Enterprise Risk Management and the Financial Reporting Process: The Experiences of Audit Committee Members,CFOs, and External Auditors

The recent financial crisis has brought to the forefront the need for companies to effectively manage their risks. In this regard, one approach that has gained prominence is enterprise risk management (ERM). Importantly, little is known about the link between ERM and the financial reporting process. This link is critical, because it is imperative that financial reporting adequately depicts the financial status (e.g., valuations, estimates) and associated risks of a company as revealed by ERM. Additionally, from an auditing perspective, ERM affects the risks of misstatement, which should impact audit planning. Accordingly, the objective of this study is to examine the experiences of audit partners, CFOs, and audit committee (AC) members (“the governance triad”) on the link between ERM and the financial reporting process. To determine whether members of the governance triad focus on monitoring, strategy, or both, we also examine their definition of and experiences with ERM with respect to agency and/or resource dependence theory. To address these issues, we conduct semistructured interviews of experienced individuals that form the governance triads from 11 public companies. There are three major findings from our study. First, importantly, all three types of participants see a strong link between ERM and the financial reporting process. Second, despite recognition of the broad nature of ERM, the predominant experiences of the actual roles played by triad members center on agency theory, while resource dependence may be relatively underemphasized by all triad members. Finally, CFOs and AC members indicate that auditors may be especially underutilizing ERM in the audit process, suggesting an “expectations gap.”