A (Re)view of the Philosophical Foundations of Strategic Management
This paper aims to review how different approaches to social inquiry (e.g. postivist, postpositivist, interpretive, postmodernist and critical theory) have been used in strategy research and how these main paradigms engage with strategy.
Exploring the Indirect Links between Enterprise Risk Management and the Financial Performance of SMEs
This paper responds to the lack of empirical evidence on how enterprise risk management (ERM) and the financial performance of small and medium-sized enterprises (SMEs) are related. Structural equation modeling is used to explore new
mediators in the relationship between ERM and SME financial performance. The
results show that organizational culture (mission dimension) and strategic risk management performance are full and positive mediators between ERM and financial performance......
Building The Resilient Organisation – 2021 Deloitte Global Resilience Report
“Once you’ve gone through a period of disruption on the scale that we
have in 2020 and seen how you can be more resilient, it really changes you.
You see how resilience can make your business more flexible, adaptable, and
forward‑thinking, and you can’t go back to how it was before.”
— Greg Tretiak, executive vice president and CFO, Power Corporation of Canada
State of Risk Oversight: Enterprise Risk Management Practices – 2023
In light of evolving challenges linked to ongoing geopolitical turmoil, social change, economic volatility, disruptive technologies, environmental expectations, and a host of other uncertainties, innovative and forward-looking business leaders are strengthening how they proactively manage potentially emerging risks that can quickly derail their organization’s strategic objectives and goals. Failure to anticipate changing
uncertainties can quickly trigger a flow of risks that significantly impact business models and strategic plans.
Cyber Risk and Cybersecurity: a Systematic Review of Data Availability
Cybercrime is estimated to have cost the global economy just under USD 1 trillion in 2020, indicating an increase of more than 50% since 2018. With the average cyber insurance claim rising from USD 145,000 in 2019 to USD 359,000 in 2020, there is a growing necessity for better cyber information sources, standardised databases, mandatory reporting and public awareness. This research analyses the extant academic and industry literature on cybersecurity and cyber risk management with a particular focus on data availability.
Data Governance and Data Policies at the European Commission
Data governance sets out a framework with clear roles, and the responsibilities and interdependencies of those roles.
Data policies introduce common principles, guidance and working practices in the areas of data management, data interoperability
and standards, and data quality. Equally important are the areas of data protection, information security and intellectual property. However, these are not the focus of this document. Corporate data policies do not specify detailed processes. This allows Directorates-General (DGs)/services to organise themselves in the way that best suits their internal organisation,
while ensuring coordination and alignment across the Commission, including its executive agencies.
Principles for the effective Management and Supervision of Climate-related Financial Risks (BCBS)
Climate change may result in physical and transition risks that could affect the safety and soundness of individual banking institutions and have broader financial stability implications for the banking system. To address climate-related financial risks within the banking sector, the Basel Committee on Banking Supervision (BCBS) established a high-level Task Force on Climate-related Financial Risks in 2020 to contribute to the Committee’s mandate to strengthen the regulation, supervision and practices of banks worldwide with the purpose of enhancing financial stability.
Case Study: Cognitive Warfare and Corporate Sabotage – The OrionTech Disinformation Crisis
OrionTech, a tech firm, was targeted by a deepfake-driven disinformation campaign ahead of a major product launch. The attack damaged its reputation and finances, exposing weaknesses in cognitive risk preparedness. A cross-functional crisis response restored trust, highlighting the need for proactive cognitive risk management in today’s volatile information landscape.
Bridging Silos, Building Resilience: The Evolution of Combined Assurance
Combined assurance integrates internal and external assurance efforts, providing a holistic, efficient, and agile approach to risk management in today’s volatile, uncertain, complex, and ambiguous (VUCA) and brittle, anxious, non-linear, incomprehensible (BANI) world. It enhances governance, stakeholder confidence, and organisational resilience, enabling informed decision-making and regulatory compliance.
The Pulse of Change: Why Regulatory Complexity is the New Strategic Battleground
Regulatory complexity is intensifying due to rapid technological, environmental, and societal changes. Risk professionals must leverage RegTech—especially AI and blockchain—to streamline compliance, enhance resilience, and create strategic value. Success requires integrating technology, fostering compliance culture, and proactive engagement with evolving regulations and stakeholders to maintain competitive advantage.