Jurnal 1
Jurnal 1
Abstract: Enterprise Risk Management (ERM) practices are particularly crucial in this industry
to ensure stability and compliance with regulatory requirements. This study examines the effect
of ERM on a firm’s operational and financial performances by using two mediating variables
of compliance practices and IT strategy. By using a quantitative approach, data was collected
through purposive random sampling from 250 bank managers in Jabodetabek, Indonesia. The
study found that ERM was found to influence financial and operational performance positively
and significantly. Moreover, compliance practices positively and significantly affect both
Article history: financial and operational performance. IT strategy also has a positive and significant impact on
firm performance. In testing the mediating effect, IT strategy partially mediates the relationship
Received between ERM and performance, as do compliance practices. These findings highlight the
20 September 2023 importance of ERM, IT strategy, and compliance practices in enhancing the performance
of banking companies in Indonesia. The findings validate the increasing importance of risk
Revised management in the financial landscape in Indonesia. The recognition of the banking sector's
4 November 2023 complexity and vulnerability to diverse risk types, including credit, market, operational, and
regulatory risks, underscores the critical role of risk management practices.
Accepted
30 November 2023 Keywords: enterprise risk management, compliance practices, it strategy, financial performance,
operational performance
Available online
15 January 2024 Abstrak: Praktik Enterprise Risk Management (ERM) memiliki peranan yang sangat penting
dalam industri ini untuk memastikan stabilitas dan kepatuhan terhadap persyaratan regulasi.
Tujuan dari penelitian ini adalah untuk menguji ERM terhadap kinerja operasional dan
This is an open access keuangan perusahaan dengan menggunakan praktik kepatuhan dan strategi TI sebagai
article under the CC variabel mediasi. Dengan pendekatan kuantitatif, data dikumpulkan melalui pengambilan
BY license (https:// sampel acak yang disengaja dari 250 manajer bank di Jabodetabek, Indonesia. Penelitian ini
creativecommons.org/ menemukan bahwa Pengelolaan Risiko Enterprise ternyata memengaruhi kinerja keuangan
licenses/by/4.0/) dan operasional secara positif dan signifikan. Selain itu, praktik kepatuhan berpengaruh
positif dan signifikan terhadap kinerja keuangan dan operasional. Strategi TI juga memiliki
dampak positif dan signifikan pada kinerja perusahaan. Dalam pengujian efek mediasi,
strategi TI sebagian menghantarkan hubungan antara ERM dan kinerja, begitu juga dengan
praktik kepatuhan. Temuan ini menyoroti pentingnya ERM, strategi TI, dan praktik kepatuhan
dalam meningkatkan kinerja perusahaan perbankan di Indonesia. Temuan ini memvalidasi
peningkatan pentingnya manajemen risiko dalam lanskap keuangan di Indonesia. Pengakuan
terhadap kompleksitas sektor perbankan dan kerentanannya terhadap berbagai jenis risiko,
termasuk risiko kredit, risiko pasar, risiko operasional, dan risiko regulasi, menegaskan peran
kritis praktik manajemen risiko.
Kata kunci: manajemen risiko, praktik kepatuhan, strategi IT, kinerja keuangan, kinerja
operasional
1
Corresponding author:
Email: denny.tewu@uki.ac.id
this contributes to providing a more comprehensive four specific indicators. These indicators were
understanding of the role of risk management in the evaluated using conventional metrics sourced from
context of companies in Indonesia, particularly among previous studies (Zhu et al. 2004; Truong et al. 2017).
corporate entities. This research is expected to provide These metrics encompassed aspects like cost reduction
better insights into how risk management can influence (OPR1), enhanced service quality (OPR2), timely
the performance of companies in Indonesia and support delivery (OPR3) and improved operational flexibility
sustainable business growth. (OPR4). Lasty, financial performance (FINP) was
gauged through four indicators, drawing on the work
of Rao and Afum et al. (2020) as well as Zhao et al.
METHODS (2021). These indicators encompassed measures of
profitability (FP1), sales growth (FP2), return on assets
This study investigates, through empirical analysis, (FP3), and return on equity (FP4).
how Enterprise Risk Management (ERM) influences
the operational and financial performance of a company, The study considers the target population to be
with a focus on the mediating variables of compliance homogeneous because banking sector has common
practices and IT strategy. The banking sector is known characteristics related to their exposure to risk. Data
for its complexity and sensitivity to various forms of collection occurred simultaneously across all regions
risk. Financial institutions are exposed to a wide range within Jabodetabek over a period of approximately three
of risks, including credit risk, market risk, operational months, from November 17, 2022, to February 6, 2023.
risk, and regulatory risk. As a result, ERM practices are In this research, 250 questionnaires were distributed
particularly crucial in this industry to ensure stability through purposive random sampling to bank managers
and compliance with regulatory requirements. In in Jabodetabek, Indonesia. Banking managers are key
this study, we distributed 250 questionnaires to bank decision-makers in financial institutions and possess
managers in the Jabodetabek region, by using purposive in-depth knowledge of ERM practices, compliance
random sampling as the chosen sampling method. requirements, and IT strategies within the industry.
By selecting them as respondents, researchers can tap
In this study, various variables have been measured into their expertise, ensuring that the data collected is
to assess different aspects of compliance practices, highly relevant and informed. Each selected SME in
enterprise risk management (ERM), IT strategy, the sample had a representative who held the role of
financial performance, and operational performance. overall enterprise risk holder, including branch heads,
Enterprise Risk Management was measured by five supervisors, managers, heads of accounts and finance.
components of enterprise risk management adopted Out of the 250 questionnaires distributed, a
from Lai (2014), namely integration of ERM with commendable 167 were returned, resulting in a response
business strategy (ERM1) and integration of ERM with rate of approximately 66.8%. While 9 respondents
objectives (ERM2), risk identification (ERM3), risk provided incomplete information or left some answers
response (ERM4), and risk quantification (ERM5). The blank, the majority of the questionnaires remained
dimensions of compliance practices are likely measured complete and filled out accurately. As a result, 158
by four items from Burdon & Sorour (2020), namely questionnaires have been deemed eligible for further
regulatory compliance (CMP1), ethical compliance in-depth analysis, ensuring a robust and comprehensive
(CMP2), financial compliance (CMP3) and control examination of the research data. This high response
(CP4). Moreover, the dimensions of IT strategy were rate and diligent data collection process enhance the
measured by five indicators adopted from King & Teo reliability and validity of the study’s findings. The
(1996), namely strong IT leadership (ITS1), strong IT study utilized SMART PLS SEM for estimating the
planning capability (ITS2), perceived importance of relationship among variables.
strategic use (ITS3), tangible benefit of IT application
(ITS4), and adequate knowledge about information Contingency theory posits that organizational choices,
assets (ITS5). such as techniques, structures, or control systems,
should be customized based on various contextual
In addition, the dependent variable of firm performance factors, including environmental conditions, risk
was divided into operational and financial performance. levels, business strategies, company size, and
Operational performance (OP) was assessed through organizational structure and activities (Bryan, 2019).
Contingency theory also emphasizes that companies as well as the utilization of quantitative risk assessment
should actively monitor their environmental conditions techniques. Ahmed et al. (2016) demonstrate that the
and commit to adapting to possible changes. Internal implementation of an Enterprise Risk Management
control is not a static aspect of organizational (ERM) framework and regulatory compliance
structure, and the relationship between internal positively influence non-financial performance. Their
control system structure and environmental factors study supports the third hypothesis, indicating that
needs to be considered (Felipe et al. 2017). Each board effectiveness reinforces the positive relationship
organization should choose an internal control system between ERM framework adoption and non-financial
that best suits the characteristics of its environmental performance. As a result, the following hypotheses are
conditions and situations (Otley & Berry, 2019). Chen advanced:
et al. (2020) highlights the importance of internal H1: ERM practices have a significant effect on
controls in mitigating agency costs and improving compliance practices
organizational performance. Internal controls act as
mechanisms to align the interests of principals and Lamine et al. (2020). In exploring the influence of
agents by reducing information asymmetry, enhancing enterprise risk management on competitive advantage,
accountability, and promoting transparency. Effective considering the moderating role of information
internal controls provide a structured framework for technology, Saeidi et al. (2019) revealed a positive
monitoring managerial actions, ensuring compliance correlation between ERM implementation and a firm’s
with organizational goals, and safeguarding assets. competitive advantage. Additionally, the findings
However, some scholars emphasize that the mere indicated that both IT strategy and IT structure not
design or implementation of internal control systems only directly impacted competitive advantage but also
does not automatically lead to a reduction in agency played a moderating role in the relationship between
costs (Sun et al. 2020). While internal controls are ERM and competitive advantage. Kwateng et al. (2022)
essential components, their effectiveness depends on find a substantial positive effect of ERM on IT security
various factors such as the organizational context, the within financial institutions, highlighting the significant
commitment of top management, and the quality of the correlation established by ERM among various
control environment. Merely having internal controls variables. Arnold et al. (2015) reveal that a strategic,
in place does not guarantee a decrease in agency costs; broad-based approach to ERM enhances flexibility and
it requires a dynamic and adaptive approach to their strengthens the relationship between flexibility and
design and implementation (Henk, 2019). performance. The results also suggest that improved
IT integration is the mechanism through which ERM
Enterprise Risk Management (ERM) is a strategic strengthens both flexibility and performance. Contrary
and integrated approach to identifying, assessing, to some previous studies, Mahama et al. (2022) find no
and managing the full spectrum of risks that an evidence that the application of governance frameworks
organization faces in pursuit of its objectives. ERM is improves risk management effectiveness, challenging
designed to provide a holistic framework that enables the mechanistic view implied by governance guidance
companies to recognize and address potential threats on risk appetite and tolerance. Thus, the following
comprehensively, rather than dealing with risks in hypotheses are proposed:
isolated and fragmented ways (Krüger & Meyer, H2: ERM practices have a significant effect on IT
2021). It involves the systematic coordination of strategy
people, processes, technology, and information to
facilitate informed decision-making and enhance an Kiradoo (2008), Bromiley et al. (2015), and
organization’s ability to navigate uncertainties while Schoenmaker & Schramade (2019) highlight the
optimizing opportunities for sustainable growth. ERM choices companies make between an active or passive
aims to create value for stakeholders by promoting a Enterprise Risk Management (ERM) approach, a
risk-aware culture, aligning risk management with decision that significantly shapes their strategic
strategic goals, and ensuring that risks are managed orientation. Companies opting for an active approach
efficiently and effectively throughout the entire to ERM tend to proactively engage with risks,
organization. Marquez-Tejon et al. (2022) suggest integrating risk considerations into strategic decision-
that the perceived effectiveness of risk management is making, while those adopting a passive approach may
linked to the frequency of risk assessment and reporting, address risks more reactively, often dealing with them
in a segmented manner. The selected ERM approach has shown that an effective IT strategy can have a
becomes a pivotal factor influencing how companies substantial impact on a firm’s overall performance and
align their risk management strategies with broader competitiveness. According to Asghar et al. (2023), a
organizational goals. Furthermore, Anton & Elena well-aligned IT strategy can enhance a firm’s ability
(2020) conducted research on the impact of ERM on to achieve its business goals, improve operational
firm performance, revealing nuanced outcomes that efficiency, and drive innovation. Moreover, IT
are yet to be fully clarified. The complex relationship investments that are aligned with a firm’s strategic
between ERM and firm performance suggests that objectives can lead to increased revenue, cost savings,
the effectiveness of ERM practices can be contingent and improved customer satisfaction (Pothineni, 2023).
on various factors, including organizational context, IT strategy also plays a crucial role in enabling firms
industry dynamics, and the specificities of risk to adapt to rapidly changing business environments
management implementation. On a positive note, and emerging technologies, which are essential for
Kulathunga et al. (2020) corroborate the potential maintaining a competitive edge (Nwankpa et al. 2020).
benefits of ERM by demonstrating favorable effects In essence, the relationship between IT strategy and
on firm performance. Their findings suggest that, firm performance underscores the strategic importance
when implemented effectively, ERM can contribute of IT as a driver of business success and growth. Thus,
positively to various facets of organizational the following hypothesis are proposed:
performance, underscoring its potential as a strategic H5: IT strategy has a significant effect on firm
tool for enhancing overall business outcomes. Thus, the performance.
literature reflects a dynamic landscape where the choice
of ERM approach and its impact on firm performance Songling et al. (2018) explored how compliance
warrant continuous exploration and understanding. practices play a mediating role in the connection between
Thus, the following hypotheses are proposed: enterprise risk management practices and company
H3: ERM practices have a significant effect on firm performance, along with examining how financial
performance literacy functions as a moderator in the relationship
between enterprise risk management practices and
Compliance practices play a pivotal role in shaping compliance practices. In the relationship between
firm performance by establishing a foundation of the relationship between ERM practices and firm
ethical and legal conduct (Nguyen et al. 2021). performance, Ahmed and Manab (2016) demonstrated
When companies adhere to regulatory requirements, the substantial positive impacts of implementing an
industry standards, and internal policies, they mitigate ERM framework and adhering to regulatory compliance
the risk of legal and reputational damage, fostering a on non-financial performance. Furthermore, Ahmed
trustworthy and transparent corporate image (Özcan and Manab (2016) indicate that compliance practices
& Elçi, 2020). This, in turn, can enhance investor strengthen the positive relationship between ERM
confidence, attract top talent, and bolster stakeholder framework adoption and non-financial performance.
trust (Kiradoo, 2008; Armour, Mayer, et al. 2017). However, in the context of compliance, the interaction
Furthermore, effective compliance practices often effect did not influence non-financial performance.
lead to operational efficiencies as they encourage In a related context, Rehman and Anwar (2019)
streamlined processes and risk management strategies emphasized the essential role of a risk management
(Alsharari, 2022). Ultimately, a strong commitment system for internal purposes, highlighting its direct
to compliance not only safeguards a company against influence on business strategy and firm performance.
potential pitfalls but also contributes positively to The study aimed to investigate how ERM practices
its long-term financial stability and overall success mediate firm compliance with guidelines and corporate
(Demirgüç-Kunt & Detragiache, 2011). Therefore, the norms. Compliance with regulations and corporate
subsequent hypotheses are put forward: norms, as underscored by Shimpi (2005), is a crucial
H4: Compliance practices have a significant effect on factor shaping the success of risk management. Roth
firm performance (2006) revealed that successful ERM adoption hinges
on robust support from the compliance system. Grubb
The relationship between IT strategy and firm and Burke (2008) noted that compliance is intricately
performance is a topic of significant interest in the linked with both internal efficiency assessments and
fields of business and information technology. Research external regulatory monitoring. Establishing positive
connections between risk management, compliance, constructs. For Enterprise Risk Management (ERM),
and corporate governance is imperative for achieving items ERM1 to ERM5 exhibit satisfactory factor
organizational goals, enhancing stakeholder value, and loadings ranging from 0.709 to 0.801. The Cronbach’s
improving firm performance (Grubb & Burke, 2008). alpha for ERM is high at 0.942, indicating internal
Shatnawi and Eldaia (2020) further reinforced the consistency, and the Composite Reliability (CR) and
notion that compliance is indispensable within ERM Average Variance Extracted (AVE) values are 0.950
practices to achieve optimal firm performance. and 0.615, respectively. Compliance Practices (CMP)
H6: The compliance practices mediate the relationship and IT Strategy (ITS) also show strong reliability and
between the relationship between ERM practices and validity, with high factor loadings, Cronbach’s alpha,
firm performance. CR, and AVE values. Financial Performance (FIN)
demonstrates excellent reliability, with factor loadings
Saeidi et al. (2019) highlight the intermediary function ranging from 0.905 to 0.916, a high Cronbach’s alpha
of IT strategy, indicating that organizations leveraging of 0.965, and robust CR and AVE values. Operational
robust ERM practices are more likely to enhance their Performance (OPR) exhibits slightly lower factor
overall performance when a well-aligned IT strategy loadings but maintains acceptable internal consistency
is in place. The integration of IT strategy serves as a and convergent validity. Overall, the results indicate
conduit for translating risk management efforts into that the measurement model is reliable and valid,
strategic advantages, contributing to improved firm supporting the suitability of the selected constructs for
performance. Moreover, Gajapathy & Balanagarajan further analysis.
(2018) underscore how an effectively implemented
IT strategy, guided by ERM principles, can enhance To assess the inner structural model, various indicators
operational efficiency, innovation, and adaptability, such as the coefficient of determination (R2), path
thereby positively impacting firm performance metrics. coefficient (β value), t-statistic value, effect size
On the other hand, Saleh & Al-Nimer. (2022) explores (f2), predictive relevance of the model (Q2), and
the contingent nature of this relationship, suggesting that goodness-of-fit index were utilized. The coefficient
the effectiveness of IT strategy as a mediator between of determination is used to measure the extent to
ERM practices and firm performance is contingent which the endogenous construct in the structural
on factors such as organizational culture, leadership model explains the variation and overall effect size,
support, and technological capabilities. Arnold et al. indicating the model’s predictive accuracy. Table 2
(2015) discusses factors such as resource constraints and reveals the coefficient of determination (R Square and
organizational resistance that may impede the seamless R Square Adjusted). Compliance Practices exhibit an R
integration of ERM practices and IT strategy, thereby Square of 0.639, indicating 63.9% explanatory power.
influencing the overall impact on firm performance. Financial Performance shows an R Square of 0.201,
Thus, the following hypothesis is proposed: denoting 20.1% variance explanation. IT Strategy and
H7: IT strategy mediates the relationship between ERM Operational Performance have substantial R Squares
practices and firm performance. of 0.685 and 0.474, respectively, with corresponding
adjusted values. These results signify the model’s
effectiveness in explaining and predicting the variability
RESULTS in the examined variables.
The measurement model underwent a rigorous analysis In this study, the f2 metric gauged the impact of each
using PLS-SEM and Smart PLS 3.0, evaluating factor exogenous latent construct on the endogenous latent
loadings, composite reliability, Cronbach’s alpha, construct. According to Hair et al. (2014), f2 values
average extracted variance (AVE), and discriminant of 0.35 signify a strong effect, 0.15 a moderate effect,
validity. This assessment aimed to ensure the reliability, and 0.02 a weak effect. The results as shown in Table
internal consistency, and validity of observed and 3 showed that compliance practices and IT strategy
unobserved variables in the outer measurement demonstrated weak effects on financial and operational
model, crucial for establishing a strong foundation performance, while enterprise risk management
for subsequent structural model analysis. Table 1 showed a moderate effect on both. Confirmatory factor
presents the results of the outer measurement model analysis (CFA) confirmed the structural model’s good
evaluation, assessing the reliability and validity of the fit, as indicated by acceptable fit indices in Table 4.
Table 4. Goodness-of-Fit
Index Saturated Model Estimated Model
SRMR 0.146 0.157
d_ULS 16.081 23.535
d_G 2.802 3.631
Chi-Square 112675.032 127238.576
NFI 0.738 0.742
The results of the analysis (Table 5; Figure 2) indicate In Table 6, a mediation analysis was conducted to
that compliance practices have a significant impact evaluate the mediating effects of IT strategy and
on firm financial performance. This is evidenced by compliance practices on the relationship between
the obtained T statistics value of 5.775 (>1.96) and a enterprise risk management and financial performance
P-value of 0.000 (< 0.05). Additionally, compliance as well as operational performance. IT strategy, as a
practices have also been proven to significantly mediator in the relationship between enterprise risk
influence operational performance, as evidenced by management and financial performance, obtained
a T statistics value of 6.262 and a P-value of 0.000. a T-statistic value of 7.868 (> 1.96) and a P-value
Furthermore, the impact of enterprise risk management of 0.000 (< 0.05). These results indicate that IT
on firm financial performance has also been proven to strategy effectively mediates the relationship between
be significant, with a T statistics value of 27.976 and enterprise risk management and financial performance.
a P-value of 0.000. Enterprise risk management has Additionally, IT strategy has proven to be a successful
also been demonstrated to significantly influence firm mediator in the relationship between enterprise
operational performance, as indicated by a T statistics risk management and operational performance, as
value of 23.932 and a P-value of 0.000. Moreover, IT evidenced by a T-statistic value of 7.471 and a P-value
strategy in influencing firm financial performance has of 0.000. On the other hand, compliance practices, as
obtained a T statistics value of 7.147 and a P-value a mediator in the relationship between enterprise risk
of 0.000, indicating that IT strategy has a significant management and financial performance, obtained a
impact on firm financial performance. The influence of T-statistic value of 6.193 and a P-value of 0.000. This
IT strategy on operational performance has also been suggests that compliance practices effectively mediate
proven to be significant, as evidenced by a T statistics the relationship between enterprise risk management
value of 6.355 and a P-value of 0.000. and financial performance. Furthermore, compliance
practices have also been shown to be effective mediators
in the relationship between enterprise risk management
and operational performance, as evidenced by a
T-statistic value of 6.862 and a P-value of 0.000.
This study reveals that compliance practices have (2023), demonstrating a positive relationship between
a positive and significant impact on financial improved management capabilities and company value.
performance and operational performance. This finding Pothineni (2023) also supports this finding by showing
is consistent with previous research by Chen et al. that information technology strategy can enhance
(2020), which also found that compliance practices operational and financial performance. Furthermore,
have a significant influence on firm performance. compliance practices are known to mediate the
Furthermore, enterprise risk management has been relationship between enterprise risk management and
proven to have a positive and significant impact on both financial and operational performance of the
financial performance. Additionally, corporate risk company. This finding aligns with the research by
management also has a positive and significant impact Adenutsi & Whajah (2023) and Songling et al. (2018),
on operational performance. These results support the stating that compliance practices play a crucial role
findings of Saeidi et al. (2019) and Adenutsi & Whajah in mediating the relationship between corporate risk
(2023), stating that the implementation of corporate management and firm performance. Additionally, IT
risk management can affect the overall performance strategy has been proven to mediate the relationship
of the company. Kulathunga et al. (2020) also add that between enterprise risk management and both financial
the concept of corporate risk management can help and operational performance of the company. This
companies adapt to environmental changes, provide finding supports the research by Nwankpa et al.
strategic advantages, and enhance competitiveness and (2020), stating that information technology strategy
commercial success. Moreover, IT strategy is found to plays a crucial role in enabling companies to adapt to
have a positive and significant impact on both financial a changing business environment, thus maintaining a
and operational performance of the company. This competitive advantage.
finding reinforces the earlier research by Asghar et al.
sector. Journal of Business Ethics 162:47-80. Global Review of Business and Economic
https://doi.org/10.1007/s10551-018-3981-4 Research 4(2):259-270.
Callahan C, Soileau J. 2017. Does enterprise Krause TA, Tse Y.2016. Risk management and firm value:
risk management enhance operating recent theory and evidence. International Journal
performance?. Advances in accounting 37:122- of Accounting and information management
139. https://doi.org/10.1016/j.adiac.2017.01.001 24(1):56-81. https://doi.org/10.1108/
Chen H,Yang D, Zhang JH, Zhou H. 2020. Internal controls, IJAIM-05-2015-0027
risk management, and cash holdings. Journal Krüger NA, Meyer N. 2021. The development of a small
of Corporate Finance 64: 101695. https://doi. and medium-sized business risk management
org/10.1016/j.jcorpfin.2020.101695 intervention tool. Journal of Risk and Financial
Demirgüç-Kunt A, Detragiache E. 2011. Basel core Management 14(7): 310. https://doi.org/10.3390/
principles and bank soundness: does compliance jrfm14070310
matter?. Journal of Financial Stability 7(4):179- Kulathunga KM, Ye J, Sharma S, Weerathunga PR.
190. https://doi.org/10.1016/j.jfs.2010.03.003 2020. How does technological and financial
Eikenhout LC. 2015. Risk management and performance literacy influence SME performance: Mediating
in insurance companies (Master’s thesis, role of ERM practices. Information 11(6):297.
University of Twente. https://doi.org/10.3390/info11060297
Felipe CM, Roldán JL, Leal-Rodríguez AL. 2017. Impact Lai FW, Shad MK. 2017. Economic Value-Added
of organizational culture values on organizational Analysis for Enterprise Risk Management. Global
agility. Sustainability 9(12): 23-54. https://doi. Business Management Research 9(1): 338-347.
org/10.3390/su9122354 https://doi.org/10.7763/JOEBM.2014.V2.103
Florio C, Leoni G. 2017. Enterprise risk management Lai FW. 2014. Examining the dimensions of enterprise
and firm performance: The Italian case. The risk management implementation framework, its
British Accounting Review 49(1):56-74. https:// challenges and benefits: A study on Malaysian
doi.org/10.1016/j.bar.2016.08.003 public listed companies. Journal of Economics,
Gajapathy V, Balanagarajan K. 2018. Enterprise Business and Management 2(2):81-86
Risk Management in it and its Governance: A Lamine E, Thabet R, Sienou A, Bork D, Fontanili
Pragmatic Analysis for Operational Efficiency F, Pingaud H. 2020. BPRIM: An integrated
in Banking. Global Journal of Enterprise framework for business process management and
Information System 10(3): 6-12. risk management. Computers in Industry 117:
Grubb T, Burke T. 2008. A framework for governance, 103199.
risk management, and compliance: Compliance Lechner P, Gatzert N. 2018. Determinants and value of
and operational improvements are complementary enterprise risk management: empirical evidence
and should happen in tandem. Bank Accounting from Germany. The European Journal of
Finance 21(3): 17-22. Finance 24(10):867-887. https://doi.org/10.1080
Hair JF Jr, Hult GTM, Ringle CM, Sarstedt M. 2014. /1351847X.2017.1347100
A Primer on Partial Least Squares Structural Mahama H, Elbashir M, Sutton S, Arnold V. 2022.
Equation Modeling (PLS-SEM. Los Angeles: Enabling enterprise risk management maturity
Sage. in public sector organizations. Public Money
Henk O. 2020. Internal control through the lens Management 42(6): 403-407. https://doi.org/10.1
of institutional work: a systematic literature 080/09540962.2020.1769314
review. Journal of Management Control 31(3): Marquez-Tejon, J, Jimenez-Partearroyo, M, Benito-
239-273. https://doi.org/10.1007/s00187-020- Osorio, D. 2022. Security as a key contributor to
00301-4 organisational resilience: a bibliometric analysis
King WR, Teo TS. 1996. Key dimensions of facilitators of enterprise security risk management. Security
and inhibitors for the strategic use of information Journal 35(2): 600-627. https://doi.org/10.1057/
technology. Journal of Management information s41284-021-00292-4
systems 12(4):35-53. https://doi.org/10.1080/074 Nguyen NT, Nguyen NP, Hoai TT. 2021. Ethical
21222.1996.11518100 leadership, corporate social responsibility,
Kiradoo G. 2008. Examining the Role of Ethical firm reputation, and firm performance: A serial
Accounting in Mitigating Fraudulent Activities. mediation model. Heliyon 7(4). https://doi.
org/10.1016/j.heliyon.2021.e06809 Shad MK, Lai FW, Fatt CL, Klemeš JJ, Bokhari A. 2019.
Nwankpa JK, Roumani Y, Datta P. 2022. Process Integrating sustainability reporting into enterprise
innovation in the digital age of business: risk management and its relationship with business
the role of digital business intensity and performance: A conceptual framework. Journal
knowledge management. Journal of Knowledge of Cleaner production 208:415-425. https://doi.
Management 26(5): 1319-1341. https://doi. org/10.1016/j.jclepro.2018.10.120
org/10.1108/JKM-04-2021-0277 Shad MK, Lai FW, Fatt CL, Klemeš JJ, Bokhari A. 2019.
Otley DT, Berry AJ. 2019. Control, organisation and Integrating sustainability reporting into enterprise
accounting. In Management Control Theory (pp. risk management and its relationship with business
101-114. Routledge. performance: A conceptual framework. Journal
Özcan F, Elçi M. 2020. Employees’ perception of of Cleaner production 208: 415-425.https://doi.
CSR affecting employer brand, brand image, org/10.1016/j.jclepro.2018.10.120
and corporate reputation. Sage Open 10(4): Shatnawi SA, Eldaia DM. 2020. The factors influencing
2158244020972372. the enterprise risk management practices and firm
Pagach D, Warr R. 2011. The characteristics of firms performance in Jordan and Malaysia. International
that hire chief risk officers. Journal of risk and Journal of Recent Technology and Engineering
insurance 78(1):185-211. 2277-2280.
Perera AAS. 2019. Enterprise risk Shimpi P. 2005. Enterprise risk management: From
management–international standards and compliance to value; A unifying framework
frameworks. International Journal of Scientific can help companies identify and articulate risks
and Research Publications 9(7): 211-217. consistently across the enterprise and evaluate
Ping TA, Muthuveloo R. 2015. The impact of enterprise alternative capital structures to bear those risks.
risk management on firm performance: Evidence Financial Executive 21(6): 52-55.
from Malaysia. Asian Social Science 11(22):149. Sun RT, Garimella A, Han W, Chang HL, Shaw MJ.
Pothineni, S. 2023. The Impact of Data Strategy 2020. Transformation of the transaction cost
and Emerging Technologies on Business and the agency cost in an organization and the
Performance. International Journal of Business applicability of blockchain—A case study of Peer-
Strategy and Automation (IJBSA) 4(1): 1-19. to-Peer insurance. Frontiers in Blockchain 3: 24.
Quon TK, Zeghal D, Maingot M. 2012. Enterprise risk https://doi.org/10.3389/fbloc.2020.00024
management and firm performance. Procedia- Tarigan J, Valerie V. 2023. The Influence of Return on
Social and Behavioral Sciences 62:263-267. Equity, Environmental Risk Management and
Rehman AU, Anwar M. 2019. Mediating role of Stock Performance on Corporate Sustainability
enterprise risk management practices between Performance. Jurnal Aplikasi Bisnis Dan
business strategy and SME performance. Small Manajemen (JABM) 9(3): 716. https://doi.
Enterprise Research 26(2): 207-227. https://doi. org/10.17358/jabm.9.3.716
org/10.1080/13215906.2019.1624385 Treviño LK, Weaver GR, Gibson DG, Toffler BL.
Roth J. 2006. An enterprise risk catalyst: A new study 1999. Managing ethics and legal compliance:
suggests that Sarbanes-Oxley compliance What works and what hurts. California
processes could be a springboard to adopting management review 41(2):131-151. https://doi.
ERM. Internal Auditor 63(1): 81-85. org/10.2307/41165990
Saleh QY, Al-Nimer MB. 2022. The mediating role of Ward S, Chapman C. 2003. Transforming project risk
the management accounting information system in management into project uncertainty management.
the relationship between innovation strategy and International journal of project management
financial performance in the Jordanian industrial 21(2):97-105. https://doi.org/10.1016/S0263-
companies. Cogent Business Management 9(1): 7863(01)00080-1
2135206. https://doi.org/10.1080/23311975.2022 Zhao X, Wang P, Pal R. 2021. The effects of agro-food
.2135206 supply chain integration on product quality and
Schoenmaker D, Schramade W. 2019. Investing for financial performance: Evidence from Chinese
long-term value creation. Journal of Sustainable agro-food processing business. International
Finance Investment 9(4):356-377. https://doi.org Journal of Production Economics 231: 107832.
/10.1080/20430795.2019.1625012 https://doi.org/10.1016/j.ijpe.2020.107832