DENVER — Risk managers attending the annual Risk and Insurance Management Society conference here are all abuzz about the need to “speak in the language of the CFO.” One of the difficulties to date for risk managers is that they have long been speaking in too much detail about such things as preventing insurable losses or keeping premiums down, while CFOs want the information boiled down into financial metrics.

A related struggle for corporate risk managers has been the battle to justify the value of what they do so that finance chiefs will be convinced of the need to spend money on risk management departments. Now, however, comes a new study that might help them. The study relates the quality of a corporate enterprise risk management (ERM) program to the value of a corporation as measured by Tobin’s Q, a ratio that measures market value based on replacement cost.

The study found that companies showing “mature risk management practices” may have valuations of up to 25 percent more as a result.

[contextly_sidebar id=”3731903e888a458b9c3834dd9f95134b”]

Based on their findings, the authors reported that “firms that have successfully integrated the ERM process into both their strategic activities and everyday practices display superior ability in uncovering risk dependencies and relationships across the entire enterprise and as a consequence enhanced value,” according to a RIMS press release.

The study’s authors, professors Mark Farrell of  Queen’s University Management School of Belfast  and Dr. Ronan Gallagher of the University of Edinburgh Business School used data compiled from RIMS’s Risk Maturity Model over the period from 2006 to 2011. The model uses a five-point scale to score a company’s risk management competency.

“Our results suggest that firms that have reached mature levels of ERM are exhibiting a higher firm value, as measured by Tobin’s Q. We find a statistically significant positive relation to the magnitude of 25 percent,” according to the authors.

The aspect of ERM that has the biggest impact on a company’s value is “the level of top–down executive engagement and the resultant cascade of ERM culture throughout the firm,” they write.

The researchers’ data set encompassed publicly traded organizations from a variety of industries, with  nearly 50 percent of the data tabulated submitted by members of RIMS, which consists largely of risk managers from various kinds of organizations.

“One of the biggest challenges in implementing an enterprise risk management program is articulating the value that it brings,” says Carol Fox, RIMS director of strategic and enterprise practice. “This research makes that value link quite clear.”

, , , , ,

5 responses to “Study Shows Risk Management Boosts Corporate Valuations”

  1. ERM is not just for the Fortune 500. Perhaps ERM (Enterprise Risk Management) should be retitled as ORM (Organization Risk Management). The use of outside expertise and managed services can make ORM more practical and affordable. Jim Hutto – Santee Solutions

  2. Absolutely. The international risk management community has known this since the publication of the ISO 310000 Risk Management Standard in 2009. Rather than focusing on insurance or hazards, ISO 31000 focuses on achieving objectives.

    This standard is rapidly achieving recognition in the Unites States. In fact, the Third International Conference specifically for ISO 31000 Risk Management will take place in NYC this year at 10 on the Park. Google us at for more information. It’s likely that many from the East Coast financial community will participate, either out of growing knowledge, or simply out of curiosity.

    Your article and study are very timely and very welscome.

Leave a Reply

Your email address will not be published. Required fields are marked *