IDEAS home Printed from
   My bibliography  Save this paper

Business Process Risk Management, Compliance and Internal Control: A Research Agenda


  • Rikhardsson, Pall

    () (Department of Management Science and Logistics, Aarhus School of Business)

  • Best, Peter

    (Faculty of Business)

  • Green, Peter

    (The University of Queensland Business School)

  • Rosemann, Michael

    (Faculty of Information Technology)


Integration of risk management and management control is emerging as an important area in the wake of the Sarbanes-Oxley Act and with ongoing development of frameworks such as the Enterprise Risk Management (ERM) framework from the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Based on an inductive methodological approach using literature review and interviews with managers engaged in risk management and internal control projects, this paper identifies three main areas that currently have management attention. These are business process risk management, compliance management and internal control development. This paper discusses these areas and identifies a series of research questions regarding these critical issues

Suggested Citation

  • Rikhardsson, Pall & Best, Peter & Green, Peter & Rosemann, Michael, 2006. "Business Process Risk Management, Compliance and Internal Control: A Research Agenda," Management Accounting Research Group Working Papers M-2006-05, University of Aarhus, Aarhus School of Business, Department of Business Studies.
  • Handle: RePEc:hhb:aarbma:2006-005

    Download full text from publisher

    File URL:
    Download Restriction: no

    References listed on IDEAS

    1. Gangadharan, Lata, 2006. "Environmental compliance by firms in the manufacturing sector in Mexico," Ecological Economics, Elsevier, vol. 59(4), pages 477-486, October.
    2. Rikhardsson, Pall & Rohde, Carsten & Rom, Anders, 2005. "Exploring Enterprise Systems and Management Control in the Information Society: Developing a Conceptual Framework," Management Accounting Research Group Working Papers M-2005-05, University of Aarhus, Aarhus School of Business, Department of Business Studies.
    3. James G. March & Zur Shapira, 1987. "Managerial Perspectives on Risk and Risk Taking," Management Science, INFORMS, vol. 33(11), pages 1404-1418, November.
    4. Adams, Scott J., 2004. "Age discrimination legislation and the employment of older workers," Labour Economics, Elsevier, vol. 11(2), pages 219-241, April.
    5. Flamholtz, Eric G. & Das, T. K. & Tsui, Anne S., 1985. "Toward an integrative framework of organizational control," Accounting, Organizations and Society, Elsevier, vol. 10(1), pages 35-50, January.
    Full references (including those not matched with items on IDEAS)


    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.

    Cited by:

    1. Heise, David & Strecker, Stefan & Frank, Ulrich, 2014. "ControlML: A domain-specific modeling language in support of assessing internal controls and the internal control system," International Journal of Accounting Information Systems, Elsevier, vol. 15(3), pages 224-245.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Juraj Misun, 2018. "The Right Dealing With Power – Being The Person Who Controls," Eurasian Journal of Business and Management, Eurasian Publications, vol. 6(4), pages 12-26.
    2. Winter, Peter, 2007. "Managerial Risk Accounting and Control – A German perspective," MPRA Paper 8185, University Library of Munich, Germany.
    3. Narduzzo, Alessandro & Warglien, Massimo, 1996. "Learning from the Experience of Others: An Experiment on Information Contagion," Industrial and Corporate Change, Oxford University Press, vol. 5(1), pages 113-126.
    4. Abernethy, Margaret A. & Vagnoni, Emidia, 2004. "Power, organization design and managerial behaviour," Accounting, Organizations and Society, Elsevier, vol. 29(3-4), pages 207-225.
    5. Min, Dong-Jun & Cunha, Marcus, 2019. "The influence of horizontal and vertical product attribute information on decision making under risk: The role of perceived competence," Journal of Business Research, Elsevier, vol. 97(C), pages 174-183.
    6. Nabiha Nefzi, 2018. "Fear Of Failure And Entrepreneurial Risk Perception," International Journal of Entrepreneurial Knowledge, Center for International Scientific Research of VSO and VSPP, vol. 6(2), pages 45-58, December.
    7. Holger Patzelt & Dean A. Shepherd, 2009. "Strategic Entrepreneurship at Universities: Academic Entrepreneurs’ Assessment of Policy Programs," Entrepreneurship Theory and Practice, , vol. 33(1), pages 319-340, January.
    8. Anika Jansen & Harald Pfeifer & Julia Raecke, 2017. "Only the brave? Risk and time preferences of decision makers and firms' investment in worker training," Economics of Education Working Paper Series 0124, University of Zurich, Department of Business Administration (IBW).
    9. T. K. Das & Bing-Sheng Teng, 1998. "Time and Entrepreneurial Risk Behavior," Entrepreneurship Theory and Practice, , vol. 22(2), pages 69-88, January.
    10. Gavin M Schwarz & Karin Sanders & Dave Bouckenooghe, 2020. "In the driving seat: Executive’s perceived control over environment," Australian Journal of Management, Australian School of Business, vol. 45(2), pages 317-342, May.
    11. Anthony Goerzen & Stephen Sapp & Andrew Delios, 2010. "Investor Response to Environmental Risk in Foreign Direct Investment," Management International Review, Springer, vol. 50(6), pages 683-708, December.
    12. Peter J Buckley & Liang Chen & L Jeremy Clegg & Hinrich Voss, 2018. "Risk propensity in the foreign direct investment location decision of emerging multinationals," Journal of International Business Studies, Palgrave Macmillan;Academy of International Business, vol. 49(2), pages 153-171, February.
    13. Yan Li & David Ahlstrom, 2020. "Risk-taking in entrepreneurial decision-making: A dynamic model of venture decision," Asia Pacific Journal of Management, Springer, vol. 37(3), pages 899-933, September.
    14. Ulrike Malmendier & Geoffrey Tate & Jonathan Yan, 2010. "Overconfidence and Early-life Experiences: The Impact of Managerial Traits on Corporate Financial Policies," NBER Working Papers 15659, National Bureau of Economic Research, Inc.
    15. Alan Hevner & Onkar Malgonde, 2019. "Effectual application development on digital platforms," Electronic Markets, Springer;IIM University of St. Gallen, vol. 29(3), pages 407-421, September.
    16. Tang, Christopher S. & Davarzani, Hoda & Sarkis, Joseph, 2015. "Quantitative models for managing supply chain risks: A reviewAuthor-Name: Fahimnia, Behnam," European Journal of Operational Research, Elsevier, vol. 247(1), pages 1-15.
    17. Gooding, Richard Z. & Goel, Sanjay & Wiseman, Robert M., 1996. "Fixed versus variable reference points in the risk-return relationship," Journal of Economic Behavior & Organization, Elsevier, vol. 29(2), pages 331-350, March.
    18. Jeongil Seo & Daniel L. Gamache & Cynthia E. Devers & Mason A. Carpenter, 2015. "The role of CEO relative standing in acquisition behavior and CEO pay," Strategic Management Journal, Wiley Blackwell, vol. 36(12), pages 1877-1894, December.
    19. Mishra, Deepa & Sharma, R.R.K. & Kumar, Sameer & Dubey, Rameshwar, 2016. "Bridging and buffering: Strategies for mitigating supply risk and improving supply chain performance," International Journal of Production Economics, Elsevier, vol. 180(C), pages 183-197.
    20. Udo Milkau, 2017. "Risk Culture during the Last 2000 Years—From an Aleatory Society to the Illusion of Risk Control," International Journal of Financial Studies, MDPI, Open Access Journal, vol. 5(4), pages 1-20, December.

    More about this item


    Risk management; Internal control; Business processes; Compliance; Sarbanes-Oxley Act; ERP systems; COSO; COBIT;
    All these keywords.

    NEP fields

    This paper has been announced in the following NEP Reports:


    Access and download statistics


    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:hhb:aarbma:2006-005. See general information about how to correct material in RePEc.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: (Helle Vinbaek Stenholt) The email address of this maintainer does not seem to be valid anymore. Please ask Helle Vinbaek Stenholt to update the entry or send us the correct email address. General contact details of provider: .

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service hosted by the Research Division of the Federal Reserve Bank of St. Louis . RePEc uses bibliographic data supplied by the respective publishers.