An enterprise risk management system for SMEs: innovative design paradigm and risk representation model

References

• Agarwal, R., & Ansell, J. (2016). Strategic change in enterprise risk management. Wiley Online Library, 25(4), 427–439. doi.org/10.1002/jsc
   Google Scholar
• Agarwal, R., & Virine, L. (2017). Integration of project risk management (PRM) into enterprise risk management (ERM). In Y. Raydugin (Ed.), Handbook of research on leveraging risk and uncertainties for effective project management (pp. 294–317). Hershey, PA: IGI Global.
   Google Scholar
• Alhawari, S., Karadsheh, L., Nehari, A., & Mansour, E. (2012). Knowledge-Based risk management framework for information technology project. International Journal of Information Management, 32(1), 50–65. doi: 10.1016/j.ijinfomgt.2011.07.002
   Web of Science ®Google Scholar
• Altman, E. I., Gabriele, S., & Nicholas, W. (2008). The value of non-financial information in SME risk management. The Journal of Credit Risk. doi: 10.2139/ssrn.1320612
   Web of Science ®Google Scholar
• Amundrud, Ø, & Aven, T. (2015). On how to understand and acknowledge risk. Reliability Engineering and System Safety, 142, 42–47. doi: 10.1016/j.ress.2015.04.021
   Web of Science ®Google Scholar
• Anderson, R., Bill, A., Clatworthy, G., Garrini, R., Hopkin, P., Shackleford, S., … Williams, C. (2011). Risk Appetite and Tolerance.
   Google Scholar
• Aven, T. (2012). The risk concept — historical and recent development trends. Reliability Engineering and System Safety, 99(951), 33–44. doi: 10.1016/j.ress.2011.11.006
   Google Scholar
• Aven, T. (2018). How the integration of system 1 – system 2 thinking and recent risk perspectives can improve risk assessment and management. Reliability Engineering and System Safety. doi: 10.1016/j.ress.2018.07.031
   Web of Science ®Google Scholar
• Aven, T., & Zio, E. (2014). Foundational issues in risk assessment and risk management. Risk Analysis, 34(7), 1164–1172. doi: 10.1111/risa.12132
   PubMed Web of Science ®Google Scholar
• Ballou, B., & Heitger, D. L. (2005). A building-Block approach for implementing COSO’s enterprise risk management—integrated framework. Management Accounting Quarterly, 6(2), 1–11.
   Google Scholar
• Bijl, M. G. H., & Hamann, R. J. (2002). Risk management literature survey: An overview of the process, tools used and their outcomes. (Report to Dutch Space, Stork Product Engineering, TNO/TPD, Verhaert). Delft University of Technology Aerospace Engineering.
   Google Scholar
• Bromiley, P., Mcshane, M., Nair, A., & Rustambekov, E. (2014). Enterprise risk management: Review, critique, and research directions. Long Range Planning, 1–12. doi: 10.1016/j.lrp.2014.07.005
   Web of Science ®Google Scholar
• Brustbauer, J. (2016). Enterprise risk management in SMEs: Towards a structural model. International Small Business Journal, 34(1), 70–785. doi: 10.1177/0266242614542853
   Web of Science ®Google Scholar
• Calandro, J. J., & Scott, L. (2006). Insights from the balanced scorecard: An introduction to the enterprise risk scorecard. Measuring Business Excellence, 10(3), 31–40. doi: 10.1108/13683040610685775
   Google Scholar
• Carr, M. J., Konda, S. L., Monarch, I., Ulrich, F. C., & Walker, C. F. (1993). Taxonomy-based risk identification (Technical report, CMU/SEI-93-TR-6, ESC-TR-93-183). Pittsburgh: Software Engineering Institute, Carnegie Mellon University.
   Google Scholar
• Casualty Actuarial Society – ERM Committee. (2003). Overview of enterprise risk management. Retrieved February 3, 2016, from https://www.casact.org/area/erm/overview.pdf
   Google Scholar
• Choo, B. S., & Goh, J. C. (2015). Pragmatic adaptation of the ISO 31000:2009 enterprise risk management framework in a high-tech organization using Six Sigma. International Journal of Accounting & Information Management, 23(4), 364–382. doi: 10.1108/IJAIM-12-2014-0079
   Web of Science ®Google Scholar
• Clarke, C. J., & Varma, S. (1999). Strategic risk management: The New Competitive Edge. Long Range Planning Journal, 32(4), 414–424.
   Web of Science ®Google Scholar
• COSO. (2004). Enterprise risk management — integrated framework executive summary. Retrieved from https://www.coso.org/Documents/COSO-ERM-Executive-Summary.pdf.
   Google Scholar
• COSO. (2017). Enterprise risk management integrating with strategy and performance – executive summary. Retrieved from https://www.coso.org/Documents/2017-COSO-ERM-Integrating-with-Strategy-and-Performance-Executive-Summary.pdf.
   Google Scholar
• Dailun, S. (2004). A review of enterprise supply chain risk management. Journal of Systems Science and Systems Engineering, 13(2), 219–244.
   Google Scholar
• D’Arcy, S. P. (2001). Enterprise risk management. Journal of Risk Management of Korea, 12(1), 207–228.
   Google Scholar
• Davidson, R. A., & Lambert, S. C. (2004). Applying the Australian and New Zealand risk management standard to information systems in SMEs. Australasian Journal of Information Systems, 12(1), 4–17. doi:10.3127%2Fajis.v12i1.101
   Google Scholar
• Dickinson, G. (2001). Enterprise risk management: Its origins and conceptual foundation. The Geneva Papers on Risk and Insurance, 26(3), 360–366.
   Web of Science ®Google Scholar
• Donnell, E. O. (2005). Enterprise risk management: A systems-thinking framework for the event identification phase. International Journal of Accounting Information Systems, 6(3), 177–195. doi: 10.1016/j.accinf.2005.05.002
   Google Scholar
• Falkner, E. M., & Hiebl, M. R. W. (2015). Risk management in SMEs: A systematic review of available evidence. The Journal of Risk Finance, 16(2), 122–144. doi: 10.1108/JRF-06-2014-0079
   Web of Science ®Google Scholar
• Fraser, J. R. S., & Simkins, B. J. (2016). The challenges of and solutions for implementing enterprise risk management. Business Horizons, 59(6), 689–698. doi: 10.1016/j.bushor.2016.06.007
   Web of Science ®Google Scholar
• Frigo, M. L., & Anderson, R. J. (2011). Strategic risk management: A foundation for improving enterprise risk management and governance. The Journal of Corporate Accounting & Finance, (March/April), 81–88. doi: 10.1002/jcaf
   Google Scholar
• Gao, S. S., Sung, M. C., & Zhang, J. (2011). Risk management capability building in SMEs: A social capital perspective. International Small Business Journal, 31(6), 677–700. doi: 10.1177/0266242611431094
   Google Scholar
• Gates, S., Nicolas, J., & Walker, P. L. (2012). Enterprise risk management: A process for enhanced management and improved performance. Management Accounting Quarterly, 13(3), 28–38.
   Google Scholar
• Giblin, C., Liu, A. Y., Samuel, M., Pfitzmann, B., & Zhou, X. (2005). Regulations Expressed As Logical Models (REALM).
   Google Scholar
• Haimes, Y. Y. (1981). Hierarchical holographic modeling. IEEE Transactions on Systems, Man, and Cybernetics, 11(9), 606–617.
   Web of Science ®Google Scholar
• Haimes, Y. Y. (2018). Risk modeling of interdependent complex systems of systems: theory and practice. Risk Analysis, 38(1), 84–98. doi: 10.1111/risa.12804
   PubMed Web of Science ®Google Scholar
• Haimes, Y. Y., Kaplan, S., & Lambert, J. H. (2002). Risk filtering, ranking, and management framework using hierarchical holographic modeling. Risk Analysis, 22(2), 383–397.
   PubMed Web of Science ®Google Scholar
• Henschel, T. (2009). Implementing a holistic risk management in small and medium sized enterprises (SMEs). In ICSB World Conference Proceedings (Vol. 1, pp. 2300–2315). Washington: International Council for Small Business (ICSB).
   Google Scholar
• Islam, M. A., Tedford, J. D., & Haemmerle, E. (2008). Managing operational risks in small- and medium-sized enterprises (SMEs) engaged in manufacturing – an integrated approach. International Journal of Technology, Policy and Management, 8(4), 420–441.
   Google Scholar
• ISO. (2009). ISO 31000 – Risk management. Retrieved from https://www.iso.org/iso-31000-risk-management.html.
   Google Scholar
• Kanitsorn, T., & Dessalegn, G. M. (2011). Modelling SME credit risk: Thai empirical evidence modelling SME credit risk: Thai empirical evidence. Small Enterprise Research, 18(1), 63–79. doi: 10.5172/ser.18.1.63
   Google Scholar
• Kaplan, S., Haimes, Y. Y., & Garrick, B. J. (2001). Fitting hierarchical Holographic modeling into the theory of scenario structuring and a resulting refinement to the quantitative definition of risk. Risk Analysis, 21(5), 807–819.
   PubMed Web of Science ®Google Scholar
• Kaplan, R. S., & Mikes, A. (2012). Managing risks: A new framework. Harvard Business Review, 90(6), 1–19. Retrieved from https://www.hbs.edu/faculty/Pages/item.aspx?num=42549
   Web of Science ®Google Scholar
• Kleffner, A. E., Lee, R. B., & Mcgannon, B. (2003). The effect of corporate governance on the use of enterprise risk management: Evidence from Canada. Risk Management and Insurance Review, 6(1), 53–73.
   Google Scholar
• Klement, T. (2007). Standardised company reporting with XBRL. In R. Debreceny, C. Felden, & M. Piechocki (Eds.), New dimensions of business reporting and XBRL (pp. 249–271). Wiesbaden: DUV. doi: 10.1007/978-3-8350-9633-2_12
   Google Scholar
• Lambert, J. H., Haimes, Y. Y., Li, D., Schooff, R. M., & Tulsiani, V. (2001). Identication, ranking, and management of risks in a major system acquisition. Reliability Engineering and System Safety, 72, 315–325.
   Web of Science ®Google Scholar
• Lark, J. (2015). ISO 31000 – risk management – A practical guide for SMEs. (Valentin N. , Ed.). Geneva: ISO (International Trade Centre and International Organization for Standardization).
   Google Scholar
• Liebenberg, A. P., & Hoyt, R. E. (2003). The determinants of enterprise risk management: Evidence from the appointment of chief risk officers. Risk Management and Insurance Review, 6(1), 37–52.
   Google Scholar
• Lleo, S. (2009). Risk management: A review. Research Foundation of CFA Institute, 4(1), 1–51.
   Google Scholar
• Marcelino-sádaba, S., Pérez-ezcurdia, A., Echeverría, A. M., & Villanueva, P. (2013). Project risk management methodology for small firms. International Journal of Project Management, 32(2), 327–340. doi: 10.1016/j.ijproman.2013.05.009
   Web of Science ®Google Scholar
• Mikes, A., & Kaplan, R. S. (2015). When one size doesn’t fit all: Evolving directions in the research and practice of enterprise risk management. Journal of Applied Corporate Finance, 27(1), 37–40. doi: 10.1111/jacf.12102
   Web of Science ®Google Scholar
• Ogutu, J., Bennett, M. R., & Olawoyin, R. (2018). Closing the gap between traditional & enterprise risk management systems. Professional Safety, (April).
   Google Scholar
• Paape, L., & Speklé, R. F. (2012). The adoption and design of enterprise risk management practices: An empirical study. European Accounting Review, 21(3), 533–564. doi: 10.1080/09638180.2012.661937
   Web of Science ®Google Scholar
• Ping, T. A., & Muthuveloo, R. (2015). The impact of enterprise risk management on firm performance: Evidence from Malaysia. Canadian Center of Science and Education, 11(22), 149–159. doi: 10.5539/ass.v11n22p149
   Google Scholar
• Protiviti Independent Risk Consulting. (2006). Guide to enterprise risk management: Frequently asked questions. (Protiviti, Ed.). Protiviti.
   Google Scholar
• Qazi, A., Quigley, J., & Dickson, A. (2015). Supply chain risk management: Systematic literature review and a conceptual framework for capturing interdependencies between risks. In International conference on industrial engineering and operations management (pp. 1–13). Dubai: IEEE.
   Google Scholar
• Razali, A. R., & Tahir, I. M. (2011). Review of the literature on enterprise risk management. Business Management Dynamics, 1(5), 8–16.
   Google Scholar
• Renn, O. (1998). Three decades of risk research: Accomplishments and new challenges. Journal of Risk Research, 1(1), 49–71. doi: 10.1080/136698798377321
   Google Scholar
• Ritchie, B., & Brindley, C. (2007). Supply chain risk management and performance A guiding framework for future development. International Journal of Operations & Production Management, 27(3), 303–322. doi: 10.1108/01443570710725563
   Web of Science ®Google Scholar
• Rittenberg, L., & Martens, F. (2012). Understanding and Communicating risk appetite (Research report in thought Leadership in ERM). Durham, NC: COSO.
   Google Scholar
• Shenkir, W. G., & Walker, P. L. (2007). Enterprise risk management: Tools and techniques for effective implementation (statements on management accounting). Montvale, NJ: Institute of Management Accountants.
   Google Scholar
• Smit, Y., & Watkins, J. A. (2012). A literature review of small and medium enterprises (SME) risk management practices in South Africa. African Journal of Business Managemen, 6(21), 6324–6330. doi: 10.5897/AJBM11.2709
   Google Scholar
• Taleb, N. N., Goldstein, D. G., & Spitznagel, M. W. (2009). The six mistakes executives make in risk management. Harvard Business Review – Risk Management, 87(10), 78–81.
   PubMed Web of Science ®Google Scholar
• Thekdi, S. A., & Aven, T. (2018). A methodology to evaluate risk for supporting decisions involving alignment with organizational values. Reliability Engineering and System Safety, 172, (December) 84–93. doi: 10.1016/j.ress.2017.12.001
   Web of Science ®Google Scholar
• Tschoegl, A. E. (2005). The key to risk management: Management. In M. Frenkel, U. Hommel, & R. Markus (Eds.), Risk management (pp. 721–739). Berlin: Springer. doi: 10.1007/3-540-26993-2_37
   Google Scholar
• Tserng, H. P., Yin, S. Y. L., Dzeng, R. J., Wou, B., Tsai, M. D., & Chen, W. Y. (2009). A study of ontology-based risk management framework of construction projects through project life cycle. Automation in Construction, 18(7), 994–1008. doi.org/10.1016/j.autcon.2009.05.005
   Web of Science ®Google Scholar
• Verbano, C., & Venturini, K. (2013). Managing risks in SMEs: A literature review and research agenda. Journal of Technology Management and Innovation, 8(3), 186–197. doi: 10.4067/S0718-27242013000400017
   Google Scholar
• Zhao, X., Hwang, B.-G., & Low, S. P. (2016). An enterprise risk management knowledge-based decision support system for construction firms. Engineering, Construction and Architectural Management, 23(3), 369–384. doi: 10.1108/ECAM-03-2015-0042
   Web of Science ®Google Scholar
• Zio, E. (2018). The future of risk assessment. Reliability Engineering and System Safety, 177(September), 176–190. doi: 10.1016/j.ress.2018.04.020
   Google Scholar