Enterprise Risk Management: Review, Critique, and Research Directions

Many regulators, rating agencies, executives, and academics have responded to recent corporate scandals and business failures by advocating and embracing a new approach to risk management: enterprise risk management (ERM). ERM proposes the integrated management of all the risks an organization faces, which inherently requires alignment of risk management with corporate governance and strategy. Academic research on ERM is still in its infancy with articles largely in accounting and finance journals, but rarely in management journals. We argue that ERM offers an important new domain of research for management scholars. A critical review of ERM research allows us to identify limitations and gaps that management scholars are best equipped to address. The paper not only identifies how management scholars can contribute to ERM research, but also points out why ERM research (and practice) needs management research for its development.

[1]  James W. DeLoach,et al.  Enterprise-wide risk management : strategies for linking risk and opportunity , 2000 .

[2]  Michael Schröder,et al.  The Dynamics of Overconfidence: Evidence from Stock Market Forecasters , 2010 .

[3]  George H. Tompson,et al.  Examining the effect of complexity in strategic group knowledge structures on firm performance , 2002 .

[4]  W. Sharpe.  CAPITAL ASSET PRICES: A THEORY OF MARKET EQUILIBRIUM UNDER CONDITIONS OF RISK* , 1964 .

[5]  Yacov Y. Haimes.  Toward a Holistic Approach to Total Risk Management , 1992 .

[6]  Jack B. Soll,et al.  Overconfidence: It Depends on How, What, and Whom You Ask. , 1999, Organizational behavior and human decision processes.

[7]  Torben Juul Andersen,et al.  The Performance Relationship of Effective Risk Management: Exploring the Firm-Specific Investment Rationale , 2008 .

[8]  Philip Bromiley,et al.  DECISION MAKING IN AN ORGANIZATIONAL SETTING: COGNITIVE AND ORGANIZATIONAL INFLUENCES ON RISK ASSESSMENT IN COMMERCIAL LENDING , 1997 .

[9]  P. Bromiley,et al.  Explaining temporal orientation: Evidence from the durability of firms' capital investments , 2012 .

[10]  Kent D. Miller,et al.  Scenarios, Real Options and Integrated Risk Management , 2003 .

[11]  A. Mikes.  Risk Management and Calculative Cultures , 2008 .

[12]  Esser,et al.  Alive and Well after 25 Years: A Review of Groupthink Research. , 1998, Organizational behavior and human decision processes.

[13]  Inadvertent Systemic Risk in Financial Networks: Venture Capital and Institutional Funds , 2009 .

[14]  Stephen N. Luko,et al.  Risk Management Principles and Guidelines , 2013 .

[15]  D. R. Hermanson,et al.  Enterprise risk management: An empirical analysis of factors associated with the extent of implementation , 2005 .

[16]  D. Rousseau.  Issues of level in organizational research: Multi-level and cross-level perspectives. , 1985 .

[17]  H Felix Kloman,et al.  Rethinking Risk Management , 1992 .

[18]  John Bessant,et al.  Managing Innovation: Integrating Technological, Market, and Organizational Change, 2nd Edition , 2001 .

[19]  Baruch Fischhoff,et al.  Judgment under uncertainty: Facts versus fears: Understanding perceived risk , 1982 .

[20]  J. Dutton,et al.  Discerning threats and opportunities. , 1988 .

[21]  Dean G. Pruitt,et al.  THE RISKY SHIFT IN GROUP BETTING. , 1969 .

[22]  R. Hoyt,et al.  The Value of Enterprise Risk Management , 2010 .

[23]  R. Knight,et al.  Some Geometrical Characteristics of the Risk-Return Plane , 1988 .

[24]  R I Benjamin,et al.  Critical IT (information technology) issues: the next ten years. , 1992, Sloan management review.

[25]  Lawrence A. Gordon,et al.  Enterprise risk management and firm performance: A contingency perspective , 2009 .

[26]  Klaus Weber,et al.  When the Glass is Half Full and Half Empty: CEO's Ambivalent Interpretations of Strategic Issues , 2010 .

[27]  J. B. Quinn,et al.  STRATEGIC OUTSOURCING: LEVERAGING KNOWLEDGE CAPABILITIES , 1999 .

[28]  T. Andersen.  Effective risk management outcomes: exploring effects of innovation and capital structure , 2009 .

[29]  J. Lintner.  THE VALUATION OF RISK ASSETS AND THE SELECTION OF RISKY INVESTMENTS IN STOCK PORTFOLIOS AND CAPITAL BUDGETS , 1965 .

[30]  Kent D. Miller.  A Framework for Integrated Risk Management in International Business , 1992 .

[31]  Gerry Dickinson,et al.  Enterprise Risk Management: Its Origins and Conceptual Foundation , 2001 .

[32]  J. Yuen,et al.  A Senior Manager's Guide to Integrated Risk Management , 2002 .

[33]  Nancy D. Schell.  Creating Value Through Enterprise Risk Management , 2011 .

[34]  T. Dillon,et al.  The Emergence of Accounting Information Systems Programs , 2004 .

[35]  K. Sutcliffe.  What Executives Notice: Accurate Perceptions in Top Management Teams , 1994 .

[36]  J. E. Bannister,et al.  Practical Risk Management , 1981 .

[37]  Michael K. McShane,et al.  Does Enterprise Risk Management Increase Firm Value? , 2010 .

[38]  Mason A. Carpenter,et al.  TESTING A MODEL OF REASONED RISK-TAKING: GOVERNANCE, THE EXPERIENCE OF PRINCIPALS AND AGENTS, AND GLOBAL STRATEGY IN HIGH-TECHNOLOGY IPO FIRMS , 2003 .

[39]  John Fraser,et al.  Who Reads What Most Often?: A Survey of Enterprise Risk Management Literature Read by Risk Executives , 2011 .

[40]  R. Bettis.  Modern Financial Theory, Corporate Strategy and Public Policy: Three Conundrums , 1983 .

[41]  N. Crockford.  An introduction to risk management , 1980 .

[42]  Kent D. Miller,et al.  Risk in Strategic Management Research , 2017 .

[43]  R. Hoyt,et al.  Integrated Risk Management and the Role of the Risk Manager , 1999 .

[44]  Chris Argyris,et al.  Knowledge for Action: A Guide to Overcoming Barriers to Organizational Change , 1993 .

[45]  T. Das.  Strategic planning and individual temporal orientation , 1987 .

[46]  Donald P. Pagach,et al.  The Characteristics of Firms that Hire Chief Risk Officers , 2011 .

[47]  James Lam.  Overview of Enterprise Risk Management , 2008 .

[48]  Campbell R. Harvey,et al.  How Do Cfos Make Capital Budgeting and Capital Structure Decisions? , 2002 .

[49]  R. Hoyt,et al.  The Determinants of Enterprise Risk Management: Evidence from the Appointment of Chief Risk Officers , 2003 .

[50]  Paul C. Godfrey,et al.  The relationship between corporate social responsibility and shareholder value: an empirical test of the risk management hypothesis , 2009 .

[51]  Kent D. Miller.  Industry and Country Effects on Managers' Perceptions of Environmental Uncertainties , 1993 .

[52]  Michael Schröder,et al.  The Dynamics of Overconfidence: Evidence from Stock Market Forecasters , 2005 .

[53]  N. Karoui,et al.  Optimal derivatives design under dynamic risk measures , 2004 .

[54]  Ryan B. Lee,et al.  The Effect of Corporate Governance on the Use of Enterprise Risk Management: Evidence from Canada , 2003 .

[55]  Philip Bromiley,et al.  Risk and Return in Organizational Decision Making , 1999 .

[56]  Malcolm S. Salter,et al.  Diversification Through Acquisition: Strategies for Creating Economic Value , 1979 .

[57]  G. Azzone,et al.  The organizational dynamics of Enterprise Risk Management , 2010 .

[58]  Neil McEwen,et al.  Managing organizational change—A strategic approach , 1988 .

[59]  L. L. Cummings,et al.  Risk, Fate, Conciliation and Trust: An International Study of Attitudinal Differences Among Executives , 1971 .

[60]  A. Tversky,et al.  Judgment under Uncertainty: Heuristics and Biases , 1974, Science.

[61]  Donald P. Pagach,et al.  The Characteristics of Firms that Hire Chief Risk Officers , 2010 .

[62]  M. Beasley,et al.  Information Conveyed in Hiring Announcements of Senior Executives Overseeing Enterprise-Wide Risk Management Processes , 2006 .

[63]  Mark Kroll,et al.  Influences of top management team incentives on firm risk taking , 2007 .

[64]  Herbert A. Simon,et al.  The Sciences of the Artificial , 1970 .

[65]  M. Power.  The risk management of nothing , 2009 .

[66]  James D. Westphal.  Collaboration in the Boardroom: Behavioral and Performance Consequences of CEO-Board Social Ties , 1999 .

[67]  P. Barr,et al.  Cognitive change, strategic action, and organizational renewal , 1992 .

[68]  Gerry McNamara,et al.  Moving Closer to the Action: Examining Compensation Design Effects on Strategic Risk , 2008, Organ. Sci..

[69]  Simone de Colle,et al.  Stakeholder Theory: The State of the Art , 2010 .

[70]  B. Fischhoff,et al.  Calibration of probabilities: the state of the art to 1980 , 1982 .

[71]  Michael K. McShane,et al.  Risk Allocation Across the Enterprise: Evidence from the Insurance Industry , 2011 .

[72]  Kent D. Miller.  ECONOMIC EXPOSURE AND INTEGRATED RISK MANAGEMENT , 1998 .

[73]  Martin E. P. Seligman,et al.  Learned Optimism: How to Change Your Mind and Your Life , 1991 .

[74]  J. March,et al.  Managerial perspectives on risk and risk taking , 1987 .

[75]  S. Harrington,et al.  Enterprise Risk Management: The Case Of United Grain Growers , 2002 .

[76]  G. S. Saffold.  Culture Traits, Strength, and Organizational Performance: Moving Beyond “Strong” Culture , 1988 .

[77]  A. V. D. Ven,et al.  Engaged Scholarship: A Guide for Organizational and Social Research , 2007 .

[78]  Paul L. Walker,et al.  Making enterprise risk management pay off , 2002 .

[79]  A. Mikes.  Enterprise risk management in action. , 2006 .

[80]  H. Raiffa,et al.  Judgment under uncertainty: A progress report on the training of probability assessors , 1982 .

[81]  Roles and responsibilities of boards of directors revisited in reconciling conflicting stakeholders interests while maintaining corporate responsibility , 2009 .

[82]  Douglas W. Brooks.  Creating a Risk‐Aware Culture , 2011 .

[83]  D. Marginson,et al.  Exploring the debate on short-termism: a theoretical and empirical analysis , 2008 .

[84]  Charles R. Schwenk.  THE COGNITIVE PERSPECTIVE ON STRATEGIC DECISION MAKING , 1988 .

[85]  N. Scordis,et al.  Integrated Risk Management: Techniques and Strategies for Reducing Risk , 2000 .

[86]  Catherine M. Schrand,et al.  Hedging and Coordinated Risk Management: Evidence from Thrift Conversions , 1998 .

[87]  Michael Power,et al.  The risk management of everything: rethinking the politics of uncertainty , 2004 .

[88]  I. Brown,et al.  Risk Management in Corporate Governance: A Review and Proposal , 2009 .

[89]  Seshagiri Rao Vaidyula.  Enterprise Risk Management for Banks Enterprise Risk Management for Banks Enterprise Risk Management for Banks , 2022 .

[90]  Breakthrough ideas for 2004 , 2004, IEEE Engineering Management Review.

[91]  A. Huff,et al.  STRATEGIC GROUPS: A COGNITIVE PERSPECTIVE , 1993 .

[92]  M. Power.  Organized Uncertainty: Designing a World of Risk Management , 2007 .

[93]  Paul J. Sobel,et al.  Aligning Corporate Governance with Enterprise Risk Management , 2004 .