PRisk-MM: a public sector risk management maturity model for Brazilian public organisations

This article proposes a risk management maturity model focused on the public sector and developed for Brazilian public organisations, the PRisk-MM. The PRisk-MM contains 5 levels of maturity and 23 maturity attributes related to 15 dimensions. The model was elaborated following the scientific rigour found in the literature on maturity models, being divided into 2 main phases: the development of the model and its validation in 5 public organisations of 2 state governments. The development of the PRisk-MM is based on a previous study conducted by De Lorena and Costa, who proposed a reference model with attributes and key contingent factors for public organisations using data collected in the federal and state governments of Brazil. The assessment procedure of the model uses triangular fuzzy numbers to better treat the subjectivity and ambiguity of human judgement when analysing maturity dimensions and their attributes. Moreover, the PRisk-MM is adaptive to governments’ contexts and, once applied, presents prescriptions on what organisations must do to develop their risk management implementation. Since the Prisk-MM demonstrates practical implications as a government tool, policymakers are expected to use it to assess the public organisations’ status of maturity and compare their performance in implementing RM.