The purpose of this single case study was to explore enterprise risk management strategies that nonprofit business leaders used to maintain and improve organizational sustainability. The study population included 3 executive leaders from a rehabilitation and social services nonprofit agency located in the northeastern United States. The Committee of Sponsoring Organizations integrated enterprise risk management framework was the conceptual lens used in this study. Data were collected through semistructured interviews with the 3 executive leaders of the client organization and review of internal, external, and publicly available documents. Data and information from documents and interviews were manually coded. Findings were validated through data triangulation and member checking to help ensure accuracy, consistency, and credibility. Several overarching themes emerged from data analysis related to managing risk for sustainability: a commitment to culture and the mission, vision and values; operational efficiencies to build a financially strong organization; engagement of executive staff and board members; and addressing staffing needs for ongoing operations to meet client needs. Findings from this study might contribute to positive social change by providing nonprofit leaders with enterprise risk management strategies and processes to maintain and improve organizational performance, thereby helping to ensure leaders’ ability to serve and improve their communities.

Purpose: The purpose of this research was to examine and provide knowledge of how integration between enterprise risk management (ERM) t and performance measurement systems (PMS) can support the companies towards improving strategic decision-making within small Swedish manufacturing tech companies. The proceeding purpose was also to research challenges occurring when integrating enterprise risk management and performance measurement systems and further study how the challenges can be mitigated. The research questions within the study were. Methodology: In order to conduct the research, a literature review has been made in order to establish a good theoretical foundation in order to answer the research questions through an abductive approach. A qualitative method, through an exploratory approach, has been applied in order to answer the research question and the purpose of the study. Multiple case studies with interview data towards hermeneutic interviews have been selected as a strategy. The empirical data have been collected through semi-structured interviews and were provided by five respondents who work with both ERM and PMS on a daily work basis. Further, the theory and empirical data have been analyzed through cross-case synthesis and interactive spiral. Finding: The findings in this research resulted in the integration of ERM and PMS, improving strategic decisions by supporting each other's infirmity. What can be said from the findings is that ' ERM can greatly measure risk when integrating the PMS and to further help determine relevant strategic decisions. The outstanding findings regarding the challenges when integrating ERM and PMS were a large amount of data to handle and a never-ending list of potential risks. In order to mitigate the challenges regarding the integration of ERM and PMS, it is important to take into consideration the communication between the two.

El texto completo de este trabajo no está disponible en el Repositorio Académico UPC por restricciones de la casa editorial donde ha sido publicado. / A risk can be described as a situation that can negatively affect the development of an activity and the people involved that. In this sense, risk management is used to achieve a reduction or elimination of risk. The objective of the investigation was to determine factors that caused the low value of crop yield in a Peruvian banana supply chain. The research applied House of Risk (HOR) model to determine risk event and associated causes. As a result, strategies were proposed to mitigate the occurrence of risks in the company.

Global warming and environmental impact are topics that have received increased attention in recent years. Research suggests that companies should take more responsibility for this impact. Scholars have expressed contradicting opinions on whether these sustainability initiatives result in new risks and thereby lead to worse financial performance or will benefit the organization. This qualitative multiple case study uses an abductive approach to examine how risks associated with environmental sustainability initiatives are perceived to impact financial performance as well as how these risks can be managed in practice. Based on existing literature on environmental sustainability, risk management, and financial performance combined with interviews conducted with six representatives from three different companies in the Swedish manufacturing industry, a framework is developed. The framework presents a link from sustainability initiatives to risks, which can result in negative impacts on financial performance. The study further shows a positive relation between sustainability and financial performance, indicating that financial benefits can be gained from working with sustainability. Additionally, it is found that sustainability-related risks should be managed differently than business-related risks in organizations. The presented framework therefore indicates a necessity of establishing sustainability risk management strategies. The four main strategies identified were i) creating a shared mindset which allows for understanding of risks in the organization, ii) increasing communication and collaboration across departments, iii) actively working with risk identification to understand its behavior, and iv) establishing constant revision of risk management strategies.

La seguridad de la información se ha convertido en un área importante, ya que las organizaciones diariamente administran activos de TI valiosos que dependen de proveedores críticos; tales como: bases de datos, servicios, aplicaciones, hardware, etc. Estos activos están sometidos a riesgos de una gran variedad, como: desastres naturales, ciberataques, fraudes, etc. que pueden afectar de forma crítica a la organización. Estudios realizados sobre organizaciones en Europa y EE. UU revelan que las Pymes se caracterizan por la falta de la dedicación necesaria a la seguridad de TI. Esto debido principalmente a que la seguridad de la información no forma parte de sus necesidades internas. En el Perú, las empresas no se encuentran preparadas para afrontar situaciones de riesgo, debido a que la mayoría de las organizaciones carecen de políticas de seguridad y sistemas de evaluación de riesgos. El presente proyecto plantea el desarrollo de un modelo de gestión de riesgos de seguridad de TI que tiene como objetivo incrementar el nivel de madurez y disminuir el nivel de riesgo en los procesos y activos de TI de las Pymes que dependen de proveedores críticos. Esto mediante una serie de controles y planes de seguridad basados en la metodología Magerit y estándares de seguridad como la ISO/IEC 27001:2013. Con esto, buscamos cubrir la principal necesidad identificada en las Pymes, la cual es reducir el nivel de impacto ocasionado por los riesgos que afectan los activos y procesos de TI soportados por terceros, y que además puedan contar con un adecuado plan de continuidad. / Information security has become an important area as organizations daily manage valuable IT assets that depend on critical providers; such as: databases, services, applications, hardware, etc. These assets are subject to risks of a wide variety, such as: natural disasters, cyberattacks, fraud, etc. that can critically affect the organization. Studies carried out on organizations in Europe and USA reveal that SMEs are characterized by the lack of dedication necessary to IT security. This is mainly because information security is not part of their internal needs. In Peru, companies are not prepared to face risk situations, since most organizations lack security policies and risk assessment systems. This project proposes the development of an IT security risk management model that aims to increase the level of maturity and decrease the level of risk in the IT processes and assets of SMEs that depend on critical providers. This through a series of controls and security plans based on the Magerit methodology and security standards such as ISO / IEC 27001: 2013. With this, we seek to cover the main need identified in SMEs, which is to reduce the level of impact caused by the risks that affect IT assets and processes supported by third parties, and that may also have an adequate continuity plan. / Tesis

This diploma thesis deals with a problem of risk management of investment projects in building industry. The first part makes us familiar with basic terms and classification of risks. We continue with the importance and the content of risk management in investment projects. This part includes detailed description of technique of managing risks and describes chosen applied methods in this thesis. In the second part the real investment project´s risk management is designed following the information from the first part. The aim of this real project is building up an administrative building in Ostrava. The important data and the identification of danger was work out for elaborated risk management document. The identified risk was analysed and extended with suggestion of its controlling.

Penningtvätt är ett globalt problem som ställer höga krav på bankers riskhantering för att försöka motverka att utnyttjas för brott. Arbetssättet regleras genom riktlinjer från internationella likväl som nationella myndigheter och organisationer för att på bästa sätt skydda det finansiella systemet. Under de senaste åren har svenska banker hamnat i blåsväder på grund av brister i sitt riskhanteringsarbete och detta faktum har lagt grunden för syftet till denna studie - att undersöka hur svenska sparbanker arbetar med riskhantering i allmänhet och penningtvättsrisker i synnerhet. Studien har utförts med hjälp av en kvalitativ metod, bland annat genom intervjuer med sakkunniga inom området. För att kunna förstå arbetssättet ur ett inifrånperspektiv utgörs teoriavsnittet av relevanta lagar och föreskrifter. Slutsatser som har dragits utifrån studien är att arbetet med att hantera penningtvättsrisker är mycket komplext och olika från bank till bank, då de har olika typer av organisationer och förutsättningar. En stor del av arbetet utförs manuellt, vilket skapar en förhöjd operativ risk. För att kunna upprätthålla en god riskmedvetenhet i bankens organisation framhålls vikten av att hålla löpande utbildningar med kontinuerlig uppföljning i närtid. 3 / Money laundering is a global problem that puts pressure on banks in terms of providing high standard risk management to try to counteract financial crime. The internal work procedures are regulated by guidelines from international as well as national authorities and organizations to protect the financial system. In recent years, several Swedish banks have ended up in scandals due to shortcomings in their risk management procedures and this fact has built the foundation for the purpose of this study - to investigate how small Swedish banks work with risk management in general and money laundering risks in particular. This study was carried out using a qualitative method, through interviews with experts. In order to be able to understand the internal procedures, relevant laws and regulations on risk management and anti money laundering have been applied. The results from this study showed that the work procedures are different in every bank due to different types of organisations and preconditions. The work on managing money laundering risks is very complex and puts great demands on both employees' ability and financial resources. A large part of the work is performed manually, which creates an increased operational risk. In order to maintain a good risk awareness in the bank's organization, it is important to provide ongoing education with effective follow-up procedures.

The occurence of procurement fraud requires from the management of the enterprise, the risk manager of the enterprise as well as the internal auditor to effectively address procurement fraud risks within the enterprise risk management concept. The purpose of the study is to set a procurement fraud risk management process in place which will serve as a comprehensive framework for the enterprise risk manager as well as the internal auditor to limit the enterprise's exposure to procurement fraud risks as far as possible. The study firstly focus on the analysis of the steps within the procurement process which is the starting point for the identification of the fraud risks. Secondly the enterprise risk management model is applied in the format of a procurement risk matrix within the procurement function. The study is an indication that procurement fraud cannot be completely prevented but that the appearance thereof can be limited by means of the extensive procurement fraud risk management model. Recommendations for future studies include the application of the enterprise risk management model in other functional areas within the enterprise. / Die voorkoms van aankoopbedrog vereis van die onderneming se bestuur, ondernemingsrisikobestuurder en interne ouditeur om aankoopbedrogrisiko's effektief binne die konteks van die ondernemingsrisikobestuurskonsep aan te spreek. Die doel van die studie is om `n aankoopbedrogrisikobestuursproses daar te stel wat as `n omvattende raamwerk vir die ondernemingsrisikobestuurder en interne ouditeur kan dien om die onderneming se blootstelling aan aankoopbedrogrisiko's so ver as moontlik te beperk. Die studie fokus eerstens op die ontleding van die stappe in die aankoopproses wat as vertrekpunt vir die identifisering van bedrogrisiko's dien. Tweedens word die ondernemingsrisikobestuursmodel in die vorm van `n aankoopbedrogrisikomatriks in die aankoopfunksie toegepas. Die studie dui daarop dat alhoewel aankoopbedrog nie volkome verhoed kan word nie, die voorkoms daarvan wel beperk kan word deur die toepassing van `n omvattende aankoopbedrogrisikobestuursmodel. Aanbevelings vir verdere studies sluit die toepassing van die ondernemingsrisikobestuursmodel op ander funksionele terreine van die onderneming in. / Auditing / M. Com. (Auditing)

The concept of sustainability has become imperative for any organisation in order to survive and prosper in the long term. As such, the management of fraud risk has become an important component for organisations in order to achieve this objective. The purpose of this study was to explore the management of fraud risk within the South African private hospital sector. The study endeavoured to ascertain how private hospitals in South Africa manage fraud risk. In this regard, problem areas in the management of fraud risk were identified, and recommendations are provided in order to improve the management of fraud risk in the South African private hospital sector. Primary data was collected by means of survey research, which involved management staff at head office level and at hospital level, as these two groups were identified to have the required expertise and experience with regard to risk management procedures and practices within South African private hospitals. The findings suggested that South African private hospitals could improve their current risk management practices, in particular with regard to fraud risk. By implementing the recommendations provided by the study, private hospitals will be able to manage fraud risk more effectively. These recommendations will not only be beneficial to private hospitals, but will also have a positive effect on numerous external stakeholders, because the effective management of fraud risk could lead to considerable cost savings. The public hospital sector of South Africa would equally find the research findings and recommendations of value because it could also be applied to their fraud risk management practices. / Business Management / MCOM (Business Management)

Any business management process involves a relevant risk management process whereas proper integration of risk management process following the lean guidelines can result in an efficient risk management process. This is a vital advantageous character for successful companies of this era. However, in real world business, many cases have been observed with different types of hidden wastes associated with their risk management process. These wastes act as obstacles to create value for their customer.Hence, the need for an integrated risk management process enabled with a lean perspective is growing in all levels of business and industry. Lean management and risk management process are in close interaction whether we see it or not. There would be two options ahead of organizations. First option is to ignore this mutual relationship between lean management and risk management process and the other option is to try to understand this interaction in detail with a continuous effort to make it more efficient. This conscious approach to the issue can turn into an efficient integration in successful cases. Integration process towards having a lean risk management is a tricky journey that requires proper understanding of the issue among the associated people and smart strategic decision making along with proper tactical knowledge and know-hows. In the current thesis work, we have tried to apply lean philosophy in order to recognize the wastes and non value added activities. This integration process starts with recognizing the context of risk management in a target organization. It is critical to recognize the risk management process steps because it is necessary to analyze the process steps one by one. Importance of following the flow principle of lean philosophy is a must in order to attain to a streamlined progress in the work. Consequently eight typical lean wastes should be identified in the relevant risk management process steps. In order to be able to eliminate the identified non value added activities, lean tools would be applied at this stage of the work. In other words, the root causes to the process wastes would be tracked down with the aim of eliminating or reducing them.Through proper application of lean tools in the integration process, we would get to a level of improved effectiveness and efficiency in our organization. In a comprehensive lean risk management integration strategy, the future state of risk management process would be drawn following lean principles with an eye on extension work for developing the lean risk management policies throughout the supply chain. This lean extension program is a key to catch hidden synergies in risk management process of the whole supply chain. Inbuilt KPIs and process metrics would be the proper provision for enabling the organization be in a state of continuous thrive for perfection.Applications of lean principles make a quick response enterprise with proper level of flexibility which results in an aware personnel attitude in a lean risk management working environment. Mixing the factor of improved internal efficiency with our risk management process, would help us have a better control over our associated risks. The result to this integration work would be a lean organization with continuously growing voracity to make improvements to the status of lean risk management process.