Project risk management using multiple criteria decision-making technique and decision tree analysis:a case study of Indian oil refinery

This study proposes an integrated analytical framework for effective management of project risks using combined multiple criteria decision-making technique and decision tree analysis. First, a conceptual risk management model was developed through thorough literature review. The model was then applied through action research on a petroleum oil refinery construction project in the Central part of India in order to demonstrate its effectiveness. Oil refinery construction projects are risky because of technical complexity, resource unavailability, involvement of many stakeholders and strict environmental requirements. Although project risk management has been researched extensively, practical and easily adoptable framework is missing. In the proposed framework, risks are identified using cause and effect diagram, analysed using the analytic hierarchy process and responses are developed using the risk map. Additionally, decision tree analysis allows modelling various options for risk response development and optimises selection of risk mitigating strategy. The proposed risk management framework could be easily adopted and applied in any project and integrated with other project management knowledge areas.

A contingency theory perspective on the risk management control system within Birmingham City Council

In recent years the topic of risk management has moved up the agenda of both government and industry, and private sector initiatives to improve risk and internal control systems have been mirrored by similar promptings for change in the public sector. Both regulators and practitioners now view risk management as an integral part of the process of corporate governance, and an aid to the achievement of strategic objectives. The paper uses case study material on the risk management control system at Birmingham City Council to extend existing theory by developing a contingency theory for the public sector. The case demonstrates that whilst the structure of the control system fits a generic model, the operational details indicate that controls are contingent upon three core variables—central government policies, information and communication technology and organisational size. All three contingent variables are suitable for testing the theory across the broader public sector arena.

Decision support for lifecycle planning and risk management of small-scale biomass combined heat and power (bCHP) projects in the UK

Biomass is projected to account for approximately half of the new energy production required to achieve the 2020 primary energy target in the UK. Combined heat and power (CHP) bioenergy systems are not only a highly efficient method of energy conversion, at smaller-scales a significant proportion of the heat produced can be effectively utilised for hot water, space heating or industrial heating purposes. However, there are many barriers to project development and this has greatly inhibited deployment in the UK. Project viability is highly subjective to changes in policy, regulation, the finance market and the low cost incumbent; a high carbon centralised energy system. Unidentified or unmitigated barriers occurring during the project lifecycle may not only negatively impact on the project but could ultimately lead to project failure. The research develops a decision support system (DSS) for small-scale (500 kWe to 10 MWe) biomass combustion CHP project development and risk management in the early stages of a potential project’s lifecycle. By supporting developers in the early stages of project development with financial, scheduling and risk management analysis, the research aims to reduce the barriers identified and streamline decision-making. A fuzzy methodology is also applied throughout the developed DSS to support developers in handling the uncertain or approximate information often held at the early stages of the project lifecycle. The DSS is applied to a case study of a recently failed (2011) small-scale biomass CHP project to demonstrate its applicability and benefits. The application highlights that the proposed development within the case study was not viable. Moreover, further analysis of the possible barriers with the DSS confirmed that some possible modifications to be project could have improved this, such as a possible change of feedstock to a waste or residue, addressing the unnecessary land lease cost or by increasing heat utilisation onsite. This analysis is further supported by a practitioner evaluation survey that confirms the research contribution and objectives are achieved.

Knowledge management and risk management

This article takes the perspective that risk knowledge and the activities related to RM practice can benefit from the implementation of KM processes and systems, to produce a better enterprise wide implementation of risk management. Both in the information systems discipline and elsewhere, there has been a trend towards greater integration and consolidation in the management of organizations. Some examples of this are: Enterprise Resource Planning (Stevens, 2003), Enterprise Architecture (Zachmann, 1996) and Enterprise Content Management (Smith & McKeen, 2003). Similarly, risk management is evolving into Enterprise Risk Management. KM’s importance in breaking down silos within an organization can help it to do so.

Knowledge management and enterprise risk management implementation in financial services

This paper starts from the viewpoint that enterprise risk management is a specific application of knowledge in order to control deviations from strategic objectives, shareholders’ values and stakeholders’ relationships. This study is looking for insights into how the application of knowledge management processes can improve the implementation of enterprise risk management. This article presents the preliminary results of a survey on this topic carried out in the financial services sector, extending a previous pilot study that was in retail banking only. Five hypotheses about the relationship of knowledge management variables to the perceived value of ERM implementation were considered. The survey results show that the two people-related variables, perceived quality of communication among groups and perceived quality of knowledge sharing were positively associated with the perceived value of ERM implementation. However, the results did not support a positive association for the three variables more related to technology, namely network capacity for connecting people (which was marginally significant), risk management information system functionality and perceived integration of the information systems. Perceived quality of communication among groups appeared to be clearly the most significant of these five factors in affecting the perceived value of ERM implementation.

Knowledge management in support of enterprise risk management

Risk management and knowledge management have so far been studied almost independently. The evolution of risk management to the holistic view of Enterprise Risk Management requires the destruction of barriers between organizational silos and the exchange and application of knowledge from different risk management areas. However, knowledge management has received little or no attention in risk management. This paper examines possible relationships between knowledge management constructs related to knowledge sharing, and two risk management concepts: perceived quality of risk control and perceived value of enterprise risk management. From a literature review, relationships with eight knowledge management variables covering people, process and technology aspects were hypothesised. A survey was administered to risk management employees in financial institutions. The results showed that the perceived quality of risk control is significantly associated with four knowledge management variables: perceived quality of risk knowledge sharing, perceived quality of communication among people, web channel functionality, and risk management information system functionality. However, the relationships of the knowledge management variables to the perceived value of enterprise risk management are not significant. We conclude that better knowledge management is associated with better risk control, but that more effort needs to be made to break down organizational silos in order to support true Enterprise Risk Management.

Risk management in organizations:an integrated case study approach

In any organization, risk plays a huge role in the success or failure of any business endeavour. Measuring and managing risk is a difficult and often complicated task and the global financial crisis of the late noughties can be traced to a worldwide deficiency in risk management regimes. One of the problems in understanding how best to manage risk is a lack of detailed examples of real world practice. In this accessible textbook the author sets the world of risk management in the context of the broader corporate governance agenda, as well as explaining the core elements of a risk management system. Material on the differences between risk management and internal auditing is supplemented by a section on the professionalization of risk – a relatively contemporary evolution. Enterprise risk management is also fully covered. With a detailed array of risk management cases – including Tesco, RBS and the UK government – lecturers will find this a uniquely well researched resource, supplemented by materials that enable the cases to be easily integrated into the classroom. Risk managers will be delighted with the case materials made available for the first time with the publication of this book.

A comparison of the local authority adoption of risk management in England and Australia

This paper analyses the context and use of risk management in local authorities in England and Australia. The basic structures of risk management were found to be common across all four local authorities in both countries. However, substantial differences were found in the national context in which risk management was used. The national context in each country was compared, and a large and small local authority in each country was used for illustrative purposes. The research findings were tested against institutional, contingency, resource dependence, and political perspectives. The research finding is that each theory was necessary but not sufficient and a pluralist approach was formulated to explain the similarities and differences in risk management in local authorities across two countries.

Linking risk management to strategic controls:a case study of Tesco plc

Definitions and perceptions of the role and styles of risk management, and performance management/strategic control systems have evolved over time, but it can be argued that risk management is primarily concerned with ensuring the achievement of strategic objectives. This paper shows the extent of overlap between a broad-based view of risk management, namely Enterprise Risk Management (ERM), and the balanced scorecard, which is a widely used strategic control system. A case study of one of the UK's largest retailers, Tesco plc, is used to show how ERM can be introduced as part of an existing strategic control system. The case demonstrates that, despite some differences in lines of communications, the strategic controls and risk controls can be used to achieve a common objective. Adoption of such an integrated approach, however, has implications for the profile of risk and the overall risk culture within an organisation.

Examining the relationship between risk assessment and risk management in mental health

Risk assessment is crucial for developing risk management plans to prevent or minimize mental health patients' risks that will impede their recovery. Risk assessments and risk management plans should be closely linked. Their content and the extent to which they are linked within one Trust is explored. There is a great deal of variability in the amount and detail of risk information collected by nurses and how this is used to develop risk management plans. Keeping risk assessment information in one place rather than scattered throughout patient records is important for ensuring it can be accessed easily and linked properly to risk management plans. Strengthening the link between risk assessment and management will help ensure interventions and care is tailored to the specific needs of individual patients, thus promoting their safety and well-being. Thorough risk assessment helps in developing risk management plans that minimize risks that can impede mental health patients' recovery. Department of Health policy states that risk assessments and risk management plans should be inextricably linked. This paper examines their content and linkage within one Trust. Four inpatient wards for working age adults (18-65 years) in a large mental health Trust in England were included in the study. Completed risk assessment forms, for all patients in each inpatient ward were examined (n= 43), followed by an examination of notes for the same patients. Semi-structured interviews took place with ward nurses (n= 17). Findings show much variability in the amount and detail of risk information collected by nurses, which may be distributed in several places. Gaps in the risk assessment and risk management process are evident, and a disassociation between risk information and risk management plans is often present. Risk information should have a single location so that it can be easily found and updated. Overall, a more integrated approach to risk assessment and management is required, to help patients receive timely and appropriate interventions that can reduce risks such as suicide or harm to others. © 2011 Blackwell Publishing.

Developing a probabilistic graphical structure from a model of mental-health clinical risk expertise

This paper explores the process of developing a principled approach for translating a model of mental-health risk expertise into a probabilistic graphical structure. The Galatean Risk Screening Tool [1] is a psychological model for mental health risk assessment based on fuzzy sets. This paper details how the knowledge encapsulated in the psychological model was used to develop the structure of the probability graph by exploiting the semantics of the clinical expertise. These semantics are formalised by a detailed specification for an XML structure used to represent the expertise. The component parts were then mapped to equivalent probabilistic graphical structures such as Bayesian Belief Nets and Markov Random Fields to produce a composite chain graph that provides a probabilistic classification of risk expertise to complement the expert clinical judgements. © Springer-Verlag 2010.

Quantitative risk management aids refinery construction

Conventional project management techniques are not always sufficient to ensure that schedule, cost and quality goals are met on large-scale construction projects. These jobs require complex planning, designing and implementation processes. The main reasons for a project's nonachievement in India's hydrocarbon processing industry are changes in scope and design, altered government policies and regulations, unforeseen inflation, under and/or improper estimation. Projects that are exposed to such an uncertain environment can be effectively managed by applying risk management throughout the project life cycle.

Utilising Intranet technologies in construction sector SMEs:building up knowledge bases for extreme weather event risk management

Intranet technologies accessible through a web based platform are used to share and build knowledge bases in many industries. Previous research suggests that intranets are capable of providing a useful means to share, collaborate and transact information within an organization. To compete and survive successfully, business organisations are required to effectively manage various risks affecting their businesses. In the construction industry too this is increasingly becoming an important element in business planning. The ability of businesses, especially of SMEs which represent a significant portion in most economies, to manage various risks is often hindered by fragmented knowledge across a large number of businesses. As a solution, this paper argues that Intranet technologies can be used as an effective means of building and sharing knowledge and building up effective knowledge bases for risk management in SMEs, by specifically considering the risks of extreme weather events. The paper discusses and evaluates relevant literature in this regard and identifies the potential for further research to explore this concept.

Integrating risk management with performance management

This article argues that, post Enron, governance reforms around the world have served to raise the profile of risk management, and emphasise the need for a corporate wide approach to internal control that is overseen by the Board of Directors. In the US, this is most clearly demonstrated by the emergence of Enterprise Risk Management (ERM), defined as 'a process, effected by an entity's board of directors, management and other personnel, applied in strategy setting across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives.' (COSO, 2004, p.2). In practical terms, however, the introduction of an enterprise wide holistic risk management system poses a big challenge to all but the smallest of organisations. The financial crisis has clearly shown that enterprise wide risk management remains a dream rather than a reality for even the world's largest and once highly respected companies.

Financial risk management for management accountants:Society of Management Accountants Canada, American Institute of Certified Public Accountants and Chartered Institute of Management Accountants

Management accounting guideline