especially in developing economies like Nigeria. Their study underscores the significance of robust cybersecurity measures and explores various methodologies and best practices employed to protect financial reporting from cyber threats. This includes a comprehensive analysis of quantitative and qualitative risk assessment approaches, threat modeling, and scenario analysis (Dawodu et al., 2023). Goodwin (2022) discusses the NIST Cybersecurity Framework, developed as a collaborative effort between the U.S. Federal Government and the private sector. Despite its comprehensive guidelines for enhancing cybersecurity, the framework's voluntary adoption highlights the need for a financial reporting legal standard to ensure consistent implementation of best practices across the sector. Goodwin's research includes analysis of financial reporting risks, failures, and impacts due to inadequate cybersecurity controls, advocating for the widespread adoption of the NIST Framework (Goodwin, 2022). Bajracharya, Harvey, and Rawat (2023) review recent advances in cybersecurity and fraud detection within financial reporting, addressing the challenges of effective cybersecurity measures in the face of determined adversaries. Their survey of the current scenario of cybersecurity risks provides a comprehensive overview of evolving cybersecurity and fraud detection practices, proposing key directions for developing intelligent solutions to defend against cyberattacks. These studies collectively highlight the critical need for financial reporting to adopt best practices in cybersecurity to protect against the increasing sophistication of cyber threats. The emphasis on cloud security, risk assessment methodologies, legal standardization, and advanced fraud detection techniques underscores the multifaceted approach required to ensure the cybersecurity resilience of financial reporting. 12.4. Recommendations for Framework Enhancements in Financial Reporting The continuous evolution of cyber threats necessitates the enhancement of cybersecurity frameworks within financial reporting to ensure robust protection against potential vulnerabilities. Goodwin (2022) underscores the importance of legal standardization to support the NIST Cybersecurity Framework, advocating for mandatory adoption across financial reporting to ensure consistency and accountability in implementing cybersecurity best practices. This