Impact of critical success factors and risk management on organizational results


  • Gabriel Henrique Silva Rampini University of Sao Paulo (USP), São Paulo, SP, Brazil.
  • Fernando Tobal Berssaneti University of Sao Paulo (USP), São Paulo, SP, Brazil.



Risk management, Critical success factors, Organizational results


Goal: The purpose of this study is to identify how do risk management processes and critical success factors (CSFs) impact organizational results.

Design / Methodology / Approach: A qualitative research approach was applied, using a multiple case study, involving six organizations in public and private sectors of the Brazilian economy.

Results: The support given by top management, the existence of a corporate governance structure, the integration of risk management across all organizational functions and the importance of stakeholder participation, both in public and private organizations, presented aspects that impact organizational outcomes, such as the preservation of reputation, increase in market value, and the creation of competitive advantage.

Limitations of investigation: The present research considered only Brazilian organizations, which is a limiting factor for a possible generalization of the findings. The research can be extended to other organizations and countries, so that other contexts can be discussed and analyzed.

Practical implications: Based on the findings, we designed an Organizational Results Matrix (ORM), which aims to support managers dealing with factors conditioning the company´s results.

Originality / Value: The original value of the research lies in the presentation of ORM. This matrix may enrich the quality and rigor of the actions carried out in public and private sectors, providing to managers an insight into the main dimensions of CSFs and risk management process and their influence on the expected results.


Download data is not yet available.


Adrian, T. (2017), "Risk management and regulation," Journal of Risk, Vol. 20, No. 1, pp. 23–57.

Akhtar, M., and Sushil, S. (2018), "Strategic performance management system in uncertain business environment: An empirical study of the Indian oil industry," Business Process Management Journal, Vol. 24, No. 4, pp. 923–942.

Al Yami, M., Ajmal, M. M., and Balasubramanian, S. (2022), "Does size matter? The effects of public sector organizational size on knowledge management processes and operational efficiency," VINE Journal of Information and Knowledge Management Systems, Vol. 52, No. 5, pp. 670–700.

Altuntas, M., Berry-Stölzle, T. R., and Cummins, J. D. (2021), "Enterprise risk management and economies of scale and scope: evidence from the German insurance industry," Annals of Operations Research, Vol. 299, No. 1–2, pp. 811–845.

Alves, J. L., Ferreira, E. A., and Nadae, J. de. (2021), "Crisis and risks in engineering project management: a review," Brazilian Journal of Operations & Production Management, Vol. 18, No. 4, pp. 1–17.

AlYahmady, H. H., and Al Abri, S. S. (2013), "Using Nvivo for Data Analysis in Qualitative Research," International Interdisciplinary Journal of Education, Vol. 2, No. 2, pp. 181–186.

Barafort, B., Mesquida, A. L., and Mas, A. (2019), "ISO 31000-based integrated risk management process assessment model for IT organizations," Journal of Software: Evolution and Process, Vol. 31, No. 1, pp. 57–66.

Barratt, M., Choi, T. Y., and Li, M. (2011), "Qualitative case studies in operations management: Trends, research outcomes, and future research implications," Journal of Operations Management, Vol. 29, No. 4, pp. 329–342.

Barth, C., and Koch, S. (2019), "Critical success factors in ERP upgrade projects," Industrial Management and Data Systems, Vol. 119, No. 3, pp. 656–675.

Betancourt, G. G., Vásquez, A. M., and Betancourt, J. B. (2020), "Risk management model, the contribution of phi value in the business continuity plan," Revista Venezolana de Gerencia, Vol. 25, No. 3, pp. 112–128.

Cavaco, E., and Junior, J. M. (2020), "Knowledge-based risk management model: application in hydropower station projects," Brazilian Journal of Operations & Production Management, Vol. 17, No. 4, pp. 1–16.

Chakraborty, A., Gao, L., and Sheikh, S. (2019), "Corporate governance and risk in cross-listed and Canadian only companies," Management Decision, Vol. 57, No. 10, pp. 2740–2757.

Chen, Y.-L., Huang, H.-G., Chuang, Y.-W., and Shih, J.-Y. (2020), "The value of implementing enterprise risk management: Evidence from Taiwan’s financial industry," North American Journal of Economics and Finance, Vol. 54.

COSO. (2017), Enterprise Risk Management—Integrating with Strategy and Performance, Committee of Sponsoring Organizations of the Treadway Commission.

Creswell, J. W. (2014), Research design: qualitative, quantitative, and mixed methods approaches, Sage (4th ed.), Sage Publications.

Crovini, C., Santoro, G., and Ossola, G. (2020), "Rethinking risk management in entrepreneurial SMEs: towards the integration with the decision-making process," Management Decision.

Daniel, D. R. (1961), "Management information crisis," Harvard Business Review, Vol. 39, No. 5, pp. 111–121.

Eberhartinger, E., and Zieser, M. (2021), "The effects of cooperative compliance on firms’ tax risk, tax risk management and compliance costs," Schmalenbach Journal of Business Research, Vol. 73, No. 1, pp. 125–178. ARTICLE

Eisenhardt, K. M. (1989), "Building theories from case study research," The Academy of Management Review, Vol. 14, No. 4, pp. 532–550.

Fonseca, L. M., Cardoso, M. C., and Nóvoa, M. H. (2022), "Motivations for ISO 9001 quality management system implementation and certification – mapping the territory with a novel classification proposal," International Journal of Quality and Service Sciences, Vol. 14, No. 1, pp. 18–36.

Fraser, J. R. S., Quail, R., and Simkins, B. J. (2022), "Questions asked about enterprise risk management by risk practitioners," Business Horizons2, Vol. 65, No. 3, pp. 251–260.

Galvão, A., Marques, C., and Ferreira, J. (2020), "The role of entrepreneurship education and training programmes in advancing entrepreneurial skills and new ventures," European Journal of Training and Development, Vol. 44, No. 6–7, pp. 595–614.

Glerum, D., and Judge, T. (2021), "Advancing employability: applying training evaluation to employability development programs," Career Development Internacional, Vol. 26, No. 3, pp. 363–390.

Glowka, G., Kallmünzer, A., and Zehrer, A. (2021), "Enterprise risk management in small and medium family enterprises: the role of family involvement and CEO tenure," International Entrepreneurship and Management Journal, Vol. 17, No. 3, pp. 1213–1231.

Govender, D. (2019), "The use of the risk management model ISO 31000 by private security companies in South Africa," Security Journal, Vol. 32, No. 3, pp. 218–235.

Gurgun, A. P., and Koc, K. (2021), "Administrative risks challenging the adoption of smart contracts in construction projects," Engineering, Construction and Architectural Management, Vol. 29, No. 2, pp. 989–1015.

Hameed, T. M., and Bouabid, A. (2023), "The impact of operational efficiency and offensive marketing strategy on banking profits using the Dupont model," International Journal of Professional Business Review, Vol. 8, No. 1.

Hassan, M. K., Abdulkarim, M. E., and Ismael, H. R. (2022), "Risk governance: exploring the role of organisational culture," Journal of Accounting and Organizational Change, Vol. 18, No. 1, pp. 77–99.

Hastig, G. M., and Sodhi, M. S. (2020), "Blockchain for Supply Chain Traceability: Business Requirements and Critical Success Factors," Production and Operations Management, Vol. 29, No. 4, pp. 935–954.

ISO. (2018), ISO 31000:2018 Risk Management - guidelines, International Organization for Standardization (2nd ed.).

Khan, H., and Sukhotu, A. (2020), "Influence of media exposure and Corporate Social Responsibility compliance on customer perception: The moderating role of Firm’s reputation risk," Corporate Social Responsibility and Environmental Management, Vol. 27, No. 5, pp. 2107–2121.

Khlif, H., and Hussainey, K. (2016). The association between risk disclosure and firm characteristics: A meta-analysis. Journal of Risk Research, 19(2), 181–211.

Khlif, H., and Hussainey, K. (2016), "The association between risk disclosure and firm characteristics: A meta-analysis," Journal of Risk Research, Vol. 19, No. 2, pp. 181–211.

Kravariti, F., and Johnston, K. (2020), "Talent management: a critical literature review and research agenda for public sector human resource management," Public Management Review, Vol. 22, No. 1, pp. 75–95.

Kulenovic, M., Folta, M., and Veselinovic, L. (2021), "The analysis of Total Quality Management Critical Success Factors," Quality Innovation Prosperty, Vol. 25, No. 1, pp. 88–102.

Larte, P. Y., Kong, Y., Afriyie, S., Santosh, R. J., and Ba, F. B. M. (2020), "Corporate governance issues in the public sector: board perspective and peculiarities," Brazilian Journal of Operations & Production Management, Vol. 17, No. 1, pp. 1–14.

Leon, F. M., and Nugraha, R. K. (2020), "Enterprise risk management and corporate governance in Indonesia banking industry," International Journal of Scientific and Technology Research, Vol. 9, No. 3, pp. 2077–2081.

Litvinenko, V., Bowbriсk, I., Naumov, I., and Zaitseva, Z. (2022), "Global guidelines and requirements for professional competencies of natural resource extraction engineers: Implications for ESG principles and sustainable development goals," Journal of Cleaner Production, Vol. 338.

Malik, M., Shafie, R., and Ku Ismail, K. N. I. (2021), "Do risk management committee characteristics influence the market value of firms?," Risk Management, Vol. 23, No. 1–2, pp. 172–191.

McShane, M. (2018), "Enterprise risk management: history and a design science proposal," Journal of Risk Finance, Vol. 19, No. 2, pp. 137–153.

McWilliams, D., Lennon, C., and Lowery, J. (2022), "Impact of experience and education on risk attitude and risk perception of supply chain management professionals," Operations and Supply Chain Management, Vol. 15, No. 1, pp. 56–68.

Merriam, S. B. (1998), Qualitative research and case study applications in education (2nd ed.), Jossey-Bass Publishers.

Meskovic, M. N., and Zaimovic, A. (2021), "Risk Management Maturity, its Determinants and Impact on Firm Value: Empirical Evidence from Joint-Stock Companies in Bosnia and Herzegovina," South East European Journal of Economics and Business, Vol. 16, No. 2, pp. 132–149.

Miguel, P. A. C. (2007), "Estudo de caso na engenharia de produção: estruturação e recomendações para sua condução," Production, Vol. 17, No. 1, pp. 216–229.

Miles, M. B., and Huberman, A. M. (1994), Qualitative data analysis: an expanded sourcebook (2nd ed.), Sage Publications.

Murè, P., Spallone, M., Mango, F., Marzioni, S., and Bittucci, L. (2021), "ESG and reputation: The case of sanctioned Italian banks," Corporate Social Responsibility and Environmental Management, Vol. 28, No. 1, pp. 265–277.

Neto, P. F., Santos, R. F., and Oliva, F. L. (2018), "Enterprise risk management in the bus market of the city of São Paulo," Benchmarking, Vol. 25, No. 9, pp. 4103–4124.

Nicoletti Junior, A., Martens, M. L., and Oliveira, M. C. de. (2018), "ERP implementation project in a brewing manufacturer: the quality attribute as a performance differrential," Brazilian Journal of Operations & Production Management, Vol. 15, No. 4, pp. 517–527.

Nunes, M., and Abreu, A. (2021), "Applying social network analysis to support the management of cooperative project’s behavioral risks," FME Transactions, Vol. 49, No. 4, pp. 795–805.

Oliva, F. L., Couto, M. H. G., Santos, R. F., and Bresciani, S. (2019), "The integration between knowledge management and dynamic capabilities in agile organizations," Management Decision, Vol. 57, No. 8, pp. 1960–1979.

Oliveira, K., Méxas, M., Meiriño, M., and Drumond, G. (2019), "Critical success factors associated with the implementation of enterprise risk management," Journal of Risk Research, Vol. 22, No. 8, pp. 1004–1019.

Perlekar, N., and Thakkar, J. J. (2019), "Risk management framework for outsourcing in the defence sector: a case from India," International Journal of Production Research, Vol. 57, No. 18, pp. 5892–5919.

Rahman, A. A., and Al-Dhaimesh, O. H. A. (2018), "The effect of applying COSO-ERM model on reducing fraudulent financial reporting of commercial banks in Jordan," Banks and Bank Systems, Vol. 13, No. 2, pp. 107–115.

Rampini, G. H. S., Takyia, H., and Berssaneti, F. T. (2019), "Critical Success Factors of Risk Management with the Advent of ISO 31000 2018 - Descriptive and Content Analyzes," Procedia Manufacturing, Vol. 39, pp. 894–903.

Reitsma, E., and Hilletofth, P. (2018), "Critical success factors for ERP system implementation: a user perspective," European Business Review, Vol. 30, No. 3, pp. 285–310.

Rezapour, S., Srinivasan, R., Tew, J., Allen, J. K., and Mistree, F. (2018), "Correlation between strategic and operational risk mitigation strategies in supply networks," International Journal of Production Economics, Vol. 201, No. 1, pp. 225–248.

Rockart, J. F. (1979), "Chief executives define their own data needs," Harvard Business Review, Vol. 57, No. 2, pp. 81–92.

Rod, B., Lange, D., Theocharidou, M., and Pursiainen, C. (2020), "From Risk Management to Resilience Management in Critical Infrastructure," Journal of Management in Engineering, Vol. 36, No. 4.

Rua, O. L., Neto, F. M., and Oliva, M. A. (2023), "Linking open innovation and competitive advantage: the roles of corporate risk management and organisational strategy," Baltic Journal of Management, Vol. 18, No. 1, pp. 104–121.

Saeidi, P., Saeidi, S. P., Sofian, S., Saeidi, S. P., Nilashi, M., and Mardani, A. (2019), "The impact of enterprise risk management on competitive advantage by moderating role of information technology," Computer Standards and Interfaces, Vol. 63, No. 1, pp. 67–82.

Sahiti, A., and Sahiti, A. (2021), "The commercial banks’ credit risk efficiency: Empirical evidence from Kosovo," Journal of Eastern European and Central Asian Research, Vol. 8, No. 2, pp. 240–254.

Sharma, R., and Dadhich, R. (2020), "Analyzing CMMI RSKM with small software industries at level-1," Journal of Discrete Mathematical Sciences and Cryptography, Vol. 23, No. 1, pp. 249–261.

Shayan, S., Kim, K. P., and Tam, V. (2019), "Critical success factor analysis for effective risk management at the execution stage of a construction project," International Journal of Construction Management, Vol. 22, No. 3, pp. 379–386.

Sithipolvanichgul, J. (2021), "Board of directors’ effectiveness and enterprise risk management: Do effective boards improve risk oversight?," Thammasat Review, Vol. 24, No. 1, pp. 133–167.

Stuart, I., McCutcheon, D., Handfield, R., McLachlin, R., and Samson, D. (2002), "Effective case research in operations management: a process perspective," Journal of Operations Management, Vol. 20, No. 5, pp. 419–433.

Tan, C., and Lee, S. Z. (2022), "Adoption of enterprise risk management (ERM) in small and medium-sized enterprises: evidence from Malaysia," Journal of Accounting and Organizational Change, Vol. 18, No. 1, pp. 100–131.

Teberga, P. M. F., Oliva, F. L., and Kotabe, M. (2018), "Risk analysis in introduction of new technologies by start-ups in the Brazilian market," Management Decision, Vol. 56, No. 1, pp. 64–86.

Ullah, F., and Thaheem, M. J. (2018), "Concession period of public private partnership projects: industry–academia gap analysis," International Journal of Construction Management, Vol. 18, No. 5, pp. 418–429.

Voss, C., Tsikriktsis, N., and Frohlich, M. (2002), "Case research in operations management," International Journal of Operations and Production Management, Vol. 22, No. 2, pp. 195–219.

Weeserik, B. P., and Spruit, M. (2018), "Improving Operational Risk Management using Business Performance Management technologies," Sustainability (Switzerland), Vol. 10, No. 3, pp. 1–20.

Xia, N., Zou, P. X. W., Griffin, M. A., Wang, X., and Zhong, R. (2018), "Towards integrating construction risk management and stakeholder management: A systematic literature review and future research agendas," International Journal of Project Management, Vol. 36, No. 5, pp. 701–715.

Yazdi, A. K., Muneeb, F. M., Wanke, P. F., Figueiredo, O., and Mushtaq, I. (2021), "Critical Success Factors for Competitive Advantage in Iranian Pharmaceutical Companies: A Comprehensive MCDM Approach," Mathematical Problems in Engineering, 2021.

Yin, R. K. (2017), Case study research and applications: design and methods (6th ed.), SAGE Publications.

Zaytsev, A., Rodionov, D., Dmitriev, N., and Faisullin, R. (2020), "Building a model for managing the market value of an industrial enterprise based on regulating its innovation activity," Academy of Strategic Management Journal, Vol. 19, No. 4, pp. 1–13.

Zhang, X., Li, F., and Ortiz, J. (2021), "Internal risk governance and external capital regulation affecting bank risk-taking and performance: Evidence from P.R. China," International Review of Economics and Finance, Vol. 74, No. 1, pp. 276–292.




How to Cite

Rampini, G. H. S., & Berssaneti, F. T. (2024). Impact of critical success factors and risk management on organizational results. Brazilian Journal of Operations & Production Management, 21(1), 1412 .



Case study

Most read articles by the same author(s)