Using process mapping and business process simulation to support a process-based approach to change in a public sector organisation

A case study demonstrates the use of a process-based approach to change regarding the implementation of an information system for road traffic accident reporting in a UK police force. The supporting tools of process mapping and business process simulation are used in the change process and assist in communicating the current process design and people's roles in the overall performance of that design. The simulation model is also used to predict the performance of new designs incorporating the use of information technology. The approach is seen to have a number of advantages in the context of a public sector organisation. These include the ability for personnel to move from a traditional grouping of staff in occupational groups with relationships defined by reporting requirements to a view of their role in a process, which delivers a performance to a customer. By running the simulation through time it is also possible to gauge how changes at an operational level can lead to the meeting of strategic targets over time. Also the ability of simulation to proof new designs was seen as particularly important in a government agency were past failures of information technology investments had contributed to a more risk averse approach to their implementation. © 2004 Elsevier Ltd. All rights reserved.

Risk, seasonality and the asymmetric behaviour of stock returns

For some time there has been a puzzle surrounding the seasonal behaviour of stock returns. This paper demonstrates that there is an asymmetric relationship between systematic risk and return across the different months of the year for both large and small firms. In the case of both large and small firms systematic risk appears to be priced in only two months of the year, January and April. During the other months no persistent relationship between systematic risk and return appears to exist. The paper also shows that when systematic risk is priced, the size of the systematic risk premium is higher for large firms than for small firms and varies significantly across the months of the year.

The board of directors, executives and risk knowledge management

Enterprise Risk Management (ERM) and Knowledge Management (KM) both encompass top-down and bottom-up approaches developing and embedding risk knowledge concepts and processes in strategy, policies, risk appetite definition, the decision-making process and business processes. The capacity to transfer risk knowledge affects all stakeholders and understanding of the risk knowledge about the enterprise's value is a key requirement in order to identify protection strategies for business sustainability. There are various factors that affect this capacity for transferring and understanding. Previous work has established that there is a difference between the influence of KM variables on Risk Control and on the perceived value of ERM. Communication among groups appears as a significant variable in improving Risk Control but only as a weak factor in improving the perceived value of ERM. However, the ERM mandate requires for its implementation a clear understanding, of risk management (RM) policies, actions and results, and the use of the integral view of RM as a governance and compliance program to support the value driven management of the organization. Furthermore, ERM implementation demands better capabilities for unification of the criteria of risk analysis, alignment of policies and protection guidelines across the organization. These capabilities can be affected by risk knowledge sharing between the RM group and the Board of Directors and other executives in the organization. This research presents an exploratory analysis of risk knowledge transfer variables used in risk management practice. A survey to risk management executives from 65 firms in various industries was undertaken and 108 answers were analyzed. Potential relationships among the variables are investigated using descriptive statistics and multivariate statistical models. The level of understanding of risk management policies and reports by the board is related to the quality of the flow of communication in the firm and perceived level of integration of the risk policy in the business processes.

Real options in multinational decision-making:managerial awareness and risk implications

This paper addresses the theme of real options decision-making in multinational corporations (MNCs) and stresses the role of real options attention and managerial learning in company performance. Using a sample of 278 large MNCs with categorised degrees of managerial real options awareness, we examine the risk implications of switching options in multinational operations, and explore the extent to which the real options logic can be classified as “best practice” in decision-making and risk management. Our results reveal that MNCs which have high managerial awareness about their real options are able to reduce their downside risk through multinationality, organisational slack and other firm characteristics. This finding does not apply fully to MNCs without evidence of such an awareness. Also, although real options awareness does not systematically guarantee lower downside risk from operations, supplementary results indicate that MNCs with evidence of significant investment in the acquisition of real options knowledge tend to outperform competitors that are unaware of their real options. This suggests that if real options are explored and exploited appropriately, real options decision-making can result into superior performance for MNCs in the long-term.

Risk management in enterprise resource planning implementation:a new risk assessment framework

Enterprise resource planning (ERP) projects are risky. But if they are implemented appropriately, they can provide competitive advantage to organisations. Therefore, ERP implementation has become one of the most critical aspects of today's information management research. The main purpose of this article is to describe a new ERP risk assessment framework (RAF) that can be used to increase the success of ERP implementation. In this article, through a case study based in a leading UK-based energy service provider, we demonstrate the new RAF, which has been shown to help identify and mitigate risks in ERP implementation. In contrast to other research, this RAF identifies risks hierarchically in external engagement, programme management, work stream and work package levels across technical, schedule, operational, business and organisational categories. This not only helped to develop responses to mitigate risks but also facilitates on-going risk control.

Before and after modelling:risk knowledge management is required

Risk and knowledge are two concepts and components of business management which have so far been studied almost independently. This is especially true where risk management is conceived mainly in financial terms, as, for example, in the banking sector. The banking sector has sophisticated methodologies for managing risk, such as mathematical risk modeling. However. the methodologies for analyzing risk do not explicitly include knowledge management for risk knowledge creation and risk knowledge transfer. Banks are affected by internal and external changes with the consequent accommodation to new business models new regulations and the competition of big players around the world. Thus, banks have different levels of risk appetite and policies in risk management. This paper takes into consideration that business models are changing and that management is looking across the organization to identify the influence of strategic planning, information systems theory, risk management and knowledge management. These disciplines can handle the risks affecting banking that arise from different areas, but only if they work together. This creates a need to view them in an integrated way. This article sees enterprise risk management as a specific application of knowledge in order to control deviation from strategic objectives, shareholders' values and stakeholders' relationships. Before and after a modeling process it necessary to find insights into how the application of knowledge management processes can improve the understanding of risk and the implementation of enterprise risk management. The article presents a propose methodology to contribute to providing a guide for developing risk modeling knowledge and a reduction of knowledge silos, in order to improve the quality and quantity of solutions related to risk inquiries across the organization.

Managing project risk using combined analytic hierarchy process and risk map

The main purpose of the study is to develop an integrated framework for managing project risks by analyzing risk across project, work package and activity levels, and developing responses. Design/methodology/approach: The study first reviews the literature of various contemporary risk management frameworks in order to identify gaps in project risk management knowledge. Then it develops a conceptual risk management framework using combined analytic hierarchy process (AHP) and risk map for managing project risks. The proposed framework has then been applied to a 1500 km oil pipeline construction project in India in order to demonstrate its effectiveness. The concerned project stakeholders were involved through focus group discussions for applying the proposed risk management framework in the project under study. Findings: The combined AHP and risk map approach is very effective to manage project risks across project, work package and activity levels. The risk factors in project level are caused because of external forces such as business environment (e.g. customers, competitors, technological development, politics, socioeconomic environment). The risk factors in work package and activity levels are operational in nature and created due to internal causes such as lack of material and labor productivity, implementation issues, team ineffectiveness, etc. Practical implications: The suggested model can be applied to any complex project and helps manage risk throughout the project life cycle. Originality/value: Both business and operational risks constitute project risks. In one hand, the conventional project risk management frameworks emphasize on managing business risks and often ignore operational risks. On the other hand, the studies that deal with operational risk often do not link them with business risks. However, they need to be addressed in an integrated way as there are a few risks that affect only the specific level. Hence, this study bridges the gaps. © 2010 Elsevier B.V. All rights reserved.

Risk management in organizations:an integrated case study approach

In any organization, risk plays a huge role in the success or failure of any business endeavour. Measuring and managing risk is a difficult and often complicated task and the global financial crisis of the late noughties can be traced to a worldwide deficiency in risk management regimes. One of the problems in understanding how best to manage risk is a lack of detailed examples of real world practice. In this accessible textbook the author sets the world of risk management in the context of the broader corporate governance agenda, as well as explaining the core elements of a risk management system. Material on the differences between risk management and internal auditing is supplemented by a section on the professionalization of risk – a relatively contemporary evolution. Enterprise risk management is also fully covered. With a detailed array of risk management cases – including Tesco, RBS and the UK government – lecturers will find this a uniquely well researched resource, supplemented by materials that enable the cases to be easily integrated into the classroom. Risk managers will be delighted with the case materials made available for the first time with the publication of this book.

The core executive's approach to regulation:from 'better regulation' to 'risk-tolerant deregulation'

This article examines changes in the New Labour core executive’s approach to regulation and its relationship with risk, through analysing documentary, legislative and press sources concerning approaches to regulatory decision-making. It claims that an initial commitment to ‘better regulation’ has gradually been replaced by explicit support for deregulation. A reduction in the scope of regulation was also promoted by the Thatcher and Major governments. The New Labour core executive shares previous (Conservative) administrations’ concern to include business in deregulatory decision-making. However, the article claims that there is one significant difference in the New Labour deregulatory approach: a new toleration of risk. Deregulation is, now, described as a corrective to regulators’ over-reactions to perceived risks, which, it is claimed, are holding back economic and technological progress. However, this new approach excludes competing views concerning how risk should be regulated. In particular, it does not engage with widespread popular views that governments should continue to protect against risk.

Utilising Intranet technologies in construction sector SMEs:building up knowledge bases for extreme weather event risk management

Intranet technologies accessible through a web based platform are used to share and build knowledge bases in many industries. Previous research suggests that intranets are capable of providing a useful means to share, collaborate and transact information within an organization. To compete and survive successfully, business organisations are required to effectively manage various risks affecting their businesses. In the construction industry too this is increasingly becoming an important element in business planning. The ability of businesses, especially of SMEs which represent a significant portion in most economies, to manage various risks is often hindered by fragmented knowledge across a large number of businesses. As a solution, this paper argues that Intranet technologies can be used as an effective means of building and sharing knowledge and building up effective knowledge bases for risk management in SMEs, by specifically considering the risks of extreme weather events. The paper discusses and evaluates relevant literature in this regard and identifies the potential for further research to explore this concept.

Adaptation to flood risk:the case of businesses in the UK

Despite Government investment in flood defence schemes, many properties remain at high risk of flooding. A substantial portion of these properties are business establishments. Flooding can create serious consequences for businesses, including damage to property and stocks, being out of business for a considerable period and ultimately business failure. Recent flood events such as those in 2007 and 2009 that affected many parts of the UK have helped to establish the true costs of flooding to businesses. This greater understanding of the risks to businesses has heightened the need for business owners to adapt their businesses to the threat of future flooding. Government policy has now shifted away from investment in engineered flood defences, towards encouraging the uptake of property level flood resistance and resilience measures by businesses. However, implementing such adaptation strategies remains a challenge due a range of reasons. A review of the current state of property level flood risk adaptation of UK businesses is presented, drawing from extant literature. Barriers that may hinder the uptake of property level adaptation by businesses are revealed and drivers that may enhance uptake and effectively overcome these barriers are also discussed. It is concluded that the professions from the construction sector have the potential to contribute towards the adaptation of business properties and thereby the flood resilience of businesses at risk of flooding.

Resilience and adaptation of small and medium-sized enterprises to flood risk

Purpose – The UK has experienced a number of flood events in recent years, and the intensity and frequency of such events are forecast to further increase in future due to changing climatic conditions. Accordingly, enhancing the resilience of small and medium-sized enterprises (SMEs) – which form an important segment in a society – to flood risk, has emerged as an important issue. However, SMEs often tend to underestimate the risk of flooding which tends to have a low priority in their business agenda. The purpose of this paper is to undertake an investigation of adaptation to the risk of flooding considering community-level measures, individual-level property protection, and business continuity and resilience measures. Design/methodology/approach – A total of four short case studies were conducted among SMEs to identify their response to flood risk, and what measures have been undertaken to manage the risk of flooding. Findings – It was observed that SMEs have implemented different property-level protection measures and generic business continuity/risk management measures, based on their requirements, to achieve a desired level of protection. Practical implications – SMEs are likely to positively respond to property-level adaptation following a post-flood situation. It is important that information such as costs/benefits of such measures and different options available are made accessible to SMEs affected by a flood event. Social implications – Implementation of property-level adaptation measures will contribute towards the long term adaptation of the existing building stock to changing climatic conditions. Originality/value – The paper contributes towards policy making on flood risk adaptation and SME decision making, and informs policy makers and practitioners.

Impacts of flood hazards on small and medium companies:strategies for property level protection and business continuity

Worldwide floods have become one of the costliest weather-related hazards, causing large-scale human, economic, and environmental damage during the recent past. Recent years have seen a large number of such flood events around the globe, with Europe and the United Kingdom being no exception. Currently, about one in six properties in England is at risk of flooding (EA, 2009), and the risk is expected to further increase in the future (Evans et al., 2004). Although public spending on community-level flood protection has increased and some properties are protected by such protection schemes, many properties at risk of flooding may still be left without adequate protection. As far as businesses are concerned, this has led to an increased need for implementing strategies for property-level flood protection and business continuity, in order to improve their capacity to survive a flood hazard. Small and medium-sized enterprises (SMEs) constitute a significant portion of the UK business community. In the United Kingdom, more than 99% of private sector enterprises fall within the category of SMEs (BERR, 2008). They account for more than half of employment creation (59%) and turnover generation (52%) (BERR, 2008), and are thus considered the backbone of the UK economy. However, they are often affected disproportionately by natural hazards when compared with their larger counterparts (Tierney and Dahlhamer, 1996; Webb, Tierney, and Dahlhamer, 2000; Alesch et al., 2001) due to their increased vulnerability. Previous research reveals that small businesses are not adequately prepared to cope with the risk of natural hazards and to recover following such events (Tierney and Dahlhamer, 1996; Alesch et al., 2001; Yoshida and Deyle, 2005; Crichton, 2006; Dlugolecki, 2008). For instance, 90% of small businesses do not have adequate insurance coverage for their property (AXA Insurance UK, 2008) and only about 30% have a business continuity plan (Woodman, 2008). Not being adequately protected by community-level flood protection measures as well as property- and business-level protection measures threatens the survival of SMEs, especially those located in flood risk areas. This chapter discusses the potential effects of flood hazards on SMEs and the coping strategies that the SMEs can undertake to ensure the continuity of their business activities amid flood events. It contextualizes this discussion within a survey conducted under the Engineering and Physical Sciences Research Council (EPSRC) funded research project entitled “Community Resilience to Extreme Weather — CREW”.

Private climate change reporting: an emerging discourse of risk and opportunity?

Purpose – This paper aims to explore the nature of the emerging discourse of private climate change reporting, which takes place in one-on-one meetings between institutional investors and their investee companies. Design/methodology/approach – Semi-structured interviews were conducted with representatives from 20 UK investment institutions to derive data which was then coded and analysed, in order to derive a picture of the emerging discourse of private climate change reporting, using an interpretive methodological approach, in addition to explorative analysis using NVivo software. Findings – The authors find that private climate change reporting is dominated by a discourse of risk and risk management. This emerging risk discourse derives from institutional investors' belief that climate change represents a material risk, that it is the most salient sustainability issue, and that their clients require them to manage climate change-related risk within their portfolio investment. It is found that institutional investors are using the private reporting process to compensate for the acknowledged inadequacies of public climate change reporting. Contrary to evidence indicating corporate capture of public sustainability reporting, these findings suggest that the emerging private climate change reporting discourse is being captured by the institutional investment community. There is also evidence of an emerging discourse of opportunity in private climate change reporting as the institutional investors are increasingly aware of a range of ways in which climate change presents material opportunities for their investee companies to exploit. Lastly, the authors find an absence of any ethical discourse, such that private climate change reporting reinforces rather than challenges the “business case” status quo. Originality/value – Although there is a wealth of sustainability reporting research, there is no academic research on private climate change reporting. This paper attempts to fill this gap by providing rich interview evidence regarding the nature of the emerging private climate change reporting discourse.

Market risk reporting by the world's top banks:evidence on the diversity of reporting practice and the implications for international accounting harmonisation

The increasing adoption of international accounting standards and global convergence of accounting regulations is frequently heralded as serving to reduce diversity in financial reporting practice. In a process said to be driven in large part by the interests of international business and global financial markets, one might expect the greatest degree of convergence to be found amongst the world’s largest multinational financial corporations. This paper challenges such claims and presumptions. Its content analysis of longitudinal data for the period 2000-2006 reveals substantial, on going diversity in the market risk disclosure practices, both numerical and narrative, of the world’s top-25 banks. The significance of such findings is reinforced by the sheer scale of the banking sector’s risk exposures that have been subsequently revealed in the current global financial crisis. The variations in disclosure practices documented in the paper apply both across and within national boundaries, leading to a firm conclusion that, at least in terms of market risk reporting, progress towards international harmonisation remains rather more apparent than real.