JFRM  Vol.7 No.1 , March 2018
A Study on Enterprise Risk Management and Business Performance
Abstract: The value proposition of enterprise risk management (ERM) has always been called into question as companies struggle to justify the time and effort an ERM requires. The global economic crisis in 2008 and 2009 provides an excellent opportunity to examine the effects of ERM. In this study, we will analyze the abilities of the 12 sample companies to preserve and create value in the face of myriad uncertainties. Our analysis mainly focuses on financial indicators which were collected from annual reports and online disclosures. While looking into the risk committee (RC) and audit committee (AC)’s existence, components, and operating guidelines, we first notice that among the 12 companies, 5 companies have separate Board RCs, 4 exercise ERM oversight simply through AC, and 3 do not have any Board ERM oversight at all. In general, our analysis of profitability, liquidity, and share price shows that Board oversight of ERM is associated with superior performance. We attempt to explain the few exceptions found in the study and find that these are associated with general industry performance and strategies adopted by the respective companies. Through a qualitative exploration of RC characteristics, desirable features regarding RC composition, committee meeting frequency pattern, number of board positions and Board’s oversight on committee provide some suggestions on what actually makes an RCtick. Closer examination of these elements revealed plausible connections between the qualitative aspects of the RC and the performance of the outliers in the quantitative study. Next we explore why companies organize their ERM in the way they did and then found an association between ERM oversight by Board and company size and operation structure. We hypothesise that as a business expands in complexity, a more sophisticated risk management framework is needed particularly at the highest level of the organization. However this study itself does not provide enough evidence to arrive at any absolute conclusion that ERM indeed led to a company’s performance. In part, our small sampling size is insufficient to represent the wider community. Business results can vary heavily relating to business model complexities, industry and ERM operating effectiveness. Future studies may create more value if industry benchmarking and longer periods are taken into considerations.
Cite this paper: Li, L. (2018) A Study on Enterprise Risk Management and Business Performance. Journal of Financial Risk Management, 7, 123-138. doi: 10.4236/jfrm.2018.71008.

[1]   Committee of Sponsoring Organizations of the Treadway Commission (COSO) (2007). Enterprise Risk Management—Integrating with Strategy and Performance: Executive Summary. Committee of Sponsoring Organizations of the Treadway Commission (COSO).

[2]   Deloitte, & Touche LLP (2007). Global Risk Management Survey: Fifth Edition—Accelerating Risk Management Practices (p. 13). London: Deloitte & Touche LLP.

[3]   International Organization for Standardization (2009a). IEC 31010 Risk Management—Risk Assessment Guidelines (p. 14). Geneva: International Organization for Standardization.

[4]   International Organization for Standardization (2009b). ISO 31000 Risk Management—Principles and Guidelines (p. 18). Geneva: International Organization for Standardization.

[5]   International Organization for Standardization (2009c). ISO Guide 73:2009 Risk Management—Vocabulary (p. 8). Geneva: International Organization for Standardization.

[6]   McCuaig, B. (2009). Practical Guidance: Seven Steps for Effective Risk Management. Toronto: Thomson Reuters.

[7]   Mensah, G., & Gottwald, W. (2016). Enterprise Risk Management: Factors Associated with Effective Implementation (p. 198). Amsterdam: Social Science Electronic Publishing.

[8]   Office of Research at Singapore Management University (2009). Leave Some Breathing Room for Optimal Value Creation in Asian Family-Owned Firms. Knowledge@SMU.

[9]   Ware, W. N. (2009). Does Your Board Need a Risk Committee? Directors and Boards. HighBeam Research.