Enterprise Risk Management Practices in Malaysian Small and Medium-Sized Enterprises: An Overview
Abstract
SMEs are crucial to the economic growth of many countries, particularly developing ones like Malaysia. SMEs have contributed significantly to economic growth but they also often struggle with problems related to poor management, which increases the risk of failure and closure. Effective risk management is essential in sustaining the long-term sustainability of SMEs and improving managerial performance. This study investigates the enterprise risk management (ERM) practices used by Malaysian SMEs in the manufacturing sector. The factors influencing the risk management behaviors and practices of SME manufacturing workers and their compliance with risk management protocols are examined in this study using a mixed-methods approach. This study focuses on employee behavior to better understand how organizational culture affects risk management techniques in SMEs. To design effective reward and recognition programs, this research also examines the psychological components of risk management while accounting for the organizational, societal, and financial challenges that followed the 2008 financial crisis. The study also examines the impact of organizational structure on the efficacy of risk management initiatives in small and medium-sized enterprises. The practical findings of the study are expected to demonstrate the extent to which ERM influences organizational effectiveness in Malaysia's SME manufacturing sector. This study intends to equip industry participants with the knowledge and confidence necessary to implement ERM successfully in their operations by offering insights into the factors that encourage and impede ERM adoption and its impact on organizational performance. This research advances ERM practices among SMEs and strengthens Malaysian businesses' resilience and risk awareness.
Downloads
References
Abdullah, M. M., Ahmad, Z. A., & Ismail, A. (2008). The Importance of Soft Factors for Quality Improvement : Case Study of Electrical and Electronics Firms in Malaysia. International Journal of Business and Management, 3(12), 60–69. DOI: https://doi.org/10.5539/ijbm.v3n12p60
Abdullah, M. M., Uli, J., Ismail, M., & Ahmad, S. (2007). The Influence of Critical Soft Factors on Quality Improvement and Organizational Performance: Evidence of Malaysia’s Electrical and Electronics Sector. Journal of Global Business Management, 3(1), 22–30.
Abidin, N. A. Z. (2015). The Effects of Risk Management Practices, Risk Behavior on Research and Development Project Performance in UTM. (Doctoral dissertation). Universiti Teknologi Malaysia.
Agoi, M. A. (2013). Critical Success Factors and Risk Management Procedures at Kenya Airports Authority. University of Nairobi.
Ahmad, A. (2014). Examining risk behavior and risk management practices in the oil and gas construction industry. (Doctoral dissertation). Universiti Teknologi Malaysia.
Anthony, N. T. R., Rosliza A. M. & Lai P. C. (2019). The Literature Review of the Governance Frameworks in Health System, Journal of Public Administration and Governance, Macrothink Institute, 9(3), 252-260 DOI: https://doi.org/10.5296/jpag.v9i3.15535
Arena, M., Arnaboldi, M. & Azzone, G. (2010). The organizational dynamics of Enterprise Risk Management. Accounting, Organizations and Society, 35(7), 659-675. DOI: https://doi.org/10.1016/j.aos.2010.07.003
Arnold. (2010). AllACES at Visa. Internal Auditing Around the World, VII.
Ayyagari, M., Demirgüç-Kunt, A. & Maksimovic, V. (2011). Small vs. young firms across the world: Contribution to employment, job creation, and growth. World Bank Policy Research Working Paper, (5631). DOI: https://doi.org/10.1596/1813-9450-5631
Bahri, M., St?Pierre, J. & Sakka, O. (2011). Economic value added: a useful tool for SME performance management. International Journal of Productivity and Performance Management. DOI: https://doi.org/10.1108/17410401111150779
Banaitiene, N. & Banaitis, A. (2012). Risk management in construction projects. In Risk Management-Current Issues and Challenges. Intech Open. DOI: https://doi.org/10.5772/51460
Banasadegh, Z., Riahi, F., & Davari, P. (2014). A structural framework to assess the influence of CSFS on risk management case study: Oil and gas sector in Iran. Research Journal of Applied Sciences, Engineering and Technology, 7(9), 1787-1793. DOI: https://doi.org/10.19026/rjaset.7.463
Barton, T. L., Shenkir, W. G. & Walker, P. L. (Eds.). (2002). Making Enterprise Risk Management Pay Off: How Leading Companies Implement Risk Management. Prentice Hall: Financial Times.
Beasley, M. S., Branson, B. C. & Hancock, B. V. (2009). ERM: Opportunities for improvement. Journal of Accountancy, 208(3), 28-32,12.
Beasley, M. S., Clune, R., & Hermanson, D. R. (2006). The impact of enterprise risk management on the internal audit function. Journal of Forensic Accounting, 1-20.
Booth, S. A. (1993). Crisis Management Strategy: Competition and change in modern enterprises. London and New York: Routledge.
Brustbauer, J. (2014). ERM in SMEs: Towards a structural model. International Small Business Journal, 1-16.
Cantonnet, M. L., Aldasoro, J. C., & Iradi, J. (2019). New and emerging risk management in small and medium-sized Spanish enterprises. Safety Science, 113, 257-263. DOI: https://doi.org/10.1016/j.ssci.2018.11.032
Carey, A. (2011). Effective Risk Management in Financial Institutions: The Turnbull Approach. Balance Sheet, 9(3), 24–27. DOI: https://doi.org/10.1108/09657960110696014
Cassidy, D. (2005). Enterprise Risk Management (ERM): A New Reality for Businesses. Employee Benefit Plan Review, 29-31.
Casualty Actuarial Society (CAS). (2003). Overview of Enterprise Risk Management. http://www.casact.org/research/erm/overview.pdf
Chua, J., Chrisman, J., Steier, L., and Rau, S. (2012). Sources of Heterogeneity in Family Firms: An Introduction. Entrepreneurship Theory and Practice. 36. 10.1111/j.1540-6520.2012.00540.x. DOI: https://doi.org/10.1111/j.1540-6520.2012.00540.x
Collier, P. M., Berry, A., & Burke, G. (2007). Risk and management accounting: Best practice guidelines for enterprise-wide internal control procedures. Research Executive Summaries Series, 2(11), 1-7.
Colquitt, L.L., Hoyt, R. E., and Lee, R. B. (1999). Integrated Risk Management and the Role of the Risk Manager. Risk Management and Insurance Review, American Risk and Insurance Association, 2(3), 43-61. DOI: https://doi.org/10.1111/j.1540-6296.1999.tb00003.x
Committee of the Sponsoring Organization of the Treadway Commission (COSO). (2004). Enterprise risk management–integrated framework. United Kingdom.
Cooper, T., Faseruk, A., & Khan, S. (2013). Examining practitioner studies to explore ERM and organizational culture. Journal of Management Policy and Practice, 14(1), 53-68.
Curty, R. G., Crowston, K., Specht, A., Grant, B. W. & Dalton, E. D. (2017). Attitudes and norms affecting scientists' data reuse. PloS One, 12(12), e0189288. DOI: https://doi.org/10.1371/journal.pone.0189288
Cyert, R. M. & March, J. G. (1963). A behavioral theory of the firm. Prentice Hall/Pearson Education.
D'Arcy, S. P. (2001). Enterprise Risk Management. Journal of Risk Management of Korea, 12(1), 207-228.
DeJoy, D. M., Schaffer, B. S., Wilson, M. G., Vandenberg, R. J. & Butts, M. M. (2004). Creating safer workplaces: assessing the determinants and role of safety climate. Journal of Safety Research, 35(1), 81-90. DOI: https://doi.org/10.1016/j.jsr.2003.09.018
Dewett, T. (2006). Exploring the role of risk in employee creativity. J. Creat. Behav, 40, 27–45. DOI: https://doi.org/10.1002/j.2162-6057.2006.tb01265.x
Dickinson, G. (2001). Enterprise risk management: Its origin and conceptual foundation. The Geneva Papers on Risk and Insurance, 26(3), 360-366. DOI: https://doi.org/10.1111/1468-0440.00121
Gibson, M. D. (2012). Critical Success Factors for the Implementation of an Operational Risk Management System for South African Financial Services Organisations. University of South Africa.
Gordon, L. A., Leob, M. P. & Tseng, C. Y. (2009). Enterprise risk management and firm performance: A contingency perspective. Journal of Accounting and Public Policy, 28(4), 301-327. DOI: https://doi.org/10.1016/j.jaccpubpol.2009.06.006
Greve, H. R. (2003). Organizational Learning from Performance Feedback: A Behavioural Perspective. Cambridge University Press DOI: https://doi.org/10.1017/CBO9780511615139
Hashim, M. K. & Wafa, S. A. (2002). Small & medium-sized enterprises in Malaysia: Development issues. Petaling Jaya, Malaysia: Prentice Hall DOI: https://doi.org/10.32890/9832479231
Holton, G. A. (1996). Closed-form value at risk. Contingency Analysis. http://www.contingencyanalysis.com/frame/framevar.htm on June 21, 2021.
Hoyt, R. E. & Liebenberg, A. P. (2011). The value of enterprise risk management. Journal of Risk and Insurance, 78(4), 795-822. DOI: https://doi.org/10.1111/j.1539-6975.2011.01413.x
Iyer, S. R., Rogers, D. A., & Simkins, B. J. (2010). Academic research on enterprise risk management. In J. Fraser & B. J Simkins (Eds), Enterprise Riks Management (pp:419-439). Hoboken, NJ: John Wiley & Sons. DOI: https://doi.org/10.1002/9781118267080.ch23
Jalal, A., Albayati, F. S., & Albuainain, N. R. (2011). Evaluating enterprise risk management (ERM): Bahrain financial sectors as a case study. International Business Research, 4(3), 83-92. DOI: https://doi.org/10.5539/ibr.v4n3p83
Jung, K. B., Kang, S. W. & Choi, S. B. (2020). Empowering Leadership, Risk-Taking Behavior, and Employees' Commitment to Organizational Change: The Mediated Moderating Role of Task Complexity. Sustainability, 12, 2340. doi:10.3390/su12062340 DOI: https://doi.org/10.3390/su12062340
Kaplan, R., and Mikes, A. (2014). Towards a Contingency Theory of Enterprise Risk Management. SSRN Electronic Journal. 10.2139/ssrn.2311293.
Khalique, M., Isa, A. H. M., Shaari, J. A. N. & Ageel, A. (2011). Challenges faced by the small and medium enterprises (SMEs) in Malaysia: An intellectual capital perspective, International Journal of Current Research, 33(6), 398-401.
Kleffner, A. E., Lee, R. B. & McGannon, B. (2003). The effect of corporate governance of the use of enterprise risk management: Evidence from Canada. Risk Management and Insurance Review, 6(1), 53-73. DOI: https://doi.org/10.1111/1098-1616.00020
Kutsch, E. & Hall, M. (2010). Deliberate ignorance in project risk management. International Journal of Project Management, 28(3), 245-255. DOI: https://doi.org/10.1016/j.ijproman.2009.05.003
Laforet, S., and Tann, J. (2006). Innovative Characteristics of Small Manufacturing Firms. Journal of Small Business and Enterprise Development. 13. 363-380. 10.1108/14626000610680253. DOI: https://doi.org/10.1108/14626000610680253
Lai, F. W. & Samad, F. A. (2011). Enterprise risk management framework and the empirical determinants of its implementation. International Proceedings of Economics Development & Research, 1.
Lai, P. C. (2020). Intention to Use a Drug Reminder App: A Case Study of Diabetics and High Blood Pressure Patients. SAGE Research Methods Cases: Medicine and Health, 1-19. DOI: https://doi.org/10.4135/9781529744767
Laisasikorn, K., & Rompho, N. (2014). A Study of the Relationship Between a Successful Enterprise Risk Management System, a Performance Measurement System, and the Financial Performance of Thai Listed Companies. Journal of Applied Business & Economics, 16(2).
Lam, J. (2000). Enterprise-wide risk management and the role of the chief risk officer. Erisk March 25, 2000. Erisk.com.
Landsittel, D., and Rittenberg, L. (2010). COSO: Working with the Academic Community. Accounting Horizons. 24. 455-469. 10.2308/acch.2010.24.3.455. DOI: https://doi.org/10.2308/acch.2010.24.3.455
Liebenberg, A. P. & Hoyt, R. E. (2003). The Determinants of Enterprise Risk Management: Evidence from the Appointment of Chief Risk Officers. Risk Management and Insurance Review, 6(1), 37-52. DOI: https://doi.org/10.1111/1098-1616.00019
Madushanki, P. A. S. S. & Ekanayake, N. P. K. (2022). Effect of Enterprise Risk Management Practices on Firm Performance of Food Beverage and Tobacco Sector in Sri Lanka. 13th International Conference on Business & Information ICBI, University of Kelaniya, Sri Lanka. ISSN 2465-6399, 286-296. DOI: https://doi.org/10.2139/ssrn.4454119
Maina, N. P., Mbabazize, M., & Kibachia, J. (2016). Evaluation of factors affecting effectiveness of risk management in public housing construction projects in Rwanda. Case of Batsinda housing project. European Journal of Business and Social Sciences, 5(1), 85-101.
Manab, N. A., Kasssim, I., & Hussin, M. R. (2010). Enterprise-wide risk management (EWRM) practices: Between corporate governance compliance and value creation. International Review of Business Research Papers, 6(2), 239-252.
Merchant, K. A., & Simons, R. (1986). Research and Control in Complex Organizations: An Overview. Journal of Accounting Literature, 183–203.
Mhetre, K., Konnur, B. A. & Landage, A. B. (2016). Risk management in the construction industry. International Journal of Engineering Research, 5, 1-153.
Muhammad, A. D. (2011). The Potential of Waqf-Based Microfinance in Nigeria. LIFE, 3.
Muniapan, B. (2007). Issues and challenges of management education in Malaysia. Curtin University of Technology, Sarawak.
Ngundo, J. M. (2014). Factors affecting the effectiveness of risk management in public housing construction projects in Kenya: a case of Kibera slum upgrading housing scheme in Nairobi. (Doctoral dissertation). University of Nairobi.
Olson, D. L. & Wu, D. (2010). A review of enterprise risk management in the supply chain. Kybernetes, 39(5), 694-706. DOI: https://doi.org/10.1108/03684921011043198
Otley, D. T. (1980). The Contingency Theory of Management Accounting: Achievement and Prognosis. Accounting, Organizations and Society, 413–428. DOI: https://doi.org/10.1016/0361-3682(80)90040-9
Paape, L., & Spekle, R. L. (2011). The adoption and design of enterprise risk management practice: An empirical study. http://www.accaswitzerland.ch/reports_studies/coso.pdf DOI: https://doi.org/10.2139/ssrn.1658200
Pagach, D. & Warr, R. (2007). An empirical investigation of the characteristics of firms adopting enterprise risk management. North Carolina State University working paper.
Project Management Institute. (2004). A Guide to the Project Management Book of Knowledge (PMBOK) 3rd ed. Project Management Institute, Newtown Square, PA.
Ranong, N. P., & Phuenngam, W. (2009). Critical Success Factors for effective risk management procedures in financial industries: A study from the perspectives of the financial institutions in Thailand (Dissertation). https://urn.kb.se/resolve?urn=urn:nbn:se:umu:diva-25815
Rasid, A. Z. S., & Rahman, A. R. A. (2009). Management accounting and risk management practices in financial institutions. Journal Technology, 51(E):89-110.
Razali, R. A., Yazid. S. A. & Tahir, M. I. (2011). The determinants of enterprise risk management (ERM) practices in Malaysian public listed companies. Journal of Social and Development Sciences, 1(5), 202-207. DOI: https://doi.org/10.22610/jsds.v1i5.645
Rehman, A. U., & Anwar, M. (2019). The mediating role of enterprise risk management practices between business strategy and SME performance. Small Enterprise Research, 26(2), 207-227. DOI: https://doi.org/10.1080/13215906.2019.1624385
Rohrmann, B. (2004). Risk Attitude Scales: Concepts and Questionnaires.
Ropega, J. (2011). The reasons and symptoms of failure in SME. International Advances in Economic Research, 17(4), 476-483. DOI: https://doi.org/10.1007/s11294-011-9316-1
Sartori, R., Ceschi, A. & Costantini, A. (2015). On decision processes in businesses, companies, and organizations computed through a generative approach: The case of the agent-based modeling. International Journal of Business Research, 15, 25–38. doi: 10.18374/IJBR-15-2.3 DOI: https://doi.org/10.18374/IJBR-15-2.3
Sax, J., & Torp, S. S. (2015). Speak up! Enhancing Risk Performance with Enterprise Risk Management, Leadership Style, and Employee Voice. Management Decision, 53(7), 1452–1468. DOI: https://doi.org/10.1108/MD-10-2014-0625
Schieg, M. (2006). Risk management in construction project management. Journal of Business Economics and Management, 7(2), 77-83. DOI: https://doi.org/10.3846/16111699.2006.9636126
Sitkin, S. B., & Pablo, A. L. (1992). Reconceptualizing the determinants of risk behavior. Academy of Management Review, 17(1), 9-38. DOI: https://doi.org/10.5465/amr.1992.4279564
Smit, Y. & Watkins, J. A. (2012). A literature review of small and medium enterprises (SME) risk management practices in South Africa. African Journal of Business Management, 6(21), 6324. DOI: https://doi.org/10.5897/AJBM11.2709
Soltanizadeh, S., Abdul Rasid, S. Z., Golshan, N., Quoquab, F., and Basiruddin, R. (2015). Enterprise Risk Management Practices among Malaysian Firms. Procedia - Social and Behavioral Sciences. 164. 10.1016/j.sbspro.2014.11.084. DOI: https://doi.org/10.1016/j.sbspro.2014.11.084
Tahir, H. M., Razak, N. A. & Rentah, F. (2018). The contributions of small and medium enterprises (SMEs) On Malaysian economic growth: A sectoral analysis. In International Conference on Kansei Engineering & Emotion Research (pp. 704-711). Springer, Singapore. DOI: https://doi.org/10.1007/978-981-10-8612-0_73
Taillandier, F., Taillandier, P., Tepeli, E., Breysse, D., Mehdizadeh, R. & Khartabil, F. (2015). A multi-agent model to manage risks in construction projects (SMACC). Automation In Construction, 58, 1-18. DOI: https://doi.org/10.1016/j.autcon.2015.06.005
Tan, C., & Lee, S. Z. (2022). Adoption of enterprise risk management (ERM) in small and medium-sized enterprises: Evidence from Malaysia. Journal of Accounting & Organizational Change, 18(1), 100-131. DOI: https://doi.org/10.1108/JAOC-11-2020-0181
Teoh, A. P., and Muthuveloo, R. (2015). The Impact of Enterprise Risk Management on Firm Performance: Evidence from Malaysia. Asian Social Science, 11(22), 149-159. DOI: https://doi.org/10.5539/ass.v11n22p149
Togok, S. H. (2016). Factors influencing the effectiveness of enterprise risk management (ERM) in publicly listed companies. University of Malaya, Malaysia.
Trimpop, R. M. (1994). The psychology of risk-taking behavior. Elsevier.
van Winsen, F., Wauters, E., Lauwers, L., Mey, Y., Passel, S., Vancauteren, M. (2011). Combining risk perception and risk attitude: A comprehensive individual risk behavior model.
Wan Daud, W. N., Yazid, A. S. & Hussin, H. M. R. (2010). The effect of chief risk officer (CRO) on enterprise risk management (ERM) practices: evidence from Malaysia. The International Business & Economics Research Journal, 9(11), 55-64. DOI: https://doi.org/10.19030/iber.v9i11.30
Woon, L. F., Azizan, N. A., & Samad, M. F. A. (2011). A strategic framework for value enhancing enterprise risk management. Journal of Global Business and Economics, 2(1), 23-47.
Yakob, S., Syah, B. A. M., Yakob, R., & Raziff, N. A. M. (2020). The effect of enterprise risk management practice on SME performance. The South East Asian Journal of Management, 13(2), 7. DOI: https://doi.org/10.21002/seam.v13i2.11785
Yang, S., Ishtiaq, M., & Anwar, M. (2018). Enterprise Risk Management Practices and Firm Performance, the Mediating Role of Competitive Advantage, and the Moderating Role of Financial Literacy. Journal of Risk and Financial Management, 11(3), 1-17. DOI: https://doi.org/10.3390/jrfm11030035
Yaraghi, N., & Langhe, R. G. (2011). Critical success factors for risk management systems. Journal of Risk Research, 14(5), 551-581. DOI: https://doi.org/10.1080/13669877.2010.547253
Yeboah, M. A. (2021). Determinants of SME growth: An empirical perspective of SMEs in the Cape Coast Metropolis, Ghana. The Journal of Business in Developing Nations, 14, 1-31.
Zafar, H., Clark, J. G., Ko, M., & Au, Y. A. (2011). Critical Success Factors for an Effective Security Risk Management Program: An Exploratory Case Study at a Fortune 500 Firm. In N. King (Ed.), Proceedings of the Seventeenth Americas Conference on Information Systems (pp. 1–11). Detroit, Michigan. DOI: https://doi.org/10.1080/15536548.2011.10855922
Zavadskas, E. K., Turskis, Z. & Tamošaitiene, J. (2010). Risk assessment of construction projects. Journal Of Civil Engineering and Management, 16(1), 33-46. DOI: https://doi.org/10.3846/jcem.2010.03
Zhu, D., Li, Z. & Mishra, A. R. (2023). Evaluation of the critical success factors of dynamic enterprise risk management in manufacturing SMEs using an integrated fuzzy decision-making model. Technological Forecasting & Social Change, 186, 122137. DOI: https://doi.org/10.1016/j.techfore.2022.122137
Zou, P. X., Zhang, G. & Wang, J. Y. (2006). Identifying key risks in construction projects: life cycle and stakeholder perspectives. In Pacific Rim Real Estate Society Conference.
Copyright (c) 2024 Nadhrah Manas, Norhayati Zakuan, Muhamad Zameri Mat Saman, Mariam Setapa
This work is licensed under a Creative Commons Attribution 4.0 International License.
Author (s) should affirm that the material has not been published previously. It has not been submitted and it is not under consideration by any other journal. At the same time author (s) need to execute a publication permission agreement to assume the responsibility of the submitted content and any omissions and errors therein. After submission of revised paper in the light of suggestions of the reviewers, the editorial team edits and formats manuscripts to bring uniformity and standardization in published material.
This work will be licensed under Creative Commons Attribution 4.0 International (CC BY 4.0) and under condition of the license, users are free to read, copy, remix, transform, redistribute, download, print, search or link to the full texts of articles and even build upon their work as long as they credit the author for the original work. Moreover, as per journal policy author (s) hold and retain copyrights without any restrictions.
