Abstract

With regard to changing business environment over the last two decades, risk management has become a main area of business practice to define, analyse and control uncertainties. It necessitates identifying critical areas of planning and actions which must be considered to achieve effectiveness named Critical Success Factors (CSFs). The aim of this study is to classify and prioritize the CSFs necessary for risk management in oil and gas sector in Iran. In order to do the research a comprehensive set of CSFs were selected in the existing streams of research. Accordingly ten CSFs were identified named commitment and support, communication, culture, structure, IT, process management, resources, training, strategy and measurement. The quantitative method was employed in data collection by using questionnaire. Then to evaluate the influence of each CSF on risk management, an empirical study was conducted by Principal Components Analysis (PCA) by using SPSS package to classify CSFs and extract main factors. The CSFs are categorized into three components; management, operation and context. Then, the extent to which each CSF impacts on risk was measured through a structural model by using Confirmatory Factor Analysis (CFA) by applying Smart PLS package. Consequently, the obtained results indicated that two components; management and context had eigen value greater than one, acceptable reliability (Cronbach’s alpha and Dillion- Goldstein's ρ (D.G.'s ρ) >0.7) and validity (AVE>0.5). Furthermore, this framework showed a satisfactory fitness (GoF = 0.76). This study provides with top managers key insight into the CSFs influencing risk management to proper resource allocation.

Keywords:

Confirmatory factor analysis, critical success factors, principal components analysis, risk management,

References

1. Acharyya, M. and J. Johnson, 2006. Investigating the development of enterprise risk management in the insuranceindustry: Anempirical study of four major Europeaninsurers. Geneva Papers Risk Insurance: Issues Practice, (Special Issue): 55-80.
   
2. Artto, K.A. and D.L. Hawk, 1999. Industry Models of Risk Management and their Future: Project Management Institute. Seminars and Symposium, Philadelphia.
   
3. Brüesch, C., 2010. The human factor in risk management-challenges for top management in the public sector Zurich. Swiss Soc. Administ. Sci. (SGVW), 47: 55-70.
   
4. Carey, A., 2001. Effective risk management in financial institutions: The turn bull approach. Balance Sheet, 9(3): 24-27.
   CrossRef    
5. Chin, W.W., 1998. Issues and opinion on structural equation modeling. MIS Quart., 1(22): 7-16.
   
6. DeLoach, J., 2004. Thenew risk imperative-an enterprise-wide approach. Handbook Bus. Strat., 5(1): 29-34.
   CrossRef    
7. Dembo, R.S. and A. Freeman, 1998. Seeing Tomorrow: Rewriting the Rules of Risk. John Wiley and Sons, INC: New York.
   
8. EIU, 2009. Managing Risk in Perilous Times: Practical Steps to Accelerat Recovery. Written by the Economist Intelligence Unit and Sponsored by ACE, Kpmg, SAP and Towers Perrin.
   
9. Feurer, R. and K. Chaharbaghi, 1995. Performance measurement in strategic change. Benchmarking: Int. J., 2(2): 64-83.
   CrossRef    
10. Finniston, S.M., 1975. Information communication and management. Aslib Proceed., 27(8): 346-361.
    CrossRef    
11. Fornell, C. and D. Larcker, 1981. Evaluating structural equation models with unobservable variables and measurement error. J. Market. Res., 1(18): 39-50.
    CrossRef    
12. Frigo, M.L., 2009. Strategic Risk Management: The new core competency. Balanced Scorecard Report, 2009.
    
13. Galorath, D., 2006. Risk Management Success Factors. PM World Today, 8(11).
    Direct Link
14. Grabowski, M. and K. Roberts, 1999. Risk mitigation in virtual organizations. Org. Sci., 10(6): 704-722.
    CrossRef    
15. Hair, J., A. Anderson, R. Tatham and W. Black, 1998. Multivariate Data analysis. 5th Edn., Prentice Hall, New Jersey.
    
16. Henriksen, P. and T. Uhlenfeldt, 2006. Contemporary Enterprise-Wide Risk Management Frameworks: A comparative Analysis in a Strategic Perspective. In: Andersen, T.J. (Ed.), Perspectives on Strategic Risk Management. Copenhagen Business School Press, Denmark, pp: 107-130.
    
17. Hillson, D., 1997. Towards a risk maturity model. Int. J. Project Bus. Risk Manage., 1(1): 35-45.
    
18. Kaplan, R.S. and D.P. Norton, 2008. Mastering the Management system. Harvard Bus. Rev., 86(1): 62-77, 136.
    PMid:18271319    
19. Lee, H. and B. Choi, 2003. Knowledge management enablers, processes and organizational performance: An integrative view and empirical examination. J. Manage. Inform. Syst., 20(1): 179-228.
    CrossRef    
20. Muehlen, M.Z. and M. Rosemann, 2005. Integrating risks in business process models. Proceeding of the 16th Australasian Conference on Information Systems, Sydney.
    
21. Mutsaers, E.J., H.V.D. Zee and H. Giertz, 1998. The evolution of information technology. Inform. Manage. Comput. Sec., 6(3): 115-126.
    CrossRef    
22. National Treasury, 2002. A Definite Guide to Internal Audit: A Best Practice Framework (Intergovernmental Relations). National Treasury, Draft 2, May.
    
23. Nikonov, V. and I. Kogan, 2009. How can ISO Management System Standards contribute to mitigate business risks? Proceeding of the International Conference on Risk Assessment and Innovation, Nov. 24-25, Geneva, Switzerland.
    
24. NSW (Department of State and Regional Development), 2005. Risk Management Guide for Small Business. Global Risk Alliance on the Instruction of the New South Wales Department of State and Regional Development, NSW Department of State and Regional Development.
    
25. Ranong, N., Prapawadee and W. Phuenngam, 2009. Critical success factors for effective risk management procedures in financial industries. M.S. Thesis, Umeå School of Business, Spring Semester, Thailand.
    
26. Rikhardsson, P., P. Best, P. Green and M. Rosemann, 2006. Business process risk management and internal control: A proposed research agenda in the contextofcompliance and ERP systems. Proceeding in 2nd Asia/Pacific Research Symposium on Accounting Information Systems, Melbourne.
    
27. Rochart, J.F., 1979. Chief executives define their own data needs. Harvard Bus. Rev., 57(2): 81-93.
    
28. Salierno, D., 2003. Fraud Impacts Firms Worldwide: The Internal Audit Advisor. Bedford View, Gauteng.
    
29. Saraph, J.V., P.G. Benson and R.G. Schroeder, 1989. An instrument for measuring the critical factors of quality management. Decision Sci., 20(4): 810-829.
    CrossRef    
30. Shin, N., 1999. Does information technology improve coordination? An empirical analysis. Log. Inform. Manage., 12(1-2): 138-144.
    CrossRef    
31. Symons, J., 1995. Making staff aware of risks. Health Manpower Manage., 21(4): 15-19.
    CrossRef    PMid:10156831    
32. Tenenhaus, M., S. Amato and V.V. Esposito, 2004. A globalgoodness-of-fitindex for PLS structural equation modelling. Proceedings of the XLII SIS Scientific Meeting, Padova (Italy): CLEUP, pp: 739-742.
    PMid:15090716    
33. Young, R. and E. Jordan, 2008. Top management support: Mantra or necessity. Int. J. Proj. Manage., 26(7): 713-725.
    CrossRef    

Competing interests

The authors have no competing interests.

Open Access Policy

This article is distributed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made.

Copyright

The authors have no competing interests.