Enterprise risk management revisited: a study to identify the elements of ERM

Linda J. A. Stasse, Cokky A. R. Hilhorst and Johannes A. ten Rouwelaar

Journal of Risk Research, 2025, vol. 28, issue 7, 768-793

Abstract: There is a need for organizations to pay more attention to enterprise risk management (ERM) in order to improve their internal control environment and be resilient for the future. To support organizations in doing so, this study effectively revisits and evaluates ERM by identifying the elements of ERM through a quantitative analysis of 420 respondents from organizations across all industries in the Netherlands over a 3-year period (2020–2022). ERM is conceptualized as an integrated and continuous process for holistically managing traditional and strategic risks to support the achievement of the organization’s business objectives. Based on both exploratory and confirmatory factor analysis complemented with robustness analyses, our study (1) identifies a robust two-factor model emphasizing both fundamental ERM elements and strategic ERM elements, confirming the evolution suggested by the COSO ERM framework (2017), and (2) presents a focused measurement instrument comprising 36 ERM elements, less extensive yet more focussed than previous models, offering enhanced practical applicability and aligning with strategic objectives to enhance stakeholder value. Our study offers valuable insights into ERM practices, highlighting the evolving nature and growing importance of integrating ERM within organizational strategies, and underscoring the evolution towards a more holistic and strategic approach in managing enterprise risks. Implications for practice suggest that organizations prioritize embedding ERM practices within their strategic planning processes to adapt to the evolving risk landscape, thereby maintaining competitive advantage and promoting sustainable growth, while policy recommendations advocate for guidelines promoting ERM strategies as a means of maintaining competitive advantage. This study provides a foundation for future research into ERM, like factors influencing ERM processes, technological advancements, and longitudinal impacts on organizational resilience.

Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/13669877.2025.2553846 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:jriskr:v:28:y:2025:i:7:p:768-793

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/RJRR20

DOI: 10.1080/13669877.2025.2553846

Access Statistics for this article

Journal of Risk Research is currently edited by Bryan MacGregor

More articles in Journal of Risk Research from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().