Amit Risk
Amit Risk
net/publication/259264353
CITATIONS READS
38 25,796
3 authors:
P. K. Mishra
Motilal Nehru National Institute of Technology
35 PUBLICATIONS 1,074 CITATIONS
SEE PROFILE
All content following this page was uploaded by Rajeev Jain on 25 September 2014.
ABSTRACT
Current business trends are leading to complex and dynamic supply chains. Increasing
product/service complexity, out-sourcing and globalization are the reasons that have enhanced the
risk, changed its location and nature in supply chains. In this present work a review of risk
definition, its classification and holistic approach of risk assessment and management have been
made. An approach has been developed that help to identify, assess and manage the risks.
Keywords: Supply Networks; Risk; Risk assessment; Risk management
1. INTRODUCTION
Risk and uncertainty have been studied in numerous business settings and have warranted
significant investigation in corporate functions, such as managerial decision making (March and
Shapira, 1987), strategy (Ruefli et al., 1999; Sitkin and Pablo, 1992; Wiseman and Bromiley, 1991),
operations (Newman et al., 1993; Pagell and Krause, 1999), accounting (Ashton, 1998; Baucus et
al., 1993), finance (Chow and Denning, 1994; Ho and Pike, 1992) and distribution (Celly and
Frazier, 1996; Lassar and Kerr, 1996).
Current business trends are leading to complex, dynamic supply networks. One consequence
is that risk is increasing, and shifting around supply networks. Managers need to identify and
manage risks from a more diverse range of sources and contexts. In the past, when firms
manufactured in-house, sourced locally and sold direct to the customer, risk was less diffused and
was easier to manage. With the advent of increased product/service complexity, and outsourcing of
supply networks across international borders, risk is increasing and the location of risk has shifted
through complex changing supply networks. There have been numerous researches about the risk in
purchasing and supply, but little is reported for complex supply networks. This research describes
identification, assessment and management of the risk.
Supply networks are becoming more complex, dynamically changing webs of relationships.
Whilst this complexity arises from many sources, some key drivers are increasing product/service
complexity, e-business, outsourcing, and globalization.
2.2. Outsourcing
Outsourcing involves the use of specialists to provide competence, technologies and
resources to provide parts of the whole (Gomes-Casseres, 1994; Lonsdale, 1999). Outsourcing not
only impacts on the organization and its immediate relationships, but also changes supply network
structure and processes. Aggregating these changes, outsourcing changes industry structures,
shifting the ‘balance’ of supply markets. Increased outsourcing allows access to global markets, and
may cause organizations to seek international sources for perceived ‘best in class’ performance. This
has contributed to supply chains becoming globalised.
2.3. Globalization
Outsourcing is only one driver of globalization. The transnational mobility of capital,
information, people, products and services is increasing, leading to ‘global entanglements’ Strategic
intent, global brands, economies of scale and scope, management of the value chain, comparative
advantage, market access, the growth of free trade and facilitating information technologies, most
recently e-business, have all been cited by various authors as contributory reasons for globalization.
2.4. e-business
e-business, or ‘doing business electronically’, has increased opportunities to reach new
customers and suppliers (Erridge et al., 1998) and respond to rapidly changing markets.The new
market and commercial opportunities afforded by the Internet increase the speed of change and
complexity in supply networks, and consequently increase risk.
The combined, messy, intertwined effects of increasing product/service complexity, outsourcing
globalization and e-business have caused supply networks to become increasingly complex and
dynamic (Croom, 2000). The previous, relatively simple business-to-business relationships
involving product/service and payment exchanges conducted at arms length are now embedded in
complex inter-organization network flows of intangible and tangible features; the intangible features
in networks are difficult to examine as they are ‘tangled up’ with many other features and their
accrual is highly context specific. A significant intangible feature in these chains is risk.
In this section we provided an overview of theories with in risk with special focus on
organization.
Baird and Thomas (1990) have defined risk from eight different perspectives. Their arguments
incorporate views from finance, marketing, management, strategy, and psychology. The first three
definitions—variability of returns, variance, and market risk—focus on the organization’s financial
return. The last two definitions of risk as disaster and as accounting risk measures relate to the risk
of a company going bankrupt. These definitions of risk provide evidence that risk is a multi-
dimensional construct and differs according to business function.
Shapira (1995)
Shapira (1995) found that very few managers define risk in those terms. Instead, managers identify
(1) the downside of risk, (2) its magnitude of possible losses, (3) the act of risk taking involving the
use of skills, judgment and control, and (4) risk as a concept that cannot be captured with a single
numb. These findings also suggest that the term ‘‘risk’’ can be perceived in different ways, and no
single definition of risk may be appropriate in all circumstances.
Risk assessment is the general term used to describe the study of decisions subject to uncertain
consequences. It can be sub-divided into risk estimation and risk evaluation. If we consider the
information on which the assessment has to be based, risks can fall into at least three different
classes:
• Risks for which statistics of identified casualties are available;
• Risks for which there may be some evidence, but where the connection between suspected cause
and injury to any one individual cannot be traced; and
• Expert’s best estimate of probabilities of events that have not yet happened.
Risk assessment includes deciding values for different risks. However, it might not be possible to
collect all the information necessary to do a solid risk calculation because the information is not
there or it takes too much time or is too costly to get. We are then faced with a choice. Either we
choose to only assess those risks that we have enough information about to be able to do
calculations based on “hard”, objective facts like statistics. Or we choose to say that it is better to
consider all risks, although some of those risk assessments have to be based on “soft” data like
subjective judgments by individual experts within the relevant area.
Risk assessment is what we as private persons do every day, e.g. when we decide to take the
car instead of the train for a certain trip or when we choose to cross the street outside instead of
inside the pedestrian crossing. Those decisions are partly based on objective information and partly
based on our subjective judgments. Professionals would probably have taken other decisions in
some of the situations because they have access to more knowledge, especially within their own
special area, e.g. traffic safety. But although they are the experts, they cannot avoid subjectivity –
but the degree of subjectivity ought to be lower than for a layman.
Generally, From the definitions of risk provided earlier, it appears that in order to assess risk
there are two main questions to be answered:
1. How likely (probable) is it that an event will occur?
2. What is the significance of the consequences and losses?
The first question can be divided further. The likelihood of an event occurring depends partly on the
extent of the exposure to risk and partly on the likelihood of a trigger that will realise the risk. The
realisation of risk may be partly influenced by an organisation and individuals within it and partly
by things beyond their influence; this relates to categorization of direct and indirect risks. Clearly,
however, this categorisation is not universal— some very powerful organisations and individuals
will be in a position to influence regulation, politics and markets. Others will only be able to cope
and react to these business environmental influences.
The second question can also be divided. Some of the significance of the consequences can
be estimated reasonably accurately if there are regulations or laws in existence that you must
comply with; non-compliance often carries known penalties. Some of the significance of the
consequences depends on different circumstances; a local figure of repute is more likely to have
their court case publicised in the local press than someone who is less known.
Aspects of risk such as exposure to risk, consequences, non-compliance, business impacts
and the magnitude of losses are illustrate an example (Table 1) of a taxi company, and the risks it
faces in the broader environment it operates in, compared to the customer of the taxi company.
5. RISK MANAGEMENT
Risk management was defined as “The process whereby decisions are made to accept a
known or assessed risk and/or the implementation of actions to reduce the consequences or
probability of occurrence”
No human activity can be considered to be risk free. Therefore risk management is of
relevance and interest to everyone. In today’s society, many of the traditional risks have been
eliminated or substantially reduced. At the same time, new risks have emerged that are difficult to
explore and interpret – risks that often have very severe consequences.
Borge, 2001 was defined as, “Risk management means taking deliberate action to shift the
odds in your favour – increasing the odds of good outcomes and reducing the odds of bad
outcomes.”
That is why risk management is of interest to all of us. Since there normally is a cost linked
to a risk handling action, and also the possibility that other risks might be spun off by that action, it
is probably not optimal to try to cover all risks. Expected result impacts have to be balanced against
risk handling costs. What are the elements of the risk management process? There are many
different definitions depending on what academic field is addressed. The basic objective of all risk
management processes is after all the same, i.e. to prevent undesirable and detrimental events from
taking place and, if they do take place, to mitigate the consequences, thereby saving lives, property,
environment, financial resources or something else considered “valuable”. It includes all types of
risks – from the risk of loss of competence when key employees leave the company to the risk of a
harmful discharge into the external environment from production facilities or processes.
Figure2 presents a detailed description of the process. This process is proactive, i.e.
preventive, compared to what is usually called crisis management. Crisis management, although a
Risk Analysis
•System border
•Hazard Identification
•Risk Estimation
Risk
Assessment
Risk Evaluation
•Acceptable risk Risk
•Analysis of alternatives Management
Risk Reduction/Control
•Decision making
•Implementation
•Monitoring
Risk analysis is the initial phase in the risk management process. First the system border of
the project/study is set. Then the hazards are identified and estimated. The second phase is risk
evaluation i.e. to evaluate those risks compared to a defined acceptable risk level. Risks under this
level are sorted out and not further considered. The third and final phase in the risk management
process is risk reduction and risk control. This includes decision making, implementation and the
following up of the action plan. These are important activities. Without an effective change exertion
with continuous feedback, the time and resources spent on risk analysis and risk evaluation can be
wasted.
A tool for helping to identify, assess and manage risk is provided in Figure 3. The tool is
divided into boxes, commencing with the first box involving mapping the supply network. Here the
supply network to be mapped would be defined by the problem or concern. For example, the
network might be the product supply network for a particular product where it is felt there is some
exposure to risk. In this stage a diagrammatical representation of the supply network enriched with
appropriate data is created. Mapping this supply network is likely to involve understanding who
owns what, and what are the key measures currently in place, i.e. clarity of role and responsibility
within the network
In the second box the map is enriched with information concerning the type of risk and its
location. A prompt list can be provided from those compiled from the literature review, i.e. Strategic
Risk, Operations Risk, Supply Risk, Customer Risk, Asset Impairment Risk, Competitive Risk,
Reputation Risk, Financial Risk, Fiscal Risk, Regulatory Risk, Legal Risk. The specific risks that
will be considered for the particular problem/product should be identified, through brainstorming
with other actors in the supply network. At this stage only those with a significant potential loss to
any actor in the network should be considered.
7. CONCLUSION
Risk exists in virtually all firms, and has been extensively studied in various business
contexts. The current business trends of increasing product/ service complexity, outsourcing,
globalisation and e-business that have lead to more complex, dynamic supply networks have
resulted in risks shifting around supply networks. Managers need to identify, analyse and manage
risks, as well as potential opportunities, from a more diverse range of sources and contexts.
Supply networks are undoubtedly becoming significantly more messy units of analysis to
deal with. The tangled up changes that cause the dynamics of supply networks to be complicated to
understand, also impact on risk. Whilst there has been substantial research attention to date on risk
and on supply networks, there has only been limited empirical research on risk in supply networks.
This paper provided a brief review of risk, its assessment and management. It summarized a tool of
risk in supply network
REFERENCES
1. Ashton, D., 1998. Systematic risk and empirical research. Journal of Business Finance and
Accounting 25 (9/10), 1325–1356.
2. Baird, I.S., Thomas, H., 1990. What is risk anyway? In: Bettis, R.A., Thomas, H. (Eds.),
Risk, Strategy, and Management. JAI Press, Greenwich, CT, pp. 21–52.
3. Baucus, D.A., Golec, J.H., Cooper, J.R., 1993. Estimating risk-return relationships: an
analysis of measures. Strategic Management Journal 14(5), 387–396.
4. Borge, Dan (2001) The book of risk. John Wiley & Sons Inc. New York.
5. Celly, K.S., Frazier, G.L., 1996. Outcome-based and behavior-based coordination efforts in
channel relationships. Journal of Marketing Research 33 (2), 200–210.
6. Chow, K.V., Denning, K.C., 1994. On variance and lower partial movement betas: the
equivalence of systematic risk measures. Journal of Business Finance and Accounting 21
(2), 231–241.