Abstract:Introduction: Federal agencies are increasingly expected to adopt enterprise risk management (ERM). However, public sector adoption of ERM has typically focused on the economic efficiency of tax-financed activities based on control-based practices. This reflects an emphasis on quantifiable concerns that invariably directs attention to risk, that (by definition) relates to identifiable and measurable events, thereby downplaying uncertain and unknown aspects of public exposures. This is a potentially serious shortcoming as government entities often act as society's risk managers of last resort. When extreme events happen what were previously considered private matters can quickly turn into public obligations. Hence, there is a need for proactive assessments of the evolving public risk landscape to discern unpredictable-even unknowable-developments. Methods: The article reviews recent empirical studies on public risk management practices, effects of digitalization in public sector institutions, current strategic management research, and insights uncovered from a recent study of risk management practices in federal agencies. On this basis, the article explains how the ability to generate value from ERM can be enhanced when it intertwines with local responsive initiatives and central strategic risk analyses. It can form a dynamic adaptive risk management process where insights from dispersed actors inform updated risk analyses based on local autonomy and open exchange of information. This approach builds on specific structural features embedded in culture-driven aspirations to generate collaborative solutions. Its functional mode is an interactive control system with open discussions across levels and functions in contrast to conventional diagnostic controls that monitor predetermined key performance indicators (KPIs) and key risk indicators (KRIs). Findings: Backed by theoretical rationales and empirical research evidence, it is found that applications of ERM frameworks can produce positive results but is unable to deal with a public risk landscape characterized by uncertain unpredictable conditions with potentially extreme outcome effects. It is shown how interactive exchange of fast local insights and slow integrated strategic risk analyses supported by digitized data processing can form a dynamic adaptive system that enable public sector institutions to deal with emergent high-scale exposures. It is explained how the requirement for conducive organizational structures and supportive values require a new strategic risk leadership approach, which is contrasted to observed practices in federal agencies that are constrained by prevailing public governance requirements. Discussion: The need to deal with uncertainty and unknown conditions demands a cognitive shift in current thinking from a primary focus on risk to also appraise complexity and prepare for the unexpected where data-driven methods can uncover emergent exposures through dynamic information processing. This requires strategic risk leaders that recognize the significance of complex public exposures with many unknowns and a willingness to facilitate digitalized information processing rooted in a collaborative organizational climate. If handled properly, adoption of ERM in public risk management can consider emergent dimensions in complex public exposures applying interactive information processing as a dynamic adaptive risk management approach incorporating digitized methods to solicit collective intelligence for strategic risk updating.

Risk management and management accounting control systems in public sector organizations: a systematic literature review

Risk and Risk Management in the Public Sector : A Theoretical Contribution

Risk and risk management in management accounting and control

Management Accounting and Control in Higher Education Institutions: A Systematic Literature Review

Enterprise Risk Management as Part of the Organizational Control Package: Review and Implications for Management Accounting Research

Bridging Organizational Resilience and Management Control Systems - A Systematic Review

Towards an institutional understanding of risk-based management controls: evidence from a developing market

Risk management in higher education research: a systematic literature review

Enhancing public sector enterprise risk management through interactive information processing

Adoption of comprehensive risk management in local government

Influence of New Public Management Philosophy on Risk Management, Fraud and Corruption Control and Internal Audit: Evidence from an Australian Public Sector Organization

Risk management framework for information systems and organizations:: a system life cycle approach for security and privacy

Comprehensive Examination of Risk Management Practices Throughout the Software Development Life Cycle (SDLC): A Systematic Literature Review

Risk Management in Software Development Projects: A Systematic Literature Review

Risk Management and Internal Control: A Study of Management Accounting Practice

Public sector accounting education: A structured literature review

Environmental Hazards and Risk Management in the Financial Sector: A Systematic Literature Review

Risk Leveling - an Organised Risk Management Approach

A holistic review of research studies on financial risk management in public–private partnership projects

Drivers, Challenges and Outcomes of Environmental Management System Implementation in Public Sector Organizations: A Systematic Review of Empirical Evidence

The need for a risk management framework for data science projects: a systematic literature review