Knowledge management applied to enterprise risk management

Risk and knowledge are two concepts and components of business management which have so far been studied almost independently. This is especially true where risk management (RM) is conceived mainly in financial terms, as for example, in the financial institutions sector. Financial institutions are affected by internal and external changes with the consequent accommodation to new business models, new regulations and new global competition that includes new big players. These changes induce financial institutions to develop different methodologies for managing risk, such as the enterprise risk management (ERM) approach, in order to adopt a holistic view of risk management and, consequently, to deal with different types of risk, levels of risk appetite, and policies in risk management. However, the methodologies for analysing risk do not explicitly include knowledge management (KM). This research examines the potential relationships between KM and two RM concepts: perceived quality of risk control and perceived value of ERM. To fulfill the objective of identifying how KM concepts can have a positive influence on some RM concepts, a literature review of KM and its processes and RM and its processes was performed. From this literature review eight hypotheses were analysed using a classification into people, process and technology variables. The data for this research was gathered from a survey applied to risk management employees in financial institutions and 121 answers were analysed. The analysis of the data was based on multivariate techniques, more specifically stepwise regression analysis. The results showed that the perceived quality of risk control is significantly associated with the variables: perceived quality of risk knowledge sharing, perceived quality of communication among people, web channel functionality, and risk management information system functionality. However, the relationships of the KM variables to the perceived value of ERM are not identified because of the low performance of the models describing these relationships. The analysis reveals important insights into the potential KM support to RM such as: the better adoption of KM people and technology actions, the better the perceived quality of risk control. Equally, the results suggest that the quality of risk control and the benefits of ERM follow different patterns given that there is no correlation between both concepts and the distinct influence of the KM variables in each concept. The ERM scenario is different from that of risk control because ERM, as an answer to RM failures and adaptation to new regulation in financial institutions, has led organizations to adopt new processes, technologies, and governance models. Thus, the search for factors influencing the perceived value of ERM implementation needs additional analysis because what is improved in RM processes individually is not having the same effect on the perceived value of ERM. Based on these model results and the literature review the basis of the ERKMAS (Enterprise Risk Knowledge Management System) is presented.

Multi-party risk management helps manage cement plant construction in Thailand

Several parties (stakeholders) are involved in a construction project. The conventional Risk Management Process (RMP) manages risks from a single party perspective, which does not give adequate consideration to the needs of others. The objective of multi-party risk management is to assist decision-makers in managing risk systematically and most efficiently in a multi-party environment. Multi-party Risk Management Processes (MRMP) consist of risk identification, structuring, analysis and developing responses from all party perspectives. The MRMP has been applied to a cement plant construction project in Thailand to demonstrate its effectiveness.

Project risk management in analytic framework

Risks and uncertainties are part and parcel of any project as projects are planned with many assumptions. Therefore, managing those risks is the key to project success. Although risk is present in all most all projects, large-scale construction projects are most vulnerable. Risk is by nature subjective. However, managing risk subjectively posses the danger of non-achievement of project goals. This study introduces an analytical framework for managing risk in projects. All the risk factors are identified, their effects are analyzed, and alternative responses are derived with cost implication for mitigating the identified risks. A decision-making framework is then formulated using decision tree. The expected monetary values are derived for each alternative. The responses, which require least cost is selected. The entire methodology has been explained through a case study of an oil pipeline project in India and its effectiveness in managing projects has been demonstrated. © INTERNATIONAL JOURNAL OF INDUSTRIAL ENGINEERING.

Project risk management:a combined analytic hierarchy process and decision tree approach

Time, cost and quality achievements on large-scale construction projects are uncertain because of technological constraints, involvement of many stakeholders, long durations, large capital requirements and improper scope definitions. Projects that are exposed to such an uncertain environment can effectively be managed with the application of risk management throughout the project life cycle. Risk is by nature subjective. However, managing risk subjectively poses the danger of non-achievement of project goals. Moreover, risk analysis of the overall project also poses the danger of developing inappropriate responses. This article demonstrates a quantitative approach to construction risk management through an analytic hierarchy process (AHP) and decision tree analysis. The entire project is classified to form a few work packages. With the involvement of project stakeholders, risky work packages are identified. As all the risk factors are identified, their effects are quantified by determining probability (using AHP) and severity (guess estimate). Various alternative responses are generated, listing the cost implications of mitigating the quantified risks. The expected monetary values are derived for each alternative in a decision tree framework and subsequent probability analysis helps to make the right decision in managing risks. In this article, the entire methodology is explained by using a case application of a cross-country petroleum pipeline project in India. The case study demonstrates the project management effectiveness of using AHP and DTA.

Selection and application of risk management tools and techniques for build-operate-transfer projects

Construction projects are risky. However, the characteristics of the risk highly depend on the type of procurement being adopted for managing the project. A build-operate-transfer (BOT) project is recognized as one of the most risky project schemes. There are instances of project failure where a BOT scheme was employed. Ineffective rts are increasingly being managed using various risk management tools and techniques. However, application of those tools depends on the nature of the project, organization's policy, project management strategy, risk attitude of the project team members, and availability of the resources. Understanding of the contents and contexts of BOT projects, together with a thorough understanding of risk management tools and techniques, helps select processes of risk management for effective project implementation in a BOT scheme. This paper studies application of risk management tools and techniques in BOT projects through reviews of relevant literatures and develops a model for selecting risk management process for BOT projects. The application to BOT projects is considered from the viewpoints of the major project participants. Discussion is also made with regard to political risks. This study would contribute to the establishment of a framework for systematic risk management in BOT projects.

Risk management in oil and gas construction projects in Vietnam

Purpose - The purpose of the paper is to the identify risk factors, which affect oil and gas construction projects in Vietnam and derive risk responses. Design/methodology/approach - Questionnaire survey was conducted with the involvement of project executives of PetroVietnam and statistical analysis was carried out in order to identify the major project risks. Subsequently, mitigating measures were derived using informal interviews with the various levels of management of PetroVietnam. Findings - Bureaucratic government system and long project approval procedures, poor design, incompetence of project team, inadequate tendering practices, and late internal approval processes from the owner were identified as major risks. The executives suggested various strategies to mitigate the identified risks. Reforming the government system, effective partnership with foreign collaborators, training project executives, implementing contractor evaluation using multiple criteria decision-making technique, and enhancing authorities of project people were suggested as viable approaches. Practical implications - The improvement measures as derived in this study would improve chances of project success in the oil and gas industry in Vietnam. Originality/value - There are several risk management studies on managing projects in developing countries. However, as risk factors vary considerably across industry and countries, the study of risk management for successful projects in the oil and gas industry in Vietnam is unique and has tremendous importance for effective project management.

Risk management in build-operate-transfer projects

Construction projects are risky. A build-operate-transfer (BOT) project is recognised as one of the most risky project schemes. This scheme has been employed rather frequently in the past few decades, in both developed and developing countries. However, because of its risky nature, there have been failures as well as successes. Risk analysis in an appropriate way is desirable in implementing BOT projects. There are various tools and techniques applicable to risk analysis. The application of these risk analysis tools and techniques (RATTs) to BOT projects depends on an understanding of the contents and contexts of BOT projects, together with a thorough understanding of RATTs. This paper studies key points in their applications through reviews of relevant literatures and discusses the application of RATTs to BOT projects. The application to BOT projects is considered from the viewpoints of the major project participants, i.e. government, lenders and project companies. Discussion is also made with regard to political risks, which are very important in BOT projects. A flow chart has been introduced to select an appropriate tool for risk management in BOT projects. This study contributes to the establishment of a framework for systematic risk management in BOT projects.

Decision support system for risk management:a case study

This study demonstrates a quantitative approach to construction risk management through analytic hierarchy process and decision tree analysis. All the risk factors are identified, their effects are quantified by determining probability and severity, and various alternative responses are generated with cost implication for mitigating the quantified risks. The expected monetary values are then derived for each alternative in a decision tree framework and subsequent probability analysis aids the decision process in managing risks. The entire methodology is explained through a case application of a cross-country petroleum pipeline project in India and its effectiveness in project management is demonstrated.

Construction risk management:a quantitative approach

Conventional project management techniques are not always sufficient for ensuring time, cost and quality achievement of large-scale construction projects due to complexity in planning and implementation processes. The main reasons for project non-achievement are changes in scope and design, changes in Government policies and regulations, unforeseen inflation) under-estimation and improper estimation. Projects that are exposed to such an uncertain environment can be effectively managed with the application of risk numagement throughout project life cycle. However, the effectiveness of risk management depends on the technique in which the effects of risk factors are analysed and! or quantified. This study proposes Analytic Hierarchy Process (AHP), a multiple attribute decision-making technique as a tool for risk analysis because it can handle subjective as well as objective factors in decision model that are conflicting in nature. This provides a decision support system (DSS) to project managenumt for making the right decision at the right time for ensuring project success in line with organisation policy, project objectives and competitive business environment. The whole methodology is explained through a case study of a cross-country petroleum pipeline project in India and its effectiveness in project1nana.gement is demonstrated.

Establishing a framework for dynamic risk management in 'intelligent' aero-engine control

The behaviour of control functions in safety critical software systems is typically bounded to prevent the occurrence of known system level hazards. These bounds are typically derived through safety analyses and can be implemented through the use of necessary design features. However, the unpredictability of real world problems can result in changes in the operating context that may invalidate the behavioural bounds themselves, for example, unexpected hazardous operating contexts as a result of failures or degradation. For highly complex problems it may be infeasible to determine the precise desired behavioural bounds of a function that addresses or minimises risk for hazardous operation cases prior to deployment. This paper presents an overview of the safety challenges associated with such a problem and how such problems might be addressed. A self-management framework is proposed that performs on-line risk management. The features of the framework are shown in context of employing intelligent adaptive controllers operating within complex and highly dynamic problem domains such as Gas-Turbine Aero Engine control. Safety assurance arguments enabled by the framework necessary for certification are also outlined.

The knowledge-based perspective of risk management in healthcare organisations

The aim of this research is to investigate how risk management in a healthcare organisation can be supported by knowledge management. The subject of research is the development and management of existing logs called "risk registers", through specific risk management processes employed in a N.H.S. (Foundation) Trust in England, in the U.K. Existing literature on organisational risk management stresses the importance of knowledge for the effective implementation of risk management programmes, claiming that knowledge used to perceive risk is biased by the beliefs of individuals and groups involved in risk management and therefore is considered incomplete. Further, literature on organisational knowledge management presents several definitions and categorisations of knowledge and approaches for knowledge manipulation in the organisational context as a whole. However, there is no specific approach regarding "how to deal" with knowledge in the course of organisational risk management. The research is based on a single case study, on a N.H.S. (Foundation) Trust, is influenced by principles of interpretivism and the frame of mind of Soft Systems Methodology (S.S.M.) to investigate the management of risk registers, from the viewpoint of people involved in the situation. Data revealed that knowledge about risks and about the existing risk management policy and procedures is situated in several locations in the Trust and is neither consolidated nor present where and when required. This study proposes a framework that identifies required knowledge for each of the risk management processes and outlines methods for conversion of this knowledge, based on the SECI knowledge conversion model, and activities to facilitate knowledge conversion so that knowledge is effectively used for the development of risk registers and the monitoring of risks throughout the whole Trust under study. This study has theoretical impact in the management science literature as it addresses the issue of incomplete knowledge raised in the risk management literature using concepts of the knowledge management literature, such as the knowledge conversion model. In essence, the combination of required risk and risk management related knowledge with the required type of communication for risk management creates the proposed methods for the support of each risk management process for the risk registers. Further, the indication of the importance of knowledge in risk management and the presentation of a framework that consolidates knowledge required for the risk management processes and proposes way(s) for the communication of this knowledge within a healthcare organisation have practical impact in the management of healthcare organisations.

The effects of perceived business uncertainty, external consultants and risk management on organisational outcomes

Purpose: The purpose of this paper is to investigate the relations between perceived business uncertainty (PBU), use of external risk management (RM) consultants, formalisation of RM, magnitude of RM methods and perceived organisational outcomes. Design/methodology/approach: This paper is based on a questionnaire survey of members of the Chartered Institute of Management Accountants in the UK. Using AMOS 17.0, the paper tests the strength of the direct and indirect effects among the variables and explores the fit of the overall path model. Findings: The results indicate significant and positive associations exist between the extent of PBU and the level ofRMformalisation, as well as between the level ofRMformalisation and the magnitude of RMmethods adopted. The use of externalRMconsultants is also found to have a significant and positive impact on the magnitude of RM methods adopted. Finally, both the extent of RM formalisation and the magnitude of RM methods adopted are seen to be significantly associated with overall improvement in organisational outcomes. Research limitations/implications: The study uses perceptual measures of the level of business uncertainty, usage of RM and organisational outcomes. Further, the respondents are members of a management accounting professional body and the views of other managers, such as risk managers, who are also important to the governance process are not incorporated. Originality/value: This study provides empirical evidence on the impact ofRMdesign and usage on improvements in organisational outcomes. It contributes to the RM literature where empirical research is needed in order to be comparable with the traditional management control system literature.

Risk management in enterprise resource planning implementation:a new risk assessment framework

Enterprise resource planning (ERP) projects are risky. But if they are implemented appropriately, they can provide competitive advantage to organisations. Therefore, ERP implementation has become one of the most critical aspects of today's information management research. The main purpose of this article is to describe a new ERP risk assessment framework (RAF) that can be used to increase the success of ERP implementation. In this article, through a case study based in a leading UK-based energy service provider, we demonstrate the new RAF, which has been shown to help identify and mitigate risks in ERP implementation. In contrast to other research, this RAF identifies risks hierarchically in external engagement, programme management, work stream and work package levels across technical, schedule, operational, business and organisational categories. This not only helped to develop responses to mitigate risks but also facilitates on-going risk control.