Impact Of Risk Governance, Associated Practices and Tools on Enterprise Risk Management: Some Evidence from Colombia

Abstract

Enterprise risk management is a discipline that is becoming increasingly necessary due to the changing environment in which companies operate. This paper is based on a research question that propose to hypotheses that question the impact of risk governance and associated practices and tools on ERM development. Hierarchical linear regression models are used to test the hypotheses that suggest a relationship between predictor variables and the ERM criterion variable. A sample of 140 large private companies in Colombia, belonging to different economic sectors, is selected, of which their behaviour and/or organizational performance related to the analysis variables is evaluated. The main results suggest that the risk governance composed of the senior management commitment and the risk management structure has a positive correlation with ERM. Also, it is demonstrating that the practices and tools integrated by the risk maps and the risk treatment measures that are defined, have a positive correlation about the maturity of enterprise risk management. Finally, the study’s, main findings are presented, and their implications are discussed to form the basis for ERM strengthening in emerging markets.

Keywords:

risk governance practices and tools ERM development Colombia

References

Acik, A. C., Trott, P., & Cinar, E. (2021). Risk governance approach to migration: a viable alternative to precautionary management. Journal of Risk Research, 0(0), 1-20. https://doi.org/10.1080/13669877.2021.1957984

Ai, J., Bajtelsmit, V., and Wang, T. (2018). The combined effect of enterprise risk management and diversification on property and casualty insurer performance. Journal of Risk and Insurance, 85(2), 513-543. https://doi.org/10.1111/jori.12166

Ali, W., Alasan, I. I., Khan, M. H., Ali, S., Cheah, J. H., & Ramayah, T. (2022). Competitive strategies-performance nexus and the mediating role of enterprise risk management practices: a multi-group analysis for fully fledged Islamic banks and conventional banks with Islamic window in Pakistan. International Journal of Islamic and Middle Eastern Finance and Management, 15(1), 125-145. https://doi.org/10.1108/IMEFM-06-2020-0310

Andersen, T. J., Garvey, M., and Roggi, O. (2014). Managing Risk and Opportunity. Oxford University Press. https://doi.org/10.1093/acprof:oso/9780199687855.001.0001

Antonucci, D. (2016). Risk Maturity Models: How to assess risk management effectiveness. London; Philadelphia: Kogan Page Limited.

Beasley, M. S., Clune, R., and Hermanson, D. R. (2005). Enterprise risk management: An empirical analysis of factors associated with the extent of implementation. Journal of Accounting and Public Policy, 24(6), 521-531. https://doi.org/10.1016/j.jaccpubpol.2005.10.001

Berry-Stölzle, T. R., and Xu, J. (2018). Enterprise risk management and the cost of capital. Journal of Risk and Insurance, 85(1), 159-201. https://doi.org/10.1111/jori.12152

Bromiley, P., McShane, M., Nair, A., and Rustambekov, E. (2015). Enterprise risk management: Review, critique, and research directions. Long Range Planning, 48(4), 265-276. https://doi.org/10.1016/j.lrp.2014.07.005

Castro, L. M., Gulías, V. M., Abalde, C., and Jorge, J. S. (2012) Managing the risks of risk management, Journal of Decision Systems, 17(4), 501-521. https://doi.org/10.3166/jds.17.501-521

Chapman, R. J. (2006). Simple Tools and Techniques for Enterprise Risk Management. Chicsteher, West Sussex, Inglaterra: John Wiley and Sons, Ltd.

Collins, J. (2010). Cómo caen los poderosos y por qué algunas compañías nunca se rinden. Bogotá, Colombia: Grupo Editorial Norma.

Committee of Sponsoring Organizations of the Treadway Commission (COSO) (2017). Enterprise risk management-Integrating with strategy and performance. New York: COSO.

Federation of European Risk Management Associations (FERMA) (2012). FERMA European Survey 2012. ERM Maturity Key Finding.

Haimes, Y. Y., (1992). Toward a holistic approach to total risk management. Geneva Papers on Risk and Insurance. Issues and Practice, 17(64), 314-321. https://doi.org/10.1057/gpp.1992.20

Hair, J., Anderson, R., Tatham, R., and Black, W. (1999). Análisis multivariante (491st ed.). Madrid: PrenticeHall.

Hillson, D. A. (1997). Towards a risk maturity model. The International Journal of Project e Business Risk Management, 1(1), 35-45.

Hoyt, R. E., and Liebenberg, A. P. (2011). The value of enterprise risk management. Journal of Risk and Insurance, 78(4), 795-822.

https://doi.org/10.1111/j.1539-6975.2011.01413.x

Institute of Internal Auditors (IIA) (2013). The three lines of defense in effective risk management and control. Florida: The Institute of Internal Auditors.

International Organization for Standarization (ISO) (2018). ISO 31000. Risk management. Suiza: ISO.

Kaufmann, M., & Wiering, M. (2022). The role of discourses in understanding institutional stability and change-an analysis of Dutch flood risk governance. Journal of Environmental Policy and Planning, 24(1), 1-20. https://doi.org/10.1080/1523908X.2021.1935222

Kerlinger, F., and Lee, H. (2002). Investigación del comportamiento. Métodos de investigación en ciencias sociales (4th ed.). Mexico D.F: McGraw-Hill.

Klinke, A., & Renn, O. (2021). The Coming of Age of Risk Governance. Risk Analysis, 41(3), 544-557. https://doi.org/10.1111/risa.13383

Lechner, P., and Gatzert, N. (2017). Determinants and value of enterprise risk management: empirical evidence from Germany. The European Journal of Finance, (February), 1-27. https://doi.org/10.1080/1351847X.2017.1347100

Mahama, H., Elbashir, M., Sutton, S., & Arnold, V. (2020). New development: Enabling enterprise risk management maturity in public sector organizations. Public Money and Management, 0(0), 1-5. https://doi.org/10.1080/09540962.2020.1769314

Marsh and Risk and Insurance Management Society (RIMS) (2016). Evolución, tendencias y oportunidades. II Benchmarking de gestión de riesgos en Latinoamérica. Marsh LLC.

Marsh and Risk and Insurance Management Society (RIMS) (2018). Reimagine Risk. III Benchmarking de gestión de riesgos en Latinoamérica. Marsh LLC.

Meade, A. W., Watson, A. M., and Kroustalis, C. M. (2007, April). Assessing common methods bias in organizational research. In 22nd Annual Meeting of the Society for Industrial and Organizational Psychology, New York (pp. 1-10). https://doi.org/10.1037/e518532013-132

Mejía, R. (2006). Administración de riesgos: un enfoque empresarial. Medellín, Colombia: Fondo Editorial Universidad EAFIT.

Mejía, R. (2017). Introducción. In R. Mejía, M. A. Nuñez, and I. Martins (Eds.), Administración de riesgos empresariales en Colombia, México y Argentina (pp. 15-28). Medellín, Colombia: Editorial Eafit.

Mejía, R., Nuñez-Patiño, M. A., and Villanueva, E. (2017). Resultados, retos y tendencias del diagnóstico de la administración de riesgos empresariales. En Mejía, R., Nuñez-Patiño, Martins, I. (Eds.), Administración de riesgos empresariales en Colombia, México y Argentina. (pp. 191-205). Medellín, Colombia: Editorial Eafit.

Nguyen, Q. K. (2022). Determinants of bank risk governance structure: A cross-country analysis. Research in International Business and Finance, 60(June 2021), 101575. https://doi.org/10.1016/j.ribaf.2021.101575

Oliva, F. L. (2016). A maturity model for enterprise risk management. International Journal of Production Economics, 173(C), 66-79. https://doi.org/10.1016/j.ijpe.2015.12.007

Pereira, A. (2014). Liderazgo líquido: una propuesta para enfrentar la incertidumbre y riesgo. Pensamiento y Gestión, (37), 97-113. https://doi.org/10.14482/pege.37.7022

Podsakoff, P. M., MacKenzie, S. B., Lee, J. Y., and Podsakoff, N. P. (2003). Common method biases in behavioral research: A critical review of the literature and recommended remedies. Journal of Applied Psychology, 88(5), 879. https://doi.org/10.1037/0021-9010.88.5.879

Protiviti. (2013). Applying the Five lines of Defense in Managing Risk. The Bulletin, 5(4).

Rhee, J., Park, T., and Lee, D. H. (2010). Drivers of innovativeness and performance for innovative SMEs in South Korea: Mediation of learning orientation. Technovation, 30(1), 65-75. https://doi.org/10.1016/j.technovation.2009.04.008

Scarlat, E., Chirita, N., and Bradea, I.-A. (2012). Indicators and metrics used in the enterprise risk management (ERM). Economic Computation and Economic Cybernetics Studies and Research. (4), 5-18.

Sheedy, E., and Griffin, B. (2018). Risk governance, structures, culture, and behavior: A view from the inside. Corporate Governance: An International Review, 26(1):4-22. https://doi.org/10.1111/corg.12200

Standards Australia and Standards New Zealand-AS/NZS-4360 (2004). Australian/New Zealand standard risk management. Sydney, Australia: Standards Australia /Standards New Zealand.

Suarez-Paba, M. C., & Cruz, A. M. (2022). A paradigm shift in Natech risk management: Development of a rating system framework for evaluating the performance of industry. Journal of Loss Prevention in the Process Industries, 74(June 2021), 104615. https://doi.org/10.1016/j.jlp.2021.104615

Villanueva, E., Martínez, D., Quintero, D., Vahos, J. E., and Marín, Y. (2017). El papel de la alta gerencia en el desarrollo de la administración de riesgos. Caso Medellín, Colombia. En Mejía, R., Nuñez-Patiño M.A., Martins, I. (Eds.), Administración de riesgos empresariales en Colombia, México y Argentina. (pp. 49-74). Medellín, Colombia: Editorial Eafit.

Wieczorek-Kosmala, M. (2014). Risk management practices from risk maturity models perspective. JEEMS, 19(2), 133-159. https://doi.org/10.5771/0949-6181-2014-2-133

Zhao, X., Hwang, B. G., and Low, S. P. (2015). Risk management and enterprise risk management in enterprise risk management in international construction operations. Singapore: Springer. https://doi.org/10.1007/978-981-287-549-5

Reference by