Enterprise risk management implementation in a start-up context: A case study
Vu, Thoa (2025)
2025
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2025112730202
https://urn.fi/URN:NBN:fi:amk-2025112730202
Tiivistelmä
In this research-oriented thesis, a case study is conducted with a start-up company in the climate solution industry to discover how young organisations view risk management, a topic that has been relevant and evolving in both academia and business since the 1950s, against the backdrop of a rapidly changing operating environment. As risk management is an extensive topic, the thesis focuses on management of business risk, given the available research capacity.
The study aims to examine the current status of the target organisation’s risk management activities, identify the challenges employees from different functions face when incorporating risk management in their day-to-day work, and assess whether the company can benefit from implementing a more comprehensive risk management programme based on established enterprise risk management standards. The study is qualitative and uses content analysis as the main tool for data analysis. Data is collected through semi-structured interviews with five company employees and an external industry expert, and future scenarios for the company are generated using the 2x2 matrix method based on interview data.
The results of the study indicate no urgency to fully implement an established enterprise risk management framework, although certain gaps in the current risk management activities are identified and actions should be taken to bridge these gaps. Based on the findings, the study produces recommendations for company management to address the concerns noted in the interviews and to better support achievement of strategic objectives.
The study aims to examine the current status of the target organisation’s risk management activities, identify the challenges employees from different functions face when incorporating risk management in their day-to-day work, and assess whether the company can benefit from implementing a more comprehensive risk management programme based on established enterprise risk management standards. The study is qualitative and uses content analysis as the main tool for data analysis. Data is collected through semi-structured interviews with five company employees and an external industry expert, and future scenarios for the company are generated using the 2x2 matrix method based on interview data.
The results of the study indicate no urgency to fully implement an established enterprise risk management framework, although certain gaps in the current risk management activities are identified and actions should be taken to bridge these gaps. Based on the findings, the study produces recommendations for company management to address the concerns noted in the interviews and to better support achievement of strategic objectives.