Enterprise Risk Management (ERM) is increasingly recognised as an essential governance mechanism in higher education institutions due to growing regulatory requirements, financial uncertainties, cyber-security threats, operational disruptions, and reputational risks. Despite this importance, mid-sized higher education institutions often face challenges in adopting ERM because they lack the resources and specialised risk management structures available in larger universities. This study examined organisational readiness for ERM adoption at Copperstone University, a mid-sized private higher education institution in Zambia.
A convergent mixed-methods case study design was employed, combining survey data from 98 faculty members, staff, and administrators with semi-structured interviews involving 12 institutional stakeholders. The study assessed five dimensions of readiness: leadership commitment, risk culture, resource adequacy, governance structure, and external pressure.
The findings indicated that while external pressure for ERM adoption was high, internal readiness was comparatively low, particularly regarding resource adequacy. Leadership commitment, resource adequacy, and risk culture emerged as significant predictors of ERM adoption readiness, collectively explaining a substantial proportion of the variance in readiness levels. Qualitative findings revealed challenges associated with limited resources, differing perceptions of leadership commitment, symbolic compliance with external requirements, and weak institutional coordination.
The study contributes to organisational readiness, institutional, and technology adoption theories by demonstrating the critical role of resource adequacy in shaping ERM implementation outcomes within resource-constrained higher education environments. It further proposes a scaled and context-sensitive ERM model for mid-sized institutions. The study recommends strengthening leadership engagement, allocating dedicated risk management resources, embedding risk indicators into performance systems, and promoting continuous risk monitoring. These measures can enhance institutional resilience, support strategic decision-making, and improve governance effectiveness in higher education institutions.
Table of Contents
CHAPTER ONE: INTRODUCTION
1.1 Background to the Study
1.1.1 Detailed Context of ERM in Contemporary Higher Education
1.2 Statement of the Research Problem
1.3 Purpose of the Research Study
1.4 Research Questions
1.4.1 Main Research Question
1.4.2 Sub-Research Questions
1.5 Research Objectives
1.5.1 General Objective
1.5.2 Specific Objectives
1.6 Research Main Argument
1.6.1 ERM Readiness as a Strategic Institutional Capability
1.7 Significance and Original Contribution of the Study
1.7.1 Theoretical Contribution
1.7.2 Empirical Contribution
1.7.3 Practical Contribution
1.7.4 Policy Contribution
1.7.5 Original Contribution to Knowledge
1.7.6 Detailed Significance for Mid-Sized Private Universities
1.8 Scope and Delimitation of the Study
1.8.1 Geographical Scope
1.8.2 Institutional Scope
1.8.3 Conceptual Scope
1.8.4 Methodological Scope
1.8.5 Delimitations of the Study
1.8.6 Limitations of the Study
1.9 Key Definitions
1.9.1 Detailed Operational Risk Categories Relevant to the Study
1.10 Chapter Summary
CHAPTER TWO: LITERATURE REVIEW
2.1 Introduction
2.2 Conceptualisation and Evolution of Risk and Enterprise Risk Management
2.2.1 Defining Risk
2.2.2 The Emergence of Enterprise Risk Management
2.2.3 Risk Appetite, Risk Tolerance and Strategic Decision-Making
2.2.4 Risk Interdependency and Systemic Risk in Higher Education
2.3 Risk Management Approaches: Traditional versus Enterprise
2.4 Enterprise Risk Management in the Corporate Sector
2.4.1 Lessons from Corporate ERM for University Governance
2.5 Enterprise Risk Management in Higher Education Institutions
2.5.1 The Distinctive Risk Environment of Universities
2.5.2 ERM in African Higher Education
2.5.3 Foundational Risk Management Systems in Universities
2.5.4 ERM in the Zambian Higher Education Context
2.5.5 Comparative Categories of Higher Education Institutional Risk
2.5.6 ERM Maturity and Readiness in Higher Education
2.6 Theoretical Foundations
2.6.1 Resource-Based View and Dynamic Capabilities Theory
2.6.2 Stakeholder Theory
2.6.3 Institutional Theory
2.6.4 Contingency Theory
2.6.5 Organisational Readiness for Change Theory
2.6.6 Technology-Organisation-Environment (TOE) Framework
2.6.7 Integrated Theoretical Justification for the Study
2.6.8 Theory-Variable Alignment Matrix Explained
2.7 Critical Synthesis of Theoretical Perspectives
2.7.1 Comparative Contributions and Limitations
2.7.2 Tensions and Contradictions Among Theories
2.7.3 Critical Perspectives on ERM
2.8 Organisational Factors Influencing ERM Adoption Readiness
2.8.1 Leadership Commitment
2.8.2 Organisational Risk Culture
2.8.3 Resource Availability
2.8.4 Governance Structure
2.8.5 Technological Readiness
2.8.6 External Institutional Pressure
2.9 Mid-Sized Private Higher Education Institutions and ERM Readiness
2.9.1 Resource Constraints and Tuition Dependency in Private HEIs
2.9.2 Governance Maturity and Risk Ownership in Mid-Sized Institutions
2.10 Synthesis and Research Gap
2.10.1 What is Known
2.10.2 What is Not Known
2.10.3 Consequences of the Gap
2.10.4 The Need for Research
2.10.5 The Specific Gap Addressed by This Study
2.10.6 Detailed Research Gap and Justification
2.10.7 Pre-Adoption Readiness as a Distinct Research Problem
2.11 Conceptual Framework
2.11.1 Introduction
2.11.2 Conceptualisation of the Study Variables
2.11.3 Central Proposition of the Conceptual Framework
2.11.4 Diagrammatic Representation of the Conceptual Framework
2.11.5 Operational Definitions of Study Constructs
2.11.6 Detailed Explanation of the Conceptual Framework
2.11.7 Detailed Synthesis of ERM Readiness Literature
2.12 Chapter Summary
CHAPTER THREE: RESEARCH METHODOLOGY
3.1 Introduction
3.2 Research Philosophy
3.3 Research Approach
3.4 Research Design
3.4.1 Quantitative Design
3.4.2 Cross-Sectional Design
3.4.3 Explanatory Design
3.5 Study Area and Justification
3.5.1 Rationale for Selecting Copperstone University
3.5.2 Justification for Single-Case Study
3.5.3 Consideration of Other Zambian Universities
3.6 Target Population
3.7 Sampling Design and Sample Size
3.7.1 Sampling Technique
3.7.2 Sample Size Determination
3.7.3 Actual Sample Distribution
3.8 Sources of Data
3.8.1 Primary Data
3.8.2 Secondary Data
3.9 Data Collection Methods
3.10 Research Instrument and Questionnaire Development
3.10.1 Sources of Constructs
3.10.2 Adaptation from Validated Scales
3.10.3 Expert Review
3.10.4 Questionnaire Structure
3.11 Measurement Scale
3.12 Operationalisation of Variables
3.12.1 Detailed Operationalisation of Study Constructs
3.13 Validity of the Research Instrument
3.13.1 Content Validity
3.13.2 Face Validity
3.13.3 Construct Validity
3.14 Reliability of the Research Instrument
3.14.1 Cronbach's Alpha
3.14.2 Composite Reliability
3.14.3 Internal Consistency
3.15 Pilot Study
3.16 Data Collection Procedure
3.17 Common Method Bias Assessment
3.17.1 Procedural Remedies
3.17.2 Statistical Remedies
3.18 Data Management, Screening and Preparation
3.19 Data Analysis Techniques
3.19.1 Data Screening and Cleaning
3.19.2 Descriptive Statistics
3.19.3 Correlation Analysis
3.19.4 Regression Analysis
3.20 Structural Equation Modelling
3.20.1 Measurement Model Assessment
3.20.2 Structural Model Assessment
3.20.3 Mediation Analysis
3.20.4 Moderation Analysis
3.21 Model Specification
3.21.1 Measurement and Structural Model Assessment Criteria
3.22 Hypothesis Testing Criteria
3.23 Ethical Considerations
3.23.1 Informed Consent
3.23.2 Voluntary Participation
3.23.3 Confidentiality
3.23.4 Anonymity
3.23.5 Data Protection
3.23.6 Avoidance of Harm
3.23.7 Institutional Permission
3.24 Limitations of the Methodology
3.25 Chapter Summary
CHAPTER FOUR: RESULTS AND DISCUSSION OF FINDINGS
4.1 Introduction
4.2 Response Rate
4.3 Data Screening and Valid Data Confirmation
4.4 Demographic Profile of Respondents
4.4.1 Gender of Respondents
4.4.2 Age Distribution of Respondents
4.4.3 Highest Academic Qualification
4.4.4 Respondent Category
4.4.5 Length of Service
4.5 Descriptive Analysis of Study Constructs
4.5.1 Leadership Commitment
4.5.2 Organisational Risk Culture
4.5.3 Resource Availability
4.5.4 Governance Structure
4.5.5 Technological Readiness
4.5.6 External Institutional Pressure
4.5.7 Risk Awareness
4.5.8 Organisational Learning
4.5.9 ERM Adoption Readiness
4.5.10 ERM Implementation
4.5.11 Institutional Performance
4.5.12 Organisational Resilience
4.6 Summary of Descriptive Statistics
4.7 Reliability Analysis
4.8 Validity Analysis
4.8.1 Convergent Validity
4.8.2 Discriminant Validity
4.9 Cross-Loadings Assessment
4.10 Correlation Analysis
4.11 Multicollinearity Assessment
4.12 Regression Analysis
4.13 Structural Equation Modelling Results
4.13.1 Model Fit Assessment
4.13.2 Model Explanatory Power (R²)
4.13.3 Predictive Relevance (Q²)
4.13.4 Effect Size (f²)
4.13.5 Structural Model Path Coefficients
4.14 Bootstrapping Results
4.15 Mediation Analysis
4.16 Moderation Analysis
4.17 Summary of Hypothesis Testing
4.17.1 Integrated Interpretation of the Statistical Findings
4.18 Discussion of Findings
4.18.1 Leadership Commitment and ERM Adoption Readiness
4.18.2 Organisational Risk Culture and ERM Adoption Readiness
4.18.3 Resource Availability and ERM Adoption Readiness
4.18.4 Governance Structure and ERM Adoption Readiness
4.18.5 Technological Readiness and ERM Adoption Readiness
4.18.6 External Institutional Pressure and ERM Adoption Readiness
4.18.7 Risk Awareness and Organisational Learning as Mediators
4.18.8 Governance Maturity as a Moderator
4.18.9 Institutional Size as a Moderator
4.18.10 ERM Readiness, Implementation, Performance, and Resilience
4.19 Critical Synthesis of Findings with Theoretical Perspectives
4.20 Overall Interpretation of Findings
4.20.1 Practical Meaning of Readiness Levels for ERM Development
4.21 Chapter Summary
CHAPTER FIVE: DISCUSSION, CONCLUSIONS, AND CONTRIBUTIONS
5.1 Introduction
5.2 Summary of the Study
5.3 Summary of Major Findings
5.4 Conclusions Based on Research Objectives
5.5 Overall Conclusion of the Study
5.5.1 Detailed Overall Conclusion
5.6 Recommendations
5.6.1 Strengthen Leadership Commitment to ERM
5.6.2 Develop a Formal ERM Policy Framework
5.6.3 Establish or Strengthen a Risk Management Committee
5.6.4 Develop an Institutional Risk Register
5.6.5 Improve Resource Allocation for ERM
5.6.6 Strengthen Technological Readiness
5.6.7 Build a Strong Risk Culture
5.6.8 Enhance Organisational Learning
5.6.9 Align ERM with Regulatory and Accreditation Requirements
5.6.10 Adopt a Phased ERM Implementation Strategy
5.6.11 Leverage Existing OSHE Systems for ERM Implementation
5.7 Proposed ERM Adoption Readiness Framework for Mid-Sized HEIs
5.7.1 Operationalising the Proposed ERM Readiness Framework
5.7.2 Monitoring, Evaluation and Continuous Learning in ERM
5.8 Contribution to Knowledge
5.8.1 Theoretical Contribution
5.8.2 Empirical Contribution
5.8.3 Methodological Contribution
5.8.4 Practical Contribution
5.8.5 Policy Contribution
5.8.6 Original Contribution to Knowledge
5.8.7 Publishable Journal Outputs from the Thesis
5.9 Limitations of the Study
5.10 Suggestions for Future Research
5.11 Areas for Future Research
5.12 Final Chapter Summary
Research Objectives and Core Themes
The primary aim of this study is to examine the level of Enterprise Risk Management (ERM) adoption readiness within a mid-sized private higher education institution, using Copperstone University as a case study, in order to enhance institutional resilience, governance effectiveness, and strategic performance.
- Assessment of organizational readiness dimensions including leadership commitment, risk culture, and resource availability.
- Investigation of the influence of external institutional and regulatory pressures on ERM adoption.
- Evaluation of existing foundational risk management practices and governance structures.
- Testing of an integrated conceptual framework using Partial Least Squares Structural Equation Modelling (PLS-SEM).
- Development of a context-appropriate, phased ERM implementation framework for mid-sized private higher education institutions.
Excerpt from the Book
1.1 Background to the Study
The twenty-first century organisational environment is characterised by increasing complexity, uncertainty, and rapid change resulting from technological advancement, globalisation, intensified competition, changing regulatory requirements, and growing stakeholder expectations. Organisations across both private and public sectors are increasingly exposed to diverse categories of risks, including strategic, operational, financial, technological, legal, environmental, and reputational risks. These risks have the potential to disrupt organisational operations, compromise strategic objectives, and threaten long-term sustainability. Consequently, effective risk management has evolved from a narrow operational activity into a strategic governance function that supports organisational resilience and performance.
Historically, organisations managed risks using a traditional risk management approach, where individual departments addressed risks according to their specialised functions. Under this approach, financial risks were typically managed by finance departments, health and safety risks by operational units, and compliance risks by legal or regulatory departments. Although this approach provided specialised control mechanisms, it created organisational silos and limited the ability of management to understand the interaction between different categories of risks (Miccolis and Shah, 2000). As organisations became more complex and interconnected, it became evident that fragmented risk management practices were insufficient for addressing emerging strategic challenges.
The limitations of Traditional Risk Management (TRM), coupled with increasing corporate failures and governance crises during the late twentieth and early twenty-first centuries, stimulated the development of Enterprise Risk Management (ERM) as a more integrated approach to organisational risk management. Major corporate failures such as Enron, WorldCom, and other governance scandals demonstrated the consequences of inadequate risk oversight and highlighted the need for organisations to establish comprehensive systems capable of identifying, evaluating, monitoring, and responding to risks across the entire enterprise (Fraser and Simkins, 2010).
Enterprise Risk Management emerged as a strategic approach that integrates risk management with organisational governance, strategy formulation, and performance management. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) developed one of the most influential ERM frameworks and defined ERM as a process carried out by an organisation's board of directors, management, and personnel, applied across the enterprise to identify potential events that may affect the organisation and manage risks within its risk appetite to provide reasonable assurance regarding the achievement of organisational objectives (COSO, 2004). Unlike traditional approaches, ERM recognises the interdependency of risks and promotes a coordinated institution-wide process where risks are considered in relation to strategic goals.
Summary of Chapters
CHAPTER ONE: INTRODUCTION: Establishes the foundational background, statement of the problem, research questions, and scope regarding ERM adoption readiness at Copperstone University.
CHAPTER TWO: LITERATURE REVIEW: Critically reviews existing literature on risk management evolution, theoretical foundations, and mid-sized institutional constraints, culminating in a conceptual framework.
CHAPTER THREE: RESEARCH METHODOLOGY: Details the positivist philosophy, deductive approach, cross-sectional explanatory design, sampling techniques, and analytical procedures utilizing PLS-SEM.
CHAPTER FOUR: RESULTS AND DISCUSSION OF FINDINGS: Presents data analysis, descriptive statistics, validity testing, regression results, structural equation modeling outcomes, and an in-depth discussion of findings.
CHAPTER FIVE: DISCUSSION, CONCLUSIONS, AND CONTRIBUTIONS: Summarizes major findings, draws conclusions based on research objectives, proposes a novel ERM readiness framework, and articulates theoretical and practical contributions.
Keywords
Enterprise Risk Management, Mid-Sized Higher Education Institutions, Adoption Readiness, Organisational Readiness for Change, Resource Adequacy, Leadership Commitment, Governance Structure, Structural Equation Modelling
Frequently Asked Questions
What is the primary focus of this research?
The research focuses on assessing the level of Enterprise Risk Management (ERM) adoption readiness within mid-sized private higher education institutions, utilizing Copperstone University in Zambia as a single-institution case study.
What are the core thematic areas explored in the publication?
The core themes include leadership commitment, organisational risk culture, resource availability, governance structures, technological readiness, external institutional pressures, and their combined impact on ERM adoption readiness.
What is the primary research question and overarching goal?
The primary research question addresses how prepared Copperstone University is for the adoption of an ERM framework, with the goal of evaluating institutional preparedness and proposing a context-appropriate ERM implementation roadmap.
Which scientific methodologies and analytical tools were utilized?
The study employed a quantitative, cross-sectional, and explanatory research design using structured questionnaires. Data analysis was conducted using descriptive statistics, multiple regression, and Partial Least Squares Structural Equation Modelling (PLS-SEM) implemented via SmartPLS.
What core topics are covered in the main body chapters?
The main body covers an extensive review of literature and theoretical frameworks (such as the Resource-Based View and Institutional Theory), methodological design, rigorous empirical results including descriptive analyses, measurement model assessments, direct path tests, and detailed strategic recommendations.
What key terminology and classification metrics characterize the work?
Key terms include ERM Adoption Readiness, Change Commitment, Change Efficacy, Traditional Risk Management (TRM), and institutional sustainability, evaluated using a five-point Likert scale and evaluated against established thresholds for reliability and validity.
What specific context makes Copperstone University a unique subject for this study?
Copperstone University represents the "missing middle" challenge—it is a mid-sized, tuition-dependent private higher education institution in Zambia that is too large for informal risk management yet too constrained in resources to afford dedicated risk infrastructure like large research universities.
How does the study account for existing risk procedures at the institution?
The research evaluates Copperstone University's pre-existing Occupational Safety, Health and Environment (OSHE) manual and traditional operational risk systems, positioning them as a foundational baseline that requires integration into an enterprise-wide framework.
What were the main conclusions regarding governance maturity and institutional size?
The moderation analysis revealed that governance maturity significantly strengthens the positive relationships between organisational factors and ERM readiness, whereas institutional size was found to have no significant moderating effect, proving that organizational fit and governance structure matter more than raw size.
- Citation du texte
- Stanley Hanseele (Auteur), 2017, Analysis of Enterprise Risk Management Adoption Readiness for a Mid-Sized Private Higher Education Institution, Munich, GRIN Verlag, https://www.grin.com/document/1775852
