Abstract:Business enterprises are complex adaptive systems (CAS) subject to fragility caused by the non-linear effects of uncertain risk events. The regional bank collapses in the United States are a case in point. Recent papers have highlighted a shortcoming of the traditional risk management process, which focuses on compliance but considers neither the interdependence between complex risks nor the mechanism of their non-linear impact on the organization. A new perspective on Enterprise Risk Management (ERM) has instead called for a shift of mindset from mitigating risk to building resilience by honing a CAS view to contextualize, assess, and manage complex risks. But the building blocks needed for a CAS representation of ERM have not yet been systematically developed. Specifically, we are missing a typological inventory of risks and a mapping of risks onto the general structure of an enterprise. In this paper, we build an industry-agnostic inventory of plausible risk factors using information extraction on large scale text data. Additionally, we develop an understanding of risk-function and function-function interdependencies through a survey of top business managers. The result is a novel complex network view of enterprise risk called a Quantified Risk Network (QRN) that displays small-world properties and highlights internal company functions central to non-linear risk propagation mechanisms within the enterprise. The QRN draws attention to vulnerabilities in the enterprise structure such as risk-function connections measured by Edge Betweenness centrality. The generic QRN developed herein is a proof of concept and we advocate that enterprises build their own company-specific QRNs to identify highly connected and central functions in their company structure that could lead to cascading failure when specific risks arise. QRNs can contribute to the objective of building enterprise resilience.

Enterprise Systems Projects Evaluation Based on a Qualitative Risks Model

Analysis on the Risk Factors of Information Systems Development Projects Based on the Socio-technical Model

Moderating Effects of Uncertainty on the Relationship between Risk Management and Information Systems Project Performance

Causes and remedies for the dominant risk factors in Enterprise System implementation projects: the consultants' perspective

Toward an effort estimation model for software projects integrating risk

Quality assessment of enterprise risk management programs

Evaluating and Mitigating Information Systems Development Risk through Balanced Score Card

Evaluation on Enterprise Knowledge Management Risk Based on Extensive Method

Quantitative Enterprise Risk Management

The intuitionistie fuzzy sets on evaluation of risks in projects of enterprise's informationization

An enterprise risk management system for SMEs: innovative design paradigm and risk representation model

A proposed enterprise risk management model for health organizations

Evaluation of the critical success factors of dynamic enterprise risk management in manufacturing SMEs using an integrated fuzzy decision-making model

Research on project risk generation mechanism for small and medium software enterprises

ENTERPRISES INFORMATIONIZATION PROJECT MANAGEMENT BASED ON RISK ASSESSMENT

Enterprise information security risks: a systematic review of the literature

Modelling Risk Interactions to Re-Evaluate Risks in Project Management

Advancing the complex adaptive systems approach to enterprise risk management with quantified risk networks (QRNs)

The Relevance of Enterprise Risk Management Methodologies to European Project Funding Calls: The Case of Grant “Performance and Excellence in the Field of Environment and Renewable Energy through Modern Cluster Entities”

The Complex Project Risk Management Technologies in IT Companies