With the development of the economic globalization, the risks that enterprises faced are increasing. In order to cope with the risks, the enterprise risk management requires the internal audit. As an important part of the internal control, the risk oriented internal audit emerges to monitor the process of the enterprise risk management. So enterprises can control and evaluate the risks more and...

A risk inventory provides an integrated view on risk management artifacts, e.g., risks, risk controls, and performance indicators. In this paper, we show how adapting the enterprise architecture management processes (EAM) may provide a foundation for an integrated IT risk inventory. Based on a design research approach, we develop a systematic approach for integrating the disciplines of risk man...

Purpose – This article aims to focus on raising awareness of the limitations of traditional “enterprise-centric” views of enterprise risk management that ignore the risks that are inherited from key business and supply chain partners. In essence, enterprise systems implementations have allowed organizations to couple their operations more tightly with other business partners, particularly in th...

Enterprise risk management is a critical concept in the current business environment that supports use of tools and processes directed toward monitoring and mitigating organizational risks. Many organizations have embraced enterprise systems (ESs) technology for improving organizational efficiency and effectiveness. ESs provide value by identifying opportunities in operations and assist in mana...