Enterprise Risk Management Through Strategic Allocation of Capital

This article presents a conceptual framework for operationalizing strategic enterprise risk management (ERM) in a general firm. We employ a risk‐constrained optimization approach to study the capital allocation decisions under ERM. Given the decision maker's risk appetite, the problem of holistically managing enterprise‐wide hazard, financial, operational, and real project risks is treated by maximizing the expected total return on capital, while trading off risks simultaneously in Value‐at‐Risk type of constraints. This approach explicitly quantifies the concepts of risk appetite and risk prioritization in light of the firm's default and financial distress avoidance reflected in its target credit rating. Our framework also allows the firm to consider a multiperiod planning horizon so that changing business environments can be accounted for. We illustrate the implementation of the framework through a numerical example. As an initial conceptual advancement, our formulation is capable of facilitating more general ERM modeling within a consistent strategic framework, where idiosyncratic variations of firms and different modeling assumptions can be accommodated. Managerial implications are also discussed.     

The Effect of Corporate Governance on the Use of Enterprise Risk Management: Evidence From Canada

This article examines the use of enterprise risk management (ERM) by companies in Canada, the characteristics that are associated with the use of ERM, what obstacles companies face in implementing ERM, and what role, if any, corporate governance guidelines have played in the decision to adopt ERM. We obtained our data from the responses to a mail survey sent to Canadian Risk and Insurance Management Society members as well as telephone interviews with 19 of the respondents. The results indicate that 31 percent of the sample had adopted ERM and that reasons for adopting ERM include the influence of the risk manager (61 percent), encouragement from the board of directors (51 percent), and compliance with Toronto Stock Exchange (TSE) guidelines (37 percent). The major deterrents to ERM were an organizational structure that discourages ERM and an overall resistance to change. Although only about one‐third of companies indicated that they had adopted an ERM approach, evidence was clear that a larger portion of the sample was moving in that direction, as indicated by what changes they had observed in their companies in the past three years. These include the development of company‐wide guidelines for risk management (45 percent), an increased awareness of nonoperational risks by operational risk management personnel and an increased awareness of operational risks by nonoperational risk management personnel (49 percent), more coordination with different areas responsible for risk management (64 percent), and more involvement and interaction in the decision making of other departments. Contrary to what we expected, there was not a significant difference between firms that are listed on the TSE versus those that are not in terms of the propensity to use ERM. However, the fact that 37 percent of firms indicated that the TSE guidelines were influential in their decision to adopt ERM provides some evidence that the guidelines are influencing companies’ risk management strategies.     

Enterprise Risk Management: Theory and Practice

The Chief Risk Officer of Nationwide Insurance teams up with a distinguished academic to discuss the benefits and challenges associated with the design and implementation of an enterprise risk management program. The authors begin by arguing that a carefully designed ERM program—one in which all material corporate risks are viewed and managed within a single framework—can be a source of long‐run competitive advantage and value through its effects at both a “macro” or company‐wide level and a “micro” or business‐unit level. At the macro level, ERM enables senior management to identify, measure, and limit to acceptable levels the net exposures faced by the firm. By managing such exposures mainly with the idea of cushioning downside outcomes and protecting the firm's credit rating, ERM helps maintain the firm's access to capital and other resources necessary to implement its strategy and business plan. At the micro level, ERM adds value by ensuring that all material risks are “owned,” and risk‐return tradeoffs carefully evaluated, by operating managers and employees throughout the firm. To this end, business unit managers at Nationwide are required to provide information about major risks associated with all new capital projects—information that can then used by senior management to evaluate the marginal impact of the projects on the firm's total risk. And to encourage operating managers to focus on the risk‐return tradeoffs in their own businesses, Nationwide's periodic performance evaluations of its business units attempt to refl ect their contributions to total risk by assigning risk‐adjusted levels of “imputed” capital on which project managers are expected to earn adequate returns. The second, and by far the larger, part of the article provides an extensive guide to the process and major challenges that arise when implementing ERM, along with an account of Nationwide's approach to dealing with them. Among other issues, the authors discuss how a company should assess its risk “appetite,” measure how much risk it is bearing, and decide which risks to retain and which to transfer to others. Consistent with the principle of comparative advantage it uses to guide such decisions, Nationwide attempts to limit “non‐core” exposures, such as interest rate and equity risk, thereby enlarging the firm's capacity to bear the “information‐intensive, insurance‐ specific” risks at the core of its business and competencies.     

Enterprise Risk Management and the Cost of Capital

Enterprise risk management (ERM) is a process that manages all risks in an integrated, holistic fashion by controlling and coordinating any offsetting risks across the enterprise. This research investigates whether the adoption of the ERM approach affects firms' cost of equity capital. We restrict our analysis to the U.S. insurance industry to control for unobservable differences in business models and risk exposures across industries. We simultaneously model firms' adoption of ERM and the effect of ERM on the cost of capital. We find that ERM adoption significantly reduces firm's cost of capital. Our results suggest that cost of capital benefits are one answer to the question how ERM can create value.     

Determinants and Value of Enterprise Risk Management: Empirical Evidence From the Literature

The development of an enterprise risk management (ERM) program enables companies to manage corporate risks in a holistic manner as opposed to the silo‐based perspective in traditional risk management frameworks. One main question in this regard is what factors drive the implementation of an ERM system in companies and whether ERM programs can actually create value once implemented. This article addresses these questions by conducting a comparative assessment of empirical evidence from the literature regarding the determinants of ERM and its value once implemented. In doing so we are able to illustrate differences in model specifications and the underlying data. Our literature study shows that particularly the company size and the level of institutional ownership are significantly positively related to the implementation of ERM in most empirical studies and, furthermore, that ERM generally has a (significant) positive impact on corporate value and performance (to a different extent and depending on the focus of the studies). However, geographic and/or industrial restrictions regarding the underlying data sets partly limit the generalization of the empirical results.     

Incorporating Strategic Risk into Enterprise Risk Management: A Survey of Current Corporate Practice

Since ERM is a relatively recent activity and has yet to be fully implemented in most companies, there has been little academic research about its accomplishments and about the obstacles to further progress. In particular, very little has been published about corporate attempts to identify and manage corporate strategic risks while integrating them into a corporate‐ wide ERM framework. This article uses responses collected from a survey of 271 risk and financial executives in North American and European companies to address the following questions: What forces are behind this push for a more organized and integrated management of significant risks? What challenges are companies encountering as they implement implement ERM? Once fully in place, how does ERM affect the company's ability to implement its strategy? The primary drivers of ERM are said to be corporate governance requirements and other regulatory pressures, and management and investor demand for greater understanding of strategic and operating risks. The benefits of full ERM implementation are increased management accountability and better governance practices, greater managerial understanding of and consensus about corporate strategy, and, in some cases, higher credit ratings and hence a lower cost of capital. The tools and techniques to measure the impact of strategic risks appear to vary, depending on the stage of ERM implementation. For advanced ERM companies, the most frequently used tools and techniques are key risk indicators, self‐assessments, and scenario analysis.     

ENTERPRISE RISK MANAGEMENT: THE CASE OF UNITED GRAIN GROWERS

Enterprise risk management (ERM) refers to the identification, quantification, and management of all of a company's risks within a unified framework. This approach is much more comprehensive than traditional risk management practice, where different types of risk are managed by different people using different tools. The authors evaluate the advantages and disadvantages of ERM and then describe how United Grain Growers (UGG), a major farm service provider in Western Canada, established such an approach.
Extensive risk identification and measurement indicated that the volatility of UGG's earnings was driven to a large extent by changes in the volume of its grain shipments, which in turn were principally due to variation in weather. After first considering the use of weather derivatives to hedge the risk, the company ended up purchasing an insurance contract, bundled with its traditional insurance coverage, that pays UGG if its grain volume is unexpectedly low. The potential for moral hazard that can make insurance an expensive proposition was limited by basing payoffs on industry grain shipments rather than the company's shipments. The bundled approach served to expand and integrate UGG's insurance coverage, while eliminating redundant coverage.
Besides economizing on insurance costs, another valuable aspect of enterprise risk management is as a source of information about the operations of the firm. By providing managers with a better understanding of their business and events that can undermine the firm's strategic objectives, ERM can lead to better operating decisions as well as a more efficient approach to risk retention and risk transfer.     

Profiling the environmental risk management of Chinese local environmental agencies

The increasing frequency and impact of environmental accidents have pushed the issue of environmental risk management (ERM) to the top of the Chinese governments’ agendas and popularized the term ‘emergency response.’ Although the boundary between environmental accidents and other types of accidents is blurred and effective ERM requires an integrated and coordinated management system, environmental risks have not been given due weight in the overall risk management framework in China. The Ministry of Environmental Protection and Environmental Protection Bureaus at various governmental levels are responsible for the management of environmental risks. In recent years, major developments have taken place within these environmental agencies, but the upward trend in number of environmental accidents has remained unchanged. This raises questions on how these organizations respond to and prevent environmental risks, which shortcomings can be indicated, and what improvements can be made in ERM. This study addresses these questions through a survey among environmental bureaus at provincial and municipal levels. The results indicate that environmental emergency response and ERM have become a major concern of local environmental officials. However, the attitudes, available resources, and organizational capacities vary among environmental agencies, which results in considerable differences in the adopted strategies and management tools. This survey is the first attempt to profile the ERM of the Chinese environmental agencies, which serves as a basis for further analysis of ERM in China.     

Enterprise risk management: An empirical analysis of factors associated with the extent of implementation

Enterprise risk management (ERM) has emerged as a new paradigm for managing the portfolio of risks that face organizations, and policy makers continue to focus on mechanisms to improve corporate governance and risk management. Despite these developments, there is little research on factors associated with the implementation of ERM. Research is needed to provide insights as to why some organizations are responding to changing risk profiles by embracing ERM and others are not.This exploratory study examines factors associated with the stage of ERM implementation at a variety of US and international organizations. Based on data gathered from 123 organizations, we find the stage of ERM implementation to be positively related to the presence of a chief risk officer, board independence, CEO and CFO apparent support for ERM, the presence of a Big Four auditor, entity size, and entities in the banking, education, and insurance industries. We also find US organizations to have less-developed ERM processes than international organizations. We believe this paper will provide an initial foundation for more advanced research about ERM.     

The Determinants of Enterprise Risk Management: Evidence From the Appointment of Chief Risk Officers

Enterprise risk management (ERM) has captured the attention of risk management professionals and academics worldwide. Unlike the traditional "silo-based" approach to corporate risk management, ERM enables firms to benefit from an integrated approach to managing risk that shifts the focus of the risk management function from primarily defensive to increasingly offensive and strategic. Despite the heightened interest in ERM, little empirical research has been conducted on the topic. This study provides an initial attempt at identifying the determinants of ERM adoption. We construct a sample of firms that have signaled their use of ERM by appointing a Chief Risk Officer (CRO) who is charged with the responsibility of implementing and managing the ERM program. We use a logistic regression framework to compare these firms to a size- and industry-matched control sample. While our results suggest a general absence of differences in the financial and ownership characteristics of sample and control firms, we find that firms with greater financial leverage are more likely to appoint a CRO. This finding is consistent with the hypothesis that firms appoint CROs to reduce information asymmetry regarding the firm's current and expected risk profile.     

Lessons from the Financial Crisis on Risk and Capital Management: The Case of Insurance Companies

This article proposes that risk management be viewed as an integral part of the corporate value‐creation process— one in which the concept of economic capital can provide companies with the financial cushion and confidence to carry out their strategic plans. Using the case of insurance and reinsurance companies, the authors discuss three main ways that the integration of risk and capital management creates value:

• 1 strengthening solvency (by limiting the probability of financial distress);
• 2 increasing prospects for profitable growth (by preserving access to capital during post‐loss periods); and
• 3 improving transparency (by increasing the “information content” or “signaling power” of reported earnings).

Insurers can manage solvency risk by using Enterprise Risk Management (ERM) models to limit the probability of financial distress to levels consistent with the firm's specified risk tolerance. While ERM models are effective in managing “known” risks, we discuss three practices widely used in the insurance industry to manage “unknown” and “unknowable” risks using the logic of real options—slack, mutualization, and incomplete contracts. Second, risk management can create value by securing sources of capital that, like contingent capital, can be used to fund profitable growth opportunities that tend to arise in periods following large losses. Finally, the authors argue that risk management can raise the confidence of investors in their estimates of future growth by removing the “noise” in earnings that comes from bearing non‐core risks, thereby making current earnings a more reliable guide to future earnings. In support of this possibility, the authors provide evidence showing that, for a given level of reported return on equity (ROE), (re)insurers with more stable ROEs have higher price‐to‐book ratios, suggesting investors' willingness to pay a premium for the stability provided by risk management.     

Enterprise risk management and firm performance: A contingency perspective

In recent years, a paradigm shift has occurred regarding the way organizations view risk management. Instead of looking at risk management from a silo-based perspective, the trend is to take a holistic view of risk management. This holistic approach toward managing an organization’s risk is commonly referred to as enterprise risk management (ERM). Indeed, there is growing support for the general argument that organizations will improve their performance by employing the ERM concept. The basic argument presented in this paper is that the relation between ERM and firm performance is contingent upon the appropriate match between ERM and the following five factors affecting a firm: environmental uncertainty, industry competition, firm size, firm complexity, and board of directors’ monitoring. Based on a sample of 112 US firms that disclose the implementation of their ERM activities within their 10Ks and 10Qs filed with the US Securities and Exchange Commission, empirical evidence confirms the above basic argument. The implication of these findings is that firms should consider the implementation of an ERM system in conjunction with contextual variables surrounding the firm.     

The Theory and Practice of Corporate Risk Management*

The financial crisis of 2008 and the resulting recession caught many companies unprepared and, in so doing, provided a stark reminder of the importance of effective risk management. While academic theory has long touted the benefits of risk management, companies have varied greatly in the ways and extent to which they put theory into practice. Drawing on a global survey of over 300 CFOs of non‐financial companies, the authors report that while most CFOs felt that their risk management programs have significant benefits, the risk management function in general needs more attention. A large percentage of the finance executives surveyed acknowledged that the most important corporate risks extend far beyond the CFO's direct reports, and that risk‐based thinking is not incorporated into everyday business activities or corporate strategies. A large majority of executives also said they were seeking a more widespread understanding of risk throughout their organizations—and many confessed their firms' inability, or lack of interest, in evaluating their own risk management functions. At the same time, the efforts of most companies to develop enterprise‐wide risk management (ERM) programs were said to fall well short of the comprehensive and highly coordinated programs envisioned by the proponents of such programs. Three areas of opportunity were clearly identified as having potential to improve corporate risk management in ways that increase firm value over an entire business cycle:

• ? Incorporate risk management thinking into the strategic planning process. Line executives, and not just technicians, need to be sensitive to risks, thereby building flexibility into the firm's business plan and its execution.
• ? Clearly define the objectives of the risk management function, in part by developing appropriate benchmarks. The risk management process should be subject to the same rigorous evaluation process that is used when measuring risks throughout the business.
• ? Instill a risk management culture throughout the organization. While an effective risk management function is necessary, only when employees at all levels of the company embrace risk management as part of their daily operations will the firm get maximum value from risk management.

     

The drivers and value of enterprise risk management: evidence from ERM ratings

In the course of recent regulatory developments, holistic enterprise-wide risk management (ERM) frameworks have become increasingly relevant for insurance companies. The aim of this paper is to contribute to the literature by analyzing determinants (firm characteristics) as well as the impact of ERM on the shareholder value of European insurers using the Standard & Poor’s ERM rating to identify ERM activities. This has not been done so far, even though it is of high relevance against the background of the introduction of Solvency II, which requires a holistic approach to risk management. Results show a significant positive impact of ERM on firm value for the case of European insurers. In particular, we find that insurers with a high quality risk management (RM) system exhibit a Tobin’s Q that on average is about 6.5% higher than for insurers with less high quality RM after controlling for covariates and endogeneity bias.     

A proposed enterprise risk management model for health organizations

Health care organizations are environments with high management complexity and subject to a constant exposure to risks. Enterprise risk management (ERM) has been studied and applied in different economic environments with the aim of improving organizational performance. However, the health sector still suffers from a lack of attention in this context, in particular with regard to the need for a high degree of financial transparency and for the establishment of process-orientated management, and this provides the motivation for the study described in this paper. An ERM model for health organizations is proposed, based on a systematic literature review and on seven case studies in Brazilian hospitals. An approach to economic risk assessment using indicators such as the cash flow at risk and the variability of costs and receipts from the proposed model is suggested. The health organizations involved in the case studies all interpret ERM as a source of information contributing to corporate governance, and the indicators listed provide constructive data for improvement-driven decision-making. Given the interest expressed by the organizations involved, further application and validation of the proposed model in subsequent studies is suggested.     

Risk management and calculative cultures

Enterprise risk management (ERM) has recently emerged as a widespread practice in financial institutions. It has been increasingly codified and encrypted into regulatory, corporate governance and organizational management blueprints. A burgeoning literature of regulatory and practitioner texts is indicative of the apparent diversity of ambitions, objectives and techniques that constitute the ERM agenda. Making sense of these developments is a challenge. This paper presents field-based evidence from two large banking organizations suggesting that systematic variations in ERM practices exist in the financial services industry. The cases illustrate four risk management ideal types and show how they form the ‘risk management mix’ in a given organization. Further, drawing on the literature of the roles and uses of management control systems (MCS), the paper explores how ERM achieved organizational significance in the studied settings. The findings are indicative of the current co-existence of alternative models of ERM. In particular, two types of ERM models are postulated: one driven by a strong shareholder value imperative (ERM by the numbers), the other corresponding to the demands of the risk-based internal control imperative (holistic ERM). This paper explains the differences in the two risk management mixes pointing towards alternative logics of calculation [Power, M.K., 2007. Organized Uncertainty—Designing a World of Risk Management. Oxford University Press, Oxford], which I conceptualise and describe as different calculative cultures. The study suggests that calculative cultures, which in these cases shaped managerial predilections towards ERM practices, are relevant, albeit so far neglected, constituents of the fit between MCS and organizational contexts.     

Enterprise risk management and firm performance: The Italian case

This paper investigates whether a relationship exists between the extent of implementation of enterprise risk management (ERM) systems and the performance of Italian listed companies. While many contributions in the literature focus on the determinants of ERM adoption and use one-dimensional feature to proxy for ERM implementation, we detect the consequences of ERM implementation and capture a variety of features to measure the sophistication of the ERM system. The results show that firms with advanced levels of ERM implementation present higher performance, both as financial performance and market evaluation. Additional tests also corroborate the expectation that effective ERM systems lead to higher performance by reducing risk exposure and that reverse causality between ERM and performance is not present in the short term. The study provides a twofold contribution to the ERM literature. First, it introduces new and more complete measures for ERM implementation, concerning not only corporate governance bodies dedicated to risk management, but also the characteristics of the risk assessment process. Moreover, it provides evidence of a positive relationship between ERM implementation and firm performance in an under-investigated context such as Italy.     

The impact of enterprise risk management on the marginal cost of reducing risk: Evidence from the insurance industry

We test the hypothesis that practicing enterprise risk management (ERM) reduces firms’ cost of reducing risk. Adoption of ERM represents a radical paradigm shift from the traditional method of managing risks individually to managing risks collectively allowing ERM-adopting firms to better recognize natural hedges, prioritize hedging activities towards the risks that contribute most to the total risk of the firm, and optimize the evaluation and selection of available hedging instruments. We hypothesize that these advantages allow ERM-adopting firms to produce greater risk reduction per dollar spent. Our hypothesis further predicts that, after implementing ERM, firms experience profit maximizing incentives to lower risk. Consistent with this hypothesis, we find that firms adopting ERM experience a reduction in stock return volatility. We also find that the reduction in return volatility for ERM-adopting firms becomes stronger over time. Further, we find that operating profits per unit of risk (ROA/return volatility) increase post ERM adoption.     

Determinants and value of enterprise risk management: empirical evidence from Germany

Enterprise risk management (ERM) has become increasingly relevant in recent years, especially due to an increasing complexity of risks and the further development of regulatory frameworks. The aim of this paper is to empirically analyze firm characteristics that determine the implementation of an ERM system and to study the impact of ERM on firm value. We focus on companies listed at the German stock exchange, which to the best of our knowledge is the first empirical study with a cross-sectional analysis for Germany and one of the first for a European country. Our findings show that size, international diversification and the industry sector (banking, insurance, energy) positively impact the implementation of an ERM system, and financial leverage is negatively related to ERM engagement. In addition, our results confirm a significant positive impact of ERM on shareholder value.